convert-dns-settings: Fix call for chmod

[ipfire-2.x.git] / src / scripts / convert-dns-settings

#!/bin/bash
###############################################################################
#                                                                             #
# IPFire.org - A Linux-based firewall                                         #
# Copyright (C) 2020 IPFire Team <info@ipfire.org>                            #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

main() {
	# Do not convert anything if we already have some servers set
	if [ ! -s "/var/ipfire/dns/servers" ]; then
		# Array to store all found DNS servers.
		SERVERS=()

		# Try to get the DNS servers from ethernet settings file.
		local DNS1 DNS2
		eval $(/usr/local/bin/readhash /var/ipfire/ethernet/settings)

		# Add the grabbed DNS servers to the servers array.
		SERVERS+=($DNS1 $DNS2)

		# Check if the ppp settings file is not empty.
		if [ -s "/var/ipfire/ppp/settings" ]; then
			# Loop though all profile files.
			for file in /var/ipfire/ppp/settings*; do
				local DNS1 DNS2
				eval $(/usr/local/bin/readhash $file)

				# Add the DNS servers to the array of SERVERS.
				for var in DNS1 DNS2; do
					local server="${!var}"

					# Check if the servers array is empty.
					if [ ${#SERVERS[@]} -eq 0 ]; then
						# Allways add the first found nameserver to the array.
						SERVERS+=($server)
					else
						# Check if the current server is allready part ot the array.
						if [[ ! "${SERVERS[@]}" =~ "${server}" ]]; then
							# Add the server to the array.
							SERVERS+=($server)
						fi
					fi
				done

				# Remove DNS1 and DNS2 settings from profile file.
				sed -i "/^DNS[12]=/d" $file

				# Unset the local variables for the next round.
				unset DNS1 DNS2
			done

		elif [ -s "/var/ipfire/dns/settings" ]; then
			eval $(/usr/local/bin/readhash /var/ipfire/dns/settings)
		fi

		local server
		local i=3
		for server in "${SERVERS[@]}"; do
			echo "${i},${server},,enabled,"
			(( i++ ))
		done > /var/ipfire/dns/servers

		# Empty the old settings file
		: > /var/ipfire/dns/settings

		# Disable using ISP name servers when we already have some configured
		if [ ${i} -gt 3 ]; then
			echo "USE_ISP_NAMESERVERS=off" \
				>> /var/ipfire/dns/settings
		fi
	fi

	# Set correct ownership.
	chown nobody:nobody /var/ipfire/dns/settings

	# Convert old unbound settings file
	if [ -e "/etc/sysconfig/unbound" ]; then
		local USE_FORWARDERS
		local ENABLE_SAFE_SEARCH
		local FORCE_TCP

		# Read settings
		eval $(/usr/local/bin/readhash /etc/sysconfig/unbound)

		# Safe Search
		if [ "${ENABLE_SAFE_SEARCH}" = "on" ]; then
			echo "ENABLE_SAFE_SEARCH=${ENABLE_SAFE_SEARCH}" \
				>> /var/ipfire/dns/settings
		fi

		# Force TCP
		if [ "${FORCE_TCP}" = "on" ]; then
			echo "PROTO=TCP" >> /var/ipfire/dns/settings
		fi
	
		# Run in recursor mode
		if [ "${USE_FORWARDERS}" = "0" ]; then
			# Remove all servers
			: > /var/ipfire/dns/servers
		fi

		rm -f "/etc/sysconfig/unbound"
	fi

	# Set correct ownership.
	chown nobody:nobody /var/ipfire/dns/servers

	# Make DHCP leases readable for nobody
	chmod 644 /etc/unbound/dhcp-leases.conf
}

main "$@" || exit $?