Add install script

Update some dependencies
Refactor adding used time to avoid exceptions
2026-08-31 19:03:45 +02:00 · 2021-03-08 01:00:00 +01:00 · 2021-03-08 01:00:00 +01:00 · 2021-03-08 01:00:00 +01:00 · 2021-03-08 01:00:00 +01:00 · 2021-03-08 01:00:00 +01:00
29 changed files with 1085 additions and 481 deletions
@@ -0,0 +1,27 @@
+# Server Setup
+
+There is a shell script for doing a mostly automated installation at <https://codeberg.org/timelimit/timelimit-server/raw/branch/master/docs/guides/timelimit-server-setup.sh>. During a test, it took 10 minutes to do a installation with it.
+
+**Read the messages which the script shows** - it is recommend to run it on a clean Debian 10 installation because it overwrites some configuration files.
+
+## Usage
+
+- download it (using wget or a webbrowser)
+- make it executable (``chmod +x timelimit-server-setup.sh``)
+- run it (``sudo ./timelimit-server-setup.sh``)
+- answer the questions
+
+## Requirements
+
+- a **public** IP address **with** a domain name
+- a reachable port 80 and 443 (which can need a port forwarding at your router)
+- a Debian 10 installation (or something comparable) which does not contain anything (important)
+- a mail address for sending automated mails (using SMTP) which should **not** be your primary mail address
+
+## Created setup
+
+- timelimit-server (as a systemd service)
+- postgresql (connected to timelimit-server using a unix socket)
+- nginx (connected to timelimit-server using a unix socket)
+- certbot (to get valid certificates)
+- a few helper commands with the ``timelimit-`` prefix
@@ -0,0 +1,538 @@
+#! /bin/bash
+set -e
+
+# use the test environment
+# certenv=live
+# certbotparams="--test-cert"
+# use the production environment
+certenv=live
+certbotparams=""
+
+if [ "$(id -u)" != 0 ]; then
+  echo "You must run this as root (with sudo)"
+  exit 1
+fi
+
+if ! command -v dialog &> /dev/null; then
+  apt update && apt install -y dialog
+fi
+
+dialog --yesno "This script will setup a timelimit-server installation. It assumes running at a clean Debian installation for this. Doing this will overwrite and delete some files - you have been warned. Do you want to continue?" 8 60
+
+dialog --yesno "This device must be reachable from the public internet at port 80 and port 443 and you must have a (sub)domain at which this device can be reached. Do you have got both?" 8 60
+
+dialog --yesno "Do you accept the current Let's Encrypt Subscriber Agreement which can be found at https://letsencrypt.org/repository/?" 8 60
+
+apt update
+
+firewall_mode="$(dialog --menu "Do you want to setup a firewall?" 10 60 3 \
+  no "do not setup a firewall" \
+  base "install ufw and allow http and https" \
+  ssh "install ufw and allow http, https and ssh" \
+  3>&1 1>&2 2>&3)"
+
+if [ "$firewall_mode" != "no" ]; then
+  apt install -y ufw
+
+  ufw --force reset
+
+  ufw default deny incoming
+  ufw allow http
+  ufw allow https
+
+  if [ "$firewall_mode" = "ssh" ]; then
+    ufw limit ssh
+  fi
+
+  ufw enable
+fi
+
+apt install -y curl certbot nginx python3-certbot-nginx
+
+# minimal nginx setup
+rm /etc/nginx/sites-enabled/default || true # ignore if it is already deleted
+curl https://ssl-config.mozilla.org/ffdhe2048.txt > /usr/share/mozilla-dhparam
+cat > /etc/nginx.conf <<"EOF"
+user www-data;
+worker_processes auto;
+pid /run/nginx.pid;
+include /etc/nginx/modules-enabled/*.conf;
+
+events {
+  worker_connections 512;
+}
+
+http {
+  sendfile on;
+  tcp_nopush on;
+  tcp_nodelay on;
+  keepalive_timeout 65;
+  types_hash_max_size 2048;
+
+  include /etc/nginx/mime.types;
+  default_type application/octet-stream;
+
+  ssl_session_timeout 1d;
+  ssl_session_tickets off;
+  ssl_dhparam /usr/share/mozilla-dhparam;
+
+  ssl_protocols TLSv1.2 TLSv1.3;
+  ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384;
+  ssl_prefer_server_ciphers off;
+
+  ssl_stapling on;
+  ssl_stapling_verify on;
+
+  gzip off;
+
+  include /etc/nginx/conf.d/*.conf;
+  include /etc/nginx/sites-enabled/*;
+}
+EOF
+cat > /etc/nginx/sites-enabled/http-empty <<"EOF"
+# this ensures that the certificates can be created/renewed
