Fully Automated VICIdial Deployment on multiple Distros

[callcentertech]

Hi all,

We have setup the fully automated VICIdial installer for multiple linux distros. It is completely fully automated and completely free. We support Ubuntu 18, Cent 7.9, Alma 8.x, Rocky 8.x. We will not include Cent 8 as it will be end of life on 31st Dec 2021.

The automation does following things.

1. Installs all packages and VICIdial with latest SVN with Asterisk 13.38 & AST 16 (AST 18 coming soon)
2. Install SSL from Lets-encrypt and forces to https
3. WebRTC configuration
4. Installs and fully configures Dynamic firewall, so it is secured by default (Firewalld + IPtables)
5. IP blacklist and IP whitelist fully working
6. Installs g729 codec
7. AWS S3 Integration included by default
8. Fully ready to dial VICIdial platform
9. User and SIP logins sent on email

The configuration includes:

1. 100 Fronter agents with 100 webphones, Preconfigured to auto login phones
2. 50 Closer agents with 50 webphones, Preconfigured to auto login phones
3. 100 regular sip extensions, in case you want to use it with softphones of IP phones
4. 6666 user is preconfigured with all permissions & password updated.
5. Outbound, Inbound, closer campaign preconfigured
6. Inbound groups, Filter Phone Groups configured
7. A lot of configurations done, you can explore yourself. Just add your carrier and good to go.

Instructions:

Go to “https://my.callcentertech.net/cart.php?a=add&pid=16” and supply your Server IP, FQDN and Root Password, then place the order. Make sure to add A record for the “fqdn” to your server IP before placing install order. You will need to create an account (or log in as existing user), and process the order, you don't have to pay anything as the service is completely free forever.

Information for Geeks (How does automation works):

1. The orchestration server sends remote commands to update and upgrade your server, then reboots
2. The orchestration server then installs and configures vicidial, then reboots
3. The installation details can be found here /home/installation-details.txt
4. The csv sheet for user and sip extension details can be found in /var/lib/mysql-files
5. After 2nd reboot, you can check screen -ls , It will show up 12 sockets. It confirms vicidial is installed successfully.

Important Notes:

1. Make sure to add A record for the fqdn to your server IP before placing install order. Otherwise SSL, Dynamic firewall will fail
2. Do not reboot server while installation in progress.
3. SSH by default will be disabled as to not create any interruption while installation by the user
4. You can change timezone in server by running this command, timedatectl set-timezone America/New_York (Custom command coming soon)
5. Although we want to, but we can not make the script open to general public, as this is proprietary method used for our vicidial hosting platform at “https://www.callcentertech.net”.


Useful Commands:

Show VICIdial users:
mysql -ucron -p1234 -e "use asterisk; select user_group,user,pass,phone_login,phone_pass,user_level from vicidial_users order by user ASC";

Show Extension Details:
mysql -ucron -p1234 -e "use asterisk; SELECT extension,login,pass,voicemail_id,conf_secret,fullname,phone_type,server_ip FROM phones ORDER BY login ASC";

Show peers and Registry:
asterisk -rx 'reload' && asterisk -rx 'sip show peers' && asterisk -rx 'sip show registry' && asterisk -rx 'iax2 show peers' && asterisk -rx 'iax2 show registry'

Update as of 16 Dec 2021:
Dynamic firewall and IP Whitelist works in 10 Seconds instead of 60 seconds. SO agents and admin won't have to wait full 60 seconds before redirecting to admin or agent page.

[venkat.ackbote]

Works great, We have tested it extensively before making it live..

[callcentertech]

Time taken for deployment (Tested on Vultr vps)

Ubuntu 18.04 : 10-15 minutes
Rocky Linux : 20-30 minutes
Alma Linux : 20-30 minutes

Hi all,

We have setup the fully automated VICIdial installer for multiple linux distros. It is completely fully automated and completely free. We support Ubuntu 18, Cent 7.9, Alma 8.x, Rocky 8.x. We will not include Cent 8 as it will be end of life on 31st Dec 2021.

The automation does following things.

1. Installs all packages and VICIdial with latest SVN with Asterisk 13.38 & AST 16 (AST 18 coming soon)
2. Install SSL from Lets-encrypt and forces to https
3. WebRTC configuration
4. Installs and fully configures Dynamic firewall, so it is secured by default (Firewalld + IPtables)
5. IP blacklist and IP whitelist fully working
6. Installs g729 codec
7. AWS S3 Integration included by default
8. Fully ready to dial VICIdial platform
9. User and SIP logins sent on email

The configuration includes:

1. 100 Fronter agents with 100 webphones, Preconfigured to auto login phones
2. 50 Closer agents with 50 webphones, Preconfigured to auto login phones
3. 100 regular sip extensions, in case you want to use it with softphones of IP phones
4. 6666 user is preconfigured with all permissions & password updated.
5. Outbound, Inbound, closer campaign preconfigured
6. Inbound groups, Filter Phone Groups configured
7. A lot of configurations done, you can explore yourself. Just add your carrier and good to go.

Instructions:

Go to “https://my.callcentertech.net/cart.php?a=add&pid=16” and supply your Server IP, FQDN and Root Password, then place the order. Make sure to add A record for the “fqdn” to your server IP before placing install order. You will need to create an account (or log in as existing user), and process the order, you don't have to pay anything as the service is completely free forever.

