├── LICENSE ├── README.md ├── etc └── nextcloud-scripts-config.conf ├── img ├── Gotify_activity.png ├── Gotify_notifications.png ├── nextcloud_log.png └── nextcloud_notificaion.png ├── nextcloud-auditlog.sh ├── nextcloud-av-notification.sh ├── nextcloud-bot-hex.sh ├── nextcloud-bot-links-list ├── nextcloud-bot-links.sh ├── nextcloud-bot-pass.sh ├── nextcloud-bot-rate-1-10.sh ├── nextcloud-bot-time.sh ├── nextcloud-duplicates-tagger.sh ├── nextcloud-file-sync.sh ├── nextcloud-gotify-activity.sh ├── nextcloud-gotify-notifications.sh ├── nextcloud-hardlink-duplicates.sh ├── nextcloud-preview.sh ├── nextcloud-rsync-to-remote.sh ├── nextcloud-system-notification.sh └── nextcloud-usage-report.sh /LICENSE: -------------------------------------------------------------------------------- 1 | GNU GENERAL PUBLIC LICENSE 2 | Version 3, 29 June 2007 3 | 4 | Copyright (C) 2007 Free Software Foundation, Inc. 5 | Everyone is permitted to copy and distribute verbatim copies 6 | of this license document, but changing it is not allowed. 7 | 8 | Preamble 9 | 10 | The GNU General Public License is a free, copyleft license for 11 | software and other kinds of works. 12 | 13 | The licenses for most software and other practical works are designed 14 | to take away your freedom to share and change the works. By contrast, 15 | the GNU General Public License is intended to guarantee your freedom to 16 | share and change all versions of a program--to make sure it remains free 17 | software for all its users. We, the Free Software Foundation, use the 18 | GNU General Public License for most of our software; it applies also to 19 | any other work released this way by its authors. You can apply it to 20 | your programs, too. 21 | 22 | When we speak of free software, we are referring to freedom, not 23 | price. Our General Public Licenses are designed to make sure that you 24 | have the freedom to distribute copies of free software (and charge for 25 | them if you wish), that you receive source code or can get it if you 26 | want it, that you can change the software or use pieces of it in new 27 | free programs, and that you know you can do these things. 28 | 29 | To protect your rights, we need to prevent others from denying you 30 | these rights or asking you to surrender the rights. Therefore, you have 31 | certain responsibilities if you distribute copies of the software, or if 32 | you modify it: responsibilities to respect the freedom of others. 33 | 34 | For example, if you distribute copies of such a program, whether 35 | gratis or for a fee, you must pass on to the recipients the same 36 | freedoms that you received. You must make sure that they, too, receive 37 | or can get the source code. And you must show them these terms so they 38 | know their rights. 39 | 40 | Developers that use the GNU GPL protect your rights with two steps: 41 | (1) assert copyright on the software, and (2) offer you this License 42 | giving you legal permission to copy, distribute and/or modify it. 43 | 44 | For the developers' and authors' protection, the GPL clearly explains 45 | that there is no warranty for this free software. For both users' and 46 | authors' sake, the GPL requires that modified versions be marked as 47 | changed, so that their problems will not be attributed erroneously to 48 | authors of previous versions. 49 | 50 | Some devices are designed to deny users access to install or run 51 | modified versions of the software inside them, although the manufacturer 52 | can do so. This is fundamentally incompatible with the aim of 53 | protecting users' freedom to change the software. The systematic 54 | pattern of such abuse occurs in the area of products for individuals to 55 | use, which is precisely where it is most unacceptable. Therefore, we 56 | have designed this version of the GPL to prohibit the practice for those 57 | products. If such problems arise substantially in other domains, we 58 | stand ready to extend this provision to those domains in future versions 59 | of the GPL, as needed to protect the freedom of users. 60 | 61 | Finally, every program is threatened constantly by software patents. 62 | States should not allow patents to restrict development and use of 63 | software on general-purpose computers, but in those that do, we wish to 64 | avoid the special danger that patents applied to a free program could 65 | make it effectively proprietary. To prevent this, the GPL assures that 66 | patents cannot be used to render the program non-free. 67 | 68 | The precise terms and conditions for copying, distribution and 69 | modification follow. 70 | 71 | TERMS AND CONDITIONS 72 | 73 | 0. Definitions. 74 | 75 | "This License" refers to version 3 of the GNU General Public License. 76 | 77 | "Copyright" also means copyright-like laws that apply to other kinds of 78 | works, such as semiconductor masks. 79 | 80 | "The Program" refers to any copyrightable work licensed under this 81 | License. Each licensee is addressed as "you". "Licensees" and 82 | "recipients" may be individuals or organizations. 83 | 84 | To "modify" a work means to copy from or adapt all or part of the work 85 | in a fashion requiring copyright permission, other than the making of an 86 | exact copy. The resulting work is called a "modified version" of the 87 | earlier work or a work "based on" the earlier work. 88 | 89 | A "covered work" means either the unmodified Program or a work based 90 | on the Program. 91 | 92 | To "propagate" a work means to do anything with it that, without 93 | permission, would make you directly or secondarily liable for 94 | infringement under applicable copyright law, except executing it on a 95 | computer or modifying a private copy. Propagation includes copying, 96 | distribution (with or without modification), making available to the 97 | public, and in some countries other activities as well. 98 | 99 | To "convey" a work means any kind of propagation that enables other 100 | parties to make or receive copies. Mere interaction with a user through 101 | a computer network, with no transfer of a copy, is not conveying. 102 | 103 | An interactive user interface displays "Appropriate Legal Notices" 104 | to the extent that it includes a convenient and prominently visible 105 | feature that (1) displays an appropriate copyright notice, and (2) 106 | tells the user that there is no warranty for the work (except to the 107 | extent that warranties are provided), that licensees may convey the 108 | work under this License, and how to view a copy of this License. If 109 | the interface presents a list of user commands or options, such as a 110 | menu, a prominent item in the list meets this criterion. 111 | 112 | 1. Source Code. 113 | 114 | The "source code" for a work means the preferred form of the work 115 | for making modifications to it. "Object code" means any non-source 116 | form of a work. 117 | 118 | A "Standard Interface" means an interface that either is an official 119 | standard defined by a recognized standards body, or, in the case of 120 | interfaces specified for a particular programming language, one that 121 | is widely used among developers working in that language. 122 | 123 | The "System Libraries" of an executable work include anything, other 124 | than the work as a whole, that (a) is included in the normal form of 125 | packaging a Major Component, but which is not part of that Major 126 | Component, and (b) serves only to enable use of the work with that 127 | Major Component, or to implement a Standard Interface for which an 128 | implementation is available to the public in source code form. A 129 | "Major Component", in this context, means a major essential component 130 | (kernel, window system, and so on) of the specific operating system 131 | (if any) on which the executable work runs, or a compiler used to 132 | produce the work, or an object code interpreter used to run it. 133 | 134 | The "Corresponding Source" for a work in object code form means all 135 | the source code needed to generate, install, and (for an executable 136 | work) run the object code and to modify the work, including scripts to 137 | control those activities. However, it does not include the work's 138 | System Libraries, or general-purpose tools or generally available free 139 | programs which are used unmodified in performing those activities but 140 | which are not part of the work. For example, Corresponding Source 141 | includes interface definition files associated with source files for 142 | the work, and the source code for shared libraries and dynamically 143 | linked subprograms that the work is specifically designed to require, 144 | such as by intimate data communication or control flow between those 145 | subprograms and other parts of the work. 146 | 147 | The Corresponding Source need not include anything that users 148 | can regenerate automatically from other parts of the Corresponding 149 | Source. 150 | 151 | The Corresponding Source for a work in source code form is that 152 | same work. 153 | 154 | 2. Basic Permissions. 155 | 156 | All rights granted under this License are granted for the term of 157 | copyright on the Program, and are irrevocable provided the stated 158 | conditions are met. This License explicitly affirms your unlimited 159 | permission to run the unmodified Program. The output from running a 160 | covered work is covered by this License only if the output, given its 161 | content, constitutes a covered work. This License acknowledges your 162 | rights of fair use or other equivalent, as provided by copyright law. 163 | 164 | You may make, run and propagate covered works that you do not 165 | convey, without conditions so long as your license otherwise remains 166 | in force. You may convey covered works to others for the sole purpose 167 | of having them make modifications exclusively for you, or provide you 168 | with facilities for running those works, provided that you comply with 169 | the terms of this License in conveying all material for which you do 170 | not control copyright. Those thus making or running the covered works 171 | for you must do so exclusively on your behalf, under your direction 172 | and control, on terms that prohibit them from making any copies of 173 | your copyrighted material outside their relationship with you. 174 | 175 | Conveying under any other circumstances is permitted solely under 176 | the conditions stated below. Sublicensing is not allowed; section 10 177 | makes it unnecessary. 178 | 179 | 3. Protecting Users' Legal Rights From Anti-Circumvention Law. 180 | 181 | No covered work shall be deemed part of an effective technological 182 | measure under any applicable law fulfilling obligations under article 183 | 11 of the WIPO copyright treaty adopted on 20 December 1996, or 184 | similar laws prohibiting or restricting circumvention of such 185 | measures. 186 | 187 | When you convey a covered work, you waive any legal power to forbid 188 | circumvention of technological measures to the extent such circumvention 189 | is effected by exercising rights under this License with respect to 190 | the covered work, and you disclaim any intention to limit operation or 191 | modification of the work as a means of enforcing, against the work's 192 | users, your or third parties' legal rights to forbid circumvention of 193 | technological measures. 194 | 195 | 4. Conveying Verbatim Copies. 