#!/usr/bin/env bash

clear
echo -e "\n   \033[32mStart Installation of OpenDMARC..\033[m"



# -------------
# - Settings
# -------------

#_src_base_dir="$(realpath $(dirname $0))"
#conf_file="${_src_base_dir}/conf/install_opendmarc.conf"

config_file_name_value_parameters="
   AuthservID:OpenDMARC
   PidFile:/var/run/opendmarc/opendmarc.pid
   RejectFailures:true
   Syslog:true
   SyslogFacility:mail
   TrustedAuthservIDs:localhost,$(hostname -f)
   IgnoreHosts:/etc/opendmarc/ignore.hosts
   IgnoreAuthenticatedClients:true
   RequiredHeaders:true
   UMask:002
   FailureReports:false
   AutoRestart:true
   HistoryFile:/var/log/opendmarc.log
   SPFSelfValidate:true
"
declare -a  config_file_name_value_parameter_arr=()
for _conf in $config_file_name_value_parameters ; do
   config_file_name_value_parameter_arr+=("$_conf")
done

log_file="$(mktemp)"

_opendmarc_packages="opendmarc"

opendmarc_base_dir="/etc/opendmarc"
opendmarc_conf_file="/etc/opendmarc.conf"

postfix_spool_dir="/var/spool/postfix"

opendmarc_socket_dir="${postfix_spool_dir}/opendmarc"
opendmarc_socket_file="${opendmarc_socket_dir}/opendmarc.sock"

postfix_needs_restart=false
opendmarc_needs_restart=false

# -------------
# --- Some functions
# -------------
echononl(){
   echo X\\c > /tmp/shprompt$$
   if [ `wc -c /tmp/shprompt$$ | awk '{print $1}'` -eq 1 ]; then
      echo -e -n "$*\\c" 1>&2
   else
       echo -e -n "$*" 1>&2
   fi
   rm /tmp/shprompt$$
}

fatal(){
   echo ""
   echo -e "fatal error: $*"
   echo ""
   echo -e "\t\033[31m\033[1mInstalllation will be interrupted\033[m\033[m"
   echo ""
   exit 1
}

error(){
   echo ""
   echo -e "\t[ \033[31m\033[1mFehler\033[m ]: $*"
   echo ""
}

warn (){
   echo ""
   echo -e "\t[ \033[33m\033[1mWarning\033[m ]: $*"
   echo ""
}

info (){
   echo ""
   echo -e "\t[ \033[32m\033[1mInfo\033[m ]: $*"
   echo ""
}

echo_done() {
   echo -e "\033[80G[ \033[32mdone\033[m ]"
}
echo_ok() {
   echo -e "\033[80G[ \033[32mok\033[m ]"
}
echo_warning() {
   echo -e "\033[80G[ \033[33m\033[1mwarn\033[m ]"
}
echo_failed(){
   echo -e "\033[80G[ \033[1;31mfailed\033[m ]"
}
echo_skipped() {
   echo -e "\033[80G[ \033[37mskipped\033[m ]"
}


# -------------
# - Some pre-installation tasks
# -------------

# - Is 'systemd' supported on this system
# -
if [ "X`which systemd`" = "X" ]; then
   SYSTEMD_EXISTS=false
else
   SYSTEMD_EXISTS=true
fi



# =============
# - Start Installation
# =============

echo ""

# - Synchronise package index files with the repository
# -
echononl "   Synchronise package index files with the repository.."
apt-get update > "$log_file" 2>&1
if [[ $? -eq 0 ]] ; then
   echo_ok
else
   echo_failed
   error "$(cat $log_file)"
fi


# - Install opendmarc
# -
echononl "   Install needed debian packages.."
opendmarc_packages=""
packages_installed=false
for _pkg in $_opendmarc_packages ; do
   if aptitude search "$_pkg" | grep " $_pkg " | grep -e "^i" > /dev/null 2>&1 ; then
      continue
   else
      opendmarc_packages="$opendmarc_packages $_pkg"
   fi
done
if [[ -n "$opendmarc_packages" ]]; then
   DEBIAN_FRONTEND=noninteractive apt-get -y install $opendmarc_packages > /dev/null 2> "$log_file"
   packages_installed=true
   opendmarc_needs_restart=true
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
else
   echo_skipped
fi


# - Add user 'postfix' to group 'opendmarc'
# -
echononl "   Add user 'postfix' to group 'opendmarc'.."
if grep -E "^opendmarc" /etc/group | grep -q postfix 2> /dev/null ; then
   echo_skipped
else
   usermod -a -G opendmarc postfix > "$log_file" 2>&1
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
fi


