Table of Contents

Information

Prerequisites

Dependencies

sudo dnf install 'murmur'

Firewall

sudo firewall-cmd --add-port='64738'/'tcp' --permanent && sudo firewall-cmd --add-port='64738'/'udp' --permanent && sudo firewall-cmd --reload

Settings

sudo -e '/etc/murmur/murmur.ini'
autobanAttempts = 5
autobanTimeframe = 120
autobanTime = 300

welcometext="Welcome to the Realm of Espionage Mumble server!"

serverpassword=x

registerName=RoE | Mumble

sslCert=/etc/murmur/certs/fullchain.pem
sslKey=/etc/murmur/certs/privkey.pem

sslCiphers="PROFILE=SYSTEM"

certrequired=True

sendversion=True

Let's Encrypt SSL Cert

Initial

sudo mkdir -p '/etc/murmur/certs' && sudo cp '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem' '/etc/letsencrypt/live/realmofespionage.xyz/privkey.pem' '/etc/murmur/certs' && sudo chgrp 'mumble-server' '/etc/murmur/certs/fullchain.pem' '/etc/murmur/certs/privkey.pem'

Certbot Automation

sudo -e '/etc/letsencrypt/cli.ini'

Murmur

post-hook = cp '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem' '/etc/letsencrypt/live/realmofespionage.xyz/privkey.pem' '/etc/murmur/certs' && chgrp 'mumble-server' '/etc/murmur/certs/fullchain.pem' '/etc/murmur/certs/privkey.pem' && systemctl restart 'murmur'

nginx + Murmur

post-hook = systemctl start 'nginx' && cp '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem' '/etc/letsencrypt/live/realmofespionage.xyz/privkey.pem' '/etc/murmur/certs' && chgrp 'mumble-server' '/etc/murmur/certs/fullchain.pem' '/etc/murmur/certs/privkey.pem' && systemctl restart 'murmur'

nginx + Prosody + Murmur

post-hook = systemctl start 'nginx' && cp '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem' '/etc/letsencrypt/live/realmofespionage.xyz/privkey.pem' '/etc/prosody/certs' && chgrp 'prosody' '/etc/prosody/certs/fullchain.pem' '/etc/prosody/certs/privkey.pem' && systemctl restart 'prosody' && cp '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem' '/etc/letsencrypt/live/realmofespionage.xyz/privkey.pem' '/etc/murmur/certs' && chgrp 'mumble-server' '/etc/murmur/certs/fullchain.pem' '/etc/murmur/certs/privkey.pem' && systemctl restart 'murmur'

Administrative User

Set SuperUser Password

sudo -u 'mumble-server' murmurd -ini '/etc/murmur/murmur.ini' -supw 'x'

Grant Account Admin

Services

Initial

sudo systemctl enable 'murmur' --now

Backup

Service

mkdir -p ~/'backups' && sudo -e '/etc/systemd/system/voice-b.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/voice-b.service'
[Service]
Type=oneshot
WorkingDirectory=/var/lib
ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -cvzf "/home/CHANGEME/backups/voice-"$$(date +%%Y-%%m-%%d)".tar.gz" "mumble-server"'
ExecStart='/usr/bin/sync'

Timer

sudo -e '/etc/systemd/system/voice-b.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'voice-b.timer' --now && sudo systemctl start 'voice-b' && sudo systemctl status 'voice-b' -l
[Unit]
Description=Murmur Database Backup

[Timer]
OnCalendar=*-*-* 02:05:00
Persistent=true

[Install]
WantedBy=timers.target

Backup

Server

Archive Folders

cd '/var/lib' && sudo tar -cvzf ~/'voice-manual.tar.gz' 'mumble-server' && cd ~ && sync

Client

Transfer Archive to Client

scp espionage724@192.168.1.153:~/'voice-manual.tar.gz' ~/'Downloads' && sync

Restore

Client

Transfer Archive to Server

scp ~/'Downloads/voice-manual.tar.gz' espionage724@192.168.1.153:~

Remove Archive

rm ~/'Downloads/voice-manual.tar.gz' && sync

Server

Stop Murmur

sudo systemctl stop 'murmur'

Remove Previous Folders

sudo rm -Rf '/var/lib/mumble-server'

Restore Folders

cd '/var/lib' && sudo tar -xvzf ~/'voice-manual.tar.gz' 'mumble-server' && sudo chown -R 'mumble-server':'mumble-server' '/var/lib/mumble-server' && cd ~ && sync

Start Murmur

sudo systemctl start 'murmur'

Remove Archive

rm -R ~/'voice-manual.tar.gz' && sync
1)
Mumble