196 | 197 | You may convey verbatim copies of the Program's source code as you 198 | receive it, in any medium, provided that you conspicuously and 199 | appropriately publish on each copy an appropriate copyright notice; 200 | keep intact all notices stating that this License and any 201 | non-permissive terms added in accord with section 7 apply to the code; 202 | keep intact all notices of the absence of any warranty; and give all 203 | recipients a copy of this License along with the Program. 204 | 205 | You may charge any price or no price for each copy that you convey, 206 | and you may offer support or warranty protection for a fee. 207 | 208 | 5. Conveying Modified Source Versions. 209 | 210 | You may convey a work based on the Program, or the modifications to 211 | produce it from the Program, in the form of source code under the 212 | terms of section 4, provided that you also meet all of these conditions: 213 | 214 | a) The work must carry prominent notices stating that you modified 215 | it, and giving a relevant date. 216 | 217 | b) The work must carry prominent notices stating that it is 218 | released under this License and any conditions added under section 219 | 7. This requirement modifies the requirement in section 4 to 220 | "keep intact all notices". 221 | 222 | c) You must license the entire work, as a whole, under this 223 | License to anyone who comes into possession of a copy. This 224 | License will therefore apply, along with any applicable section 7 225 | additional terms, to the whole of the work, and all its parts, 226 | regardless of how they are packaged. This License gives no 227 | permission to license the work in any other way, but it does not 228 | invalidate such permission if you have separately received it. 229 | 230 | d) If the work has interactive user interfaces, each must display 231 | Appropriate Legal Notices; however, if the Program has interactive 232 | interfaces that do not display Appropriate Legal Notices, your 233 | work need not make them do so. 234 | 235 | A compilation of a covered work with other separate and independent 236 | works, which are not by their nature extensions of the covered work, 237 | and which are not combined with it such as to form a larger program, 238 | in or on a volume of a storage or distribution medium, is called an 239 | "aggregate" if the compilation and its resulting copyright are not 240 | used to limit the access or legal rights of the compilation's users 241 | beyond what the individual works permit. Inclusion of a covered work 242 | in an aggregate does not cause this License to apply to the other 243 | parts of the aggregate. 244 | 245 | 6. Conveying Non-Source Forms. 246 | 247 | You may convey a covered work in object code form under the terms 248 | of sections 4 and 5, provided that you also convey the 249 | machine-readable Corresponding Source under the terms of this License, 250 | in one of these ways: 251 | 252 | a) Convey the object code in, or embodied in, a physical product 253 | (including a physical distribution medium), accompanied by the 254 | Corresponding Source fixed on a durable physical medium 255 | customarily used for software interchange. 256 | 257 | b) Convey the object code in, or embodied in, a physical product 258 | (including a physical distribution medium), accompanied by a 259 | written offer, valid for at least three years and valid for as 260 | long as you offer spare parts or customer support for that product 261 | model, to give anyone who possesses the object code either (1) a 262 | copy of the Corresponding Source for all the software in the 263 | product that is covered by this License, on a durable physical 264 | medium customarily used for software interchange, for a price no 265 | more than your reasonable cost of physically performing this 266 | conveying of source, or (2) access to copy the 267 | Corresponding Source from a network server at no charge. 268 | 269 | c) Convey individual copies of the object code with a copy of the 270 | written offer to provide the Corresponding Source. This 271 | alternative is allowed only occasionally and noncommercially, and 272 | only if you received the object code with such an offer, in accord 273 | with subsection 6b. 274 | 275 | d) Convey the object code by offering access from a designated 276 | place (gratis or for a charge), and offer equivalent access to the 277 | Corresponding Source in the same way through the same place at no 278 | further charge. You need not require recipients to copy the 279 | Corresponding Source along with the object code. If the place to 280 | copy the object code is a network server, the Corresponding Source 281 | may be on a different server (operated by you or a third party) 282 | that supports equivalent copying facilities, provided you maintain 283 | clear directions next to the object code saying where to find the 284 | Corresponding Source. Regardless of what server hosts the 285 | Corresponding Source, you remain obligated to ensure that it is 286 | available for as long as needed to satisfy these requirements. 287 | 288 | e) Convey the object code using peer-to-peer transmission, provided 289 | you inform other peers where the object code and Corresponding 290 | Source of the work are being offered to the general public at no 291 | charge under subsection 6d. 292 | 293 | A separable portion of the object code, whose source code is excluded 294 | from the Corresponding Source as a System Library, need not be 295 | included in conveying the object code work. 296 | 297 | A "User Product" is either (1) a "consumer product", which means any 298 | tangible personal property which is normally used for personal, family, 299 | or household purposes, or (2) anything designed or sold for incorporation 300 | into a dwelling. In determining whether a product is a consumer product, 301 | doubtful cases shall be resolved in favor of coverage. For a particular 302 | product received by a particular user, "normally used" refers to a 303 | typical or common use of that class of product, regardless of the status 304 | of the particular user or of the way in which the particular user 305 | actually uses, or expects or is expected to use, the product. A product 306 | is a consumer product regardless of whether the product has substantial 307 | commercial, industrial or non-consumer uses, unless such uses represent 308 | the only significant mode of use of the product. 309 | 310 | "Installation Information" for a User Product means any methods, 311 | procedures, authorization keys, or other information required to install 312 | and execute modified versions of a covered work in that User Product from 313 | a modified version of its Corresponding Source. The information must 314 | suffice to ensure that the continued functioning of the modified object 315 | code is in no case prevented or interfered with solely because 316 | modification has been made. 317 | 318 | If you convey an object code work under this section in, or with, or 319 | specifically for use in, a User Product, and the conveying occurs as 320 | part of a transaction in which the right of possession and use of the 321 | User Product is transferred to the recipient in perpetuity or for a 322 | fixed term (regardless of how the transaction is characterized), the 323 | Corresponding Source conveyed under this section must be accompanied 324 | by the Installation Information. But this requirement does not apply 325 | if neither you nor any third party retains the ability to install 326 | modified object code on the User Product (for example, the work has 327 | been installed in ROM). 328 | 329 | The requirement to provide Installation Information does not include a 330 | requirement to continue to provide support service, warranty, or updates 331 | for a work that has been modified or installed by the recipient, or for 332 | the User Product in which it has been modified or installed. Access to a 333 | network may be denied when the modification itself materially and 334 | adversely affects the operation of the network or violates the rules and 335 | protocols for communication across the network. 336 | 337 | Corresponding Source conveyed, and Installation Information provided, 338 | in accord with this section must be in a format that is publicly 339 | documented (and with an implementation available to the public in 340 | source code form), and must require no special password or key for 341 | unpacking, reading or copying. 342 | 343 | 7. Additional Terms. 344 | 345 | "Additional permissions" are terms that supplement the terms of this 346 | License by making exceptions from one or more of its conditions. 347 | Additional permissions that are applicable to the entire Program shall 348 | be treated as though they were included in this License, to the extent 349 | that they are valid under applicable law. If additional permissions 350 | apply only to part of the Program, that part may be used separately 351 | under those permissions, but the entire Program remains governed by 352 | this License without regard to the additional permissions. 353 | 354 | When you convey a copy of a covered work, you may at your option 355 | remove any additional permissions from that copy, or from any part of 356 | it. (Additional permissions may be written to require their own 357 | removal in certain cases when you modify the work.) You may place 358 | additional permissions on material, added by you to a covered work, 359 | for which you have or can give appropriate copyright permission. 360 | 361 | Notwithstanding any other provision of this License, for material you 362 | add to a covered work, you may (if authorized by the copyright holders of 363 | that material) supplement the terms of this License with terms: 364 | 365 | a) Disclaiming warranty or limiting liability differently from the 366 | terms of sections 15 and 16 of this License; or 367 | 368 | b) Requiring preservation of specified reasonable legal notices or 369 | author attributions in that material or in the Appropriate Legal 370 | Notices displayed by works containing it; or 371 | 372 | c) Prohibiting misrepresentation of the origin of that material, or 373 | requiring that modified versions of such material be marked in 374 | reasonable ways as different from the original version; or 375 | 376 | d) Limiting the use for publicity purposes of names of licensors or 377 | authors of the material; or 378 | 379 | e) Declining to grant rights under trademark law for use of some 380 | trade names, trademarks, or service marks; or 381 | 382 | f) Requiring indemnification of licensors and authors of that 383 | material by anyone who conveys the material (or modified versions of 384 | it) with contractual assumptions of liability to the recipient, for 385 | any liability that these contractual assumptions directly impose on 386 | those licensors and authors. 387 | 388 | All other non-permissive additional terms are considered "further 389 | restrictions" within the meaning of section 10. If the Program as you 390 | received it, or any part of it, contains a notice stating that it is 391 | governed by this License along with a term that is a further 392 | restriction, you may remove that term. If a license document contains 393 | a further restriction but permits relicensing or conveying under this 394 | License, you may add to a covered work material governed by the terms 395 | of that license document, provided that the further restriction does 396 | not survive such relicensing or conveying. 397 | 398 | If you add terms to a covered work in accord with this section, you 399 | must place, in the relevant source files, a statement of the 400 | additional terms that apply to those files, or a notice indicating 401 | where to find the applicable terms. 