+server {
+  listen 80;
+  listen [::]:80;
+
+  server_tokens off;
+
+  return 403;
+}
+EOF
+systemctl reload nginx
+
+# get data for cert creation
+domain="$(dialog --inputbox "At which domain is this device reachable?" 10 60 "" 3>&1 1>&2 2>&3)"
+if [[ ! "$domain" =~ ^([0-9a-zA-Z]|.)+$ ]] || [[ "$domain" =~ ^\.+$ ]]; then
+  echo "This does not look like a valid domain"
+  exit 1
+fi
+
+mail="`dialog --inputbox "What's your mail address? It will be the default mail address which can sign in at your timelimit server and it will be sent to Let's Encrypt for the certificate creation." 10 60 "" 3>&1 1>&2 2>&3`"
+
+if [[ ! $mail =~ ^([0-9a-zA-Z]|-|\.)+@([0-9a-zA-Z]|-|\.)+$ ]]; then
+  echo "This is not look like a valid mail address"
+  exit 1
+fi
+
+# get certificates
+certbot certonly --nginx $certbotparams -m "$mail" --agree-tos --non-interactive -d "$domain"
+
+# add nginx site config
+cat > /etc/nginx/sites-enabled/https-timelimit <<EOF
+upstream timelimitbackend {
+  server unix:/var/run/timelimit/server max_fails=0;
+}
+
+server {
+  listen 443 ssl;
+  listen [::]:443 ssl;
+
+  server_name $domain;
+  server_tokens off;
+
+  ssl_certificate /etc/letsencrypt/$certenv/$domain/fullchain.pem;
+  ssl_certificate_key /etc/letsencrypt/$certenv/$domain/privkey.pem;
+
+  location / {
+    proxy_pass http://timelimitbackend/;
+
+    proxy_set_header X-Real-IP \$remote_addr;
+    proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-Proto \$scheme;
+    proxy_set_header Host \$http_host;
+    proxy_set_header Upgrade \$http_upgrade;
+    proxy_set_header Connection "upgrade";
+    proxy_http_version 1.1;
+
+    client_max_body_size 10m;
+  }
+}
+EOF
+nginx -t
+systemctl reload nginx
+
+# install and configure the database
+apt install -y postgresql-11
+runuser -u postgres -- createuser timelimitrun
+runuser -u postgres -- createdb --encoding=utf8 --owner=timelimitrun timelimit
+echo "listen_addresses = ''" > /etc/postgresql/11/main/conf.d/disable-tcp-listen.conf
+cat > /etc/postgresql/11/main/pg_hba.conf <<"EOF"
+# TYPE  DATABASE        USER            ADDRESS                 METHOD
+local   all             postgres                                peer
+local   timelimit       timelimitrun                            peer
+EOF
+systemctl restart postgresql
+
+# install more dependencies
+apt install -y pgp git npm jq
+
+# create a config
+mkdir --mode=u=rwx,go=rx /etc/timelimit
+jq --null-input --arg mailWhitelist "$mail" '{mailWhitelist:$mailWhitelist}' > /etc/timelimit/config.json
+chmod u=rw,go= /etc/timelimit/config.json
+
+# create timelimit users
+useradd timelimitrun && useradd timelimitbuild
+
+# create directoreis
+mkdir --mode=u=rwx,go=rx /var/lib/timelimit
+mkdir --mode=u=rwx,go=rx /var/lib/timelimit/build
+chown timelimitbuild /var/lib/timelimit/build
+
+# clone the source code
+runuser -u timelimitbuild -- git clone --mirror https://codeberg.org/timelimit/timelimit-server.git /var/lib/timelimit/build/mirror
+
+# create helperscript for building the source code and run it
+cat > /var/lib/timelimit/build/build.sh <<"EOF"
+#! /bin/bash
+set -e
+cd /var/lib/timelimit/build/mirror
+git remote update
+
+current_version=""
+if [ -f /var/lib/timelimit/run/version.txt ]; then
+  current_version="$(cat /var/lib/timelimit/run/version.txt)"
+fi
+
+options=()
+
+for option in $(git tag | grep -E '^2[0-9]{3}-[0-9]{2}-[0-9]{2}$' | sort --reverse); do
+  info=""
+
+  if [ "$option" = "$current_version" ]; then
+    info="(currently installed)"
+  fi
+
+  options+=("$option" "$info")
+done
+
+selected_version="$(dialog --menu "Which version do you want to use?" 15 60 10 "${options[@]}" 3>&1 1>&2 2>&3)"
+
+rm -rf .gnupg
+curl https://keys.openpgp.org/vks/v1/by-fingerprint/2E5C672DE893055D04F5B7BC36B449FB5364BDC4 | HOME=/var/lib/timelimit/build/mirror gpg --import
+echo "2E5C672DE893055D04F5B7BC36B449FB5364BDC4:6:" | HOME=/var/lib/timelimit/build/mirror gpg --import-ownertrust
+err=0
+HOME=/var/lib/timelimit/build/mirror git verify-tag --raw "$selected_version" 2>&1 | grep -q '\[GNUPG:\] TRUST_ULTIMATE' || err=$?
