myron/fusionpbx-config
1
0
Fork 0
mirror of https://github.com/myronblair/fusionpbx-config synced 2026-07-27 20:44:55 -05:00
Code Issues Packages Projects Releases Wiki Activity

[fusion] Weekly backup 2026-07-10 — 14 files changed, 49 insertions(+), 84 deletions(-)

Browse Source
This commit is contained in:
FusionPBX Backup
2026-07-10 15:04:15 +00:00
parent e44925d828
commit 66a3097002
14 changed files with 50 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files
database/fusionpbx.sql.gz
BIN
View File
Binary file not shown.
database/postgres_globals.sql
+3 -3
View File
@@ -2,7 +2,7 @@
-- PostgreSQL database cluster dump -- PostgreSQL database cluster dump
-- --
\restrict Od0IzV5mhglrt8MzjmvsA3ocE5pzZ8HQqka3Ookg5CoXJ9CyOnrxHXoOL0feAiZ \restrict N1SADG49YPGHscLNeUAYzzlMwF5iJd8oaYv0L100epmw6FIi1TAaVkueaQ2YEkn
SET default_transaction_read_only = off; SET default_transaction_read_only = off;
@@ -14,7 +14,7 @@ SET standard_conforming_strings = on;
-- --
CREATE ROLE fusionpbx; CREATE ROLE fusionpbx;
ALTER ROLE fusionpbx WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB LOGIN NOREPLICATION NOBYPASSRLS PASSWORD 'SCRAM-SHA-256$4096:JOYKSj+lfw3sxgcuge2NEQ==$k1piq39UiU0yXVkXwXp4kq6uf1R+x4f1OJjXkJCWRE8=:iEQk9HFcFZ4tZOtuZ2hWHbCQCv1CFbe+rQsHNk7Nqx0='; ALTER ROLE fusionpbx WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB LOGIN NOREPLICATION NOBYPASSRLS PASSWORD 'SCRAM-SHA-256$4096:YKw5wvglkJ1SKTn9LxXgHg==$8C9W0SrbgXHglWTB/yIik0/z0QU+idBIRNoH8k10fmg=:TU0w/pHUmOSb0hVwCLY6A7nNFeKQrUQGeaInUwHDDBw=';
CREATE ROLE postgres; CREATE ROLE postgres;
ALTER ROLE postgres WITH SUPERUSER INHERIT CREATEROLE CREATEDB LOGIN REPLICATION BYPASSRLS; ALTER ROLE postgres WITH SUPERUSER INHERIT CREATEROLE CREATEDB LOGIN REPLICATION BYPASSRLS;
@@ -29,7 +29,7 @@ ALTER ROLE postgres WITH SUPERUSER INHERIT CREATEROLE CREATEDB LOGIN REPLICATION
\unrestrict Od0IzV5mhglrt8MzjmvsA3ocE5pzZ8HQqka3Ookg5CoXJ9CyOnrxHXoOL0feAiZ \unrestrict N1SADG49YPGHscLNeUAYzzlMwF5iJd8oaYv0L100epmw6FIi1TAaVkueaQ2YEkn
-- --
-- PostgreSQL database cluster dump complete -- PostgreSQL database cluster dump complete
fail2ban/jail.local
-3
View File
@@ -1,6 +1,3 @@
[DEFAULT]
ignoreip = 127.0.0.1/8 ::1 107.178.2.130 97.154.109.245
[ssh] [ssh]
enabled = true enabled = true
port = 22 port = 22
freeswitch/autoload_configs/modules.conf.xml
+16 -18
View File
@@ -17,27 +17,27 @@
<!-- Applications --> <!-- Applications -->
<load module="mod_curl"/> <load module="mod_curl"/>
<load module="mod_valet_parking"/>
<load module="mod_conference"/>
<load module="mod_enum"/>
<load module="mod_rtc"/>
<load module="mod_sms"/>
<load module="mod_fsv"/>
<load module="mod_esf"/> <load module="mod_esf"/>
<load module="mod_fifo"/>
<load module="mod_enum"/>
<load module="mod_spandsp"/>
<load module="mod_rtc"/>
<load module="mod_valet_parking"/>
<load module="mod_hash"/> <load module="mod_hash"/>
<load module="mod_expr"/> <load module="mod_expr"/>
<load module="mod_spandsp"/> <load module="mod_fsv"/>
<load module="mod_conference"/>
<load module="mod_callcenter"/> <load module="mod_callcenter"/>
<load module="mod_db"/>
<load module="mod_sms"/>
<load module="mod_dptools"/> <load module="mod_dptools"/>
<load module="mod_av"/> <load module="mod_av"/>
<load module="mod_db"/>
<load module="mod_fifo"/>
<!-- Codecs --> <!-- Codecs -->
<load module="mod_amr"/>
<load module="mod_g729"/>
<load module="mod_b64"/> <load module="mod_b64"/>
