openwrt-config.sh

#!/bin/sh

## Network Configuration
. network.conf

## Fix Missing DNS Servers
uci set network.lan.dns="$DNS_SERVERS"
uci set network.wan.dns="$DNS_SERVERS"
uci commit
#/etc/init.d/network restart

## Update & Install Packages
opkg update
opkg install qos-scripts ddns-scripts miniupnpd curl kmod-leds-wndr3700-usb
opkg install luci-ssl luci-base luci-i18n-english luci-lib-httpclient luci-ssl luci-app-qos uhttpd-mod-tls

## System Configuration
uci set system.@system[0].hostname="$HOST_NAME"
uci set system.@system[0].zonename="$TIMEZONE_NAME"
uci set system.@system[0].timezone="$TIMEZONE"

## IP Address
uci set network.lan.ipaddr="$HOST_IP_ADDRESS"
uci set network.lan.netmask="$HOST_NETMASK"

## Remove Default Wireless Setup
uci delete wireless.@wifi-iface[1]
uci delete wireless.@wifi-iface[0]

## Radio [2GHz]
uci set wireless.radio0.hwmode=11ng
uci set wireless.radio0.htmode=HT40-
uci set wireless.radio0.txpower=22
uci set wireless.radio0.channel=6
uci delete wireless.radio0.disabled

## Radio [5GHz]
uci set wireless.radio1.country="$COUNTRY"

## Wifi [2GHz]
uci add wireless wifi-iface
uci set wireless.@wifi-iface[-1].device=radio0
uci set wireless.@wifi-iface[-1].mode=ap
uci set wireless.@wifi-iface[-1].ssid="$WIFI1_SSID"
uci set wireless.@wifi-iface[-1].key="$WIFI1_KEY"
uci set wireless.@wifi-iface[-1].encryption=psk-mixed
uci set wireless.@wifi-iface[-1].network=lan

## Create DHCP & Hostname list
DEVICE_LIST=$(cat $DEVICES_FILE | grep -v '^#\|^$')
IFS=$'\12'
for d in $DEVICE_LIST
	do
		d_host=$(echo $d | awk '{ print $1 }')
		d_ip=$(echo $d | awk '{ print $2 }')
		d_mac=$(echo $d | awk '{ print $3 }')	
		
		if [ -n "$d_host" -a -n "$d_mac" -a -n "$d_ip" ]; then
			uci add dhcp host
			uci set dhcp.@host[-1].name=$d_host
			uci set dhcp.@host[-1].mac=$d_mac
			uci set dhcp.@host[-1].ip=$d_ip
		fi
		
		if [ -n "$d_host" -a -n "$d_ip" ]; then
			uci add dhcp domain
			uci set dhcp.@domain[-1].name=$d_host
			uci set dhcp.@domain[-1].ip=$d_ip
		fi
	done

##Sending DNS list to clients
uci set dhcp.@dnsmasq[0].server="$DNS_SERVERS"

## Firewall Redirects
uci add firewall redirect
uci set firewall.@redirect[0]._name=ssh_desktop
uci set firewall.@redirect[-1].src=wan
uci set firewall.@redirect[-1].src_dport="$REDIRECT_EXTERNAL_PORT"
uci set firewall.@redirect[-1].dest_ip="$REDIRECT_INTERNAL_IP"
uci set firewall.@redirect[-1].dest_port="$REDIRECT_INTERNAL_PORT"
uci set firewall.@redirect[-1].proto=tcp

## Disable uhttp on port 80
uci delete uhttpd.main.listen_http

## uhttpd Keys
uci set uhttpd.px5g.commonname="$HOST_NAME"
uci set uhttpd.px5g.days=3650
uci set uhttpd.px5g.country=US
uci set uhttpd.px5g.state="California"
uci set uhttpd.px5g.location="Los Angeles"
rm -f /etc/uhttpd.crt /etc/uhttpd.key

## SSH Setup
uci set dropbear.@dropbear[0].RootPasswordAuth=off
uci set dropbear.@dropbear[0].Port="$SSH_PORT"
uci set dropbear.@dropbear[0].PasswordAuth=off
uci set dropbear.@dropbear[0].Interface=lan

## SSH Autharized Keys
echo $SSH_KEY > /etc/dropbear/authorized_keys

## QoS


## Add NameCheap.com (SSL) DDNS
## -- The http-based NameCheap DDNS is now part of OpenWRT
echo "" >> /usr/lib/ddns/services
echo "# Namecheap.com Dynamic DNS Service (SSL)" >> /usr/lib/ddns/services
echo "\"namecheap.com (ssl)\" \"https://dynamicdns.park-your-domain.com/update?host=[USERNAME]&domain=[DOMAIN]&password=[PASSWORD]&ip=[IP]\""  >> /usr/lib/ddns/services

## Add CloudFlare.com DDNS (via API)
echo "" >> /usr/lib/ddns/services
echo "# CloudFlare.com Client API" >> /usr/lib/ddns/services
echo "\"cloudflare.com\" \"https://www.cloudflare.com/api_json.html?a=DIUP&email=[USERNAME]&tkn=[PASSWORD]&hosts=[DOMAIN]&ip=[IP]\""  >> /usr/lib/ddns/services


## Install Root Certificates
mkdir -p /etc/ssl/certs
## GeoTrust Certificates (for NameCheap.com)
curl -sL http://www.geotrust.com/resources/root_certificates/certificates/GeoTrust_Global_CA.pem -o /etc/ssl/certs/GeoTrust_Global_CA.pem
## GlobalSign Root Certificate (for Cloudflare.com)
curl -skL http://secure.globalsign.net/cacert/Root-R1.crt -o /etc/ssl/certs/GlobalSign_Root_R1.pem

## Personal DDNS
# Debug DDNS via:
#	/usr/lib/ddns/dynamic_dns_updater.sh myddns
uci set ddns.myddns.interface=wan
uci set ddns.myddns.service_name="$DDNS_SERVICE"
uci set ddns.myddns.username="$DDNS_USER"
uci set ddns.myddns.password="$DDNS_PASSWORD"
uci set ddns.myddns.domain="$DDNS_DOMAIN"
uci set ddns.myddns.ip_source=web
uci set ddns.myddns.ip_url=http://queryip.net/ip/
uci set ddns.myddns.check_interval=30
uci set ddns.myddns.check_unit=minutes
uci set ddns.myddns.force_interval=12
uci set ddns.myddns.force_unit=hours
uci set ddns.myddns.enabled=1
uci set ddns.myddns.use_https=1
uci set ddns.myddns.cacert=/etc/ssl/certs/"$DDNS_CERT"

## Enable Services
/etc/init.d/uhttpd enable
/etc/init.d/miniupnpd enable
#/etc/init.d/qos enable

## Commit Changes
uci commit
echo "**** Restarting Router ****"

## Reboot after first setup
reboot