myron/fusionpbx-config
1
0
Fork 0
mirror of https://github.com/myronblair/fusionpbx-config synced 2026-07-28 21:12:51 -05:00
Code Issues Packages Projects Releases Wiki Activity

[fusion] Weekly backup 2026-07-10 — 14 files changed, 49 insertions(+), 84 deletions(-)

Browse Source
This commit is contained in:
FusionPBX Backup
2026-07-10 15:04:15 +00:00
parent e44925d828
commit 66a3097002
14 changed files with 50 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files
database/fusionpbx.sql.gz
BIN
View File
Binary file not shown.
database/postgres_globals.sql
+3 -3
View File
@@ -2,7 +2,7 @@
-- PostgreSQL database cluster dump
--
\restrict Od0IzV5mhglrt8MzjmvsA3ocE5pzZ8HQqka3Ookg5CoXJ9CyOnrxHXoOL0feAiZ
\restrict N1SADG49YPGHscLNeUAYzzlMwF5iJd8oaYv0L100epmw6FIi1TAaVkueaQ2YEkn
SET default_transaction_read_only = off;
@@ -14,7 +14,7 @@ SET standard_conforming_strings = on;
--
CREATE ROLE fusionpbx;
ALTER ROLE fusionpbx WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB LOGIN NOREPLICATION NOBYPASSRLS PASSWORD 'SCRAM-SHA-256$4096:JOYKSj+lfw3sxgcuge2NEQ==$k1piq39UiU0yXVkXwXp4kq6uf1R+x4f1OJjXkJCWRE8=:iEQk9HFcFZ4tZOtuZ2hWHbCQCv1CFbe+rQsHNk7Nqx0=';
ALTER ROLE fusionpbx WITH SUPERUSER INHERIT NOCREATEROLE NOCREATEDB LOGIN NOREPLICATION NOBYPASSRLS PASSWORD 'SCRAM-SHA-256$4096:YKw5wvglkJ1SKTn9LxXgHg==$8C9W0SrbgXHglWTB/yIik0/z0QU+idBIRNoH8k10fmg=:TU0w/pHUmOSb0hVwCLY6A7nNFeKQrUQGeaInUwHDDBw=';
CREATE ROLE postgres;
ALTER ROLE postgres WITH SUPERUSER INHERIT CREATEROLE CREATEDB LOGIN REPLICATION BYPASSRLS;
@@ -29,7 +29,7 @@ ALTER ROLE postgres WITH SUPERUSER INHERIT CREATEROLE CREATEDB LOGIN REPLICATION
\unrestrict Od0IzV5mhglrt8MzjmvsA3ocE5pzZ8HQqka3Ookg5CoXJ9CyOnrxHXoOL0feAiZ
\unrestrict N1SADG49YPGHscLNeUAYzzlMwF5iJd8oaYv0L100epmw6FIi1TAaVkueaQ2YEkn
--
-- PostgreSQL database cluster dump complete
fail2ban/jail.local
-3
View File
@@ -1,6 +1,3 @@
[DEFAULT]
ignoreip = 127.0.0.1/8 ::1 107.178.2.130 97.154.109.245
[ssh]
enabled = true
port = 22
freeswitch/autoload_configs/modules.conf.xml
+15 -17
View File
@@ -17,27 +17,27 @@
<!-- Applications -->
<load module="mod_curl"/>
<load module="mod_valet_parking"/>
<load module="mod_conference"/>
<load module="mod_enum"/>
<load module="mod_rtc"/>
<load module="mod_sms"/>
<load module="mod_fsv"/>
<load module="mod_esf"/>
<load module="mod_fifo"/>
<load module="mod_enum"/>
<load module="mod_spandsp"/>
<load module="mod_rtc"/>
<load module="mod_valet_parking"/>
<load module="mod_hash"/>
<load module="mod_expr"/>
<load module="mod_spandsp"/>
<load module="mod_fsv"/>
<load module="mod_conference"/>
<load module="mod_callcenter"/>
<load module="mod_db"/>
<load module="mod_sms"/>
<load module="mod_dptools"/>
<load module="mod_av"/>
<load module="mod_db"/>
<load module="mod_fifo"/>
<!-- Codecs -->
<load module="mod_amr"/>
<load module="mod_g729"/>
<load module="mod_b64"/>
<load module="mod_g723_1"/>
<load module="mod_g729"/>
<load module="mod_amr"/>
<!-- Databases -->
<load module="mod_pgsql"/>
@@ -59,20 +59,18 @@
<load module="mod_png"/>
<!-- Say -->
<load module="mod_say_es"/>
<load module="mod_say_fr"/>
<load module="mod_say_es_ar"/>
<load module="mod_say_en"/>
<load module="mod_say_fr"/>
<load module="mod_say_es"/>
<!-- Streams / Files -->
<load module="mod_shout"/>
<load module="mod_tone_stream"/>
<load module="mod_local_stream"/>
<load module="mod_tone_stream"/>
<load module="mod_shout"/>
<!-- XML Interfaces -->
<load module="mod_xml_cdr"/>
<load module="mod_signalwire"/>