+if [[ $err != 0 ]]; then
+  echo "invalid signature"
+  exit
+fi
+
+rm -rf /var/lib/timelimit/build/output/
+mkdir --mode=u=rwx,go=rx /var/lib/timelimit/build/output
+git --work-tree=/var/lib/timelimit/build/output/ checkout "$selected_version" -- .
+
+cd /var/lib/timelimit/build/output/
+mkdir .npmcache
+export npm_config_cache=/var/lib/timelimit/build/output/.npmcache
+# retry a few times
+npm install --no-optional || npm install --no-optional || npm install --no-optional || npm install --no-optional
+npm run build
+npm prune --production
+rm -rf src .npmcache
+echo "$selected_version" > version.txt
+EOF
+chown timelimitbuild /var/lib/timelimit/build/build.sh
+chmod u+x /var/lib/timelimit/build/build.sh
+runuser -u timelimitbuild -- /var/lib/timelimit/build/build.sh
+
+# create helperscript to use the new built version and use it
+cat > /var/lib/timelimit/copy-new-build.sh <<"EOF"
+#! /bin/bash
+set -e
+if [[ ! -f /var/lib/timelimit/build/output/version.txt ]]; then
+  echo "There is no new build"
+  exit 1
+fi
+
+if [[ -f /var/lib/timelimit/run/version.txt ]]; then
+  NEWVERSION="$(cat /var/lib/timelimit/build/output/version.txt)"
+  OLDVERSION="$(cat /var/lib/timelimit/run/version.txt)"
+
+  if [[ "$OLDVERSION" > "$NEWVERSION" ]]; then
+    echo ""
+    echo "IMPORTANT"
+    echo ""
+    echo "It looks like you're trying to do a downgrade."
+    echo "This is not recommend so it's blocked."
+    echo "You can run 'rm /var/lib/timelimit/run/version.txt' to remove this check temporarily."
+    echo ""
+    exit 1
+  fi
+fi
+
+rm -rf /var/lib/timelimit/run
+mkdir --mode=u=rwx,go= /var/lib/timelimit/run
+cp -r /var/lib/timelimit/build/output/* /var/lib/timelimit/run
+chmod -R u-w,go-rwx /var/lib/timelimit/run
+chown -R timelimitrun /var/lib/timelimit/run
+# allow everyone to see the version
+chmod go+x /var/lib/timelimit/run
+chmod go+r /var/lib/timelimit/run/version.txt
+EOF
+chmod u+x /var/lib/timelimit/copy-new-build.sh
+/var/lib/timelimit/copy-new-build.sh
+
+# create a helperscript to create a env file and use it
+cat > /var/lib/timelimit/build-env.sh <<"EOF"
+#! /bin/bash
+set -e
+umask 077
+config="$(cat /etc/timelimit/config.json)"
+mail_whitelist="$(jq --argjson config "$config" --null-input --raw-output '$config.mailWhitelist | if type == "string" then . else "" end')"
+disable_signup="$(jq --argjson config "$config" --null-input --raw-output '$config.disableSignup | if type == "boolean" and . == true then "yes" else "no" end')"
+mail_sender="$(jq --argjson config "$config" --null-input --raw-output '$config.mailTransport.sender | if type == "string" then . else "" end')"
+mail_transport="$(jq --compact-output --argjson config "$config" --null-input --raw-output '$config.mailTransport | if type == "object" then { host, port, secure, auth: { user, pass } } else null end')"
+mail_imprint="$(jq --argjson config "$config" --null-input --raw-output '$config.mailImprint | if type == "string" then . else "" end')"
+encode() {
+  jq --null-input --raw-output --arg data "$1" '$data | gsub("\\\\"; "\\\\") | gsub("\n"; "\\n")'
+}
+(
+  [[ "$mail_whitelist" != "" ]] && echo "MAIL_WHITELIST=$(encode "$mail_whitelist")"
+  [[ "$mail_sender" != "" ]] && echo "MAIL_SENDER=$(encode "$mail_sender")"
+  [[ "$mail_transport" != "null" ]] && echo "MAIL_TRANSPORT=$(encode "$mail_transport")"
+  [[ "$mail_imprint" != "" ]] && echo "MAIL_IMPRINT=$(encode "$mail_imprint")"
+  echo "DISABLE_SIGNUP=$disable_signup"
+) > /etc/timelimit/env
+EOF
+chmod u+x /var/lib/timelimit/build-env.sh
+/var/lib/timelimit/build-env.sh
+
+# create a systemd unit and start the server
+cat > /etc/systemd/system/timelimit.service <<"EOF"
+[Unit]
+Description=the timelimit server application
+
+[Service]
+Type=simple
+WorkingDirectory=/var/lib/timelimit/run/
+RuntimeDirectory=timelimit