<load module="mod_g723_1"/> <load module="mod_g723_1"/>
<load module="mod_g729"/>
<load module="mod_amr"/>
<!-- Databases --> <!-- Databases -->
<load module="mod_pgsql"/> <load module="mod_pgsql"/>
@@ -59,20 +59,18 @@
<load module="mod_png"/> <load module="mod_png"/>
<!-- Say --> <!-- Say -->
<load module="mod_say_es"/>
<load module="mod_say_fr"/>
<load module="mod_say_es_ar"/> <load module="mod_say_es_ar"/>
<load module="mod_say_en"/> <load module="mod_say_en"/>
<load module="mod_say_fr"/>
<load module="mod_say_es"/>
<!-- Streams / Files --> <!-- Streams / Files -->
<load module="mod_shout"/>
<load module="mod_tone_stream"/>
<load module="mod_local_stream"/> <load module="mod_local_stream"/>
<load module="mod_tone_stream"/>
<load module="mod_shout"/>
<!-- XML Interfaces --> <!-- XML Interfaces -->
<load module="mod_xml_cdr"/> <load module="mod_xml_cdr"/>
<load module="mod_signalwire"/>
</modules> </modules>
</configuration> </configuration>
freeswitch/vars.xml
+7 -7
View File
@@ -19,8 +19,8 @@
<X-PRE-PROCESS cmd="set" data="default_exitcode=011" /> <X-PRE-PROCESS cmd="set" data="default_exitcode=011" />
<!-- IP Address --> <!-- IP Address -->
<X-PRE-PROCESS cmd="set" data="external_sip_ip=134.209.72.226" /> <X-PRE-PROCESS cmd="set" data="external_sip_ip=stun:stun.freeswitch.org" />
<X-PRE-PROCESS cmd="set" data="external_rtp_ip=134.209.72.226" /> <X-PRE-PROCESS cmd="set" data="external_rtp_ip=stun:stun.freeswitch.org" />
<!-- Music on Hold --> <!-- Music on Hold -->
<X-PRE-PROCESS cmd="set" data="hold_music=local_stream://default" /> <X-PRE-PROCESS cmd="set" data="hold_music=local_stream://default" />
@@ -57,22 +57,22 @@
<X-PRE-PROCESS cmd="set" data="eg-ring=%(2000,1000,475,375)" /> <X-PRE-PROCESS cmd="set" data="eg-ring=%(2000,1000,475,375)" />
<X-PRE-PROCESS cmd="set" data="fi-ring=%(1000,4000,425)" /> <X-PRE-PROCESS cmd="set" data="fi-ring=%(1000,4000,425)" />
<!-- Security -->
<X-PRE-PROCESS cmd="set" data="disable_system_api_commands=true" />
<X-PRE-PROCESS cmd="set" data="disable_system_app_commands=true" />
<!-- SIP --> <!-- SIP -->
<X-PRE-PROCESS cmd="set" data="sip_tls_version=tlsv1,tlsv1.1,tlsv1.2" /> <X-PRE-PROCESS cmd="set" data="sip_tls_version=tlsv1,tlsv1.1,tlsv1.2" />
<X-PRE-PROCESS cmd="set" data="unroll_loops=true" /> <X-PRE-PROCESS cmd="set" data="unroll_loops=true" />
<!-- SIP Profile: External --> <!-- SIP Profile: External -->
<X-PRE-PROCESS cmd="set" data="external_ssl_enable=false" /> <X-PRE-PROCESS cmd="set" data="external_ssl_enable=true" />
<X-PRE-PROCESS cmd="set" data="external_ssl_dir=$${conf_dir}/tls" /> <X-PRE-PROCESS cmd="set" data="external_ssl_dir=$${conf_dir}/tls" />
<!-- SIP Profile: Internal --> <!-- SIP Profile: Internal -->
<X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${conf_dir}/tls" /> <X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${conf_dir}/tls" />
<X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false" /> <X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false" />
<!-- Security -->
<X-PRE-PROCESS cmd="set" data="disable_system_app_commands=true" />
<X-PRE-PROCESS cmd="set" data="disable_system_api_commands=true" />
<!-- Sound --> <!-- Sound -->
<X-PRE-PROCESS cmd="set" data="sound_prefix=$${sounds_dir}/en/us/callie" /> <X-PRE-PROCESS cmd="set" data="sound_prefix=$${sounds_dir}/en/us/callie" />
network/50-cloud-init.yaml
+7 -26
View File