</modules>
</configuration>
freeswitch/vars.xml
+7 -7
View File
@@ -19,8 +19,8 @@
<X-PRE-PROCESS cmd="set" data="default_exitcode=011" />
<!-- IP Address -->
<X-PRE-PROCESS cmd="set" data="external_sip_ip=134.209.72.226" />
<X-PRE-PROCESS cmd="set" data="external_rtp_ip=134.209.72.226" />
<X-PRE-PROCESS cmd="set" data="external_sip_ip=stun:stun.freeswitch.org" />
<X-PRE-PROCESS cmd="set" data="external_rtp_ip=stun:stun.freeswitch.org" />
<!-- Music on Hold -->
<X-PRE-PROCESS cmd="set" data="hold_music=local_stream://default" />
@@ -57,22 +57,22 @@
<X-PRE-PROCESS cmd="set" data="eg-ring=%(2000,1000,475,375)" />
<X-PRE-PROCESS cmd="set" data="fi-ring=%(1000,4000,425)" />
<!-- Security -->
<X-PRE-PROCESS cmd="set" data="disable_system_api_commands=true" />
<X-PRE-PROCESS cmd="set" data="disable_system_app_commands=true" />
<!-- SIP -->
<X-PRE-PROCESS cmd="set" data="sip_tls_version=tlsv1,tlsv1.1,tlsv1.2" />
<X-PRE-PROCESS cmd="set" data="unroll_loops=true" />
<!-- SIP Profile: External -->
<X-PRE-PROCESS cmd="set" data="external_ssl_enable=false" />
<X-PRE-PROCESS cmd="set" data="external_ssl_enable=true" />
<X-PRE-PROCESS cmd="set" data="external_ssl_dir=$${conf_dir}/tls" />
<!-- SIP Profile: Internal -->
<X-PRE-PROCESS cmd="set" data="internal_ssl_dir=$${conf_dir}/tls" />
<X-PRE-PROCESS cmd="set" data="internal_ssl_enable=false" />
<!-- Security -->
<X-PRE-PROCESS cmd="set" data="disable_system_app_commands=true" />
<X-PRE-PROCESS cmd="set" data="disable_system_api_commands=true" />
<!-- Sound -->
<X-PRE-PROCESS cmd="set" data="sound_prefix=$${sounds_dir}/en/us/callie" />
network/50-cloud-init.yaml
+7 -26
View File
@@ -7,34 +7,15 @@ network:
version: 2
ethernets:
eth0:
accept-ra: false
addresses:
- 2604:A880:0400:00D1:0000:0004:7377:4001/64
- 134.209.72.226/20
- 10.10.0.5/16
- 10.48.200.130/24
gateway4: 10.48.200.1
match:
macaddress: fa:01:e4:87:a2:9b
mtu: 1500
macaddress: bc:24:11:ca:b9:3a
nameservers:
addresses:
- 67.207.67.2
- 67.207.67.3
search: []
routes:
- to: ::/0
via: 2604:A880:0400:00D1:0000:0000:0000:0001
- to: 0.0.0.0/0
via: 134.209.64.1
- 8.8.8.8
- 1.1.1.1
search:
- tail7dfd0c.ts.net
set-name: eth0
eth1:
addresses:
- 10.116.0.3/20
match:
macaddress: 32:a5:04:32:aa:0b
mtu: 1500
nameservers:
addresses:
- 67.207.67.2
- 67.207.67.3
search: []
set-name: eth1
network/hostname
+1 -1
View File
@@ -1 +1 @@
fusion
fusion.orbishosting.com
network/hosts
+1 -1
View File
@@ -5,8 +5,8 @@
# b.) change or remove the value of 'manage_etc_hosts' in
# /etc/cloud/cloud.cfg or cloud-config from user-data
#
127.0.1.1 FusionPBX-130 FusionPBX-130
127.0.0.1 localhost
127.0.1.1 fusion.orbishosting.com
# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
nginx/fusionpbx.conf
+10 -21
View File
@@ -53,14 +53,9 @@ server {
}
server {
if ($host = fusion.orbishosting.com) {
return 301 https://$host$request_uri;
} # managed by Certbot
listen [::]:80;
listen 80;
server_name fusion.orbishosting.com 134.209.72.226;
server_name fusionpbx;
#redirect letsencrypt to dehydrated
location ^~ /.well-known/acme-challenge {
@@ -69,11 +64,7 @@ server {
alias /var/www/dehydrated;
}
#rewrite rule - send to https with an exception for provisioning
if ($uri !~* ^.*(provision|xml_cdr|firmware).*$) {
rewrite ^(.*) https://$host$1 permanent;
break;
}
#rewrite rule disabled 2026-07-08: NPM (reverse proxy) now terminates TLS externally and sets ssl_forced; this in-VM redirect created a loop since NPM talks to this nginx over plain HTTP
