Added EspoCRM

bin/backuptool

@@ -67,6 +67,10 @@ backupservice() {
     docker exec pdnsmysql mysqldump -uroot -p${MYSQL_PASSWORD} bookstack | gzip -9 > /federated/apps/bookstack/dump_$SERVICE.sql.gz
     PASSPHRASE=$GPG_PASSPHRASE duplicity /federated/apps/$SERVICE b2://$B2_APPLICATION_KEY_ID:$B2_APPLICATION_KEY@$UUID/$SERVICE/
     rm /federated/apps/bookstack/dump_$SERVICE.sql.gz
+  elif [ "$SERVICE" = "espocrm" ]; then
+    docker exec pdnsmysql mysqldump -uroot -p${MYSQL_PASSWORD} espocrm | gzip -9 > /federated/apps/espocrm/dump_$SERVICE.sql.gz
+    PASSPHRASE=$GPG_PASSPHRASE duplicity /federated/apps/$SERVICE b2://$B2_APPLICATION_KEY_ID:$B2_APPLICATION_KEY@$UUID/$SERVICE/
+    rm /federated/apps/espocrm/dump_$SERVICE.sql.gz
   else
   # For all other services, If the postgresql database exists for that service then dump it
     docker exec postgresql psql -U $SERVICE -c '\q' &>/dev/null
@@ -115,6 +119,10 @@ backupserviceall() {
       docker exec pdnsmysql mysqldump -uroot -p${MYSQL_PASSWORD} bookstack | gzip -9 > /federated/apps/bookstack/dump_$i.sql.gz
       PASSPHRASE=$GPG_PASSPHRASE duplicity /federated/apps/$i b2://$B2_APPLICATION_KEY_ID:$B2_APPLICATION_KEY@$UUID/$i/
       rm /federated/apps/bookstack/dump_$i.sql.gz
+    elif [ "$i" = "espocrm" ]; then
+      docker exec pdnsmysql mysqldump -uroot -p${MYSQL_PASSWORD} espocrm | gzip -9 > /federated/apps/espocrm/dump_$i.sql.gz
+      PASSPHRASE=$GPG_PASSPHRASE duplicity /federated/apps/$i b2://$B2_APPLICATION_KEY_ID:$B2_APPLICATION_KEY@$UUID/$i/
+      rm /federated/apps/espocrm/dump_$i.sql.gz
     else
       docker exec postgresql psql -U $i -c '\q' &>/dev/null
       if [ $? -eq 0 ]; then

