IzzySoft

#!/bin/bash
# Trac Installation. Adapt this to your needs before running

# Install dependencies
sudo apt-get install python2.5 python-support python-clearsilver python-pysqlite2 python-subversion python-imaging
sudo easy_install Genshi
# this one needs the Repo of IzzySoft (http://apt.izzysoft.de/)
sudo apt-get install apache2-mod-wsgi
# some directory to place sources in - you may chose any
cd /usr/local/src
# checkout the latest stable Trac from SVN
svn co http://svn.edgewall.org/repos/trac/branches/0.11-stable trac11-stable
cd trac11-stable
# obtain and apply a patch for better table-header formatting ( ||= HeaderCol1 =||= HeaderCol2 =|| )
wget http://trac.edgewall.org/raw-attachment/ticket/3347/3347_TableHeaders_NicerFormat.diff
patch -p0 -i 3347_TableHeaders_NicerFormat.diff
# and finally install Trac
sudo easy_install .

#!/bin/bash
# Install some useful Trac plugins (simply comment out those you don't want)
#
# The WebAdmin (is already integrated in 0.11+ - but some plugins need it)
easy_install http://svn.edgewall.com/repos/trac/sandbox/webadmin/
# The AccountManager
easy_install http://trac-hacks.org/svn/accountmanagerplugin/trunk/
# Not good enough? Make it nicer?
easy_install http://trac-hacks.org/svn/usermanagerplugin/0.11/
# IniAdmin
easy_install http://trac-hacks.org/svn/iniadminplugin/0.11/
# And we HATE SPAMMERS!
easy_install http://svn.edgewall.com/repos/trac/sandbox/spam-filter/
# MediaWikiPluginMacro - turn your wiki to support MediaWiki syntax
easy_install http://trac-hacks.org/svn/mediawikipluginmacro/
# TOC PlugIn (auto-generate table of contents)
easy_install http://trac-hacks.org/svn/tocmacro/0.11/
# Acronyms support for the Wiki
easy_install http://trac-hacks.org/svn/acronymsplugin/0.11/
# If you want to include external pages into your Wiki [Include(http://www.domain.com/page)]
easy_install http://trac-hacks.org/svn/includemacro/0.11/
# MultiLang support - and nicer indexes (yes, it is 0.10 - but works on 0.11)
easy_install http://trac-hacks.org/svn/tracwikinegotiatorplugin/0.10/
# TicketDelete PlugIn (get rid of spam tickets)
easy_install http://trac-hacks.org/svn/ticketdeleteplugin/0.11/
# TracWysiwygPlugin - for better Wiki editing
easy_install http://trac-hacks.org/svn/tracwysiwygplugin/0.11/
# Graphical Statistics Plugin
easy_install http://trac-hacks.org/svn/stractisticsplugin/0.10/tags/0.4.2/
# Tags PlugIn (needed for ScreenshotsPlugin - and either useful itself)
easy_install http://trac-hacks.org/svn/tagsplugin/trunk/
# ScreenshotsPlugin - Maintain and use screenshots
easy_install http://trac-hacks.org/svn/screenshotsplugin/0.11/
# TracDownloaderPlugin to manage Downloads
easy_install http://trac-hacks.org/svn/tracdownloaderplugin/0.11/
# Now, having quite a bunch of PlugIns installed, you may need to cleanup your navbar:
easy_install http://trac-hacks.org/svn/navcontrolplugin/0.11/

#!/bin/bash
###############################################################################
# Setting up Trac projects                        (c) 2007 by Izzy and IzzySoft
#------------------------------------------------------------------------------
# This script will help you to setup your trac projects without having to type
# too much (or to fiddle around with the commands and their syntax). Check the
# [ Configuration ] section first and adapt it to your settings and needs. You
# may (or may not) want to change the permissions (found in function set_perms)
# and/or the default configuration (in function conf_activate). Moreover, you
# for sure want to check the default wiki pages in the tracwiki.tgz (in case
# you don't want to stay with the default wikis shipped with trac). If you
# don't want to have all the help wikis in each project, you can take this
# replacement: Instead of installing them all everywhere, it replaces the links
# in the templates to point to the trac project wiki directly.
###############################################################################

#==========================================================[ Configuration ]===
# Where the trac shared files are
TracShared=/usr/share/trac
# Base directory for your Trac repositories
TracEnvParentDir=/usr/local/trac
# Where to link the logos to. Remember to escape slashes ("/" must be "\/")
HomePage="www.example.com"
# Who will be the admin (full access permissions) for the projects?
admin=john
# Space separated list of projects to establish. For path names etc., these will
# be converted to lowercase. For display, they will be used as-is. Each project
# name must be a single word
projects="MyProject OtherProject"
# DB to use for Trac
DBFile="db/trac.db"
TracDB="sqlite:$DBFile"
# Repository Type
RepoType=svn
# Base Repository for your SVN repositories. Project name (lowercase) will be
# added here, and the result should be the projects SVN Repo Path
RepoParentPath=/usr/local/svn/public
# Default Template path
TracTemplatePath=$TracShared/templates
# Replace default wiki pages by those from tracwiki.tgz ?
WikiReplace=1
# Create default forums ("Help" and "Common Discussion")? You can change the
# forums/descriptions in "function forum" below.
ForumCreate=1