# - Save configuration file from distribution
# -
echononl "   Save configuration file from distribution"
if [[ -f "${opendmarc_conf_file}.ORIG" ]] ; then
   echo_skipped
else
   cp -a $opendmarc_conf_file $opendmarc_conf_file.ORIG 2> "$log_file"
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
fi

for _val in "${config_file_name_value_parameter_arr[@]}" ; do
   IFS=':' read -a _val_arr <<< "${_val}"

   echononl "   $opendmarc_conf_file: ${_val_arr[0]} -> ${_val_arr[1]}.."
   if $(grep -E -q "^\s*${_val_arr[0]}\s+${_val_arr[1]}\s*$" $opendmarc_conf_file 2> /dev/null) ; then
      echo_skipped
   elif $(grep -E -q "^\s*#\s*${_val_arr[0]}\s+" $opendmarc_conf_file 2> /dev/null); then
      perl -i -n -p -e "s&^(\s*#\s*${_val_arr[0]}.*)&\1\n${_val_arr[0]} ${_val_arr[1]}&" $opendmarc_conf_file > "$log_file" 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
         opendmarc_needs_restart=true
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   elif $(grep -E -q "^\s*${_val_arr[0]}\s+" $opendmarc_conf_file 2> /dev/null) ; then
      perl -i -n -p -e "s#^(\s*${_val_arr[0]}.*)#\#\1\n${_val_arr[0]} ${_val_arr[1]}#" $opendmarc_conf_file > "$log_file" 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
         opendmarc_needs_restart=true
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   else
      cat <<EOF >> $opendmarc_conf_file 2> "$log_file"

${_val_arr[0]} ${_val_arr[1]}
EOF
      if [[ $? -eq 0 ]] ; then
         echo_ok
         opendmarc_needs_restart=true
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   fi
done


# - Assign ownership to the opendmarc user and restrict tthe
# - file permissions:
# -
echononl "   Assign file permissions to '$opendmarc_conf_file'.."
chmod u=rw,go=r $opendmarc_conf_file 2> $log_file
if [[ $? -eq 0 ]] ; then
   echo_ok
else
   echo_failed
   error "$(cat $log_file)"
fi


# - Create the directories to hold opendmarc's data files, assign 
# - ownership to the opendmarc user, and restrict the file 
# - permissions:
# -
echononl "   Create directory '$opendmarc_base_dir'"
if [[ -d "$opendmarc_base_dir" ]] ; then
   echo_skipped
else
   opendmarc_needs_restart=true
   mkdir ${opendmarc_base_dir} 2> $log_file
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
fi
echononl "   Set ownership on directory '${opendmarc_base_dir}' (recursive).."
chown -R opendmarc:opendmarc ${opendmarc_base_dir} 2> $log_file
if [[ $? -eq 0 ]] ; then
   echo_ok
else
   echo_failed
   error "$(cat $log_file)"
fi



# - Create the file ${opendmarc_base_dir}/ignore.hosts
# -
echononl "   Create file '${opendmarc_base_dir}/ignore.hosts'.."
if [[ -f "${opendmarc_base_dir}/ignore.hosts" ]] ; then
   echo_skipped
else
   cat <<EOF > ${opendmarc_base_dir}/ignore.hosts 2> $log_file
127.0.0.1
::1
localhost
$(hostname -f)
EOF
   opendmarc_needs_restart=true
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
fi


# - Edit /etc/default/opendmarc
# -
# - Set:
# -    SOCKET="local:${postfix_spool_dir}/opendmarc/opendmarc.sock"
# -
echononl "   Set 'SOCKET' at file /etc/default/opendmarc.."
if grep -q -E "^\s*SOCKET" /etc/default/opendmarc 2>/dev/null ; then
   if grep -q -E "^\s*SOCKET\s*=\s*\"*local:$opendmarc_socket_file" /etc/default/opendmarc  2>/dev/null ; then
      echo_skipped
   else
      perl -i -n -p -e "s#^\s*SOCKET=.*#SOCKET=\"local:$opendmarc_socket_file\"#" /etc/default/opendmarc 2> $log_file
      opendmarc_needs_restart=true
      if [[ $? -eq 0 ]] ; then
         echo_ok
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   fi
else
   cat <<EOF >>/etc/default/opendmarc 2> $log_file
SOCKET="local:$opendmarc_socket_file"
EOF
   opendmarc_needs_restart=true
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
fi


# - Create the opendmarc socket directory in Postfix’s work area 
# - and make sure it has the correct ownership:
# -
echononl "   Create the opendmarc socket directory in Postfix's work area.."
if [[ -d "${postfix_spool_dir}/opendmarc" ]] ; then
   echo_skipped
else
   mkdir ${postfix_spool_dir}/opendmarc 2> $log_file
   opendmarc_needs_restart=true
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
   echononl "   Set ownership on directory '${postfix_spool_dir}/opendmarc'.."
   chown opendmarc:postfix ${postfix_spool_dir}/opendmarc 2> $log_file
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
fi