402 | 403 | Additional terms, permissive or non-permissive, may be stated in the 404 | form of a separately written license, or stated as exceptions; 405 | the above requirements apply either way. 406 | 407 | 8. Termination. 408 | 409 | You may not propagate or modify a covered work except as expressly 410 | provided under this License. Any attempt otherwise to propagate or 411 | modify it is void, and will automatically terminate your rights under 412 | this License (including any patent licenses granted under the third 413 | paragraph of section 11). 414 | 415 | However, if you cease all violation of this License, then your 416 | license from a particular copyright holder is reinstated (a) 417 | provisionally, unless and until the copyright holder explicitly and 418 | finally terminates your license, and (b) permanently, if the copyright 419 | holder fails to notify you of the violation by some reasonable means 420 | prior to 60 days after the cessation. 421 | 422 | Moreover, your license from a particular copyright holder is 423 | reinstated permanently if the copyright holder notifies you of the 424 | violation by some reasonable means, this is the first time you have 425 | received notice of violation of this License (for any work) from that 426 | copyright holder, and you cure the violation prior to 30 days after 427 | your receipt of the notice. 428 | 429 | Termination of your rights under this section does not terminate the 430 | licenses of parties who have received copies or rights from you under 431 | this License. If your rights have been terminated and not permanently 432 | reinstated, you do not qualify to receive new licenses for the same 433 | material under section 10. 434 | 435 | 9. Acceptance Not Required for Having Copies. 436 | 437 | You are not required to accept this License in order to receive or 438 | run a copy of the Program. Ancillary propagation of a covered work 439 | occurring solely as a consequence of using peer-to-peer transmission 440 | to receive a copy likewise does not require acceptance. However, 441 | nothing other than this License grants you permission to propagate or 442 | modify any covered work. These actions infringe copyright if you do 443 | not accept this License. Therefore, by modifying or propagating a 444 | covered work, you indicate your acceptance of this License to do so. 445 | 446 | 10. Automatic Licensing of Downstream Recipients. 447 | 448 | Each time you convey a covered work, the recipient automatically 449 | receives a license from the original licensors, to run, modify and 450 | propagate that work, subject to this License. You are not responsible 451 | for enforcing compliance by third parties with this License. 452 | 453 | An "entity transaction" is a transaction transferring control of an 454 | organization, or substantially all assets of one, or subdividing an 455 | organization, or merging organizations. If propagation of a covered 456 | work results from an entity transaction, each party to that 457 | transaction who receives a copy of the work also receives whatever 458 | licenses to the work the party's predecessor in interest had or could 459 | give under the previous paragraph, plus a right to possession of the 460 | Corresponding Source of the work from the predecessor in interest, if 461 | the predecessor has it or can get it with reasonable efforts. 462 | 463 | You may not impose any further restrictions on the exercise of the 464 | rights granted or affirmed under this License. For example, you may 465 | not impose a license fee, royalty, or other charge for exercise of 466 | rights granted under this License, and you may not initiate litigation 467 | (including a cross-claim or counterclaim in a lawsuit) alleging that 468 | any patent claim is infringed by making, using, selling, offering for 469 | sale, or importing the Program or any portion of it. 470 | 471 | 11. Patents. 472 | 473 | A "contributor" is a copyright holder who authorizes use under this 474 | License of the Program or a work on which the Program is based. The 475 | work thus licensed is called the contributor's "contributor version". 476 | 477 | A contributor's "essential patent claims" are all patent claims 478 | owned or controlled by the contributor, whether already acquired or 479 | hereafter acquired, that would be infringed by some manner, permitted 480 | by this License, of making, using, or selling its contributor version, 481 | but do not include claims that would be infringed only as a 482 | consequence of further modification of the contributor version. For 483 | purposes of this definition, "control" includes the right to grant 484 | patent sublicenses in a manner consistent with the requirements of 485 | this License. 486 | 487 | Each contributor grants you a non-exclusive, worldwide, royalty-free 488 | patent license under the contributor's essential patent claims, to 489 | make, use, sell, offer for sale, import and otherwise run, modify and 490 | propagate the contents of its contributor version. 491 | 492 | In the following three paragraphs, a "patent license" is any express 493 | agreement or commitment, however denominated, not to enforce a patent 494 | (such as an express permission to practice a patent or covenant not to 495 | sue for patent infringement). To "grant" such a patent license to a 496 | party means to make such an agreement or commitment not to enforce a 497 | patent against the party. 498 | 499 | If you convey a covered work, knowingly relying on a patent license, 500 | and the Corresponding Source of the work is not available for anyone 501 | to copy, free of charge and under the terms of this License, through a 502 | publicly available network server or other readily accessible means, 503 | then you must either (1) cause the Corresponding Source to be so 504 | available, or (2) arrange to deprive yourself of the benefit of the 505 | patent license for this particular work, or (3) arrange, in a manner 506 | consistent with the requirements of this License, to extend the patent 507 | license to downstream recipients. "Knowingly relying" means you have 508 | actual knowledge that, but for the patent license, your conveying the 509 | covered work in a country, or your recipient's use of the covered work 510 | in a country, would infringe one or more identifiable patents in that 511 | country that you have reason to believe are valid. 512 | 513 | If, pursuant to or in connection with a single transaction or 514 | arrangement, you convey, or propagate by procuring conveyance of, a 515 | covered work, and grant a patent license to some of the parties 516 | receiving the covered work authorizing them to use, propagate, modify 517 | or convey a specific copy of the covered work, then the patent license 518 | you grant is automatically extended to all recipients of the covered 519 | work and works based on it. 520 | 521 | A patent license is "discriminatory" if it does not include within 522 | the scope of its coverage, prohibits the exercise of, or is 523 | conditioned on the non-exercise of one or more of the rights that are 524 | specifically granted under this License. You may not convey a covered 525 | work if you are a party to an arrangement with a third party that is 526 | in the business of distributing software, under which you make payment 527 | to the third party based on the extent of your activity of conveying 528 | the work, and under which the third party grants, to any of the 529 | parties who would receive the covered work from you, a discriminatory 530 | patent license (a) in connection with copies of the covered work 531 | conveyed by you (or copies made from those copies), or (b) primarily 532 | for and in connection with specific products or compilations that 533 | contain the covered work, unless you entered into that arrangement, 534 | or that patent license was granted, prior to 28 March 2007. 535 | 536 | Nothing in this License shall be construed as excluding or limiting 537 | any implied license or other defenses to infringement that may 538 | otherwise be available to you under applicable patent law. 539 | 540 | 12. No Surrender of Others' Freedom. 541 | 542 | If conditions are imposed on you (whether by court order, agreement or 543 | otherwise) that contradict the conditions of this License, they do not 544 | excuse you from the conditions of this License. If you cannot convey a 545 | covered work so as to satisfy simultaneously your obligations under this 546 | License and any other pertinent obligations, then as a consequence you may 547 | not convey it at all. For example, if you agree to terms that obligate you 548 | to collect a royalty for further conveying from those to whom you convey 549 | the Program, the only way you could satisfy both those terms and this 550 | License would be to refrain entirely from conveying the Program. 551 | 552 | 13. Use with the GNU Affero General Public License. 553 | 554 | Notwithstanding any other provision of this License, you have 555 | permission to link or combine any covered work with a work licensed 556 | under version 3 of the GNU Affero General Public License into a single 557 | combined work, and to convey the resulting work. The terms of this 558 | License will continue to apply to the part which is the covered work, 559 | but the special requirements of the GNU Affero General Public License, 560 | section 13, concerning interaction through a network will apply to the 561 | combination as such. 562 | 563 | 14. Revised Versions of this License. 564 | 565 | The Free Software Foundation may publish revised and/or new versions of 566 | the GNU General Public License from time to time. Such new versions will 567 | be similar in spirit to the present version, but may differ in detail to 568 | address new problems or concerns. 569 | 570 | Each version is given a distinguishing version number. If the 571 | Program specifies that a certain numbered version of the GNU General 572 | Public License "or any later version" applies to it, you have the 573 | option of following the terms and conditions either of that numbered 574 | version or of any later version published by the Free Software 575 | Foundation. If the Program does not specify a version number of the 576 | GNU General Public License, you may choose any version ever published 577 | by the Free Software Foundation. 578 | 579 | If the Program specifies that a proxy can decide which future 580 | versions of the GNU General Public License can be used, that proxy's 581 | public statement of acceptance of a version permanently authorizes you 582 | to choose that version for the Program. 583 | 584 | Later license versions may give you additional or different 585 | permissions. However, no additional obligations are imposed on any 586 | author or copyright holder as a result of your choosing to follow a 587 | later version. 588 | 589 | 15. Disclaimer of Warranty. 590 | 591 | THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY 592 | APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT 593 | HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY 594 | OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, 595 | THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 596 | PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM 597 | IS WITH YOU. SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF 598 | ALL NECESSARY SERVICING, REPAIR OR CORRECTION. 599 | 600 | 16. Limitation of Liability. 