vpnclient_ynh/scripts/upgrade

#!/bin/bash

source _common.sh
source /usr/share/yunohost/helpers

#=================================================
# SPECIAL UPGRADE FOR VERSIONS < 2.0
#=================================================

# Removing configuration files with naming that occured in versions < 1.2.0 ("vpnadmin" instead off "$app")
if [ -d /var/www/vpnadmin ]; then
  ynh_safe_rm /var/www/vpnadmin
fi

# Old stuff

if [ -f /etc/nginx/conf.d/*.d/$app.conf ]; then
	ynh_safe_rm /etc/nginx/conf.d/*.d/$app.conf
  ynh_systemctl --service="nginx" --action="reload"
fi

for php_path in $(ls /etc/php/*/fpm/pool.d/$app.conf 2> /dev/null); do
	ynh_safe_rm "$php_path"
done

if [ -d /var/www/$app ]; then
	ynh_safe_rm "/var/www/$app"
fi

[ -z "${domain:-}" ] || ynh_app_setting_delete domain
[ -z "${path:-}" ] || ynh_app_setting_delete path
[ -z "${is_public:-}" ] || ynh_app_setting_delete is_public
[ -z "${install_dir:-}" ] || ynh_app_setting_delete install_dir

if [ -e "/etc/sudoers.d/${app}_ynh" ]; then
  ynh_safe_rm "/etc/sudoers.d/${app}_ynh"
fi

if [ -e "/etc/yunohost/hooks.d/90-vpnclient.tpl" ]; then
  ynh_safe_rm "/etc/yunohost/hooks.d/90-vpnclient.tpl"
fi

if [ -e "/etc/openvpn/client.conf.tpl" ]; then
  ynh_safe_rm "/etc/openvpn/client.conf.tpl"
fi

# New stuff

if [ -z "${dns_method:-}" ]; then
    ynh_app_setting_set --key="dns_method" --value="custom"
fi
# FIXMEhelpers2.1: maybe replace with: ynh_app_setting_set_default --key=nameservers --value="$(grep -o -P '\s*nameserver\s+\K[abcdefabcdef\d.:]+' /etc/resolv.dnsmasq.conf | sort | uniq | paste -s -d, -)"
if [ -z "${nameservers:-}" ]; then
    nameservers="$(grep -o -P '\s*nameserver\s+\K[abcdefabcdef\d.:]+' /etc/resolv.dnsmasq.conf | sort | uniq | paste -s -d, -)"
    ynh_app_setting_set --key="nameservers" --value="$nameservers"
fi
if [ -z "${service_enabled:-}" ]; then
    ynh_app_setting_set --key="service_enabled" --value="0"
fi
if [ -z "${ip6_addr:-}" ]; then
    ynh_app_setting_set --key="ip6_addr" --value=""
fi
if [ -z "${ip6_net:-}" ]; then
    ynh_app_setting_set --key="ip6_net" --value=""
fi
if [ -z "${ip6_send_over_tun_enabled:-}" ]; then
    ynh_app_setting_set --key="ip6_send_over_tun_enabled" --value="0"
fi

#=================================================
# UPGRADE FROM BUSTER TO BULLSEYE
#=================================================

if [ -e "/etc/systemd/system/openvpn@.service" ]; then
  ynh_safe_rm "/etc/systemd/system/openvpn@.service"
fi

#=================================================
# DEPLOY FILES FROM PACKAGE
#=================================================

ynh_print_info "Stopping VPN client to apply config changes..."

ynh_systemctl --action="stop" --service="$service_checker_name.timer"
yunohost service stop $service_name

# Keep a copy of existing config files before overwriting them
tmp_dir=$(mktemp -d /tmp/vpnclient-upgrade-XXX)
for config_file in /etc/openvpn/client.{conf,cube,ovpn}; do
  if [[ -f "${config_file}" ]]; then
    cp "${config_file}" "${tmp_dir}/"
  fi
done

# Deploy files from package
vpnclient_deploy_files_and_services

# Generate config file from the uploaded .cube or .ovpn file, if available
if [[ -f "$tmp_dir/client.cube" ]]
then
    cp -f "$tmp_dir/client.cube" "$tmp_dir/client.conf"
    convert_cube_file "$tmp_dir/client.conf"
elif [[ -f "$tmp_dir/client.ovpn" ]]
then
    cp -f "$tmp_dir/client.ovpn" "$tmp_dir/client.conf"
    convert_ovpn_file "$tmp_dir/client.conf"
# In case we didn't keep the uploaded .ovpn file, we create one from the current config...
elif [[ -f "$tmp_dir/client.conf" ]]
then
    cp -f "$tmp_dir/client.conf" "$tmp_dir/client.ovpn"
    convert_ovpn_file "$tmp_dir/client.conf"
fi

# Restore previously existing config files
for config_file in ${tmp_dir}/client.{conf,cube,ovpn}; do
  if [[ -f "${config_file}" ]]; then
    cp "${config_file}" /etc/openvpn/
  fi
done
ynh_safe_rm "${tmp_dir}"

#=================================================
# SERVICE INTEGRATION IN YUNOHOST
#=================================================

### Make sure that the yunohost services have a description and need-lock enabled
ynh_print_info "Configuring VPN client services..."

# main service
yunohost service add $service_name --description "Tunnels the internet traffic through a VPN" --need_lock --test_status="systemctl is-active openvpn@client.service" --log "/var/log/ynh-vpnclient.log"

ynh_config_add_logrotate "/var/log/ynh-vpnclient.log"
ynh_config_add_logrotate "/var/log/openvpn-client.log"

# checker service (this service was previously integrated in yunohost but we do not do this anymore)
if ynh_hide_warnings yunohost service status $service_checker_name >/dev/null
then
    yunohost service remove $service_checker_name
fi

#=================================================
# RESTART RELEVANT SERVICES
#=================================================
ynh_print_info "Restart services..."

# this is meant to propagate the new files and configs
yunohost service start $service_name
ynh_systemctl --action="start" --service="$service_checker_name.timer"

#=================================================
# END OF SCRIPT
#=================================================

ynh_print_info "Upgrade of $app completed"