+ExecStartPre=rm -f /var/run/timelimit/server
+ExecStart=/usr/bin/node /var/lib/timelimit/run/build/index.js
+User=timelimitrun
+Group=timelimitrun
+Restart=always
+PrivateTmp=yes
+ProtectSystem=yes
+ProtectHome=yes
+ProtectDevices=yes
+UMask=0555
+
+Environment="DATABASE_URL=postgres://timelimitrun:unused@localhost/timelimit?host=/var/run/postgresql"
+Environment="PORT=/var/run/timelimit/server"
+Environment="NODE_ENV=production"
+Environment="ALWAYS_PRO=yes"
+EnvironmentFile=/etc/timelimit/env
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl daemon-reload
+systemctl enable --now timelimit.service
+
+# create timelimit-dump
+cat > /bin/timelimit-dump <<"EOF"
+#! /bin/bash
+set -e
+if [ "$(id -u)" != 0 ]; then
+  echo "You must run this as root (with sudo)"
+  exit 1
+fi
+runuser -u postgres -- pg_dump timelimit
+EOF
+chmod +x /bin/timelimit-dump
+
+# implement timelimit-restore
+cat > /bin/timelimit-restore <<"EOF"
+#! /bin/bash
+set -e
+if [ "$(id -u)" != 0 ]; then
+  echo "You must run this as root (with sudo)"
+  exit 1
+fi
+if [ "$#" != 1 ]; then
+  echo "You must supply one parameter, the file with the data to restore"
+  exit 1
+fi
+if [ ! -f "$1" ]; then
+  echo "You supplied a parameter, but it wasn't a file"
+  exit 1
+fi
+TEMPFILE="$(mktemp)"
+chown root "$TEMPFILE"
+chgrp postgres "$TEMPFILE"
+chmod u=rw,g=r,o= "$TEMPFILE"
+cat "$1" > "$TEMPFILE"
+dialog --yesno "Restoring \"$1\" will delete the current database content. Do you want to continue?" 8 60
+systemctl stop timelimit
+runuser -u postgres -- dropdb timelimit
+runuser -u postgres -- createdb --encoding=utf8 --owner=timelimitrun timelimit
+runuser -u postgres -- psql -f "$TEMPFILE" --dbname=timelimit
+rm "$TEMPFILE"
+systemctl start timelimit
+dialog --msgbox "The backup was restored." 8 60
+EOF
+chmod +x /bin/timelimit-restore
+
+# create timelimit-upgrade
+cat > /bin/timelimit-upgrade <<"EOF"
+#! /bin/bash
+set -e
+if [ "$(id -u)" != 0 ]; then
+  echo "You must run this as root (with sudo)"
+  exit 1
+fi
+runuser -u timelimitbuild -- /var/lib/timelimit/build/build.sh
+/var/lib/timelimit/copy-new-build.sh
+systemctl restart timelimit.service
+dialog --msgbox "The new timelimit server version was installed." 8 60
+EOF
+chmod +x /bin/timelimit-upgrade
+
+# create timelimit-config
+cat > /bin/timelimit-config <<"EOF"
+#! /bin/bash
+set -e
+if [ "$(id -u)" != 0 ]; then
+  echo "You must run this as root (with sudo)"
+  exit 1
+fi
+configfilepath=/etc/timelimit/config.json
+config_write() {
+  new_config="$(jq --null-input --argjson 'oldConfig' "$(cat /etc/timelimit/config.json)" "$@")"
+  [[ "$new_config" == "" ]] && return 1
+  echo "$new_config" > /etc/timelimit/config.json
+  /var/lib/timelimit/build-env.sh
+  systemctl restart timelimit
+}
+config_whitelist() {
+  config="$(cat "$configfilepath")"
+
+  old_whitelist="$(jq --argjson config "$config" --null-input --raw-output '$config.mailWhitelist | if type == "string" then . else "" end')"
+  mail_whitelist="`dialog --inputbox "Which users are allowed to sign in? This is a list of mail addresses (someone@somewhere.com) or domains (mailbox.org), separated by comma; if a user requests signing in with a mail address which is not in this list, then the request is rejected" 12 60 "$old_whitelist" 3>&1 1>&2 2>&3`"
+  [[ $? -eq 0 ]] || return 0
+
+  config_write --arg whitelist "$mail_whitelist" '$oldConfig + { mailWhitelist: $whitelist }' || return 1
+
+  dialog --msgbox "The whitelist was saved. It is now \"$mail_whitelist\"." 8 60
+}
+config_mail_delivery() {
+  config="$(cat "$configfilepath")"
+
+  old_sender="$(jq --argjson config "$config" --null-input --raw-output '$config.mailTransport.sender | if type == "string" then . else "" end')"