Information for Geeks (How does automation works):

1. The orchestration server sends remote commands to update and upgrade your server, then reboots
2. The orchestration server then installs and configures vicidial, then reboots
3. The installation details can be found here /home/installation-details.txt
4. The csv sheet for user and sip extension details can be found in /var/lib/mysql-files
5. After 2nd reboot, you can check screen -ls , It will show up 12 sockets. It confirms vicidial is installed successfully.

Important Notes:

1. Make sure to add A record for the fqdn to your server IP before placing install order. Otherwise SSL, Dynamic firewall will fail
2. Do not reboot server while installation in progress.
3. SSH by default will be disabled as to not create any interruption while installation by the user
4. You can change timezone in server by running this command, timedatectl set-timezone America/New_York (Custom command coming soon)
5. Although we want to, but we can not make the script open to general public, as this is proprietary method used for our vicidial hosting platform at “https://www.callcentertech.net”.


Useful Commands:

Show VICIdial users:
mysql -ucron -p1234 -e "use asterisk; select user_group,user,pass,phone_login,phone_pass,user_level from vicidial_users order by user ASC";

Show Extension Details:
mysql -ucron -p1234 -e "use asterisk; SELECT extension,login,pass,voicemail_id,conf_secret,fullname,phone_type,server_ip FROM phones ORDER BY login ASC";

Show peers and Registry:
asterisk -rx 'reload' && asterisk -rx 'sip show peers' && asterisk -rx 'sip show registry' && asterisk -rx 'iax2 show peers' && asterisk -rx 'iax2 show registry'

More updates coming soon..

[carpenox]

Great job venka and kaushal.

[GenXOutsourcing]

I cant speak for others, but I would not (and recommend that others) do not put server ROOT passwords into ANY webform. This is a HUGE security issue, especially with all the hacking and botnets these days.

But please do share the code so that we can see that nothing malicious is being installed or loaded.

[callcentertech]

Hello,

I totally get your concern about putting root password in webform. Please note that this platform is made for folks who have tough time installing vicidial from scratch or for people who don't have hundreds of dollars to pay someone to install it for them.

We can not share the codes as it powers our business model of "fully automated VICIdial Hosting Platform". Our VICIdial hosting platform uses exactly the same piece of code for deployment. Yes, we have built the world's first and only (probably) fully automated VICIdial hosting service that delivers vicidial within 30 minutes of placing the order. It is fully configured and ready to dial.

We understand that people will have concern sharing theri root passwords. We are just trying our best to help them save time and money for vicidial installation job only if they need us to do it. We are doing it in best interests of the user and we know we are doing a good job at this..

[GenXOutsourcing]

Here is an automated script for Centos7 for anyone to try for free. Will be adding the SSL and Webphones also. Please try it out and let me know any feedback.

https://github.com/GenXoutsourcing/vicidial-install-scripts

[realskinner]

Tried using this service. But inbound is not working. According to my DID provider, my server is replying 401 with their SIP INVITE. Makes me wonder if traffic going to my server is restricted. Tried turning down firewalls but still same issue.

Hope someone can help. Thanks

[williamconley]

Tried using this service. But inbound is not working. According to my DID provider, my server is replying 401 with their SIP INVITE. Makes me wonder if traffic going to my server is restricted. Tried turning down firewalls but still same issue.

Hope someone can help. Thanks

1) Welcome to the Party!

2) As you are obviously new here, I have some suggestions to help us all help you:

When you post, please post your entire configuration including (but not limited to) your installation method (7.X.X?) and vicidial version with build (VERSION: 2.X-XXXx ... BUILD: #####-####).

This IS a requirement for posting along with reading the stickies (at the top of each forum) and the manager's manual (available on EFLO.net, both free and paid versions)

You should also post: Asterisk version, telephony hardware (model number is helpful here), cluster information if you have one, and whether any other software is installed in the box. If your installation method is "manual/from scratch" you must post your operating system with version (and the .iso version from which you installed your original operating system) plus a link to the installation instructions you used. If your installation is "Hosted" list the site name of the host.

If this is a "Cloud" or "Virtual" server, please note the technology involved along with the version of that techology (ie: VMware Server Version 2.0.2). If it is not, merely stating the Motherboard model # and CPU would be helpful.

Similar to This:

Vicibox X.X from .iso | Vicidial X.X.X-XXX Build XXXXXX-XXXX | Asterisk X.X.X | Single Server | No Digium/Sangoma Hardware | No Extra Software After Installation | Intel DG35EC | Core2Quad Q6600

3) SIP 401 reply to a SIP INVITE means it got past the firewall. Unauthorized (401) means "you need to provide a user/password". Not ordinarily what your carrier expects. Probably means your carrier's "host=xxx" entry doesn't match the host's IP for the INVITE. Either the sip-vicidial.conf file isn't being written or for some other reason that IP isn't in the .conf file, or perhaps asterisk didn't reload properly after the file was written (if it's actually there, of course).

Happy Hunting

[williamconley]

I cant speak for others, but I would not (and recommend that others) do not put server ROOT passwords into ANY webform. This is a HUGE security issue, especially with all the hacking and botnets these days.

But please do share the code so that we can see that nothing malicious is being installed or loaded.

root passwords can be changed. in fact, they can be disabled and then use only key access. since this is ubuntu, most distros have root password disabled in the first place, so the user has to enable root pass ... thus reversing this method would give the ability to (once again) disable root password and revert to the key access used for original access.

plus, of course, whitelisted firewall to provide further security.

But it still comes down to "someone else built my server and may have added a back door". It's about trust much more than a temporary root password.