@@ -7,34 +7,15 @@ network:
version: 2 version: 2
ethernets: ethernets:
eth0: eth0:
accept-ra: false
addresses: addresses:
- 2604:A880:0400:00D1:0000:0004:7377:4001/64 - 10.48.200.130/24
- 134.209.72.226/20 gateway4: 10.48.200.1
- 10.10.0.5/16
match: match:
macaddress: fa:01:e4:87:a2:9b macaddress: bc:24:11:ca:b9:3a
mtu: 1500
nameservers: nameservers:
addresses: addresses:
- 67.207.67.2 - 8.8.8.8
- 67.207.67.3 - 1.1.1.1
search: [] search:
routes: - tail7dfd0c.ts.net
- to: ::/0
via: 2604:A880:0400:00D1:0000:0000:0000:0001
- to: 0.0.0.0/0
via: 134.209.64.1
set-name: eth0 set-name: eth0
eth1:
addresses:
- 10.116.0.3/20
match:
macaddress: 32:a5:04:32:aa:0b
mtu: 1500
nameservers:
addresses:
- 67.207.67.2
- 67.207.67.3
search: []
set-name: eth1
network/hostname
+1 -1
View File
@@ -1 +1 @@
fusion fusion.orbishosting.com
network/hosts
+1 -1
View File
@@ -5,8 +5,8 @@
# b.) change or remove the value of 'manage_etc_hosts' in # b.) change or remove the value of 'manage_etc_hosts' in
# /etc/cloud/cloud.cfg or cloud-config from user-data # /etc/cloud/cloud.cfg or cloud-config from user-data
# #
127.0.1.1 FusionPBX-130 FusionPBX-130
127.0.0.1 localhost 127.0.0.1 localhost
127.0.1.1 fusion.orbishosting.com
# The following lines are desirable for IPv6 capable hosts # The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback ::1 localhost ip6-localhost ip6-loopback
nginx/fusionpbx.conf
+10 -21
View File
@@ -53,14 +53,9 @@ server {
} }
server { server {
if ($host = fusion.orbishosting.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen [::]:80; listen [::]:80;
listen 80; listen 80;
server_name fusion.orbishosting.com 134.209.72.226; server_name fusionpbx;
#redirect letsencrypt to dehydrated #redirect letsencrypt to dehydrated
location ^~ /.well-known/acme-challenge { location ^~ /.well-known/acme-challenge {
@@ -69,11 +64,7 @@ server {
alias /var/www/dehydrated; alias /var/www/dehydrated;
} }
#rewrite rule - send to https with an exception for provisioning #rewrite rule disabled 2026-07-08: NPM (reverse proxy) now terminates TLS externally and sets ssl_forced; this in-VM redirect created a loop since NPM talks to this nginx over plain HTTP
if ($uri !~* ^.*(provision|xml_cdr|firmware).*$) {
rewrite ^(.*) https://$host$1 permanent;
break;
}
#REST api #REST api
if ($uri ~* ^.*/api/.*$) { if ($uri ~* ^.*/api/.*$) {
@@ -103,8 +94,8 @@ server {
#rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=$1 last; #rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=$1 last;
#yealink #yealink
rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2; #rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.boot)$" /app/provision/index.php?mac=$1&file=%7b%24mac%7d.boot; rewrite "^.*/provision/(y[0-9]{12})(\.cfg)?$" /app/provision/index.php?file=$1.cfg;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=$1 last; rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=$1 last;
#polycom #polycom
@@ -186,17 +177,16 @@ server {
location ~ /\. { location ~ /\. {
deny all; deny all;
} }
} }
server { server {
listen [::]:443 ssl; listen [::]:443 ssl;
listen 443 ssl; listen 443 ssl;
#listen 443 ssl http2; #listen 443 ssl http2;
server_name fusion.orbishosting.com 134.209.72.226; server_name fusionpbx;
ssl_certificate /etc/letsencrypt/live/fusion.orbishosting.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/fusion.orbishosting.com/privkey.pem; # managed by Certbot ssl_certificate /etc/ssl/certs/nginx.crt;