+  sender_mail="`dialog --inputbox "From which mail address do you want to send the mails. It's recommend to NOT use your primary mail address." 10 60 "$old_sender" 3>&1 1>&2 2>&3`"
+  [[ $? -eq 0 ]] || return 0
+
+  old_host="$(jq --argjson config "$config" --null-input --raw-output '$config.mailTransport.host | if type == "string" then . else "" end')"
+  sender_host="`dialog --inputbox "What's the hostname of the SMTP server which should be used?" 10 60 "$old_host" 3>&1 1>&2 2>&3`"
+  [[ $? -eq 0 ]] || return 0
+
+  old_secure="$(jq --argjson config "$config" --null-input --raw-output '$config.mailTransport.secure | if type == "boolean" and . == false then "--defaultno" else "" end')"
+  sender_secure=true
+  dialog $old_secure --yesno "Do you want to use TLS when connecting to the mail server?" 8 60 || sender_secure=false
+
+  recommend_port=465
+  if [[ "$sender_secure" == "false" ]]; then
+    recommend_port=587
+  fi
+
+  old_port="$(jq --arg fallback "$recommend_port" --argjson config "$config" --null-input --raw-output '$config.mailTransport.port | if type == "number" then . else $fallback end')"
+  sender_port="`dialog --inputbox "Which port should be used for SMTP? It's most likely ${recommend_port}." 10 60 "$old_port" 3>&1 1>&2 2>&3`"
+  [[ $? -eq 0 ]] || return 0
+
+  old_user="$(jq --argjson config "$config" --null-input --raw-output '$config.mailTransport.user | if type == "string" then . else "" end')"
+  sender_user="`dialog --inputbox "What's the SMTP username?" 10 60 "$old_user" 3>&1 1>&2 2>&3`"
+  [[ $? -eq 0 ]] || return 0
+
+  old_pass="$(jq --argjson config "$config" --null-input --raw-output '$config.mailTransport.pass | if type == "string" then . else "" end')"
+  sender_pass="`dialog --inputbox "What's the SMTP password?" 10 60 "$old_pass" 3>&1 1>&2 2>&3`"
+  [[ $? -eq 0 ]] || return 0
+
+  dialog --yesno "Do you want to use this settings?\nSender: $sender_mail\nHost: $sender_host\nTLS: $sender_secure\nPort: $sender_port\nUser: $sender_user\nPassword: $sender_pass" 11 60 || return 0
+
+  config_write --arg sender "$sender_mail" --arg host "$sender_host" --argjson secure "$sender_secure" --arg port "$sender_port" --arg user "$sender_user" --arg pass "$sender_pass" '$oldConfig + {mailTransport: { sender: $sender, secure: $secure, host: $host, port: $port | tonumber, user: $user, pass: $pass }}' || return 1
+
+  dialog --msgbox "Your settings were saved" 8 60
+}
+config_imprint() {
+  config="$(cat "$configfilepath")"
+
+  old_imprint="$(jq --argjson config "$config" --null-input --raw-output '$config.mailImprint | if type == "string" then . else "" end')"
+  imprint="`dialog --inputbox "What footer would you like to set for the sent mails?" 10 60 "$old_imprint" 3>&1 1>&2 2>&3`"
+  [[ $? -eq 0 ]] || return 0
+
+  config_write --arg imprint "$imprint" '$oldConfig + { mailImprint: $imprint }' || return 1
+
+  dialog --msgbox "The footer was saved. It is now \"$imprint\"." 8 60
+}
+config_signup() {
+  old_value="$(jq --argjson config "$config" --null-input --raw-output '$config.disableSignup | if type == "boolean" and . == true then "--defaultno" else "" end')"
+
+  value=false
+  dialog $old_value --no-label "Disable sign up" --yes-label "Enable sign up" --yesno "Do you want to allow new users to sign up?" 8 60 || value=true
+  config_write --argjson value "$value" '$oldConfig + {disableSignup: $value}' || return 1
+  if [[ "$value" == "false" ]]; then
+    dialog --msgbox "Users CAN sign up now" 8 60
+  else
+    dialog --msgbox "Users CAN NOT sign up now" 8 60
+  fi
+}
+config_main() {
+  config="$(cat "$configfilepath")"
+  mail_whitelist="$(jq --argjson config "$config" --null-input --raw-output '$config.mailWhitelist | if type == "string" then . else "" end')"
+  mail_sender="$(jq --argjson config "$config" --null-input --raw-output '$config.mailTransport.sender | if type == "string" then . else "(not configured)" end')"