601 | 602 | IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING 603 | WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS 604 | THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY 605 | GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE 606 | USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF 607 | DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD 608 | PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS), 609 | EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF 610 | SUCH DAMAGES. 611 | 612 | 17. Interpretation of Sections 15 and 16. 613 | 614 | If the disclaimer of warranty and limitation of liability provided 615 | above cannot be given local legal effect according to their terms, 616 | reviewing courts shall apply local law that most closely approximates 617 | an absolute waiver of all civil liability in connection with the 618 | Program, unless a warranty or assumption of liability accompanies a 619 | copy of the Program in return for a fee. 620 | 621 | END OF TERMS AND CONDITIONS 622 | 623 | How to Apply These Terms to Your New Programs 624 | 625 | If you develop a new program, and you want it to be of the greatest 626 | possible use to the public, the best way to achieve this is to make it 627 | free software which everyone can redistribute and change under these terms. 628 | 629 | To do so, attach the following notices to the program. It is safest 630 | to attach them to the start of each source file to most effectively 631 | state the exclusion of warranty; and each file should have at least 632 | the "copyright" line and a pointer to where the full notice is found. 633 | 634 | 635 | Copyright (C) 636 | 637 | This program is free software: you can redistribute it and/or modify 638 | it under the terms of the GNU General Public License as published by 639 | the Free Software Foundation, either version 3 of the License, or 640 | (at your option) any later version. 641 | 642 | This program is distributed in the hope that it will be useful, 643 | but WITHOUT ANY WARRANTY; without even the implied warranty of 644 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 645 | GNU General Public License for more details. 646 | 647 | You should have received a copy of the GNU General Public License 648 | along with this program. If not, see . 649 | 650 | Also add information on how to contact you by electronic and paper mail. 651 | 652 | If the program does terminal interaction, make it output a short 653 | notice like this when it starts in an interactive mode: 654 | 655 | Copyright (C) 656 | This program comes with ABSOLUTELY NO WARRANTY; for details type `show w'. 657 | This is free software, and you are welcome to redistribute it 658 | under certain conditions; type `show c' for details. 659 | 660 | The hypothetical commands `show w' and `show c' should show the appropriate 661 | parts of the General Public License. Of course, your program's commands 662 | might be different; for a GUI interface, you would use an "about box". 663 | 664 | You should also get your employer (if you work as a programmer) or school, 665 | if any, to sign a "copyright disclaimer" for the program, if necessary. 666 | For more information on this, and how to apply and follow the GNU GPL, see 667 | . 668 | 669 | The GNU General Public License does not permit incorporating your program 670 | into proprietary programs. If your program is a subroutine library, you 671 | may consider it more useful to permit linking proprietary applications with 672 | the library. If this is what you want to do, use the GNU Lesser General 673 | Public License instead of this License. But first, please read 674 | . 675 | -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # nextcloud_scripts 2 | 3 | ---- 4 | 5 | * for Apache A+ SSL configuration check https://gist.github.com/GAS85/42a5469b32659a0aecc60fa2d4990308 6 | * for Apache HTTP2 enablement check https://gist.github.com/GAS85/8dadbcb3c9a7ecbcb6705530c1252831 7 | 8 | ---- 9 | 10 | ## Quick overview 11 | 12 | * [nextcloud-configuration.conf](#configuration) - Central place for configuration. 13 | 14 | ---- 15 | 16 | * [nextcloud-auditlog](#nextcloud-auditlog) - Perform Audit log analyze for a given time and output in cacti format 17 | * [nextcloud-av-notification](#nextcloud-av-notification) - Perform nextcloud log analyze and send notification to any user 18 | * [nextcloud-duplicates-tagger](#nextcloud-duplicates-tagger) - Will find all duplicates in user folder and tag them with any needed tag. 19 | * [nextcloud-file-sync](#nextcloud-file-sync) - Do External Shares rescan only 20 | * [nextcloud-gotify-activity](#nextcloud-gotify-activity) - Read Nextcloud Activity RSS and push updates to Gotify. 21 | * [nextcloud-gotify-notifications](#nextcloud-gotify-notifications) - Read Nextcloud Notifications and push or sync them to Gotify. 22 | * [nextcloud-hardlink-duplicates](#nextcloud-hardlink-duplicates) - Will create hard links to duplicated file together with [rdfind](https://github.com/pauldreik/rdfind). 23 | * [nextcloud-preview](#nextcloud-preview) - Automate preview generation 24 | * [nextcloud-rsync-to-remote](#nextcloud-rsync-to-remote) - Do data Folder rsync to remote via SSH with key Authentication, or into archive 25 | * [nextcloud-system-notification](#nextcloud-system-notification) - Get System Notifications into Nextcloud 26 | * [nextcloud-usage-report](#nextcloud-usage-report) - Generate report in cacti format 27 | 28 | ---- 29 | 30 | * [Nextcloud Talk Bots](#nextcloud-talk-bots) 31 | * [nextcloud-bot-links-list](#nextcloud-bot-links-list) - List for a Links Nextcloud Talk bot 32 | * [nextcloud-bot-links](#nextcloud-bot-links) - Links Nextcloud Talk bot 33 | * [nextcloud-bot-rate-1-10](#nextcloud-bot-rate-1-10) - Nextcloud Talk bot to generate simple 1 to 10 rate 34 | * [nextcloud-bot-pass](#nextcloud-bot-pass) - Nextcloud Talk bot to generate random password 35 | 36 | ## Installation 37 | 38 | 1. Download 39 | 2. Extract 40 | 3. Make executable 41 | 4. Move to your custom folder 42 | 5. Use it 43 | 44 | ```bash 45 | wget https://git.sitnikov.ga/gas/nextcloud_scripts/archive/master.zip 46 | unzip master.zip 47 | cd nextcloud_scripts 48 | chmod +x *.sh 49 | mv *.sh /usr/local/bin/ 50 | mv nextcloud-bot-links-list /usr/local/bin/nextcloud-bot-links-list 51 | mv ./etc/nextcloud-scripts-config.conf /etc/nextcloud-scripts-config.conf 52 | ``` 53 | 54 | Run it under _nextcloud user_ (for me it is www-data). 55 | 56 | ## Configuration 57 | 58 | `nextcloud-scripts-config.conf` is a central configuration file, very handy if you are using more than one script from this bunch. Options are: 59 | 60 | * Your NC OCC Command path e.g. `Command=/var/www/nextcloud/occ` 61 | * Your NC log file path e.g. `LogFile=/var/www/nextcloud/data/nextcloud.log` 62 | * Your log file path for other output if needed e.g. `CronLogFile=/var/log/nextvloud-cron.log` 63 | * Your PHP location if different from default e.g. `PHP=/usr/bin/php` 64 | 65 | ## Scripts 66 | 67 | ### nextcloud-auditlog 68 | 69 | Perform Audit log analyze for a given time and output in cacti format. "Auditing / Logging" App must be enabled. 70 | Example: 71 | 72 | ```bash 73 | sudo -u www-data /var/www/cacti/scripts/nextcloud_auditlog.sh -n 74 | Login_UnknownUser:6 FileAccess_UnknownUser:0 FileWritten_UnknownUser:0 FileCreated_UnknownUser:0 FileDeleted_UnknownUser:0 New_Share_UnknownUser:0 Share_access_UnknownUser:0 Preview_access_UnknownUser:0 75 | ``` 76 | 77 | ```bash 78 | Syntax is nextcloud-auditlog.sh -h?Hv 79 | 80 | -h, or ? for this help 81 | -H will generate Human output 82 | -c will generate clean output with only valid data 83 | -n will generate information about nonregistered users, e.g. CLI User, or user trying to login with wrong name, etc. 84 | will generate output only for a particular user. Default - all users will be fetched from the nextcloud 85 | ``` 86 | 87 | **TODO** Adjust for common config file and set limit to the users amount. 88 | 89 | ### nextcloud-av-notification 90 | 91 | If you have antivirus installed, then try it. Perform `nextcloud.log` analyze and send notification to any user. Made to avoid [this Issue](https://github.com/nextcloud/files_antivirus/issues/152). 92 | 93 | ### nextcloud-duplicates-tagger 94 | 95 | This script will search all duplicates in user folder and tag them with corresponding tag. 96 | Configuration: 97 | 98 | `tagName=duplicate` Tag Name to set on duplicates. Should be exist in system (at least 1 file being tagged with this tag) 99 | 100 | `NextcloudURL="https://yourFQDN/nextcloud"` Nextcloud URL to perform API calls 101 | 102 | `User="user"` Username 103 | 104 | `password="xxxxx-xxxxx-xxxxxx"` Password, please create application password under .../index.php/settings/user/security 105 | 106 | `LogLvL=Info` Log Level could be: `none`|`Info` 107 | 108 | `NextCloudPath=/var/www/nextcloud` Path to nextcloud Folder. Data folder will be retrieved automatically from the config file. 109 | 110 | ### nextcloud-file-sync 111 | 112 | Performs External Shares re-scan only that will save a lot of time in compare to scan whole nextcloud. Basically, it works out from the box. Only that you must check you nextcloud path, log path and create a log file for `php occ` output. 113 | Will do external ONLY shares re-scan for nextcloud. 114 | 115 | Run it under _nextcloud user_ (for me it is www-data) basically twice per day at 2:30 and 14:30. You can run it also hourly. This is my cron config (for more cron examples, please refer to [man pages](http://manpages.ubuntu.com/manpages/focal/en/man5/crontab.5.html)): 116 | 117 | ```bash 118 | 30 2,14 * * * perl -e 'sleep int(rand(1800))' && /usr/local/bin/nextcloud-file-sync.sh #Nextcloud file sync 119 | ``` 120 | 121 | Here I add _perl -e 'sleep int(rand(1800))'_ to inject some random start time within 30 Minutes, but since it scans externals only it is not necessary anymore. Your cron job config to run it hourly could be simple: 122 | 123 | ```bash 124 | @hourly /usr/local/bin/nextcloud-file-sync.sh 125 | ``` 126 | 127 | _If you would like to perform WHOLE nextcloud re-scan, please add -all to command, e.g.:_ 128 | 129 | ```bash 130 | sudo -u www-data ./nextcloud-file-sync.sh -all 131 | ``` 132 | 133 | Will generate NC log output: 134 | ![Nextcloud Log entry example](./img/nextcloud_log.png) 135 | 136 | I have had some issues (like described here https://help.nextcloud.com/t/occ-files-cleanup-does-it-delete-the-db-table-entries-of-the-missing-files/20253) in older NC versions, so I added workaround from line 60 till 67 as `files:cleanup` command, nut sure if it is needed now, but it does not harm anything. 137 | 138 | ### nextcloud-gotify-activity 139 | 140 | This script will read Nextcloud Activity RSS via API call and push them to [Gotify server](https://github.com/gotify/server). If you do not see any new activities, try to delete lock file, specified in `LOCKFILE` 141 | 142 | Please create Application password for this script. 143 | 144 | ![Gotify Activity Screenshot](./img/Gotify_activity.png) 145 | 146 | ### nextcloud-gotify-notifications 147 | 148 | This script will read Nextcloud Notifications via API call and push them to [Gotify server](https://github.com/gotify/server). If you do not see any notifications, try to delete lock file, specified in `LOCKFILE` 149 | 150 | Please create Application password for this script. 151 | 152 | In Gotify Server you have to create an Application and provide API Token to script. 153 | 154 | There are 2 modes: `push` and `sync`. 