ssl_certificate_key /etc/ssl/private/nginx.key;
#ssl_protocols TLSv1.2 TLSv1.3; #ssl_protocols TLSv1.2 TLSv1.3;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on; ssl_prefer_server_ciphers on;
@@ -252,8 +242,8 @@ server {
#rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=$1 last; #rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=$1 last;
#yealink #yealink
rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2; #rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.boot)$" /app/provision/index.php?mac=$1&file=%7b%24mac%7d.boot; rewrite "^.*/provision/(y[0-9]{12})(\.cfg)?$" /app/provision/index.php?file=$1.cfg;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=$1 last; rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=$1 last;
#polycom #polycom
@@ -335,7 +325,6 @@ server {
location ~ /\. { location ~ /\. {
deny all; deny all;
} }
} }
systemd/email_queue.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com> ; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/email_queue/resources/service/debian.service /etc/systemd/system/email_queue.service ; cp /var/www/fusionpbx/app/email_queue/resources/service/debian/email_queue.service /etc/systemd/system/email_queue.service
; systemctl daemon-reload ; systemctl daemon-reload
; systemctl enable email_queue ; systemctl enable email_queue
; systemctl start email_queue ; systemctl start email_queue
systemd/event_guard.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com> ; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/event_guard/resources/service/debian.service /etc/systemd/system/event_guard.service ; cp /var/www/fusionpbx/app/event_guard/resources/service/debian/event_guard.service /etc/systemd/system/event_guard.service
; systemctl daemon-reload ; systemctl daemon-reload
; systemctl enable event_guard ; systemctl enable event_guard
; systemctl start event_guard ; systemctl start event_guard
systemd/fax_queue.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com> ; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/fax_queue/resources/service/debian.service /etc/systemd/system/fax_queue.service ; cp /var/www/fusionpbx/app/fax_queue/resources/service/debian/fax_queue.service /etc/systemd/system/fax_queue.service
; systemctl daemon-reload ; systemctl daemon-reload
; systemctl enable fax_queue ; systemctl enable fax_queue
; systemctl start fax_queue ; systemctl start fax_queue
systemd/system_status.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com> ; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/system/resources/service/debian.service /etc/systemd/system/system_status.service ; cp /var/www/fusionpbx/app/system/resources/service/debian/system_status.service /etc/systemd/system/system_status.service
; systemctl daemon-reload ; systemctl daemon-reload
; systemctl enable --now system_status ; systemctl enable --now system_status
systemd/xml_cdr.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com> ; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/xml_cdr/resources/service/debian.service /etc/systemd/system/xml_cdr.service ; cp /var/www/fusionpbx/app/xml_cdr/resources/service/debian/xml_cdr.service /etc/systemd/system/xml_cdr.service
; systemctl daemon-reload ; systemctl daemon-reload
; systemctl enable xml_cdr ; systemctl enable xml_cdr
; systemctl start xml_cdr ; systemctl start xml_cdr