+  mail_imprint="$(jq --argjson config "$config" --null-input --raw-output '$config.mailImprint | if type == "string" then . else "" end')"
+  disable_signup="$(jq --argjson config "$config" --null-input --raw-output '$config.disableSignup | if type == "boolean" and . == true then "CAN NOT" else "CAN" end')"
+
+  option="$(dialog --menu "What would you like to change?" 12 0 5 \
+  "mail-whitelist" "The allowed mail addresses for signing in - currently \"$mail_whitelist\"" \
+  "mail-delivery" "The parameters for sending mails - currently using $mail_sender" \
+  "mail-imprint" "The footer of the mails - currently \"$mail_imprint\"" \
+  "disable-signup" "Allow/disallow new users; currently new users $disable_signup sign up" \
+  "nothing" "Close the settings" \
+  3>&1 1>&2 2>&3)"
+
+  [[ $? -eq 0 ]] || return 0
+
+  if [[ "$option" == "mail-whitelist" ]]; then
+    config_whitelist || return 1
+  elif [[ "$option" == "mail-delivery" ]]; then
+    config_mail_delivery || return 1
+  elif [[ "$option" == "mail-imprint" ]]; then
+    config_imprint || return 1
+  elif [[ "$option" == "disable-signup" ]]; then
+    config_signup || return 1
+  elif [[ "$option" == "nothing" ]]; then
+    exit 0
+  else
+    echo "unknown option"
+    exit 1
+  fi
+}
+
+while true; do
+  config_main
+done
+EOF
+chmod +x /bin/timelimit-config
+
+dialog --msgbox "Installation finished. You have to configure the mail delivery before you can use your server. You will get a list of possible commands after confirming this message." 8 60
+reset
+cat <<"EOF"
+There are the following new commands available at your system now:
+
+timelimit-dump
+  This will output the current database content; redirect the output, e.g.
+  using 'timelimit-dump > backup' to create a backup
+timelimit-restore
+  Use this to restore a dump using 'timelimit-restore ./backup'
+timelimit-upgrade
+  Use this to upgrade the timelimit server installation
+timelimit-config
+  Use this to adjust your configuration of the timelimit-server
+
+You can get a list of them using 'timelimit-<tab>' or by look at the source code
+of the installation script. This message is written at the end of the script.
+EOF
@@ -189,14 +189,14 @@
      }
    },
    "@babel/parser": {
-      "version": "7.12.11",
-      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.12.11.tgz",
-      "integrity": "sha512-N3UxG+uuF4CMYoNj8AhnbAcJF0PiuJ9KHuy1lQmkYsxTer/MAH9UBNHsBoAX/4s6NvlDD047No8mYVGGzLL4hg=="
+      "version": "7.13.10",
+      "resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.13.10.tgz",
+      "integrity": "sha512-0s7Mlrw9uTWkYua7xWr99Wpk2bnGa0ANleKfksYAES8LpWH4gW1OUr42vqKNf0us5UQNfru2wPqMqRITzq/SIQ=="
    },
    "@babel/types": {
-      "version": "7.12.12",
-      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.12.12.tgz",
-      "integrity": "sha512-lnIX7piTxOH22xE7fDXDbSHg9MM1/6ORnafpJmov5rs0kX5g4BZxeXNJLXsMRiO0U5Rb8/FvMS6xlTnTHvxonQ==",
+      "version": "7.13.0",
+      "resolved": "https://registry.npmjs.org/@babel/types/-/types-7.13.0.tgz",
+      "integrity": "sha512-hE+HE8rnG1Z6Wzo+MhaKE5lM5eMx71T4EHJgku2E3xIfaULhDcxiiRxUYgwX8qwP1BBSlag+TdGOt6JAidIZTA==",
      "requires": {
        "@babel/helper-validator-identifier": "7.12.11",
        "lodash": "4.17.20",
@@ -667,11 +667,6 @@
      "resolved": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
      "integrity": "sha1-8S4PPF13sLHN2RRpQuTpbB5N1SU="
    },
-    "async-limiter": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.1.tgz",
-      "integrity": "sha512-csOlWGAcRFJaI6m+F2WKdnMKr4HhdhFVBk0H/QbJFMCr+uO2kwohwXQPxw/9OCxp05r5ghVBFSyioixx3gfkNQ=="
-    },
    "asynckit": {
      "version": "0.4.0",
      "resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
@@ -695,7 +690,7 @@