#REST api
if ($uri ~* ^.*/api/.*$) {
@@ -103,8 +94,8 @@ server {
#rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=$1 last;
#yealink
rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.boot)$" /app/provision/index.php?mac=$1&file=%7b%24mac%7d.boot;
#rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2;
rewrite "^.*/provision/(y[0-9]{12})(\.cfg)?$" /app/provision/index.php?file=$1.cfg;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=$1 last;
#polycom
@@ -186,17 +177,16 @@ server {
location ~ /\. {
deny all;
}
}
server {
listen [::]:443 ssl;
listen 443 ssl;
#listen 443 ssl http2;
server_name fusion.orbishosting.com 134.209.72.226;
ssl_certificate /etc/letsencrypt/live/fusion.orbishosting.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/fusion.orbishosting.com/privkey.pem; # managed by Certbot
server_name fusionpbx;
ssl_certificate /etc/ssl/certs/nginx.crt;
ssl_certificate_key /etc/ssl/private/nginx.key;
#ssl_protocols TLSv1.2 TLSv1.3;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
@@ -252,8 +242,8 @@ server {
#rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(cfg))?$" /app/provision/?mac=$1 last;
#yealink
rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.boot)$" /app/provision/index.php?mac=$1&file=%7b%24mac%7d.boot;
#rewrite "^.*/provision/(y[0-9]{12})(\.cfg|\.boot)?$" /app/provision/index.php?file=$1$2;
rewrite "^.*/provision/(y[0-9]{12})(\.cfg)?$" /app/provision/index.php?file=$1.cfg;
rewrite "^.*/provision/([A-Fa-f0-9]{12})(\.(xml|cfg))?$" /app/provision/index.php?mac=$1 last;
#polycom
@@ -335,7 +325,6 @@ server {
location ~ /\. {
deny all;
}
}
systemd/email_queue.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/email_queue/resources/service/debian.service /etc/systemd/system/email_queue.service
; cp /var/www/fusionpbx/app/email_queue/resources/service/debian/email_queue.service /etc/systemd/system/email_queue.service
; systemctl daemon-reload
; systemctl enable email_queue
; systemctl start email_queue
systemd/event_guard.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/event_guard/resources/service/debian.service /etc/systemd/system/event_guard.service
; cp /var/www/fusionpbx/app/event_guard/resources/service/debian/event_guard.service /etc/systemd/system/event_guard.service
; systemctl daemon-reload
; systemctl enable event_guard
; systemctl start event_guard
systemd/fax_queue.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/fax_queue/resources/service/debian.service /etc/systemd/system/fax_queue.service
; cp /var/www/fusionpbx/app/fax_queue/resources/service/debian/fax_queue.service /etc/systemd/system/fax_queue.service
; systemctl daemon-reload
; systemctl enable fax_queue
; systemctl start fax_queue
systemd/system_status.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/system/resources/service/debian.service /etc/systemd/system/system_status.service
; cp /var/www/fusionpbx/app/system/resources/service/debian/system_status.service /etc/systemd/system/system_status.service
; systemctl daemon-reload
; systemctl enable --now system_status
systemd/xml_cdr.service
+1 -1
View File
@@ -1,5 +1,5 @@
; Author: Mark J Crane <markjcrane@fusionpbx.com>
; cp /var/www/fusionpbx/app/xml_cdr/resources/service/debian.service /etc/systemd/system/xml_cdr.service
; cp /var/www/fusionpbx/app/xml_cdr/resources/service/debian/xml_cdr.service /etc/systemd/system/xml_cdr.service
; systemctl daemon-reload
; systemctl enable xml_cdr
; systemctl start xml_cdr