mirror of
https://github.com/rootzoll/raspiblitz.git
synced 2025-02-25 07:07:46 +01:00
317 lines
11 KiB
Bash
Executable file
317 lines
11 KiB
Bash
Executable file
#!/bin/bash
|
|
|
|
# https://github.com/lnbits/lnbits
|
|
|
|
# command info
|
|
if [ $# -eq 0 ] || [ "$1" = "-h" ] || [ "$1" = "-help" ]; then
|
|
echo "small config script to switch LNbits on or off"
|
|
echo "bonus.lnbits.sh [on|off|status|menu|write-macaroons]"
|
|
exit 1
|
|
fi
|
|
|
|
source /mnt/hdd/raspiblitz.conf
|
|
|
|
# show info menu
|
|
if [ "$1" = "menu" ]; then
|
|
|
|
# get LNbits status info
|
|
echo "# collecting status info ... (please wait)"
|
|
source <(sudo /home/admin/config.scripts/bonus.lnbits.sh status)
|
|
|
|
text="Local Webrowser: https://${localIP}:${httpsPort}"
|
|
|
|
if [ ${#publicDomain} -gt 0 ]; then
|
|
text="${text}
|
|
Public Domain: https://${publicDomain}:${httpsPort}
|
|
port forwarding on router needs to be active & may change port"
|
|
fi
|
|
|
|
text="${text}
|
|
SHA1: ${sslFingerprintIP}"
|
|
|
|
if [ "${runBehindTor}" = "on" ] && [ ${#toraddress} -gt 0 ]; then
|
|
/home/admin/config.scripts/blitz.lcd.sh qr "${toraddress}"
|
|
text="${text}\n
|
|
Hidden Service address for TOR Browser (QR see LCD):
|
|
${toraddress}"
|
|
fi
|
|
|
|
if [ ${#ip2torDomain} -gt 0 ]; then
|
|
text="${text}
|
|
IP2TOR+LetsEncrypt: https://${ip2torDomain}:${ip2torPort}
|
|
SHA1 Fingerprint: ${sslFingerprintTOR}"
|
|
elif [ ${#ip2torIP} -gt 0 ]; then
|
|
text="${text}
|
|
IP2TOR: https://${ip2torIP}:${ip2torPort}
|
|
SHA1: ${sslFingerprintTOR}
|
|
go MAINMENU > SUBSCRIBE and add LetsEncrypt HTTPS Domain"
|
|
elif [ ${#publicDomain} -eq 0 ]; then
|
|
text="${text}\n
|
|
consider adding a MAINMENU > SUBSCRIBE > IP2TOR Bridge"
|
|
fi
|
|
|
|
whiptail --title " LNbits " --msgbox "${text}" 14 68
|
|
|
|
/home/admin/config.scripts/blitz.lcd.sh hide
|
|
echo "please wait ..."
|
|
exit 0
|
|
fi
|
|
|
|
# add default value to raspi config if needed
|
|
if ! grep -Eq "^LNBits=" /mnt/hdd/raspiblitz.conf; then
|
|
echo "LNBits=off" >> /mnt/hdd/raspiblitz.conf
|
|
fi
|
|
|
|
# status
|
|
if [ "$1" = "status" ]; then
|
|
|
|
if [ "${LNBits}" = "on" ]; then
|
|
echo "installed=1"
|
|
|
|
localIP=$(ip addr | grep 'state UP' -A2 | tail -n1 | awk '{print $2}' | cut -f1 -d'/')
|
|
echo "localIP='${localIP}'"
|
|
echo "httpsPort='5001'"
|
|
echo "publicIP='${publicIP}'"
|
|
|
|
# check for LetsEnryptDomain for DynDns
|
|
error=""
|
|
source <(sudo /home/admin/config.scripts/blitz.subscriptions.ip2tor.py ip-by-tor $publicIP)
|
|
if [ ${#error} -eq 0 ]; then
|
|
echo "publicDomain='${domain}'"
|
|
fi
|
|
|
|
sslFingerprintIP=$(openssl x509 -in /mnt/hdd/app-data/nginx/tls.cert -fingerprint -noout 2>/dev/null | cut -d"=" -f2)
|
|
echo "sslFingerprintIP='${sslFingerprintIP}'"
|
|
|
|
toraddress=$(sudo cat /mnt/hdd/tor/lnbits/hostname 2>/dev/null)
|
|
echo "toraddress='${toraddress}'"
|
|
|
|
sslFingerprintTOR=$(openssl x509 -in /mnt/hdd/app-data/nginx/tor_tls.cert -fingerprint -noout 2>/dev/null | cut -d"=" -f2)
|
|
echo "sslFingerprintTOR='${sslFingerprintTOR}'"
|
|
|
|
# check for IP2TOR
|
|
error=""
|
|
source <(sudo /home/admin/config.scripts/blitz.subscriptions.ip2tor.py ip-by-tor $toraddress)