#-----------------------------------------------------------------[ Colors ]---
red='\e[0;31m'
blue='\e[0;34m'
NC='\e[0m'              # No Color

#==============================================================[ Functions ]===
#-------------------------------------------------------=[ Progress Output ]=--
function say {
  echo -e "${blue}$1${NC}"
}

function alert {
  echo -e "${red}$1${NC}"
}

#--------------------------------------------=[ Replace default Wiki pages ]=--
function wiki_default {
  if [ -e $TracShared/wiki-default.ori ]; then
    say "Looks like the default wiki pages already have been replaced - skipping this step."
  else
    say "Replacing default wiki pages..."
    mv $TracShared/wiki-default $TracShared/wiki-default.ori
    cp $TracShared/templates $TracShared/templates.ori
    mkdir $TracShared/wiki-default
    tar xzf tracwiki.tgz -C "$TracShared"
  fi
}

#-------------------------------------------------=[ Activate some PlugIns ]=--
function conf_activate {
  local project="$1"
  say "Updating trac.ini ..."
  local conffile=${TracEnvParentDir}/$project/conf/trac.ini
  cp $conffile ${conffile}.$$
  cat ${conffile}.$$|sed "s/example\.org/$HomePage/g">${conffile}
  cat <<EndConf >>$conffile
[components]
acct_mgr.admin.accountmanageradminpage = enabled
acct_mgr.api.accountmanager = enabled
acct_mgr.htfile.htpasswdstore = enabled
acct_mgr.web_ui.accountmodule = enabled
acct_mgr.web_ui.loginmodule = enabled
acct_mgr.web_ui.registrationmodule = enabled
iniadmin.iniadmin.iniadminplugin = enabled
trac.web.auth.loginmodule = disabled
tracdiscussion.admin.discussionwebadmin = enabled
tracdiscussion.core.discussioncore = enabled
tracdiscussion.init.discussioninit = enabled
tracdiscussion.search.discussionsearch = enabled
tracdiscussion.wiki.discussionwiki = enabled
tracemoticons.emoticonssupport = enabled
webadmin.* = enabled

[account-manager]
password_file = /etc/httpd/.trac
password_format = htpasswd
EndConf

}

#-----------------------------------------------------=[ SetUp Permissions ]=--
function set_perms {
  local project="$1"
  say "Setting permissions ..."

  # The big boss aka admin
  trac-admin ${TracEnvParentDir}/${project} permission add ${admin} TRAC_ADMIN

  # SVN Repo
  trac-admin ${TracEnvParentDir}/${project} permission add visitor BROWSER_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor LOG_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor FILE_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor CHANGESET_VIEW

  # Tickets, MileStones, etc.:
  trac-admin ${TracEnvParentDir}/${project} permission add visitor TICKET_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor MILESTONE_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor ROADMAP_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor WIKI_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor TIMELINE_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor SEARCH_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add visitor REPORT_VIEW

  # Users who registered with our site get additional permissions:
  trac-admin ${TracEnvParentDir}/${project} permission add authenticated TICKET_CREATE
  trac-admin ${TracEnvParentDir}/${project} permission add authenticated TICKET_APPEND

  # Next comes a group for our testers, who inherit all from the r/o group:
  trac-admin ${TracEnvParentDir}/${project} permission add tester visitor
  trac-admin ${TracEnvParentDir}/${project} permission add tester WIKI_CREATE
  trac-admin ${TracEnvParentDir}/${project} permission add tester WIKI_MODIFY

  # Now for our developers (inheriting all from testers)
  trac-admin ${TracEnvParentDir}/${project} permission add developer tester
  trac-admin ${TracEnvParentDir}/${project} permission add developer TICKET_MODIFY

  # Forum
  trac-admin ${TracEnvParentDir}/${project} permission add visitor DISCUSSION_VIEW
  trac-admin ${TracEnvParentDir}/${project} permission add authenticated DISCUSSION_APPEND
  trac-admin ${TracEnvParentDir}/${project} permission add tester DISCUSSION_APPEND

  # Rewrite permissions for anonymous (not-logged-in) users
  trac-admin ${TracEnvParentDir}/${project} permission remove anonymous '*'
  trac-admin ${TracEnvParentDir}/${project} permission add anonymous visitor
}

#---------------------------------------------------------[ Forum creation ]---
function forum {
  local db=$1/$DBFile
  local project=$2
  local now=`date +%s`
  say "Creating forums for $project in database $db..."
  # forum(id,name,create_timestamp,forum_group,author,moderators,subject,description)
  # Since no forum_group exists, leave that column to 0.
  sqlite3 $db <<EndSQL
INSERT INTO forum VALUES(1,'Help',$now,0,'$admin','$admin','Help with $project','If you have problems with $project and need help, this is the right place to ask for');
INSERT INTO forum VALUES(2,'Common Discussion',$now,0,'$admin','$admin','All about $project','Feature requests, recent development...');
EndSQL
}

