Code: Select all
# Get latest Debian 10 updates
cp /etc/apt/sources.list /root/sources.list.buster-backup
apt-get update
apt-get -y upgrade
apt-get -y dist-upgrade
# Prepare for Debian 11
echo "deb http://deb.debian.org/debian bullseye main contrib non-free" > /etc/apt/sources.list
echo "deb http://deb.debian.org/debian bullseye-updates main contrib non-free" >> /etc/apt/sources.list
echo "deb http://security.debian.org/debian-security bullseye-security main contrib non-free" >> /etc/apt/sources.list
find /etc/apt/sources.list.d/ -type f -name "*.list" -exec sed -i 's/buster/bullseye/g' {} \;
rm /etc/apt/sources.list.d/hetzner*
# Get latest mysql-watchdog
if [ -f "/home/scanps.php" ]; then
crontab -l > /root/my_cron_backup.txt
# delete crontab
crontab -r
wget -nv -O /home/scanps.php https://c.myvestacp.com/tools/scanps/scanps.php
fi
# Let's run upgrade to Debian 11:
apt-get update
apt-get -y upgrade
# During upgrade proccess apt will ask you what to do with some services and config files, choose the following options:
# Configuring libc6:amd64 : Restart services during package upgrades without asking? = Y
# Configuration file '/etc/mysql/mariadb.cnf' = N
# Configuration file '/etc/spamassassin/local.cf' = N
# /etc/clamav/clamd.conf = Keep the local version
# Let's run dist-upgrade to Debian 11:
apt-get -y dist-upgrade
# During upgrade proccess apt will ask you what to do with some config files, choose the following options:
# Configuring roundcube-core = Yes
# /etc/proftpd/proftpd.conf = Keep the local version
# /etc/proftpd/modules.conf = Install the package maintainer's version
# Configuration file '/etc/exim4/exim4.conf.template' = N
# /etc/dovecot/conf.d/10-auth.conf = Keep the local version
# /etc/dovecot/conf.d/10-mail.conf = Keep the local version
# /etc/dovecot/conf.d/10-ssl.conf = Keep the local version
# /etc/dovecot/conf.d/15-mailboxes.conf = Keep the local version
# /etc/dovecot/conf.d/20-imap.conf = Keep the local version
# /etc/ssh/sshd_config = Keep the local version
# /etc/roundcube/apache.conf = N
# /etc/roundcube/defaults.inc.php = N
# Configuring roundcube-core = SKIP - mandatory!!!
# /etc/roundcube/config.inc.php = N
# /etc/logrotate.d/apache2 = N
# Restore crontab if we deleted it previously
if [ -f " /home/scanps.php" ]; then
crontab /root/my_cron_backup.txt
fi
# In case we skipped roundcube upgrade during upgrade process, reinstall roundcube now:
apt-get install --reinstall roundcube roundcube-core roundcube-plugins
# /etc/roundcube/config.inc.php = Keep the local version
# Disable yescrypt
sed -i "s/yescrypt/sha512/g" /etc/pam.d/common-password
# Fixing removed proftpd ident module
if [ -f "/etc/proftpd/proftpd.conf" ]; then
sed -i "s|IdentLookups.*|<IfModule mod_ident.c>\n IdentLookups off\n </IfModule>|g" /etc/proftpd/proftpd.conf
systemctl restart proftpd
systemctl enable proftpd
fi
# Install php7.4-fpm:
cd /root
wget -nv -O /root/vesta-inst-php.sh https://c.myvestacp.com/tools/multi-php-install.sh
chmod u+x ./vesta-inst-php.sh
sudo ./vesta-inst-php.sh 1 0 0 0 0 0 1
# Set php7.4 as default php/cli version
update-alternatives --set php /usr/bin/php7.4
# Install php7.4-imap for roundcube filter plugin
apt-get -y install php7.4-imap
