-
Notifications
You must be signed in to change notification settings - Fork 5
/
openwrt-config.sh
154 lines (126 loc) · 4.81 KB
/
openwrt-config.sh
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
#!/bin/sh
## Network Configuration
. network.conf
## Fix Missing DNS Servers
uci set network.lan.dns="$DNS_SERVERS"
uci set network.wan.dns="$DNS_SERVERS"
uci commit
#/etc/init.d/network restart
## Update & Install Packages
opkg update
opkg install qos-scripts ddns-scripts miniupnpd curl kmod-leds-wndr3700-usb
opkg install luci-ssl luci-base luci-i18n-english luci-lib-httpclient luci-ssl luci-app-qos uhttpd-mod-tls
## System Configuration
uci set system.@system[0].hostname="$HOST_NAME"
uci set system.@system[0].zonename="$TIMEZONE_NAME"
uci set system.@system[0].timezone="$TIMEZONE"
## IP Address
uci set network.lan.ipaddr="$HOST_IP_ADDRESS"
uci set network.lan.netmask="$HOST_NETMASK"
## Remove Default Wireless Setup
uci delete wireless.@wifi-iface[1]
uci delete wireless.@wifi-iface[0]
## Radio [2GHz]
uci set wireless.radio0.hwmode=11ng
uci set wireless.radio0.htmode=HT40-
uci set wireless.radio0.txpower=22
uci set wireless.radio0.channel=6
uci delete wireless.radio0.disabled
## Radio [5GHz]
uci set wireless.radio1.country="$COUNTRY"
## Wifi [2GHz]
uci add wireless wifi-iface
uci set wireless.@wifi-iface[-1].device=radio0
uci set wireless.@wifi-iface[-1].mode=ap
uci set wireless.@wifi-iface[-1].ssid="$WIFI1_SSID"
uci set wireless.@wifi-iface[-1].key="$WIFI1_KEY"
uci set wireless.@wifi-iface[-1].encryption=psk-mixed
uci set wireless.@wifi-iface[-1].network=lan
## Create DHCP & Hostname list
DEVICE_LIST=$(cat $DEVICES_FILE | grep -v '^#\|^$')
IFS=$'\12'
for d in $DEVICE_LIST
do
d_host=$(echo $d | awk '{ print $1 }')
d_ip=$(echo $d | awk '{ print $2 }')
d_mac=$(echo $d | awk '{ print $3 }')
if [ -n "$d_host" -a -n "$d_mac" -a -n "$d_ip" ]; then
uci add dhcp host
uci set dhcp.@host[-1].name=$d_host
uci set dhcp.@host[-1].mac=$d_mac
uci set dhcp.@host[-1].ip=$d_ip
fi
if [ -n "$d_host" -a -n "$d_ip" ]; then
uci add dhcp domain
uci set dhcp.@domain[-1].name=$d_host
uci set dhcp.@domain[-1].ip=$d_ip
fi
done
##Sending DNS list to clients
uci set dhcp.@dnsmasq[0].server="$DNS_SERVERS"
## Firewall Redirects
uci add firewall redirect
uci set firewall.@redirect[0]._name=ssh_desktop
uci set firewall.@redirect[-1].src=wan
uci set firewall.@redirect[-1].src_dport="$REDIRECT_EXTERNAL_PORT"
uci set firewall.@redirect[-1].dest_ip="$REDIRECT_INTERNAL_IP"
uci set firewall.@redirect[-1].dest_port="$REDIRECT_INTERNAL_PORT"
uci set firewall.@redirect[-1].proto=tcp
## Disable uhttp on port 80
uci delete uhttpd.main.listen_http
## uhttpd Keys
uci set uhttpd.px5g.commonname="$HOST_NAME"
uci set uhttpd.px5g.days=3650
uci set uhttpd.px5g.country=US
uci set uhttpd.px5g.state="California"
uci set uhttpd.px5g.location="Los Angeles"
rm -f /etc/uhttpd.crt /etc/uhttpd.key
## SSH Setup
uci set dropbear.@dropbear[0].RootPasswordAuth=off
uci set dropbear.@dropbear[0].Port="$SSH_PORT"
uci set dropbear.@dropbear[0].PasswordAuth=off
uci set dropbear.@dropbear[0].Interface=lan
## SSH Autharized Keys
echo $SSH_KEY > /etc/dropbear/authorized_keys
## QoS
## Add NameCheap.com (SSL) DDNS
## -- The http-based NameCheap DDNS is now part of OpenWRT
echo "" >> /usr/lib/ddns/services
echo "# Namecheap.com Dynamic DNS Service (SSL)" >> /usr/lib/ddns/services
echo "\"namecheap.com (ssl)\" \"https://dynamicdns.park-your-domain.com/update?host=[USERNAME]&domain=[DOMAIN]&password=[PASSWORD]&ip=[IP]\"" >> /usr/lib/ddns/services
## Add CloudFlare.com DDNS (via API)
echo "" >> /usr/lib/ddns/services
echo "# CloudFlare.com Client API" >> /usr/lib/ddns/services
echo "\"cloudflare.com\" \"https://www.cloudflare.com/api_json.html?a=DIUP&email=[USERNAME]&tkn=[PASSWORD]&hosts=[DOMAIN]&ip=[IP]\"" >> /usr/lib/ddns/services
## Install Root Certificates
mkdir -p /etc/ssl/certs
## GeoTrust Certificates (for NameCheap.com)
curl -sL http://www.geotrust.com/resources/root_certificates/certificates/GeoTrust_Global_CA.pem -o /etc/ssl/certs/GeoTrust_Global_CA.pem
## GlobalSign Root Certificate (for Cloudflare.com)
curl -skL http://secure.globalsign.net/cacert/Root-R1.crt -o /etc/ssl/certs/GlobalSign_Root_R1.pem
## Personal DDNS
# Debug DDNS via:
# /usr/lib/ddns/dynamic_dns_updater.sh myddns
uci set ddns.myddns.interface=wan
uci set ddns.myddns.service_name="$DDNS_SERVICE"
uci set ddns.myddns.username="$DDNS_USER"
uci set ddns.myddns.password="$DDNS_PASSWORD"
uci set ddns.myddns.domain="$DDNS_DOMAIN"
uci set ddns.myddns.ip_source=web
uci set ddns.myddns.ip_url=http://queryip.net/ip/
uci set ddns.myddns.check_interval=30
uci set ddns.myddns.check_unit=minutes
uci set ddns.myddns.force_interval=12
uci set ddns.myddns.force_unit=hours
uci set ddns.myddns.enabled=1
uci set ddns.myddns.use_https=1
uci set ddns.myddns.cacert=/etc/ssl/certs/"$DDNS_CERT"
## Enable Services
/etc/init.d/uhttpd enable
/etc/init.d/miniupnpd enable
#/etc/init.d/qos enable
## Commit Changes
uci commit
echo "**** Restarting Router ****"
## Reboot after first setup
reboot