|
|
if [ ${#error} -eq 0 ]; then
|
|
echo "ip2torType='${ip2tor-v1}'"
|
|
echo "ip2torID='${id}'"
|
|
echo "ip2torIP='${ip}'"
|
|
echo "ip2torPort='${port}'"
|
|
# check for LetsEnryptDomain on IP2TOR
|
|
error=""
|
|
source <(sudo /home/admin/config.scripts/blitz.subscriptions.letsencrypt.py domain-by-ip $ip)
|
|
if [ ${#error} -eq 0 ]; then
|
|
echo "ip2torDomain='${domain}'"
|
|
fi
|
|
fi
|
|
|
|
# check for error
|
|
isDead=$(sudo systemctl status lnbits | grep -c 'inactive (dead)')
|
|
if [ ${isDead} -eq 1 ]; then
|
|
echo "error='Service Failed'"
|
|
exit 1
|
|
fi
|
|
|
|
else
|
|
echo "installed=0"
|
|
fi
|
|
exit 0
|
|
fi
|
|
|
|
# status
|
|
if [ "$1" = "write-macaroons" ]; then
|
|
|
|
# make sure its run as user admin
|
|
adminUserId=$(id -u admin)
|
|
if [ "${EUID}" != "${adminUserId}" ]; then
|
|
echo "error='please run as admin user'"
|
|
exit 1
|
|
fi
|
|
|
|
echo "make sure symlink to central app-data directory exists"
|
|
if ! [[ -L "/home/lnbits/.lnd" ]]; then
|
|
sudo rm -rf "/home/lnbits/.lnd" # not a symlink.. delete it silently
|
|
sudo ln -s "/mnt/hdd/app-data/lnd/" "/home/lnbits/.lnd" # and create symlink
|
|
fi
|
|
|
|
# set tls.cert path (use | as separator to avoid escaping file path slashes)
|
|
sudo -u lnbits sed -i "s|^LND_REST_CERT=.*|LND_REST_CERT=/home/lnbits/.lnd/tls.cert|g" /home/lnbits/lnbits/.env
|
|
|
|
# set macaroon path info in .env - USING HEX IMPORT
|
|
sudo chmod 600 /home/lnbits/lnbits/.env
|
|
macaroonAdminHex=$(sudo xxd -ps -u -c 1000 /home/lnbits/.lnd/data/chain/${network}/${chain}net/admin.macaroon)
|
|
macaroonInvoiceHex=$(sudo xxd -ps -u -c 1000 /home/lnbits/.lnd/data/chain/${network}/${chain}net/invoice.macaroon)
|
|
macaroonReadHex=$(sudo xxd -ps -u -c 1000 /home/lnbits/.lnd/data/chain/${network}/${chain}net/readonly.macaroon)
|
|
sudo sed -i "s/^LND_REST_ADMIN_MACAROON=.*/LND_REST_ADMIN_MACAROON=${macaroonAdminHex}/g" /home/lnbits/lnbits/.env
|
|
sudo sed -i "s/^LND_REST_INVOICE_MACAROON=.*/LND_REST_INVOICE_MACAROON=${macaroonInvoiceHex}/g" /home/lnbits/lnbits/.env
|
|
sudo sed -i "s/^LND_REST_READ_MACAROON=.*/LND_REST_READ_MACAROON=${macaroonReadHex}/g" /home/lnbits/lnbits/.env
|
|
|
|
#echo "make sure lnbits is member of lndreadonly, lndinvoice, lndadmin"
|
|
#sudo /usr/sbin/usermod --append --groups lndinvoice lnbits
|
|
#sudo /usr/sbin/usermod --append --groups lndreadonly lnbits
|
|
#sudo /usr/sbin/usermod --append --groups lndadmin lnbits
|
|
|
|
# set macaroon path info in .env - USING PATH
|
|
#sudo sed -i "s|^LND_REST_ADMIN_MACAROON=.*|LND_REST_ADMIN_MACAROON=/home/lnbits/.lnd/data/chain/${network}/${chain}net/admin.macaroon|g" /home/lnbits/lnbits/.env
|
|
#sudo sed -i "s|^LND_REST_INVOICE_MACAROON=.*|LND_REST_INVOICE_MACAROON=/home/lnbits/.lnd/data/chain/${network}/${chain}net/invoice.macaroon|g" /home/lnbits/lnbits/.env
|
|
#sudo sed -i "s|^LND_REST_READ_MACAROON=.*|LND_REST_READ_MACAROON=/home/lnbits/.lnd/data/chain/${network}/${chain}net/read.macaroon|g" /home/lnbits/lnbits/.env
|
|
echo "# OK - macaroons written to /home/lnbits/lnbits/.env"
|
|
exit 0
|
|
fi
|
|
|
|
# stop service
|
|
echo "making sure services are not running"
|
|