155 | 156 | * In case of `push` Notifications from Nextcloud will be pushed to Gotify if you delete notification in Nextcloud or Gotify there will be no reaction. 157 | * In case of `sync` you will have synced notifications stage between both Nextcloud and Gotify, Notification delete in Gotify will cause deletion of this Notification in Nextcloud and opposite. 158 | In Gotify Server you must create a Client Token and provide it to script additionally. 159 | 160 | ![Gotify Notifications Screenshot](./img/Gotify_notifications.png) 161 | 162 | ### nextcloud-hardlink-duplicates 163 | 164 | In order to reduce HDD space being used, this script will create hardlinks to duplicated files together with [rdfind](https://github.com/pauldreik/rdfind). 165 | 166 | ### nextcloud-preview 167 | 168 | This script avoids parallel Preview Jobs and write execution time to the logs. 169 | 170 | Since last update, Application will detect if it is already run and will not be executed [twice/parallel](https://help.nextcloud.com/t/clarity-on-the-crontab-settings-for-the-preview-generator-app/6144/54), so you can add it e.g. to execute each 20 Minutes as cron job directly. **This means that `nextcloud-preview.sh` is not needed anymore**, _only make sense if you would like to have execution information directly in nextcloud logs_. 171 | 172 | Will generate NC log output: 173 | 174 | ![Nextcloud Log output example](./img/nextcloud_log.png) 175 | 176 | ### nextcloud-rsync-to-remote 177 | 178 | This script will do backup of Nextcloud folders via RSYNC to remote machine with SSH Key authentication. You can edit key `--exclude=FolderToExclude` to exclude folders such as: 179 | 180 | * `data/appdata*/preview` exclude Previews - they could be newly generated, 181 | * `data/*/files_trashbin/` exclude users trash-bins, 182 | * `data/*/files_versions/` exclude users files Versions, 183 | * `data/updater*` exclude updater backups and downloads, 184 | * `*.ocTransferId*.part` exclude partly uploaded data from backup. 185 | 186 | Or you can even combine and do rsync into archive (with remote authentication via SSH Key) if you set `CompressToArchive=true`. 187 | 188 | ### nextcloud-system-notification 189 | 190 | As per [this](https://help.nextcloud.com/t/howto-get-notifications-for-system-updates/10299) tread I added simple script that will do check if updates or reboot is required and show it as NC notification. Works on Ubuntu 16.04+. 191 | 192 | ![Nextcloud Notification Example](./img/nextcloud_notificaion.png) 193 | 194 | You only must specify user from the Administrator group to get notifications via `USER="admin"` 195 | 196 | ### nextcloud-usage-report 197 | 198 | This script works with https://apps.nextcloud.com/apps/user_usage_report 199 | 200 | Will generate report and output it in cacti format. Supports Argument as _"user"_ if you need to check statistic for one user only run `./nextcloud-usage_report.sh user` to get specific user information. 201 | AS-IS without any warranty. Output fields are: 202 | 203 | ```bash 204 | storage_all, storage_used, shares_new, files_all, files_new, files_read 205 | ``` 206 | 207 | ## Nextcloud Talk Bots 208 | 209 | ### nextcloud-bot-links 210 | 211 | This script work as a Talk Chat bot. Will return you useful links specified in `nextcloud-links-list`. 212 | To add bot simply execute: 213 | 214 | ```bash 215 | sudo -u www-data php /var/www/nextcloud/occ talk:command:add links links "/usr/local/bin/nextcloud-bot-links.sh {ARGUMENTS} {USER}" 2 3 216 | ``` 217 | 218 | More information about is under https://nextcloud-talk.readthedocs.io/en/latest/commands/ 219 | 220 | In a code, please specify absolute link to the `nextcloud-links-list` as `list`, e.g.: 221 | 222 | ```bash 223 | list="/usr/local/bin/nextcloud_links_list" 224 | ``` 225 | 226 | Output example: 227 | 228 | ```bash 229 | /links git 230 | Hey, here is something useful for you: 231 | Your git is under https://domain/git 232 | ``` 233 | 234 | Known Bug/Feature: it will return all lines with matched words, e.g. if you are typing `/links Your`, you will get whole list from example below. 235 | 236 | ### nextcloud-bot-links-list 237 | 238 | This is a list of useful Links or other Info for a Talk Chat bot. Simply one line per output. E.g.: 239 | 240 | ```markdown 241 | Your wiki is under https://domain/wiki 242 | Your git is under https://domain/git 243 | Your notes are under https://domain/index.php/apps/notes 244 | ``` 245 | 246 | Basically, you can put in this list whatever to be shown as one line per request. 247 | 248 | ### nextcloud-bot-rate-1-10 249 | 250 | This script work as a Talk Chat bot. Will return you (girls) rate from 1 till 10. 251 | To add bot simply execute: 252 | 253 | ```bash 254 | sudo -u www-data php /var/www/nextcloud/occ talk:command:add rate rate "/usr/local/bin/nextcloud-bot-rate-1-10.sh {ARGUMENTS}" 2 3 255 | ``` 256 | 257 | More information about is under https://nextcloud-talk.readthedocs.io/en/latest/commands/ 258 | 259 | Output example: 260 | 261 | ```bash 262 | /rate 263 | 9 264 | ``` 265 | 266 | ### nextcloud-bot-pass 267 | 268 | This script work as a Talk Chat bot. Will return you random generated 16 (or any length) Characters password. 269 | To add bot simply execute: 270 | 271 | ```bash 272 | sudo -u www-data php /var/www/nextcloud/occ talk:command:add pass pass "/usr/local/bin/nextcloud-bot-pass.sh {ARGUMENTS}" 1 3 273 | ``` 274 | 275 | Please make sure that you put 1 as `response` argument, this will ensure that only requester can see the output. For more information, please follow https://nextcloud-talk.readthedocs.io/en/latest/commands/ 276 | 277 | Output example: 278 | 279 | ```bash 280 | /pass 20 281 | Generated with Urandom 282 | tC1qPQpYJNesjl3BLRFC 283 | Generated with OpenSSL 284 | paRbAxtcU8+w6aN/SBF3 285 | Generated with Bash random 286 | 3G5DAqyUeaN!Ewx0HqjO 287 | ``` 288 | -------------------------------------------------------------------------------- /etc/nextcloud-scripts-config.conf: -------------------------------------------------------------------------------- 1 | # By Georgiy Sitnikov. 2 | # 3 | # AS-IS without any warranty 4 | 5 | # Adjust to your NC installation 6 | # Your NC OCC Command path 7 | Command=/var/www/nextcloud/occ 8 | 9 | # Your NC Path, usually is folder where occ is located 10 | NextCloudPath="$(echo $Command | sed 's/occ//g')" 11 | 12 | # Your NC log file path 13 | LogFile=/var/www/nextcloud/data/nextcloud.log 14 | 15 | # Your log file path for other output if needed 16 | CronLogFile=/var/log/nextcloud-cron.log 17 | 18 | # Your PHP location if different from default 19 | PHP=/usr/bin/php 20 | 21 | ### For Nextcloud - Gotify Sync 22 | 23 | # Nextcloud Domain without prefix 24 | NextCloudDomain="cloud.domain.net" 25 | # Nextcloud User 26 | NextCloudUser=user 27 | # Nextcloud Password 28 | NextCloudPassword="1234567" 29 | 30 | # Gotify URL 31 | GotifyDomain="domain.net/gotify" 32 | # Gotify Application Token 33 | GotifyApplicationToken="1234" 34 | # Gotify Application ID 35 | GotifyApplicationId=4 36 | # Gotify Client Token 37 | GotifyClientToken="56789" 38 | 39 | # Mode could be "push" and "sync". In case of sync you, have to create and provide Gotify Client Token. 40 | NotificationsSyncMode=push 41 | #NotificationsSyncMode=sync -------------------------------------------------------------------------------- /img/Gotify_activity.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GAS85/nextcloud_scripts/a1dc048f8b552ef34dbe301a28c8fffd484be046/img/Gotify_activity.png -------------------------------------------------------------------------------- /img/Gotify_notifications.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GAS85/nextcloud_scripts/a1dc048f8b552ef34dbe301a28c8fffd484be046/img/Gotify_notifications.png -------------------------------------------------------------------------------- /img/nextcloud_log.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GAS85/nextcloud_scripts/a1dc048f8b552ef34dbe301a28c8fffd484be046/img/nextcloud_log.png -------------------------------------------------------------------------------- /img/nextcloud_notificaion.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/GAS85/nextcloud_scripts/a1dc048f8b552ef34dbe301a28c8fffd484be046/img/nextcloud_notificaion.png -------------------------------------------------------------------------------- /nextcloud-auditlog.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | 7 | NextCloudPath=/var/www/nextcloud 8 | 9 | knownUsersList= 10 | 11 | lastMinutes=5 12 | 13 | #LogFilePath=/var/www/nextcloud/data/audit.log 14 | 15 | tempfile=/tmp/nextcloud_auditlog_$(date +"%M-%N").tmp 16 | 17 | CentralConfigFile="/etc/nextcloud-scripts-config.conf" 18 | 19 | if [ -f "$CentralConfigFile" ]; then 20 | 21 | . $CentralConfigFile 22 | 23 | fi 24 | 25 | show_help () { 26 | 27 | echo "This script will fetch data from the Nextcloud audit.log and make it Human or Cacti readable. 28 | Syntax is nextcloud-auditlog.sh -h?Hcan 29 | 30 | -h, or ? for this help 31 | -H will generate Human output 32 | -c will generate clean output with only valid data 33 | -a will generate summary over all users 34 | -n will generate information about non registered users, e.g. CLI User, or user trying to login with wrong name, etc. 35 | will generate output only for a particular user. Default - all users will be fetched from the nextcloud 36 | 37 | By Georgiy Sitnikov." 38 | 39 | } 40 | 41 | fetchLog () { 42 | 43 | awk -v d1=$dateFrom -v d2=$dateTo -F'["]' '$10 > d1 && $10 < d2 || $10 ~ d2' "$LogFile" > $tempfile 44 | 45 | } 46 | 47 | createOutput () { 48 | 49 | if [ "$overallUsers" = 1 ]; then 50 | 51 | echo "Login:$(grep "Login" $tempfile | uniq | wc -l)" >> $tempfile.output 52 | echo "FileAccess:$(grep "File accessed" $tempfile | wc -l)" >> $tempfile.output 53 | echo "FileWritten:$(grep "File written" $tempfile | wc -l)" >> $tempfile.output 54 | echo "FileCreated:$(grep "File created" $tempfile | wc -l)" >> $tempfile.output 55 | echo "FileDeleted:$(grep "was deleted" $tempfile | wc -l)" >> $tempfile.output 56 | echo "New_Share:$(grep "has been shared" $tempfile | wc -l)" >> $tempfile.output 57 | echo "Share_access:$(grep "has been accessed" $tempfile | wc -l)" >> $tempfile.output 58 | echo "Preview_access:$(grep "Preview accessed" $tempfile | wc -l)" >> $tempfile.output 59 | 60 | else 61 | 62 | echo "Login_$User:$(grep '"user":"'"$User" $tempfile | grep "Login" | uniq | wc -l)" >> $tempfile.output 63 | echo "FileAccess_$User:$(grep '"user":"'"$User" $tempfile | grep "File accessed" | wc -l)" >> $tempfile.output 64 | echo "FileWritten_$User:$(grep '"user":"'"$User" $tempfile | grep "File written" | wc -l)" >> $tempfile.output 65 | echo "FileCreated_$User:$(grep '"user":"'"$User" $tempfile | grep "File created" | wc -l)" >> $tempfile.output 66 | echo "FileDeleted_$User:$(grep '"user":"'"$User" $tempfile | grep "was deleted" | wc -l)" >> $tempfile.output 67 | echo "New_Share_$User:$(grep '"user":"'"$User" $tempfile | grep "has been shared" | wc -l)" >> $tempfile.output 68 | echo "Share_access_$User:$(grep '"user":"'"$User" $tempfile | grep "has been accessed" | wc -l)" >> $tempfile.output 69 | echo "Preview_access_$User:$(grep '"user":"'"$User" $tempfile | grep "Preview accessed" | wc -l)" >> $tempfile.output 70 | 71 | fi 72 | 73 | cleanOutput 74 | 75 | } 76 | 77 | cleanOutput () { 78 | 79 | [[ "$clean" = 1 ]] && sed -i '/:0/d' $tempfile.output 80 | 81 | [[ "$human" = 1 ]] && echo "" && echo "For a user $User:" && grep "$User" $tempfile.output | sed 's/user":"--/UnknownUser/g' 82 | 83 | } 84 | 85 | customUser=$1 86 | 87 | while getopts "h?Hcan" opt; do 88 | case "$opt" in 89 | h|\?) 