      "resolved": "https://registry.npmjs.org/babel-walk/-/babel-walk-3.0.0-canary-5.tgz",
      "integrity": "sha512-GAwkz0AihzY5bkwIY5QDR+LvsRQgB/B+1foMPvi0FZPMl5fjD7ICiznUiBdLYMH1QYe6vqu4gWYytZOccLouFw==",
      "requires": {
-        "@babel/types": "7.12.12"
+        "@babel/types": "7.13.0"
      }
    },
    "backo2": {
@@ -715,9 +710,9 @@
      "integrity": "sha1-ibTRmasr7kneFk6gK4nORi1xt2c="
    },
    "base64-arraybuffer": {
-      "version": "0.1.5",
-      "resolved": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz",
-      "integrity": "sha1-c5JncZI7Whl0etZmqlzUv5xunOg="
+      "version": "0.1.4",
+      "resolved": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.4.tgz",
+      "integrity": "sha1-mBjHngWbE1X5fgQooBfIOOkLqBI="
    },
    "base64id": {
      "version": "2.0.0",
@@ -741,14 +736,6 @@
        "tweetnacl": "0.14.5"
      }
    },
-    "better-assert": {
-      "version": "1.0.2",
-      "resolved": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz",
-      "integrity": "sha1-QIZrnhueC1W0gYlDEeaPr/rrxSI=",
-      "requires": {
-        "callsite": "1.0.0"
-      }
-    },
    "big.js": {
      "version": "6.0.3",
      "resolved": "https://registry.npmjs.org/big.js/-/big.js-6.0.3.tgz",
@@ -844,10 +831,14 @@
      "resolved": "https://registry.npmjs.org/bytes/-/bytes-3.1.0.tgz",
      "integrity": "sha512-zauLjrfCG+xvoyaqLoV8bLVXXNGC4JqlxFCutSDWA6fJrTo2ZuvLYTqZ7aHBLZSMOopbzwv8f+wZcVzfVTI2Dg=="
    },
-    "callsite": {
-      "version": "1.0.0",
-      "resolved": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz",
-      "integrity": "sha1-KAOY5dZkvXQDi28JBRU+borxvCA="
+    "call-bind": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz",
+      "integrity": "sha512-7O+FbCihrB5WGbFYesctwmTKae6rOiIzmz1icreWJ+0aA7LJfuqhEso2T9ncpcFtzMQtzXf2QGGueWJGTYsqrA==",
+      "requires": {
+        "function-bind": "1.1.1",
+        "get-intrinsic": "1.1.1"
+      }
    },
    "caseless": {
      "version": "0.12.0",
@@ -900,7 +891,7 @@
      "resolved": "https://registry.npmjs.org/character-parser/-/character-parser-2.2.0.tgz",
      "integrity": "sha1-x84o821LzZdE5f/CxfzeHHMmH8A=",
      "requires": {
-        "is-regex": "1.1.1"
+        "is-regex": "1.1.2"
      }
    },
    "character-reference-invalid": {
@@ -1041,6 +1032,11 @@
      "resolved": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz",
      "integrity": "sha1-AMYIq33Nk4l8AAllGx06jh5zu9E="
    },
+    "component-emitter": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.0.tgz",
+      "integrity": "sha512-Rd3se6QB+sO1TwqZjscQrurpEPIfO0/yYnSin6Q/rD3mOutHvUrCAhJub3r90uNb+SESBuE0QYoB90YdfatsRg=="
+    },
    "component-inherit": {
      "version": "0.0.3",
      "resolved": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz",
@@ -1069,8 +1065,8 @@
      "resolved": "https://registry.npmjs.org/constantinople/-/constantinople-4.0.1.tgz",
      "integrity": "sha512-vCrqcSIq4//Gx74TXXCGnHpulY1dskqLTFGDmhrGxzeXL8lF8kvXv6mpNWlJj1uD4DW23D4ljAqbY4RRaaUZIw==",
      "requires": {
-        "@babel/parser": "7.12.11",
-        "@babel/types": "7.12.12"
+        "@babel/parser": "7.13.10",
+        "@babel/types": "7.13.0"
      }
    },
    "content-disposition": {
@@ -1352,92 +1348,74 @@
      "integrity": "sha512-bd/DFLAoJetvv7ar/KIpE3CNO8wEuyrt9Xuw6nSMiZ+Vrz/Q21BPsMHvARL2Wz6IKHKXgb+DWZqtRg1vql9cBg=="
    },
    "engine.io": {
-      "version": "3.4.0",
-      "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-3.4.0.tgz",
-      "integrity": "sha512-XCyYVWzcHnK5cMz7G4VTu2W7zJS7SM1QkcelghyIk/FmobWBtXE7fwhBusEKvCSqc3bMh8fNFMlUkCKTFRxH2w==",
+      "version": "3.5.0",
+      "resolved": "https://registry.npmjs.org/engine.io/-/engine.io-3.5.0.tgz",
+      "integrity": "sha512-21HlvPUKaitDGE4GXNtQ7PLP0Sz4aWLddMPw2VTyFz1FVZqu/kZsJUO8WNpKuE/OCL7nkfRaOui2ZCJloGznGA==",
      "requires": {
