🖥️ Single Server Installation Guide

# Install prerequisites
apt update && apt install -y curl gnupg2

# Add GPG key
curl -fsSL https://repo.ring2all.com/gpg.key | gpg --dearmor -o /etc/apt/keyrings/ring2all.gpg

# Add repository
echo "deb [signed-by=/etc/apt/keyrings/ring2all.gpg] https://repo.ring2all.com/apt stable main" > /etc/apt/sources.list.d/ring2all.list

# Update package list
apt update

# 1. Database (creates user, databases, schemas)
apt install softswitch-db

# 2. Admin Dashboard + Portal + Switchboard + API
apt install softswitch-admin

# 3. FreeSWITCH + Telephony scripts
apt install softswitch-telephony

# 4. Audio files (optional but recommended)
apt install softswitch-music
apt install softswitch-voiceguide-emma    # English prompts
apt install softswitch-voiceguide-paloma  # Spanish prompts

# FreeSWITCH
systemctl enable --now freeswitch

# API Services
systemctl enable --now softswitch-api
systemctl enable --now softswitch-monitoring-api

# Nginx
systemctl enable --now nginx

# All services should show "active (running)"
systemctl status postgresql
systemctl status freeswitch
systemctl status softswitch-api
systemctl status softswitch-monitoring-api
systemctl status nginx

# Read generated credentials
cat /etc/softswitch/db-credentials

# Test connection (should show 6 databases)
sudo -u postgres psql -c "\l"
# Expected: ss_admin, ss_telephony, ss_cdr, ss_cc, ss_logs, freeswitch

# Enter FreeSWITCH CLI
fs_cli

# Check status (should show internal and external profiles)
sofia status

# Exit
/exit

# Allow essential ports
ufw allow 22/tcp      # SSH
ufw allow 80/tcp      # HTTP (redirect to HTTPS)
ufw allow 443/tcp     # HTTPS
ufw allow 5060/udp    # SIP
ufw allow 5060/tcp    # SIP over TCP
ufw allow 5061/tcp    # SIP TLS
ufw allow 16384:32768/udp  # RTP media

# Enable firewall
ufw enable

# Install certbot
apt install certbot python3-certbot-nginx

# Obtain certificate (replace with your domain)
certbot --nginx -d pbx.example.com

# Auto-renewal is configured automatically
systemctl status certbot.timer

nano /etc/nginx/sites-available/softswitch

server {
    listen 80;
    server_name _;
    
    # Redirect all HTTP to HTTPS
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl http2;
    server_name _;
    
    # SSL Certificates
    ssl_certificate /etc/ssl/certs/softswitch.crt;
    ssl_certificate_key /etc/ssl/private/softswitch.key;
    
    # Security headers
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    
    # API Backend (Node.js)
    location /api {
        proxy_pass http://127.0.0.1:3000;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
    
    # WebSocket (Monitoring API)
    location /ws {
        proxy_pass http://127.0.0.1:3001;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";
        proxy_set_header Host $host;
        proxy_read_timeout 86400;
    }
    
    # Admin Dashboard
    location /admin {
        alias /var/www/softswitch/web;
        try_files $uri $uri/ /admin/index.html;
    }
    
    # User Portal
    location /portal {
        alias /var/www/softswitch/portal;
        try_files $uri $uri/ /portal/index.html;
    }
    
    # Switchboard Console
    location /switchboard {
        alias /var/www/softswitch/switchboard;
        try_files $uri $uri/ /switchboard/index.html;
    }
    
    # Root redirect to Admin
    location = / {
        return 302 /admin;
    }
}

ln -sf /etc/nginx/sites-available/softswitch /etc/nginx/sites-enabled/
nginx -t && systemctl reload nginx

cat /etc/softswitch/db-credentials

# Softswitch Database Credentials
# Generated: 2026-01-27 15:00:00
DB_USER=ss_db_user
DB_PASSWORD=Xk9mN2pQ4rT7
DB_HOST=127.0.0.1
DB_PORT=5432

nano /etc/postgresql/17/main/postgresql.conf

# Memory (adjust based on available RAM)
shared_buffers = 2GB          # 25% of RAM
effective_cache_size = 6GB    # 75% of RAM
work_mem = 32MB
maintenance_work_mem = 512MB

# Connections
max_connections = 200

# WAL
wal_buffers = 64MB
checkpoint_completion_target = 0.9

nano /etc/freeswitch/autoload_configs/switch.conf.xml

<configuration name="switch.conf">
  <settings>
    <!-- Limit concurrent sessions based on server capacity -->
    <param name="max-sessions" value="200"/>
    <param name="sessions-per-second" value="30"/>
    
    <!-- RTP port range -->
    <param name="rtp-start-port" value="16384"/>
    <param name="rtp-end-port" value="32768"/>
  </settings>
</configuration>

#!/bin/bash
# Softswitch Single Server Backup Script

BACKUP_DIR="/var/backups/softswitch"
DATE=$(date +%Y%m%d_%H%M%S)
RETENTION_DAYS=7

mkdir -p $BACKUP_DIR

# Backup all databases
for db in ss_admin ss_telephony ss_cdr ss_cc ss_logs ss_switchboard; do
    sudo -u postgres pg_dump $db | gzip > "$BACKUP_DIR/${db}_${DATE}.sql.gz"
done

# Backup FreeSWITCH configs
tar -czf "$BACKUP_DIR/freeswitch_config_${DATE}.tar.gz" /etc/freeswitch

# Backup recordings (if any)
if [ -d "/var/lib/freeswitch/recordings" ]; then
    tar -czf "$BACKUP_DIR/recordings_${DATE}.tar.gz" /var/lib/freeswitch/recordings
fi

# Backup credentials
cp /etc/softswitch/db-credentials "$BACKUP_DIR/db-credentials_${DATE}"

# Remove old backups
find $BACKUP_DIR -type f -mtime +$RETENTION_DAYS -delete

echo "Backup completed: $BACKUP_DIR"

chmod +x /opt/softswitch-backup.sh

# Add to cron (daily at 2 AM)
echo "0 2 * * * root /opt/softswitch-backup.sh" >> /etc/crontab

# Check logs
journalctl -u softswitch-api -f
journalctl -u freeswitch -f

# Check ports
ss -tlnp | grep -E '3000|3001|5060|5432'

# Test PostgreSQL
sudo -u postgres psql -c "SELECT 1"

# Check ODBC
isql -v ss_telephony ss_db_user YOUR_PASSWORD

# Check SIP profiles
fs_cli -x "sofia status"

# Check registrations
fs_cli -x "sofia status profile internal reg"

# Debug SIP traffic
fs_cli -x "sofia profile internal siptrace on"

# Check if API is running
curl http://127.0.0.1:3000/api/health

# Check API logs
journalctl -u softswitch-api --since "5 minutes ago"