90 | show_help 91 | exit 0 92 | ;; 93 | H) 94 | human=1 95 | customUser=$2 96 | ;; 97 | c) 98 | clean=1 99 | customUser=$2 100 | ;; 101 | a) 102 | overallUsers=1 103 | customUser="ToDelete" 104 | ;; 105 | n) 106 | notUser=1 107 | customUser='user":"--' 108 | ;; 109 | esac 110 | done 111 | 112 | # Options check 113 | if [ "$overallUsers" = 1 ] && [ "$clean" = 1 ]; then 114 | 115 | customUser="ToDelete" 116 | 117 | fi 118 | 119 | if [ "$overallUsers" = 1 ] && [ "$notUser" = 1 ]; then 120 | 121 | echo "Sorry, but -a and -n options could not be combined." 122 | exit 0 123 | 124 | fi 125 | 126 | # Check if config.php exist 127 | [[ -r "$NextCloudPath"/config/config.php ]] || { echo >&2 "Error - config.php could not be read under "$NextCloudPath"/config/config.php. Please check the path and permissions"; exit 1; } 128 | 129 | # Fetch data directory place from the config file 130 | DataDirectory=$(grep datadirectory "$NextCloudPath"/config/config.php | cut -d "'" -f4) 131 | 132 | if [ "$LogFilePath" = "" ]; then 133 | 134 | LogFile=$DataDirectory/audit.log 135 | 136 | else 137 | 138 | LogFile=$LogFilePath 139 | 140 | fi 141 | 142 | [[ -r "$LogFile" ]] || { echo >&2 "Error - audit.log could not be found under "$LogFile"."; exit 1; } 143 | 144 | # Check if OCC is reachable 145 | if [ ! -w "$NextCloudPath/occ" ]; then 146 | 147 | echo "ERROR - Command $NextCloudPath/occ not found. Make sure that path is correct." 148 | exit 1 149 | 150 | else 151 | 152 | if [ "$EUID" -ne "$(stat -c %u $NextCloudPath/occ)" ]; then 153 | 154 | echo "ERROR - Command $NextCloudPath/occ not executable for current user. 155 | Make sure that user has right to execute it. 156 | Script must be executed as $(stat -c %U $NextCloudPath/occ)." 157 | 158 | exit 1 159 | 160 | fi 161 | 162 | fi 163 | 164 | # Get All Users List. 165 | if [ "$overallUsers" != 1 ] && [ "$notUser" != 1 ]; then 166 | 167 | php $NextCloudPath/occ user:list | awk -F'[ ]' '{print $4}' | sed 's/://g' > $tempfile.list 168 | 169 | [[ "$human" = 1 ]] && echo "Getting All Users List:" 170 | 171 | [[ "$human" = 1 ]] && cat "$tempfile.list" 172 | 173 | # Validate User if set 174 | if [ "$customUser" != "" ] && [ "$notUser" != 1 ]; then 175 | 176 | userValidation=$(grep "$customUser" $tempfile.list) 177 | 178 | if [ "$userValidation" = "" ]; then 179 | 180 | echo "User: $customUser not found on Nextcloud" 181 | exit 1 182 | 183 | else 184 | 185 | [[ "$human" = 1 ]] && echo "$customUser is valid Nextcloud user" 186 | 187 | fi 188 | 189 | fi 190 | 191 | fi 192 | # Fetch date and time and time shift 193 | getCurrentTimeZone=$(date +"%:::z") 194 | 195 | [[ "$human" = 1 ]] && echo "" && echo "Current Time Zone is $getCurrentTimeZone" 196 | 197 | getCurrentTimeZone="${getCurrentTimeZone:1}" 198 | 199 | timeShiftTo=$((60 * $getCurrentTimeZone)) 200 | timeShiftFrom=$((60 * $getCurrentTimeZone + $lastMinutes)) 201 | 202 | dateFrom=$(date --date="-$timeShiftFrom min" "+%Y-%m-%dT%H:%M:00+00:00") 203 | dateTo=$(date --date="-$timeShiftTo min" "+%Y-%m-%dT%H:%M:00+00:00") 204 | 205 | [[ "$human" = 1 ]] && echo "Will evaluate log between $dateFrom and $dateTo" 206 | 207 | # Extract logs for a last defined minutes 208 | if [ "$customUser" = "" ]; then 209 | 210 | if [ "$overallUsers" = 1 ]; then 211 | 212 | User=$customUser 213 | fetchLog 214 | createOutput | sed 's/_ToDelete//g' 215 | 216 | else 217 | 218 | fetchLog 219 | 220 | while IFS='' read -r User || [[ -n "$User" ]]; do 221 | 222 | createOutput 223 | 224 | done < $tempfile.list 225 | 226 | #allUsers=$(cat $tempfile.list | tr '\n' '|' | sed '$ s/.$//') 227 | #echo "Login_OTHERS:$(grep -vE "$allUsers" "$tempfile" | grep "Login" | wc -l)" >> $tempfile.output 228 | 229 | User='user":"--' 230 | createOutput 231 | 232 | fi 233 | 234 | #[[ "$human" = 1 ]] && echo "" && echo "For a other users:" && cat $tempfile.output | sed 's/'$User'/UnknownUser/g' 235 | 236 | [[ "$human" = 1 ]] || cat $tempfile.output | tr '\n' ' ' | sed 's/'$User'/UnknownUser/g' 237 | 238 | else 239 | 240 | User=$customUser 241 | fetchLog | grep '"user":"'"$customUser" > $tempfile.output 242 | createOutput | sed 's/_'$User'//g' 243 | 244 | if [ "$human" != 1 ]; then 245 | 246 | [[ "$notUser" != 1 ]] && cat $tempfile.output | tr '\n' ' ' | sed 's/_'$User'//g' 247 | [[ "$notUser" = 1 ]] && cat $tempfile.output | tr '\n' ' ' | sed 's/_'$User'/_UnknownUser/g' 248 | 249 | fi 250 | 251 | fi 252 | 253 | [[ -e "$tempfile" ]] && rm $tempfile 254 | [[ -e "$tempfile.list" ]] && rm $tempfile.list 255 | [[ -e "$tempfile.output" ]] && rm $tempfile.output 256 | 257 | exit 0 258 | -------------------------------------------------------------------------------- /nextcloud-av-notification.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | 7 | # Administrator User to notify 8 | USER="admin" 9 | 10 | NextCloudPath=/var/www/nextcloud 11 | 12 | # Last minutes to grep the logs, should be in same as cron job period 13 | lastMinutes=30 14 | 15 | ### 16 | 17 | tempfile=/tmp/nextcloud_av_notifications-$(date +"%M-%N").tmp 18 | 19 | # Check if config.php exist 20 | [[ -r "$NextCloudPath"/config/config.php ]] || { echo >&2 "Error - config.php could not be read under "$NextCloudPath"/config/config.php. Please check the path and permissions"; exit 1; } 21 | 22 | # Fetch data directory place from the config file 23 | DataDirectory=$(grep datadirectory "$NextCloudPath"/config/config.php | cut -d "'" -f4) 24 | 25 | # Check if audit.log exist 26 | LogFilePath=$(grep logfile "$NextCloudPath"/config/config.php | cut -d "'" -f4) 27 | if [ LogFilePath = "" ]; then 28 | LogFile=$DataDirectory/nextcloud.log 29 | else 30 | LogFile=$LogFilePath 31 | fi 32 | [[ -r "$LogFile" ]] || { echo >&2 "Error - nextcloud.log could not be found under "$LogFile"."; exit 1; } 33 | 34 | # Check if OCC is reachable 35 | if [ ! -w "$NextCloudPath/occ" ]; then 36 | echo "ERROR - Command $NextCloudPath/occ not found. Make sure that path is correct." 37 | exit 1 38 | else 39 | if [ "$EUID" -ne "$(stat -c %u $NextCloudPath/occ)" ]; then 40 | echo "ERROR - Command $NextCloudPath/occ not executable for current user. 41 | Make sure that user has right to execute it. 42 | Script must be executed as $(stat -c %U $NextCloudPath/occ)." 43 | exit 1 44 | fi 45 | fi 46 | 47 | # Fetch date and time and time shift 48 | getCurrentTimeZone=$(date +"%:::z") 49 | getCurrentTimeZone="${getCurrentTimeZone:1}" 50 | 51 | timeShiftTo=$((60 * $getCurrentTimeZone)) 52 | timeShiftFrom=$((60 * $getCurrentTimeZone + $lastMinutes)) 53 | 54 | dateFrom=$(date --date="-$timeShiftFrom min" "+%Y-%m-%dT%H:%M:00+00:00") 55 | dateTo=$(date --date="-$timeShiftTo min" "+%Y-%m-%dT%H:%M:00+00:00") 56 | 57 | # Extract logs for a last defined minutes 58 | awk -v d1="$dateFrom" -v d2="$dateTo" -F'["]' '$10 > d1 && $10 < d2 || $10 ~ d2' "$LogFile" | grep "Infected file" | awk -F'["]' '{print $34}' > $tempfile 59 | 60 | if [ ! -s "$tempfile" ]; then 61 | 62 | # Extract logs for a last defined minutes, from a ROTATED log if present 63 | if [ "$(find "$LogFile.1" -mmin -"$lastMinutes")" != "" ]; then 64 | 65 | awk -v d1="$dateFrom" -v d2="$dateTo" -F'["]' '$10 > d1 && $10 < d2 || $10 ~ d2' "$LogFile.1" | grep "Infected file" | awk -F'["]' '{print $34}' >> $tempfile 66 | 67 | fi 68 | 69 | # Exit if no results found 70 | [[ -s "$tempfile" ]] || { rm $tempfile; exit 0; } 71 | 72 | fi 73 | 74 | generateNotification () { 75 | 76 | php $NextCloudPath/occ notification:generate $USER "Infected File(s) $toFind!" -l "$(cat $tempfile.output | cut -c -4000)" 77 | # cat $tempfile.output | cut -c -4000 78 | 79 | } 80 | 81 | preparingOutput () { 82 | 83 | if [ "$(grep "$toFind" "$tempfile" | wc -l)" -gt 0 ]; then 84 | 85 | #grep "$toFind" "$tempfile" | awk '{$1=""; $2 = ""; $3 = "";$4 = ""; $5 = ""; $6 = ""; print $0}' | awk -F'[/]' '{$1 = ""; $2 = ""; $3 = ""; print $0}' | sed 's/ //g' > $tempfile.output 86 | grep "$toFind" "$tempfile" | awk '{$1=""; $2 = ""; $3 = "";$4 = ""; $5 = ""; $6 = ""; print $0}' | sed -r -e 's/appdata_.{12}//' | sed 's/ //g' > $tempfile.output 87 | 88 | generateNotification 89 | 90 | fi 91 | } 92 | 93 | toFind="found" 94 | preparingOutput 95 | 96 | toFind="deleted" 97 | preparingOutput 98 | 99 | rm $tempfile 100 | rm $tempfile.output 101 | 102 | exit 0 103 | -------------------------------------------------------------------------------- /nextcloud-bot-hex.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | # 7 | # To added to Nextcloud please execute: 8 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add hex hex "/usr/local/bin/nextcloud-bot-hex.sh --hex {ARGUMENTS}" 1 3 9 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add ascii ascii "/usr/local/bin/nextcloud-bot-hex.sh --ascii {ARGUMENTS}" 1 3 10 | # OR 11 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add hex hex "/usr/local/bin/nextcloud-bot-hex.sh {ARGUMENTS}" 1 3 12 | # in This case only 1 command will convert hex2ascii and ascii2hex 13 | # 14 | # More info under https://nextcloud-talk.readthedocs.io/en/latest/commands/ 15 | 16 | length="16" 17 | 18 | while test $# -gt 0; do 19 | case "$1" in 20 | --help) 21 | # in case script was added as 1 command via 22 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add hex hex "/usr/local/bin/nextcloud-bot-hex.sh {ARGUMENTS}" 1 3 23 | echo "/hex - A Nextcloud Talk chat wrapper hex to ASCII and backwards" 24 | echo " " 25 | echo "Simple execution: /hex 0x21" 26 | echo "Complex execution: /hex 0x22.0x5a" 27 | echo "Symbol should start with 0x, Separated by '.' dots, or ' ' spaces." 28 | echo " " 29 | echo "Simple execution: /hex text" 30 | exit 0 31 | ;; 32 | 33 | *) 34 | case "$2" in 35 | --help) 36 | 37 | if [ "$1" = "--hex" ]; then 38 | echo "/hex - A Nextcloud Talk chat wrapper hex to ASCII" 39 | echo " " 40 | echo "for ASCII to hex see /ascii" 41 | echo " " 42 | echo "Simple execution: /hex 0x21" 43 | echo "Complex execution: /hex 0x22.0x5a" 44 | echo "First Symbol should start with 0x, Separated by '.' dots, or ' ' spaces" 45 | exit 0 46 | fi 47 | 48 | if [ "$1" = "--ascii" ]; then 49 | echo "/ascii - A Nextcloud Talk chat wrapper ASCII to hex" 50 | echo " " 51 | echo "for hex to ASCII see /hex" 52 | echo " " 53 | echo "Simple execution: /ascii Letter" 54 | echo "Simple execution: /ascii Some Text" 55 | exit 0 56 | fi 57 | ;; 58 | 59 | *) 60 | break 61 | ;; 62 | esac 63 | esac 64 | done 65 | 66 | hex2ascii () { 67 | 68 | echo "$userInput" 69 | echo "$userInput" | xxd -r 70 | echo 71 | exit 0 72 | 73 | } 74 | 75 | ascii2hex () { 76 | 77 | echo "$userInput" | xxd -g 1 -u 78 | echo 79 | exit 0 80 | 81 | } 82 | 83 | if [ "$1" = "--hex" ]; then 84 | 85 | # Get first 2 Symbols of variable 86 | first="$(echo $2 | head -c 2)" 87 | 88 | if [ "$first" = "0x" ]; then 89 | 90 | userInput="$2" 91 | 92 | else 93 | 94 | userInput="0x$2" 95 | 96 | fi 97 | 98 | hex2ascii 99 | 100 | fi 101 | 102 | if [ "$1" = "--ascii" ]; then 103 | 104 | userInput="$2" 105 | ascii2hex 106 | 107 | fi 108 | 109 | # in case script was added as 1 command via 110 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add hex hex "/usr/local/bin/nextcloud-bot-hex.sh {ARGUMENTS}" 1 3 111 | 112 | # Get first 2 Symbols of variable 113 | first="$(echo $1 | head -c 2)" 114 | 115 | if [ "$first" = "0x" ]; then 116 | 117 | userInput=$(echo "$@" | tr '.' ' ') 118 | hex2ascii 119 | 120 | else 121 | 122 | userInput="$@" 123 | ascii2hex 124 | 125 | fi 126 | 127 | exit 0 128 | -------------------------------------------------------------------------------- /nextcloud-bot-links-list: -------------------------------------------------------------------------------- 1 | Your wiki is under https://wiki.sitnikov.ga 2 | Your git is under https://git.sitnikov.ga 3 | Your notes are under https://cloud.sitnikov.ga/index.php/apps/notes 4 | Your organizer is under https://sitnikov.ga/orga/ 5 | Your cacti is under https://sitnikov.ga/cacti_q1w2e3r4t5/graph_view.php 6 | -------------------------------------------------------------------------------- /nextcloud-bot-links.