lib/espocrm.sh

@@ -0,0 +1,105 @@
+#!/bin/bash
+#
+# EspoCRM Service
+
+PATH=$HOME/.docker/cli-plugins:/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
+
+config_espocrm() {
+  echo -ne "\n* Configuring /federated/apps/espocrm container.."
+  spin &
+  SPINPID=$!
+
+  if [ ! -d "/federated/apps/espocrm" ]; then
+    mkdir -p /federated/apps/espocrm/data/var/www/html
+  fi
+
+cat > /federated/apps/espocrm/docker-compose.yml <<EOF
+version: '3.7'
+
+services:
+  espocrm:
+    image: espocrm/espocrm:\${IMAGE_VERSION}
+    container_name: espocrm
+    hostname: espocrm.$DOMAIN
+    domainname: $DOMAIN
+    restart: always
+    networks:
+      federated:
+        ipv4_address: 172.99.0.39
+    env_file:
+      - ./.env
+    volumes:
+      - ./data/var/www/html:/var/www/html
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.espocrm.rule=Host(\`espocrm.$DOMAIN\`)"
+      - "traefik.http.routers.espocrm.entrypoints=websecure"
+      - "traefik.http.routers.espocrm.tls.certresolver=letsencrypt"
+
+networks:
+  federated:
+    external: true
+EOF
+
+ADMINPASS=`cat /federated/apps/castopod/.env | grep CP_EMAIL_SMTP_PASSWORD | awk -F= '{ print $2 }'`
+ESPOCRM_SECRET=$(create_password);
+MYSQL_ROOTPASSWORD=`cat /federated/apps/pdnsmysql/.env | grep MYSQL_ROOT_PASSWORD | awk -F= '{ print $2 }'`
+LDAP_SECRET=`cat /federated/apps/ldap/.ldap.secret`
+
+cat > /federated/apps/espocrm/.env <<EOF
+IMAGE_VERSION="8.0.5-apache"
+ESPOCRM_DATABASE_HOST=pdnsmysql.$DOMAIN
+ESPOCRM_DATABASE_NAME=espocrm
+ESPOCRM_DATABASE_USER=espocrm
+ESPOCRM_DATABASE_PASSWORD=$ESPOCRM_SECRET
+ESPOCRM_ADMIN_USERNAME=admin@$DOMAIN
+ESPOCRM_ADMIN_PASSWORD=$ADMINPASS
+ESPOCRM_CONFIG_SMTP_PORT=587
+ESPOCRM_CONFIG_SMTP_AUTH=true
+ESPOCRM_CONFIG_SMTP_SECURITY=TLS
+ESPOCRM_CONFIG_SMTP_USERNAME=fcore
+ESPOCRM_CONFIG_SMTP_PASSWORD=$ADMINPASS
+ESPOCRM_CONFIG_SMTP_SERVER=mail.$DOMAIN
+ESPOCRM_CONFIG_OUTBOUND_EMAIL_FROM_ADDRESS=espocrm@$DOMAIN
+ESPOCRM_CONFIG_AUTHENTICATION_METHOD=LDAP
+ESPOCRM_CONFIG_LDAP_USER_NAME_ATTRIBUTE=mail
+ESPOCRM_CONFIG_LDAP_USER_FIRST_NAME_ATTRIBUTE=givenName
+ESPOCRM_CONFIG_LDAP_USER_LAST_NAME_ATTRIBUTE=sn
+ESPOCRM_CONFIG_LDAP_USER_TITLE_ATTRIBUTE=cn
+ESPOCRM_CONFIG_LDAP_USER_EMAIL_ADDRESS_ATTRIBUTE=mail
+ESPOCRM_CONFIG_LDAP_USER_PHONE_NUMBER_ATTRIBUTE=cn
+ESPOCRM_CONFIG_LDAP_USER_OBJECT_CLASS=inetOrgPerson
+ESPOCRM_CONFIG_LDAP_HOST=ldap.$DOMAIN
+ESPOCRM_CONFIG_LDAP_PORT=636
+ESPOCRM_CONFIG_LDAP_SECURITY=SSL
+ESPOCRM_CONFIG_LDAP_AUTH=true
+ESPOCRM_CONFIG_LDAP_USERNAME=cn=admin,dc=federatedcomputer,dc=cloud
+ESPOCRM_CONFIG_LDAP_PASSWORD=$LDAP_SECRET
+ESPOCRM_CONFIG_LDAP_ACCOUNT_CANONICAL_FORM=Dn
+ESPOCRM_CONFIG_LDAP_BASE_DN=dc=federatedcomputer,dc=cloud
+ESPOCRM_CONFIG_LDAP_BIND_REQUIRES_DN=true
+ESPOCRM_CONFIG_LDAP_CREATE_ESPO_USER=true
+ESPOCRM_CONFIG_LDAP_PORTAL_USER_LDAP_AUTH=true
+ESPOCRM_SITE_URL="https://espocrm.$DOMAIN"
+EOF
+chmod 600 /federated/apps/espocrm/.env
+
+# Create database and user in mysql
+docker exec pdnsmysql bash -c "mysql -uroot -p$MYSQL_ROOTPASSWORD -e 'create database espocrm;'"
+docker exec pdnsmysql bash -c "mysql -uroot -p$MYSQL_ROOTPASSWORD -e \"CREATE USER 'espocrm'@'%' IDENTIFIED BY '$ESPOCRM_SECRET';\""
+docker exec pdnsmysql bash -c "mysql -uroot -p$MYSQL_ROOTPASSWORD -e \"grant all privileges on espocrm.* to 'espocrm'@'%';\""
+docker exec pdnsmysql bash -c "mysql -uroot -p$MYSQL_ROOTPASSWORD -e 'flush privileges;'"
+ 
+kill -9 $SPINPID &> /dev/null
+echo -ne "done."
+}
+start_espocrm() {
+  # Start service with command to make sure it's up before proceeding
+  start_service "espocrm" "nc -z 172.99.0.39 80 &> /dev/null" "7"
+
+  docker exec pdns pdnsutil add-record $DOMAIN espocrm A 86400 $EXTERNALIP
+  [ $? -ne 0 ] && fail "Couldn't add dns record for espocrm"
+
+  kill -9 $SPINPID &> /dev/null
+  echo -ne "done."
+}