#====================================================[ Initialize projects ]===
[ $WikiReplace -eq 1 ] && wiki_default
for pname in $projects; do
  say "Initializing Environment for $pname ..."
  proj=`echo $pname|tr [:upper:] [:lower:]`
  trac-admin $TracEnvParentDir/$proj initenv $pname $TracDB $RepoType $RepoParentPath/$proj $TracTemplatePath
  chown -R www-data:www-data $TracEnvParentDir/$proj
  conf_activate $proj
  set_perms $proj
  say "Upgrading environment..."
  trac-admin ${TracEnvParentDir}/$proj upgrade
  [ $ForumCreate -eq 1 ] && forum $TracEnvParentDir/$proj $pname
done

###############################################################################
# Protect TRAC against spammers
# Track rules have id:7701xx
# idea taken from http://madwifi.org/wiki/FightingTracSpam (where some comments
# also refer to - e.g. "spam type x")
###############################################################################

#==================================================================[ Rules ]===
#--------------------------------------------------------------[ Whitelist ]---
# allow all POST requests that are not directed to one of the handlers we take
# into account below
SecFilterSelective REQUEST_URI "!(/trac/.+/(wiki|newticket|ticket).*$)" "nolog,allow,id:770100"

#---------------------------------------------[ Spam Type 1: #preview spam ]---
# block POSTs to /ticket/<number>#preview and /newticket#preview 
SecFilterSelective REQUEST_URI "^/trac/.+/(newticket|ticket/[0-9]+).*\#preview" "id:770101"

#--------------------------------------------[ Spam Type 2: no cookie spam ]---
# block POSTs to /wiki, /ticket and /newticket from users who don't have a trac
# cookie
# 
# CAUTION: these rules likely cause false positives, as some users tend to turn
# off cookie support in their browser. Don't activate them unless you're sure
# that this won't offend your visitors, or at least warn visitors.
#SecFilterSelective REQUEST_URI "^/trac/.+/(wiki/|newticket|ticket/).*$" "chain,id:770102"
#SecFilterSelective HTTP_COOKIE "!(trac_auth|trac_session)"

#---------------------------------------[ Spam Type 3: html processor spam ]---
# don't accept usage of HTML processor in tickets / ticket comments
SecFilterSelective REQUEST_URI "^/trac/.+/(newticket|ticket/).*$" "chain,id:770103"
SecFilterSelective "ARG_description|ARG_comment" "#!html"

#-----------------------------------------------[ Spam Type 4: markup spam ]---
# block new ticket and ticket comment POSTs if they contain more than one URL 
SecFilterSelective "REQUEST_URI" "^/trac/.+/(newticket|ticket/).*$" "chain,id:770104"
SecFilterSelective "ARGS" "http\:/.*http\:/"

#--------------------------------------------------[ Spam Type 5: LED spam ]---
# block LED spammer; his spam is not blocked by the previous rule, since he only
# includes only one URL to the spamvertised website last but not least
SecFilterSelective REQUEST_URI "^/trac/.+/(newticket|ticket/).*$" "chain,id:770105"
SecFilterSelective "ARG_description|ARG_comment" "www.tideled.com"

#-------------------------------[ Spam Type 6: attachment description spam ]---
# block tickets or comments with an http://-URL in it, if user is not properly
# authenticated; throw a 403 that allows to present users with a custom error
# page which explains what is going on (see below)
# this rule is used on tickets as well as attachment descriptions and therefore
# also catches spam type 6
# Since this prevents all not-logged-in users from refering to any URL (even
# if it is pointing to something needed in the context), you may want to
# disable this rule
#SecFilterSelective "REQUEST_URI" "/trac/.+/(newticket|ticket/|attachment/).*$" "chain,id:770106"
#SecFilterSelective HTTP_COOKIE "!trac_auth" chain
#SecFilterSelective HTTP_Authorization "!Basic" chain
#SecFilterSelective "ARGS" "(http|https):/" "deny,log,status:403"

#==============================================[ Customized Error Messages ]===
# See the article on http://madwifi.org/wiki/FightingTracSpam for more details
#----------------------------------[ Error 402: "You have to pay for ads!" ]---
# Apache allows to present users with customized error pages, and we can make
# use of that feature to let spammers know what we think of 'em. Tell Apache
# what file to use as error page for 402, and let it know that requests to this
# file should not be handled by Trac.
# 
# Uncomment the following lines if you want to make use of this
# feature (see also step 3 of the recipe):
#ErrorDocument   402     /error402.html
#<Location /error402.html>
#    SetHandler  None
#</Location>
#
#--------------------------[ Error 403: "URLs are not allowed in tickets!" ]---
# Another use for customized error pages is, as mentioned above, to let users
# know why they are not allowed to give URLs in their tickets and what they
# can do to circumvent this limitation.
#ErrorDocument   403     /error403.html
#<Location /error403.html>
#    XBitHack On
#    SetHandler  None
#</Location>