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | # 7 | # To added to Nextcloud please execute: 8 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add links links "/usr/local/bin/nextcloud_links.sh {ARGUMENTS} {USER}" 2 3 9 | # More info under https://nextcloud-talk.readthedocs.io/en/latest/commands/ 10 | 11 | list="/usr/local/bin/nextcloud-bot-links-list" 12 | 13 | while test $# -gt 0; do 14 | case "$1" in 15 | --help) 16 | echo "/links - A Nextcloud Talk chat wrapper for important links" 17 | echo " " 18 | echo "Simple execution: /links" 19 | echo "Complex execution: /links wiki git" 20 | exit 0 21 | ;; 22 | *) 23 | break 24 | ;; 25 | esac 26 | done 27 | 28 | #Added input Validator 29 | #https://stackoverflow.com/questions/36926999/removing-all-special-characters-from-a-string-in-bash 30 | validInput="$(echo "$1" | sed 's/[^a-z A-Z 0-9]//g')" 31 | if [ "$validInput" = "" ] && [ ! -z "$1" ]; then 32 | echo "Seems you use only Special Characters, currently only a-z, A-Z and digits are supported" 33 | exit 0 34 | fi 35 | 36 | echo "Hey, "$2" here is something useful for you:" 37 | if [ "$validInput" = "" ]; then 38 | #will display whole list because nothing specified 39 | cat "$list" 40 | else 41 | #Check if multiple words are separated by spaces 42 | case "$validInput" in 43 | *\ * ) 44 | multipleInput=$(echo "$validInput" | tr ' ' '|') 45 | #will display exact multiple match, or an error message 46 | if ! grep -E "$multipleInput" "$list"; then 47 | echo "Hmmm, nothing was found" 48 | fi 49 | ;; 50 | *) 51 | #will display exact match, or an error message 52 | if ! grep "$validInput" "$list"; then 53 | echo "Hmmm, nothing was found" 54 | fi 55 | ;; 56 | esac 57 | fi 58 | 59 | exit 0 -------------------------------------------------------------------------------- /nextcloud-bot-pass.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | # 7 | # To added to Nextcloud please execute: 8 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add pass pass "/usr/local/bin/nextcloud-bot-pass.sh {ARGUMENTS}" 1 3 9 | # 10 | # More info under https://nextcloud-talk.readthedocs.io/en/latest/commands/ 11 | 12 | # Default password length 13 | length=20 14 | 15 | ### 16 | 17 | while test $# -gt 0; do 18 | case "$1" in 19 | --help) 20 | echo "/pass - A Nextcloud Talk chat wrapper random pass generation" 21 | echo " " 22 | echo "Simple execution: /pass" 23 | echo "Complex execution to get 8 characters pass: /pass 8" 24 | echo "Default password length is $length" 25 | exit 0 26 | ;; 27 | *) 28 | break 29 | ;; 30 | esac 31 | done 32 | 33 | if [ ! -z "$1" ]; then 34 | length="$1" 35 | 36 | # check if it is a number 37 | # https://stackoverflow.com/questions/806906/how-do-i-test-if-a-variable-is-a-number-in-bash 38 | re='^[0-9]+$' 39 | if ! [[ $length =~ $re ]] ; then 40 | echo "Not a number :(" >&2 41 | exit 1 42 | fi 43 | fi 44 | 45 | # Use urandom if presented 46 | if [ -r "/dev/urandom" ]; then 47 | echo "Generated with Urandom" 48 | < /dev/urandom tr -dc A-Za-z0-9 | head -c"$length" 49 | echo 50 | exit 0 51 | fi 52 | 53 | # Use openssl if presented 54 | if [ -x "/usr/bin/openssl" ]; then 55 | echo "Generated with OpenSSL" 56 | /usr/bin/openssl rand -base64 "$length" | head -c"$length" 57 | echo 58 | exit 0 59 | fi 60 | 61 | # User bash Random if nothing from above presented 62 | # https://stackoverflow.com/questions/26665389/random-password-generator-bash 63 | 64 | echo "Generated with Bash random" 65 | choose() { echo ${1:RANDOM%${#1}:1} $RANDOM; } 66 | 67 | { 68 | choose '!@#$%^\&' 69 | choose '0123456789' 70 | choose 'abcdefghijklmnopqrstuvwxyz' 71 | choose 'ABCDEFGHIJKLMNOPQRSTUVWXYZ' 72 | for i in $( seq 1 "$length" ) 73 | # for i in $( seq 1 $(( 4 + RANDOM % 8 )) ) 74 | do 75 | choose '0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ' 76 | done 77 | 78 | } | sort -R | awk '{printf "%s",$1}' | head -c"$length" 79 | 80 | echo 81 | 82 | exit 0 -------------------------------------------------------------------------------- /nextcloud-bot-rate-1-10.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | # 7 | # To added to Nextcloud please execute: 8 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add rate rate "/usr/local/bin/nextcloud-bot-rate-1-10.sh {ARGUMENTS}" 2 3 9 | # 10 | # More info under https://nextcloud-talk.readthedocs.io/en/latest/commands/ 11 | 12 | while test $# -gt 0; do 13 | case "$1" in 14 | --help) 15 | echo "/rate - A Nextcloud Talk chat wrapper for simple rate from 1 to 10" 16 | echo " " 17 | echo "Simple execution: /rate" 18 | exit 0 19 | ;; 20 | *) 21 | break 22 | ;; 23 | esac 24 | done 25 | 26 | echo $((1 + RANDOM % 10)) 27 | 28 | exit 0 29 | -------------------------------------------------------------------------------- /nextcloud-bot-time.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | # 7 | # To added to Nextcloud please execute: 8 | # sudo -u www-data php /var/www/nextcloud/occ talk:command:add time time "/usr/local/bin/nextcloud-bot-time.sh {ARGUMENTS}" 1 3 9 | # More info under https://nextcloud-talk.readthedocs.io/en/latest/commands/ 10 | 11 | # Maximum Delay for API calls 12 | maxDelay=5 13 | 14 | # Temporary file 15 | temp="/tmp/nextcloud-bot-time-$(date +"%m-%d-%N")" 16 | 17 | ### 18 | 19 | while test $# -gt 0; do 20 | 21 | case "$1" in 22 | 23 | --help) 24 | echo "/time - A Nextcloud Talk chat Time zone wrapper for a https://worldtimeapi.org/timezones API" 25 | echo " " 26 | echo "Simple execution: /time" 27 | echo "will give you current time on the server" 28 | echo " " 29 | echo "Complex execution: /time TomeZone" 30 | echo "E.g: /time Europe/Berlin" 31 | echo " " 32 | echo "You can get a full list of time zones via command:" 33 | echo "/time --list" 34 | echo " " 35 | echo "Or added exact Location to search:" 36 | echo "/time --list Europe" 37 | exit 0 38 | ;; 39 | 40 | *) 41 | 42 | break 43 | 44 | ;; 45 | 46 | esac 47 | 48 | done 49 | 50 | apiCall() { 51 | 52 | if [ -z "$call" ]; then 53 | 54 | curl -s -m $maxDelay "http://worldtimeapi.org/api/timezone.txt" >$temp 55 | 56 | else 57 | 58 | curl -s -m $maxDelay "http://worldtimeapi.org/api/timezone/"$call.txt >$temp 59 | 60 | fi 61 | 62 | } 63 | 64 | APInewTry() { 65 | 66 | newTry=$call 67 | call="" 68 | apiCall 69 | call=$(grep "$newTry" $temp | head -n 1) 70 | 71 | if [ ! -z "$call" ]; then 72 | 73 | echo "Did you mean $call?" 74 | apiCall 75 | echo "Current local time in $call: "$(grep datetime $temp | tail -c33 | head -c10), $(grep datetime $temp | tail -c+21 | head -c8) $(grep abbreviation $temp | tail -c+14) 76 | 77 | fi 78 | 79 | } 80 | 81 | checkForErrors() { 82 | 83 | if [ "$(cat $temp | head -c 5)" = "Error" ]; then 84 | 85 | awk '{ $1 = "Uuups, some error is here:"; print $0 }' $temp 86 | 87 | APInewTry 88 | 89 | echo " " 90 | echo "For help, please, type /time --help" 91 | rm $temp 92 | exit 0 93 | 94 | fi 95 | 96 | # Added check if List returned 97 | if [ "$(grep datetime $temp | tail -c33 | head -c10)" = "" ] && [ "$first" != "--list" ]; then 98 | 99 | APInewTry 100 | rm $temp 101 | exit 0 102 | 103 | fi 104 | 105 | } 106 | 107 | # Get first 6 Symbols of variable 108 | first="$(echo $1 | head -c 6)" 109 | rest="$(echo $1 | tail -c +8)" 110 | 111 | #Added input Validator 112 | #https://stackoverflow.com/questions/36926999/removing-all-special-characters-from-a-string-in-bash 113 | validInput="$(echo "$rest" | sed 's/[^a-z A-Z 0-9]//g')" 114 | if [ "$validInput" = "" ] && [ ! -z "$rest" ]; then 115 | 116 | echo "Seems you use only Special Characters, currently only a-z, A-Z and digits are supported" 117 | exit 0 118 | 119 | fi 120 | 121 | if [ "$first" = "--list" ]; then 122 | 123 | apiCall 124 | checkForErrors 125 | 126 | if [ -z "$validInput" ]; then 127 | 128 | echo "Here you can find whole list of Timezones:" 129 | cat $temp 130 | 131 | else 132 | 133 | echo "Searching for your input in Time zones:" 134 | 135 | #Check if multiple words are separated by spaces 136 | case "$validInput" in 137 | 138 | *\ *) 139 | 140 | multipleInput=$(echo "$validInput" | tr ' ' '|') 141 | #will display exact multiple match, or an error message 142 | if ! grep -E "$multipleInput" "$temp"; then 143 | 144 | echo "Hmmm, nothing was found" 145 | echo "Try /time --list to see all Locations, or /time --help for help" 146 | 147 | fi 148 | 149 | ;; 150 | 151 | *) 152 | 153 | #will display exact match, or an error message 154 | if ! grep "$validInput" "$temp"; then 155 | 156 | echo "Hmmm, nothing was found" 157 | echo "Try /time --list to see all Locations, or /time --help for help" 158 | 159 | fi 160 | 161 | ;; 162 | esac 163 | 164 | fi 165 | 166 | rm $temp 167 | exit 0 168 | 169 | fi 170 | 171 | if [ -z "$1" ]; then 172 | 173 | echo "Current local time: $(date +"%Y-%m-%d"), $(date +"%T") $(date +"%Z")" 174 | exit 0 175 | 176 | fi 177 | 178 | call=$1 179 | apiCall 180 | checkForErrors 181 | 182 | echo "Current local time in $1: "$(grep datetime $temp | tail -c33 | head -c10), $(grep datetime $temp | tail -c+21 | head -c8) $(grep abbreviation $temp | tail -c+14) 183 | 184 | rm $temp 185 | exit 0 186 | -------------------------------------------------------------------------------- /nextcloud-duplicates-tagger.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # AS-IS without any warranty 6 | 7 | # Will search and tag all Duplicated files by user. 8 | 9 | tagName=duplicate 10 | 11 | NextcloudURL="https://yourFQDN/nextcloud" 12 | user="user" 13 | password="xxxxx-xxxxx-xxxxxx" 14 | ignoreCertificate="false" 15 | 16 | # Log Level: none|Info 17 | LogLvL=Info 18 | 19 | # Path to nextcloud 20 | NextCloudPath=/var/www/nextcloud 21 | 22 | ##################### 23 | ### End of Config ### 24 | ##################### 25 | 26 | LOCKFILE=/tmp/nextcloud-duplicates-tagger.tmp 27 | 28 | if [[ "$ignoreCertificate" == "false" ]]; then 29 | 30 | curlOptions=(-s -m 10 -u $user:$password) 31 | 32 | else 33 | 34 | curlOptions=(-s -k -m 10 -u $user:$password) 35 | 36 | fi 37 | 38 | # Check if config.php exist 39 | [[ -r "$NextCloudPath"/config/config.php ]] || { 40 | echo >&2 "[ERROR] config.php could not be read under "$NextCloudPath"/config/config.php. Please check the path and permissions" 41 | exit 1 42 | } 43 | 44 | # Fetch data directory place from the config file 45 | DataDirectory=$(grep datadirectory "$NextCloudPath"/config/config.php | cut -d "'" -f4) 46 | 47 | # Check if user Directory exist 48 | [[ -d "$DataDirectory/$user" ]] || { 49 | echo >&2 "[ERROR] User "$user" could not be found. Please check if case is correct" 50 | exit 1 51 | } 52 | 53 | getFileID() { 54 | 55 | fileid="$(curl $curlOptions ''$NextcloudURL'/remote.php/dav/files/'${user}'/'${fileToTag}'' \ 56 | -X PROPFIND --data ' 57 | 58 | 59 | 60 | 61 | ' | xml_pp | grep "fileid" | sed -n 's/^.*<\(oc:fileid\)>\([^<]*\)<\/.*$/\2/p')" 62 | 63 | [[ "$LogLvL" == "Info" ]] && { echo "[INFO] Searching Nextcloud Internal FileID for $fileToTag"; } 64 | 65 | if [[ -z "$fileid" ]]; then 66 | 67 | echo "[WARNING] File ID could not be found for a "$fileToTag" will skip it." 68 | #exit 1 69 | 70 | else 71 | 72 | [[ "$LogLvL" == "Info" ]] && { echo "[INFO] FileID is $fileid."; } 73 | 74 | fi 75 | 76 | } 77 | 78 | getTag() { 79 | 80 | getAllTags="$(curl $curlOptions ''$NextcloudURL'/remote.php/dav/systemtags/' \ 81 | -X PROPFIND --data ' 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | ' | xml_pp | grep -B 1 -w "$tagName" | head -n 1)" 91 | 92 | if [[ ! -z "$getAllTags" ]]; then 93 | 94 | tagID="$(echo $getAllTags | sed -n 's/^.