# - Edit /etc/postfix/main.cf and add a section to activate 
# - processing of e-mail through the opendmarc daemon:
# -
backup_date="$(date +%Y-%m-%d-%H%M)"
echononl "   Backup existing postfix configuration (main.cf).."
cp -a /etc/postfix/main.cf /etc/postfix/main.cf.$backup_date 2> $log_file
if [[ $? -eq 0 ]] ; then
   echo_ok
else
   echo_failed
   error "$(cat $log_file)"
fi

echononl "   Set Variable non_smtpd_milters at '/etc/postfix/main.cf'.."
if $(grep -q -E "^\s*non_smtpd_milters\s*=\s*.*opendkim.sock" /etc/postfix/main.cf 2> /dev/null) ; then
   if $(grep -q -E "^\s*non_smtpd_milters\s*=\s*.*${opendmarc_socket_file}" /etc/postfix/main.cf); then
      echo_skipped
   else
      perl -i -n -p -e "s&^\s*(non_smtpd_milters\s*=.*opendkim.sock)&\1,local:/$(basename "${opendmarc_socket_dir}")/$(basename "${opendmarc_socket_file}")&" \
         /etc/postfix/main.cf > $log_file 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   fi
else
   echo_skipped
   warn "Postfix is not adjusted. Complete Postfix configuration (main.cf) manually\!"
fi


# - Prevent Postfix from setting the DMARC Header twice (one befor
# - and one after processing amavis
# -
# - To disable milter processing after amavis, add to your master.cf in 
# - the after-amavis section:
# -    127.0.0.1:10025 inet    n       -       -       -       -       smtpd
# -       [...]
# -       -o smtpd_milters=
# -
# - If you want to run the milter after amavis, set in main.cf
# -    smtpd_milters= 
# - to an empty string and add the smtpd_milters configuration to master.cf 
# - (after-section amavis) instead:
# -    -o smtpd_milters=local:/opendmarc/opendmarc.sock
# -
echononl "   Backup file '/etc/postfix/master.cf'.."
cp -a /etc/postfix/master.cf /etc/postfix/master.cf.$backup_date 2> $log_file
if [[ $? -eq 0 ]] ; then
   echo_ok
else
   echo_failed
   error "$(cat $log_file)"
fi

echononl "   Adjust /etc/postfix/master.cf. Set DMARC after sending throuh AmaVIS.."
if $(grep -q -E "^\s*-o\s+smtpd_milters\s*=\s*.*opendkim.sock" /etc/postfix/master.cf 2> /dev/null) ; then
   if $(grep -q -E "^\s*-o\s+smtpd_milters\s*=\s*.*$(basename ${opendmarc_socket_file})" /etc/postfix/master.cf); then
      echo_skipped
   else
      perl -i -n -p -e "s&(^\s*-o\s+smtpd_milters\s*=.*)&\1,local:/$(basename "${opendmarc_socket_dir}")/$(basename "${opendmarc_socket_file}")&" \
         /etc/postfix/master.cf > $log_file 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   fi
else
   echo_skipped
   warn "Postfix is not adjusted. Complete Postfix configuration (master.cf) manually\!"
fi

echo ""

echononl "   Enable OpenDMARC Service"
if $SYSTEMD_EXISTS ; then
   systemctl enable opendmarc > $log_file 2>&1
   if [[ $? -eq 0 ]] ; then
      echo_ok
   else
      echo_failed
      error "$(cat $log_file)"
   fi
else
   warn "Maybe OpenDMARC Service is not enabled, because its an old non-systemd os.."
fi

# - Restart opendmarc
# - 
echononl "   Restart opendmarc.."
if $opendmarc_needs_restart ; then
   if $SYSTEMD_EXISTS ; then
      systemctl restart opendmarc > $log_file 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   else
      /etc/init.d/opendmarc restart > $log_file 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   fi
else
   echo_skipped
fi


# - Restart Postfix so it starts using opendmarc when processing mail:
# -
echononl "   Restart Postfix.."
if $postfix_needs_restart ; then
   if $SYSTEMD_EXISTS ; then
      systemctl restart postfix > $log_file 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   else
      /etc/init.d/postfix restart > $log_file 2>&1
      if [[ $? -eq 0 ]] ; then
         echo_ok
      else
         echo_failed
         error "$(cat $log_file)"
      fi
   fi
else
   echo_skipped
fi

echo ""
rm -f "$log_file"
exit 0