directslave-install.sh

#!/bin/sh
# @author jordavin,phillcoxon,mantas15
# @updated by Afrizal-id
# @date 07.12.2019
# @version 1.0.5
# @source 
# ------------------------------------------------------------------------------
sshport=22;
#Check that user is root.
if [ “$(id -u)” = “0” ]; then
printf "Bingo! you are root. Continue on....\n"
  else
printf "Sorry, This script must be run as root\n"
exit;
fi
#What Distro are you on?
printf "Distro are you on??\n" 2>&1
OS='cat /etc/redhat-release | awk {'print $1}'
if [ "$OS" = "CentOS" ]; then
echo "System runs on CentOS 7.X. Checking Continue on....";
VN='cat /etc/redhat-release | awk {'print $3}'
else [ "$VN" != "7.*" ]; elseif
echo "Installation failed. System runs on unsupported Linux. Exiting...";
exit;
fi 
if [ -z "$1" ]; then
 echo "usage <username> <userpass> <master ip>";
 exit 0;
fi
if [ -z "$2" ]; then
 echo "usage <username> <userpass> <master ip>";
 exit 0;
fi
if [ -z "$3" ]; then
 echo "usage <username> <userpass> <master ip>";
 exit 0;
fi
echo "Saving most outputs to /root/install.log";

echo "doing updates and installs"
yum update -y > /root/install.log
yum install epel-release -y >> /root/install.log
yum install bind bind-utils wget -y >> /root/install.log

systemctl start named >> /root/install.log
systemctl stop named >> /root/install.log

echo "creating user "$1" and adding to wheel"
useradd -G wheel $1 > /root/install.log
echo $2 |passwd $1 --stdin  >> /root/install.log
echo "Disabling root access to ssh use "$1"."
echo -n "${MAGENTA}Enter SSH port to change (recommended) from ${BLUE}${sshport}${MAGENTA}:${NORMAL} "
		read customsshport
		if [ $customsshport ]; then
			sshport=$customsshport
		fi
echo "Your ssh port is ${sshport}"
sed -i '/PermitRootLogin/ c\PermitRootLogin no' /etc/ssh/sshd_config
sed -i -e "s/#Port 22/Port ${sshport}/g" /etc/ssh/sshd_config
sed -i -e 's/#UseDNS yes/UseDNS no/g' /etc/ssh/sshd_config
systemctl restart sshd  >> /root/install.log

echo "installing and configuring directslave"
cd ~
wget -q https://directslave.com/download/directslave-3.4.2-advanced-all.tar.gz >> /root/install.log
tar -xf directslave-3.4.2-advanced-all.tar.gz
mv directslave /usr/local/
cd /usr/local/directslave/bin
mv directslave-linux-amd64 directslave
cd /usr/local/directslave/
wget -q https://directslave.com/download/directslave-3.2-login-XSS-HOTFIX.tar.gz
tar -xf directslave-3.2-login-XSS-HOTFIX.tar.gz
cd /usr/local/directslave
chown named:named -R /usr/local/directslave

curip="$( hostname -I|awk '{print $1}' )"
cat > /usr/local/directslave/etc/directslave.conf <<EOF
background	1
host            $curip
port            2222
ssl             off
cookie_sess_id  DS_SESSID
cookie_auth_key Change_this_line_to_something_long_&_secure
debug           0
uid             25
gid             25
pid             /usr/local/directslave/run/directslave.pid
access_log	/usr/local/directslave/log/access.log
error_log	/usr/local/directslave/log/error.log
action_log	/usr/local/directslave/log/action.log
named_workdir   /etc/namedb/secondary
named_conf	/etc/namedb/directslave.inc
retry_time	1200
rndc_path	/usr/sbin/rndc
named_format    text
authfile        /usr/local/directslave/etc/passwd
EOF

#mkdir /etc/namedb
mkdir -p /etc/namedb/secondary
touch /etc/namedb/secondary/named.conf
touch /etc/namedb/directslave.inc
chown named:named -R /etc/namedb
mkdir /var/log/named
touch /var/log/named/security.log
chmod a+w -R /var/log/named

cat > /etc/named.conf <<EOF
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//
// See the BIND Administrator's Reference Manual (ARM) for details about the
// configuration located in /usr/share/doc/bind-{version}/Bv9ARM.html
options {
	listen-on port 53 { any; };
	listen-on-v6 port 53 { none; };
	directory 	"/var/named";
	dump-file 	"/var/named/data/cache_dump.db";
	statistics-file "/var/named/data/named_stats.txt";
	memstatistics-file "/var/named/data/named_mem_stats.txt";
	recursing-file  "/var/named/data/named.recursing";
	secroots-file   "/var/named/data/named.secroots";
		allow-query     { any; };
		allow-notify	{ $3; };
		allow-transfer	{ $3; };
	/*
	 - If you are building an AUTHORITATIVE DNS server, do NOT enable recursion.
	 - If you are building a RECURSIVE (caching) DNS server, you need to enable
	   recursion.
	 - If your recursive DNS server has a public IP address, you MUST enable access
	   control to limit queries to your legitimate users. Failing to do so will
	   cause your server to become part of large scale DNS amplification
	   attacks. Implementing BCP38 within your network would greatly
	   reduce such attack surface
	*/
	recursion no;
	dnssec-enable yes;
	dnssec-validation yes;
	/* Path to ISC DLV key */
	bindkeys-file "/etc/named.iscdlv.key";
	managed-keys-directory "/var/named/dynamic";
	pid-file "/run/named/named.pid";
	session-keyfile "/run/named/session.key";
};
logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};
zone "." IN {
	type hint;
	file "named.ca";
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/etc/namedb/directslave.inc";
EOF

touch /usr/local/directslave/etc/passwd
chown named:named /usr/local/directslave/etc/passwd
/usr/local/directslave/bin/directslave --password $1:$2
/usr/local/directslave/bin/directslave --check  >> /root/install.log
rm /usr/local/directslave/run/directslave.pid

cat > /etc/systemd/system/directslave.service <<EOL
[Unit]
Description=DirectSlave for DirectAdmin
After=network.target
[Service]
Type=simple
User=named
ExecStart=/usr/local/directslave/bin/directslave --run
Restart=always
[Install]
WantedBy=multi-user.target
EOL

echo "setting enabled and starting up"
chown root:root /etc/systemd/system/directslave.service
chmod 755 /etc/systemd/system/directslave.service
systemctl daemon-reload >> /root/install.log
systemctl enable named >> /root/install.log
systemctl enable directslave >> /root/install.log
systemctl restart named >> /root/install.log
systemctl restart directslave >> /root/install.log
echo "adding simple firewalld and opening Firewalld ports"
yum update -y > /root/install.log
yum install firewalld -y >> /root/install.log

systemctl start firewalld >> /root/install.log
systemctl enable firewalld >> /root/install.log
firewall-cmd --permanent --add-service=dns
firewall-cmd --permanent --add-port=2222/tcp
firewall-cmd --permanent --add-port=53/tcp
firewall-cmd --permanent --add-port=443/tcp
firewall-cmd --reload
systemctl start firewalld >> /root/install.log

echo "Checking DirectSlave and starting"
/usr/local/directslave/bin/directslave --check
/usr/local/directslave/bin/directslave --run

echo "all done!"
echo "Open the DirectSlave Dashboard using a web browser http://your-ip-address:2222"
echo "if failed browse using IP address, edit /usr/local/directslave/etc/directslave.conf and change the host 127.0.0.1 to your current IP address"
exit 0;