nextcloudpi/updates/1.54.0.sh
Tobias Knöppler 3b65ecf812
1.54.0.sh: Prevent apt update from failing due to invalid signing key
Signed-off-by: Tobias Knöppler <6317548+theCalcaholic@users.noreply.github.com>
2024-08-23 18:00:42 +02:00

45 lines
1.2 KiB
Bash

#!/usr/bin/env bash
set -e
echo "Update root login prevention method..."
if getent passwd "root" | grep -e '/usr/sbin/nologin'
then
sed -i '/^root/s|/usr/sbin/nologin|/bin/bash|' /etc/passwd
passwd -l root
if grep '^PermitRootLogin' /etc/ssh/sshd_config
then
sed -i -e 's/^PermitRootLogin.*$/PermitRootLogin prohibit-password/' /etc/ssh/sshd_config
else
echo 'PermitRootLogin prohibit-password' >> /etc/ssh/sshd_config
fi
systemctl reload ssh
fi
echo "done."
echo "Fixing trusted proxies list..."
for i in {10..15}
do
proxy="$(ncc config:system:get trusted_proxies "$i" || echo 'NONE')"
[[ "$proxy" == 'NONE' ]] || python3 -c "import ipaddress; ipaddress.ip_address('${proxy}')" > /dev/null 2>&1 || ncc config:system:delete trusted_proxies "$i"
done
echo "done."
echo "Updating PHP package signing key..."
apt-get update ||:
apt-get install --no-install-recommends -y gnupg2
apt-key adv --fetch-keys https://packages.sury.org/php/apt.gpg
echo "done."
echo "Installing dependencies..."
apt-get install --no-install-recommends -y tmux
echo "done."
echo "Updating obsolete theming URL"
if [[ "$(ncc config:app:get theming url)" == "https://ownyourbits.com" ]]
then
ncc config:app:set theming url --value="https://nextcloudpi.com"
fi
echo "done."