sudo systemctl stop lnbits 2>/dev/null
|
|
|
|
# switch on
|
|
if [ "$1" = "1" ] || [ "$1" = "on" ]; then
|
|
echo "*** INSTALL LNbits ***"
|
|
|
|
isInstalled=$(sudo ls /etc/systemd/system/lnbits.service 2>/dev/null | grep -c 'lnbits.service')
|
|
if [ ${isInstalled} -eq 0 ]; then
|
|
|
|
echo "*** Add the 'lnbits' user ***"
|
|
sudo adduser --disabled-password --gecos "" lnbits
|
|
|
|
# make sure needed debian packages are installed
|
|
echo "# installing needed packages"
|
|
sudo apt-get install -y pipenv 2>/dev/null
|
|
|
|
# install from GitHub
|
|
echo "# get the github code"
|
|
sudo rm -r /home/lnbits/lnbits 2>/dev/null
|
|
cd /home/lnbits
|
|
sudo -u lnbits git clone https://github.com/arcbtc/lnbits.git
|
|
cd /home/lnbits/lnbits
|
|
sudo -u lnbits git checkout tags/raspiblitz
|
|
|
|
# prepare .env file
|
|
echo "# preparing env file"
|
|
sudo rm /home/lnbits/lnbits/.env 2>/dev/null
|
|
sudo -u lnbits touch /home/lnbits/lnbits/.env
|
|
sudo bash -c "echo 'FLASK_APP=lnbits' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'FLASK_ENV=production' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'LNBITS_FORCE_HTTPS=0' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'LNBITS_BACKEND_WALLET_CLASS=LndRestWallet' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'LND_REST_ENDPOINT=https://127.0.0.1:8080' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'LND_REST_CERT=' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'LND_REST_ADMIN_MACAROON=' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'LND_REST_INVOICE_MACAROON=' >> /home/lnbits/lnbits/.env"
|
|
sudo bash -c "echo 'LND_REST_READ_MACAROON=' >> /home/lnbits/lnbits/.env"
|
|
/home/admin/config.scripts/bonus.lnbits.sh write-macaroons
|
|
|
|
# set database path to HDD data so that its survives updates and migrations
|
|
sudo mkdir /mnt/hdd/app-data/LNBits 2>/dev/null
|
|
sudo chown lnbits:lnbits -R /mnt/hdd/app-data/LNBits
|
|
sudo bash -c "echo 'LNBITS_DATA_FOLDER=/mnt/hdd/app-data/LNBits' >> /home/lnbits/lnbits/.env"
|
|
|
|
# to the install
|
|
echo "# installing application dependencies"
|
|
cd /home/lnbits/lnbits
|
|
sudo -u lnbits pipenv install
|
|
sudo -u lnbits /usr/bin/pipenv run pip install python-dotenv
|
|
# to the install
|
|
echo "# updating databases"
|
|
sudo -u lnbits /usr/bin/pipenv run flask migrate
|
|
|
|
# open firewall
|
|
echo
|
|
echo "*** Updating Firewall ***"
|
|
sudo ufw allow 5001 comment 'lnbits'
|
|
echo ""
|
|
|
|
# install service
|
|
echo "*** Install systemd ***"
|
|
cat <<EOF | sudo tee /etc/systemd/system/lnbits.service >/dev/null
|
|
# systemd unit for lnbits
|
|
|
|
[Unit]
|
|
Description=lnbits
|
|
Wants=lnd.service
|
|
After=lnd.service
|
|
|
|
[Service]
|
|
WorkingDirectory=/home/lnbits/lnbits
|
|
ExecStart=/bin/sh -c 'cd /home/lnbits/lnbits && pipenv run gunicorn -b 127.0.0.1:5000 lnbits:app -k gevent'
|
|
User=lnbits
|
|
Restart=always
|
|
TimeoutSec=120
|
|
RestartSec=30
|
|
StandardOutput=null
|
|
StandardError=journal
|
|
|
|
[Install]
|
|
WantedBy=multi-user.target
|
|
EOF
|
|
|
|
sudo systemctl enable lnbits
|
|
echo "# OK - service needs starting: sudo systemctl start lnbits"
|
|
|
|
else
|
|
echo "LNbits already installed."