lib/functions.sh

@@ -1,7 +1,7 @@
 # Federated Computer functions
 
 # Define all services
-SERVICES=("pdnsmysql" "pdns" "pdnsadmin" "traefik" "postgresql" "ldap" "mail" "collabora" "nextcloud" "matrix" "element" "listmonk" "vaultwarden" "panel" "wireguard" "jitsi" "baserow" "gitea" "caddy" "autodiscover" "castopod" "wordpress" "coturn" "bookstack" "freescout" "msp")
+SERVICES=("pdnsmysql" "pdns" "pdnsadmin" "traefik" "postgresql" "ldap" "mail" "collabora" "nextcloud" "matrix" "element" "listmonk" "vaultwarden" "panel" "wireguard" "jitsi" "baserow" "gitea" "caddy" "autodiscover" "castopod" "wordpress" "coturn" "bookstack" "freescout" "msp" "espocrm")
 
 fail() {
   echo -ne "FAILED\n\n$1\n\n"
@@ -420,6 +420,14 @@ Here is your applications reference chart with $DOMAIN:
     <td class="tg-cul6"><a href="https://documentation.federated.computer/docs/getting_started/welcome/" target="_blank" rel="noopener noreferrer"><span style="color:#340096">Click here</span></a></td>
     <td class="tg-0pky">Music Side Project Studio enables you to harness the potential of RSS feeds and the Lightning Network, allowing you to self-host your music and receive direct payment from your fans</td>
   </tr>
+  <tr>
+    <td class="tg-0pky">EspoCRM</td>
+    <td class="tg-0pky"><a href="https://espocrm.$DOMAIN" target="_blank" rel="noopener noreferrer"><span style="color:#340096">espocrm.$DOMAIN</span></a></td>
+    <td class="tg-0pky">admin@$DOMAIN<br>admin password above</td>
+    <td class="tg-0pky">All users in panel can access EspoCRM using user@domain.com</td>
+    <td class="tg-cul6"><a href="https://documentation.federated.computer/docs/getting_started/welcome/" target="_blank" rel="noopener noreferrer"><span style="color:#340096">Click here</span></a></td>
+    <td class="tg-0pky">EspoCRM is an Open Source CRM (Customer Relationship Management) software that allows you to see, enter and evaluate all your company relationships</td>
+  </tr>
 </tbody>
 </table>
 <h4>Thanks for your support!</h4>
@@ -656,6 +664,14 @@ Password = "$LISTMONKPASS"
     <td class="tg-cul6"><a href="https://documentation.federated.computer/docs/getting_started/welcome/" target="_blank" rel="noopener noreferrer"><span style="color:#340096">Click here</span></a></td>
     <td class="tg-0pky">Music Side Project Studio enables you to harness the potential of RSS feeds and the Lightning Network, allowing you to self-host your music and receive direct payment from your fans</td>
   </tr>
+  <tr>
+    <td class="tg-0pky">EspoCRM</td>
+    <td class="tg-0pky"><a href="https://espocrm.$DOMAIN" target="_blank" rel="noopener noreferrer"><span style="color:#340096">espocrm.$DOMAIN</span></a></td>
+    <td class="tg-0pky">admin@$DOMAIN<br>admin password above</td>
+    <td class="tg-0pky">All users in panel can access EspoCRM using user@domain.com</td>
+    <td class="tg-cul6"><a href="https://documentation.federated.computer/docs/getting_started/welcome/" target="_blank" rel="noopener noreferrer"><span style="color:#340096">Click here</span></a></td>
+    <td class="tg-0pky">EspoCRM is an Open Source CRM (Customer Relationship Management) software that allows you to see, enter and evaluate all your company relationships</td>
+  </tr>
 </tbody>
 </table>
 <br>