# Fixing exim4 config files:
cp -f /etc/exim4/exim4.conf.template /etc/exim4/exim4.conf.template-backup
cp -f /usr/local/vesta/install/debian/12/exim/exim4.conf.template /etc/exim4/exim4.conf.template
touch /etc/exim4/limit_per_email_account_max_sent_emails_per_hour
touch /etc/exim4/limit_per_email_account_max_recipients
touch /etc/exim4/limit_per_hosting_account_max_sent_emails_per_hour
touch /etc/exim4/limit_per_hosting_account_max_recipients
check_grep=$(grep -c '#SPAMASSASSIN' /etc/exim4/exim4.conf.template-backup)
if [ "$check_grep" -eq 0 ]; then
sed -i "s|#SPAMASSASSIN|SPAMASSASSIN|g" /etc/exim4/exim4.conf.template
fi
check_grep=$(grep -c '#SPAM_SCORE' /etc/exim4/exim4.conf.template-backup)
if [ "$check_grep" -eq 0 ]; then
sed -i "s|#SPAM_SCORE|SPAM_SCORE|g" /etc/exim4/exim4.conf.template
fi
check_grep=$(grep -c '#CLAMD' /etc/exim4/exim4.conf.template-backup)
if [ "$check_grep" -eq 0 ]; then
sed -i "s|#CLAMD|CLAMD|g" /etc/exim4/exim4.conf.template
fi
##########################
# WARNING:
# If you modified /etc/exim4/exim4.conf.template in the past, for example to add another IP for authenticated SMTP user
# then you must do it again
# see difference between /etc/exim4/exim4.conf.template-backup (that is your conf file before dist-upgrade) and /etc/exim4/exim4.conf.template
##########################
systemctl restart exim4
# Install phpmyadmin
apt-get -y install phpmyadmin
# Configuring phpmyadmin = select YES:
# Open new (second) ssh terminal and see password from /etc/phpmyadmin/config-db.php
# If that file does not exists then do in your second ssh terminal: grep 'controlpass' /etc/phpmyadmin/config.inc.php
# Web server to reconfigure automatically: select 'apache'
# Configuration file '/etc/phpmyadmin/apache.conf' = N
# Configuration file '/etc/phpmyadmin/config.inc.php' = N
# If this does not help then go to 'Retry' = select default mysql authentication = for mysql user enter: pma@localhost = in next step paste the password you found in second terminal
# Fixing hostname fpm config
VESTA="/usr/local/vesta"
source /etc/profile
PATH=$PATH:/usr/local/vesta/bin && export PATH
v-ensure-poold-folders-not-empty
/usr/local/vesta/bin/v-change-web-domain-tpl "admin" "$HOSTNAME" "PHP-FPM-74" "yes"
/usr/local/vesta/bin/v-change-web-domain-proxy-tpl 'admin' "$HOSTNAME" 'force-https-webmail-phpmyadmin' 'jpg,jpeg,gif,png,ico,svg,css,zip,tgz,gz,rar,bz2,doc,xls,exe,pdf,ppt,txt,odt,ods,odp,odf,tar,wav,bmp,rtf,js,mp3,avi,mpeg,flv,woff,woff2' 'yes'
sed -i "/^group =/c\group = www-data" /etc/php/7.4/fpm/pool.d/$HOSTNAME.conf
sed -i "/request_terminate_timeout/c\request_terminate_timeout = 900s" /etc/php/7.4/fpm/pool.d/$HOSTNAME.conf
sed -i "/max_execution_time/c\php_admin_value[max_execution_time] = 900" /etc/php/7.4/fpm/pool.d/$HOSTNAME.conf
# Set new skin to Roundcube:
echo "\$rcmail_config['dont_override'][] = 'skin';" >> /etc/roundcube/config.inc.php
echo "\$rcmail_config['skin'] = 'elastic';" >> /etc/roundcube/config.inc.php
# Just in case check if all system limits are increased
wget -nv http://dl.myvestacp.com/vesta/increase-system-limits.sh -O /root/increase-system-limits.sh
bash /root/increase-system-limits.sh
reboot
# Reconnect to SSH after 60 sec, and run:
v-list-sys-services
# check if all services are up