*<\(oc:id\)>\([^<]*\)<\/.*$/\2/p')" 95 | [[ "$LogLvL" == "Info" ]] && { echo "[INFO] Internal TagID for tag $tagName is $tagID."; } 96 | 97 | else 98 | 99 | echo "[ERROR] Could to find tagID for a tag $tagName. Please check spelling and if tag exist" 100 | exit 1 101 | 102 | fi 103 | 104 | } 105 | 106 | SetTag() { 107 | 108 | curl $curlOptions ''$NextcloudURL'/remote.php/dav/systemtags-relations/files/'$fileid/$tagID \ 109 | -X PUT -H "Content-Type: application/json" \ 110 | --data '{"userVisible":true,\ 111 | "userAssignable":true,\ 112 | "canAssign":true,\ 113 | "id":"'$tag'",\ 114 | "name":"'$tagName'"}' 115 | echo "[PROGRESS] Setting tag $tagName for $fileToTag." 116 | 117 | } 118 | 119 | checkIfTagIsSet() { 120 | 121 | if [[ -z "$fileid" ]]; then 122 | 123 | getAllTags="$(curl $curlOptions ''$NextcloudURL'/remote.php/dav/systemtags-relations/files/'$fileid'' \ 124 | -X PROPFIND --data ' 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | ' | xml_pp | grep -w "$tagName")" 134 | 135 | if [[ ! -z "$getAllTags" ]]; then 136 | 137 | [[ "$LogLvL" == "Info" ]] && { echo "[INFO] Tag $tagName is already set for $fileToTag, skipping."; } 138 | 139 | else 140 | 141 | #echo "[INFO] Tag $tagName is not set" 142 | SetTag 143 | 144 | fi 145 | 146 | fi 147 | 148 | } 149 | 150 | findDuplicates() { 151 | 152 | echo "[PROGRESS] Searching for duplicates, this can take a long time..." 153 | cd $DataDirectory/$user/files/ 154 | 155 | find . ! -empty -type f -exec md5sum {} + | sort | uniq -w32 -dD >>$LOCKFILE 156 | [[ "$LogLvL" == "Info" ]] && { echo "[INFO] Finally finished it is $(wc -l $LOCKFILE | awk '{print $1}') duplicates found"; } 157 | 158 | } 159 | 160 | checkLockFile() { 161 | 162 | if [ -f "$LOCKFILE" ]; then 163 | 164 | # Remove lock file if script fails last time and did not run more than 10 days due to lock file. 165 | echo "[WARNING] - An older Duplicates report found in a $LOCKFILE, 166 | will use it to tag files, it contains $(wc -l $LOCKFILE | awk '{print $1}') duplicates. 167 | If you want to perform new search, please delete this file under: $LOCKFILE 168 | e.g. execute: rm $LOCKFILE 169 | 170 | File will be automatically deleted if older than 10 days. 171 | " 172 | find "$LOCKFILE" -mtime +10 -type f -delete 173 | #exit 1 174 | 175 | fi 176 | 177 | touch $LOCKFILE 178 | 179 | } 180 | 181 | # From https://gist.github.com/cdown/1163649 182 | urlencode() { 183 | 184 | local LANG=C i c e='' 185 | 186 | for ((i = 0; i < ${#1}; i++)); do 187 | 188 | c=${1:$i:1} 189 | [[ "$c" =~ [a-zA-Z0-9\.\~\_\-] ]] || printf -v c '%%%02X' "'$c" 190 | e+="$c" 191 | 192 | done 193 | 194 | # sed here will return slashes back to the path 195 | echo "$e" | sed 's/%2F/\//g' 196 | 197 | } 198 | 199 | # From https://gist.github.com/cdown/1163649 200 | urldecode() { 201 | 202 | # urldecode 203 | 204 | local url_encoded="${1//+/ }" 205 | printf '%b' "${url_encoded//%/\\x}" 206 | 207 | } 208 | 209 | fileToTagPath() { 210 | 211 | urlencode "$(echo $line | cut -c 36-)" 212 | 213 | } 214 | 215 | checkLockFile 216 | 217 | getTag 218 | 219 | # Will use existing Tag report 220 | [[ -s "$LOCKFILE" ]] || { findDuplicates; } 221 | 222 | while read line; do 223 | 224 | # reading each line 225 | 226 | fileToTag=$(fileToTagPath) 227 | 228 | getFileID 229 | 230 | checkIfTagIsSet 231 | 232 | done <$LOCKFILE 233 | 234 | #rm $LOCKFILE 235 | 236 | exit 0 237 | -------------------------------------------------------------------------------- /nextcloud-file-sync.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | # 5 | # Will do external ONLY shares rescan for nextcloud and put execution information in NC log. 6 | # If you would like to perform WHOLE nextcloud rescan, please add --all to command, e.g.: 7 | # ./nextcloud-file-sync.sh --all 8 | # 9 | # AS-IS without any warranty 10 | 11 | # Adjust to your NC installation 12 | # Your NC OCC Command path 13 | Command=/var/www/nextcloud/occ 14 | # Your NC log file path 15 | LogFile=/var/www/nextcloud/data/nextcloud.log 16 | # Your log file path for other output if needed 17 | CronLogFile=/var/log/next-cron.log 18 | # If you want to perform cache cleanup, please change CACHE value to 1 19 | CACHE=0 20 | # Your PHP location 21 | PHP=/usr/bin/php 22 | 23 | CentralConfigFile="/etc/nextcloud-scripts-config.conf" 24 | 25 | if [ -f "$CentralConfigFile" ]; then 26 | 27 | . $CentralConfigFile 28 | 29 | fi 30 | 31 | # Live it like this 32 | OPTIONS="files:scan" 33 | LOCKFILE=/tmp/nextcloud_file_scan 34 | KEY="$1" 35 | SECONDS=0 36 | LvL=1 37 | 38 | if [ -f "$LOCKFILE" ]; then 39 | # Remove lock file if script fails last time and did not run longer than 10 days due to lock file. 40 | find "$LOCKFILE" -mtime +10 -type f -delete 41 | exit 1 42 | fi 43 | 44 | # Check if OCC is reachable 45 | if [ ! -w "$Command" ]; then 46 | echo "ERROR - Command $Command not found. Make sure that path is correct." 47 | exit 1 48 | else 49 | if [ "$EUID" -ne "$(stat -c %u $Command)" ]; then 50 | echo "ERROR - Command $Command not executable for current user. 51 | Make sure that user has right to execute it. 52 | Script must be executed as $(stat -c %U $Command)." 53 | exit 1 54 | fi 55 | fi 56 | 57 | # Fetch data directory and logs place from the config file 58 | ConfigDirectory=$(echo $Command | sed 's/occ//g')/config/config.php 59 | # Check if config.php exist 60 | [[ -r "$ConfigDirectory" ]] || { echo >&2 "Error - config.php could not be read under "$ConfigDirectory". Please check the path and permissions"; exit 1; } 61 | DataDirectory=$(grep datadirectory $ConfigDirectory | cut -d "'" -f4) 62 | LogFilePath=$(grep logfile $ConfigDirectory | cut -d "'" -f4) 63 | if [ “$LogFilePath” = “” ]; then 64 | LogFile=$DataDirectory/nextcloud.log 65 | else 66 | LogFile=$LogFilePath 67 | fi 68 | 69 | # Check if php is executable 70 | if [ ! -x "$PHP" ]; then 71 | echo "ERROR - PHP not found, or not executable." 72 | exit 1 73 | fi 74 | 75 | # Check if NC Log file is writable 76 | if [ ! -w "$LogFile" ]; then 77 | echo "WARNING - could not write to Log file $LogFile, will drop log messages. Is User Correct? Current log file owner is $(stat -c %U $LogFile)" 78 | LogFile=/dev/null 79 | fi 80 | 81 | # Check if CRON Log file is writable 82 | if [ ! -w "$CronLogFile" ]; then 83 | echo "WARNING - could not write to Log file $CronLogFile, will drop log messages. Is User Correct? Current log file owner is $(stat -c %U $CronLogFile)" 84 | CronLogFile=/dev/null 85 | fi 86 | 87 | # Put output to Logfile and Errors to Lockfile as per https://stackoverflow.com/questions/18460186/writing-outputs-to-log-file-and-console 88 | exec 3>&1 1>>${CronLogFile} 2>>${CronLogFile} 89 | 90 | touch $LOCKFILE 91 | 92 | reqId=$(< /dev/urandom tr -dc A-Za-z0-9 | head -c20) 93 | 94 | messageToLog () { 95 | 96 | # ${0##*/} from https://stackoverflow.com/questions/192319/how-do-i-know-the-script-file-name-in-a-bash-script 97 | echo \{\"reqId\":\"$reqId\",\"user\":\"occ\",\"app\":\"${0##*/}\",\"url\":\"$Command $OPTIONS\",\"message\":\"$Message\",\"level\":$LvL,\"time\":\"`date "+%Y-%m-%dT%H:%M:%S%:z"`\"\} >> $LogFile 98 | 99 | } 100 | 101 | Message="+++ Starting Cron File scan +++" 102 | messageToLog 103 | date >> $CronLogFile 104 | 105 | # scan all files of selected users 106 | #$PHP $Command $OPTIONS [user_id] >> $CronLogFile 107 | # e.g. php $Command $OPTIONS user1 >> $CronLogFile 108 | 109 | 110 | # scan all EXTERNAL files of selected users 111 | # how to get mounted externals? --> sudo -u www-data php occ files_external:list | awk -F'|' '{print $8 $3}' 112 | #sudo -u www-data php occ files_external:list | awk -F'|' '{print $8"/files"$3}'| tail -n +4 | head -n -1 | awk '{gsub(/ /, "", $0); print}' 113 | # "user_id/files/path" 114 | # or 115 | # "user_id/files/mount_name" 116 | # or 117 | # "user_id/files/mount_name/path" 118 | 119 | if [ "$KEY" != "--all" ]; then 120 | 121 | # get ALL external mounting points and users 122 | $PHP $Command files_external:list | awk -F'|' '{print $8"/files"$3}'| tail -n +4 | head -n -1 | awk '{gsub(/ /, "", $0); print}' | grep -v "," > $LOCKFILE 123 | # get shares that belongs to more than 1 user 124 | $PHP $Command files_external:list | awk -F'|' '{print $8"/files"$3}'| tail -n +4 | head -n -1 | awk '{gsub(/ /, "", $0); print}' | grep "," | awk -F',' '{print $NF}' >> $LOCKFILE 125 | 126 | # rescan all shares 127 | cat $LOCKFILE | while read line ; do $PHP $Command $OPTIONS --path="$line"; done 128 | 129 | else 130 | 131 | # scan all files of all users (Takes ages) 132 | if [ "$KEY" == "--all" ]; then 133 | 134 | $PHP $Command $OPTIONS --all 135 | 136 | fi 137 | 138 | fi 139 | 140 | duration=$SECONDS 141 | Message="+++ Cron File scan Completed. Execution time: $(($duration / 60)) minutes and $(($duration % 60)) seconds +++" 142 | messageToLog 143 | 144 | # OPTIONAL 145 | ### Start Cache cleanup 146 | 147 | if [ "$CACHE" -eq "1" ]; then 148 | 149 | Message="+++ Starting Cron Files Cache cleanup +++" 150 | messageToLog 151 | SECONDS=0 152 | date >> $CronLogFile 153 | 154 | $PHP $Command files:cleanup >> $CronLogFile 155 | 156 | duration=$SECONDS 157 | Message="+++ Cron Files Cache cleanup Completed. Execution time: $(($duration / 60)) minutes and $(($duration % 60)) seconds +++" 158 | messageToLog 159 | 160 | fi 161 | ### FINISH Cache cleanup 162 | 163 | rm $LOCKFILE 164 | 165 | exit 0 -------------------------------------------------------------------------------- /nextcloud-gotify-activity.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | # By Georgiy Sitnikov. 4 | 5 | # Nextcloud Domain without prefix 6 | NextCloudDomain="cloud.domain.net" 7 | # Nextcloud Activity RSS Token only 8 | NextcloudActivityRssToken="" 9 | ### OR 10 | # Nextcloud Activity RSS Full URL copied from the Nextcloud 11 | NextCloudActivityRssUrl="https://domain/index.php/apps/activity/rss.php?token=123abc" 12 | 13 | # Gotify URL 14 | GotifyDomain="domain.net/gotify" 15 | # Gotify Application Token 16 | GotifyApplicationToken="1234" 17 | 18 | LOCKFILE=/tmp/nextcloud-gotify-activity.lock 19 | 20 | ### END OF CONFIGURATION ### 21 | 22 | CentralConfigFile="/etc/nextcloud-scripts-config.conf" 23 | 24 | if [[ -f "$CentralConfigFile" ]]; then 25 | 26 | . $CentralConfigFile 27 | 28 | fi 29 | 30 | curlConfiguration="-fsS -m 10 --retry 5" 31 | 32 | if [[ -z "$NextCloudDomain" || -z "$NextcloudActivityRssToken" ]]; then 33 | 34 | # Take RSS Full URL if token and Domain are not defined 35 | ncRSS="$NextCloudActivityRssUrl" 36 | 37 | else 38 | 39 | # Build URL based on Token and Domain 40 | ncRSS="https://$NextCloudDomain/index.php/apps/activity/rss.php?token=$NextcloudActivityRssToken" 41 | 42 | fi 43 | 44 | if [[ ! -f "$LOCKFILE" ]]; then 45 | 46 | echo "0" > $LOCKFILE 47 | 48 | fi 49 | 50 | lastSeen=$(tail -n 1 $LOCKFILE) 51 | 52 | # RSS XML Reader as per https://www.linuxjournal.com/content/parsing-rss-news-feed-bash-script 53 | 54 | xmlgetnext () { 55 | local IFS='>' 56 | read -d '<' TAG VALUE 57 | } 58 | 59 | curl $curlConfiguration "$ncRSS" | sed '1!G;h;$!d' | while xmlgetnext ; do 60 | case $TAG in 61 | '/item') 62 | guid='' 63 | title='' 64 | link='' 65 | pubDate='' 66 | description='' 67 | ;; 68 | 'guid isPermaLink="false"') 69 | guid="$VALUE" 70 | ;; 71 | 'title') 72 | title="$VALUE" 73 | ;; 74 | 'link') 75 | link="$VALUE" 76 | ;; 77 | 'pubDate') 78 | # convert pubDate format for