|
|
fi
|
|
|
|
# setup nginx symlinks
|
|
if ! [ -f /etc/nginx/sites-available/lnbits_ssl.conf ]; then
|
|
sudo cp /home/admin/assets/nginx/sites-available/lnbits_ssl.conf /etc/nginx/sites-available/lnbits_ssl.conf
|
|
fi
|
|
if ! [ -f /etc/nginx/sites-available/lnbits_tor.conf ]; then
|
|
sudo cp /home/admin/assets/nginx/sites-available/lnbits_tor.conf /etc/nginx/sites-available/lnbits_tor.conf
|
|
fi
|
|
if ! [ -f /etc/nginx/sites-available/lnbits_tor_ssl.conf ]; then
|
|
sudo cp /home/admin/assets/nginx/sites-available/lnbits_tor_ssl.conf /etc/nginx/sites-available/lnbits_tor_ssl.conf
|
|
fi
|
|
sudo ln -sf /etc/nginx/sites-available/lnbits_ssl.conf /etc/nginx/sites-enabled/
|
|
sudo ln -sf /etc/nginx/sites-available/lnbits_tor.conf /etc/nginx/sites-enabled/
|
|
sudo ln -sf /etc/nginx/sites-available/lnbits_tor_ssl.conf /etc/nginx/sites-enabled/
|
|
sudo nginx -t
|
|
sudo systemctl reload nginx
|
|
|
|
# setting value in raspi blitz config
|
|
sudo sed -i "s/^LNBits=.*/LNBits=on/g" /mnt/hdd/raspiblitz.conf
|
|
|
|
# Hidden Service if Tor is active
|
|
source /mnt/hdd/raspiblitz.conf
|
|
if [ "${runBehindTor}" = "on" ]; then
|
|
/home/admin/config.scripts/internet.hiddenservice.sh lnbits 80 5002 443 5003
|
|
fi
|
|
exit 0
|
|
fi
|
|
|
|
# switch off
|
|
if [ "$1" = "0" ] || [ "$1" = "off" ]; then
|
|
|
|
# setting value in raspi blitz config
|
|
sudo sed -i "s/^LNBits=.*/LNBits=off/g" /mnt/hdd/raspiblitz.conf
|
|
|
|
# remove nginx symlinks
|
|
sudo rm -f /etc/nginx/sites-enabled/lnbits_ssl.conf
|
|
sudo rm -f /etc/nginx/sites-enabled/lnbits_tor.conf
|
|
sudo rm -f /etc/nginx/sites-enabled/lnbits_tor_ssl.conf
|
|
sudo rm -f /etc/nginx/sites-available/lnbits_ssl.conf
|
|
sudo rm -f /etc/nginx/sites-available/lnbits_tor.conf
|
|
sudo rm -f /etc/nginx/sites-available/lnbits_tor_ssl.conf
|
|
sudo nginx -t
|
|
sudo systemctl reload nginx
|
|
|
|
# Hidden Service if Tor is active
|
|
if [ "${runBehindTor}" = "on" ]; then
|
|
/home/admin/config.scripts/internet.hiddenservice.sh off lnbits
|
|
fi
|
|
|
|
isInstalled=$(sudo ls /etc/systemd/system/lnbits.service 2>/dev/null | grep -c 'lnbits.service')
|
|
if [ ${isInstalled} -eq 1 ] || [ "${LNBits}" == "on" ]; then
|
|
echo "*** REMOVING LNbits ***"
|
|
sudo systemctl stop lnbits
|
|
sudo systemctl disable lnbits
|
|
sudo rm /etc/systemd/system/lnbits.service
|
|
sudo userdel -rf lnbits
|
|
echo "OK LNbits removed."
|
|
else
|
|
echo "LNbits is not installed."
|
|
fi
|
|
exit 0
|
|
fi
|
|
|
|
echo "FAIL - Unknown Parameter $1"
|
|
exit 1
|