        "accepts": "1.3.7",
        "base64id": "2.0.0",
-        "cookie": "0.3.1",
+        "cookie": "0.4.1",
        "debug": "4.1.1",
-        "engine.io-parser": "2.2.0",
-        "ws": "7.2.0"
+        "engine.io-parser": "2.2.1",
+        "ws": "7.4.4"
      },
      "dependencies": {
        "cookie": {
-          "version": "0.3.1",
-          "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz",
-          "integrity": "sha1-5+Ch+e9DtMi6klxcWpboBtFoc7s="
+          "version": "0.4.1",
+          "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.4.1.tgz",
+          "integrity": "sha512-ZwrFkGJxUR3EIoXtO+yVE69Eb7KlixbaeAWfBQB9vVsNn/o+Yw69gBWSSDK825hQNdN+wF8zELf3dFNl/kxkUA=="
        },
        "debug": {
          "version": "4.1.1",
          "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz",
          "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==",
          "requires": {
-            "ms": "2.1.2"
+            "ms": "2.1.3"
          }
        },
        "ms": {
-          "version": "2.1.2",
-          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
+          "version": "2.1.3",
+          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+          "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
        }
      }
    },
    "engine.io-client": {
-      "version": "3.4.0",
-      "resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-3.4.0.tgz",
-      "integrity": "sha512-a4J5QO2k99CM2a0b12IznnyQndoEvtA4UAldhGzKqnHf42I3Qs2W5SPnDvatZRcMaNZs4IevVicBPayxYt6FwA==",
+      "version": "3.5.1",
+      "resolved": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-3.5.1.tgz",
+      "integrity": "sha512-oVu9kBkGbcggulyVF0kz6BV3ganqUeqXvD79WOFKa+11oK692w1NyFkuEj4xrkFRpZhn92QOqTk4RQq5LiBXbQ==",
      "requires": {
-        "component-emitter": "1.2.1",
+        "component-emitter": "1.3.0",
        "component-inherit": "0.0.3",
-        "debug": "4.1.1",
-        "engine.io-parser": "2.2.0",
+        "debug": "3.1.0",
+        "engine.io-parser": "2.2.1",
        "has-cors": "1.1.0",
        "indexof": "0.0.1",
-        "parseqs": "0.0.5",
-        "parseuri": "0.0.5",
-        "ws": "6.1.4",
+        "parseqs": "0.0.6",
+        "parseuri": "0.0.6",
+        "ws": "7.4.4",
        "xmlhttprequest-ssl": "1.5.5",
        "yeast": "0.1.2"
      },
      "dependencies": {
-        "component-emitter": {
-          "version": "1.2.1",
-          "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz",
-          "integrity": "sha1-E3kY1teCg/ffemt8WmPhQOaUJeY="
-        },
        "debug": {
-          "version": "4.1.1",
-          "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz",
-          "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==",
+          "version": "3.1.0",
+          "resolved": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz",
+          "integrity": "sha512-OX8XqP7/1a9cqkxYw2yXss15f26NKWBpDXQd0/uK/KPqdQhxbPa994hnzjcE2VqQpDslf55723cKPUOGSmMY3g==",
          "requires": {
-            "ms": "2.1.2"
-          }
-        },
-        "ms": {
-          "version": "2.1.2",
-          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
-        },
-        "ws": {
-          "version": "6.1.4",
-          "resolved": "https://registry.npmjs.org/ws/-/ws-6.1.4.tgz",
-          "integrity": "sha512-eqZfL+NE/YQc1/ZynhojeV8q+H050oR8AZ2uIev7RU10svA9ZnJUddHcOUZTJLinZ9yEfdA2kSATS2qZK5fhJA==",
-          "requires": {
-            "async-limiter": "1.0.1"
+            "ms": "2.0.0"
          }
        }
      }
    },
    "engine.io-parser": {
-      "version": "2.2.0",
-      "resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-2.2.0.tgz",
-      "integrity": "sha512-6I3qD9iUxotsC5HEMuuGsKA0cXerGz+4uGcXQEkfBidgKf0amsjrrtwcbwK/nzpZBxclXlV7gGl9dgWvu4LF6w==",
+      "version": "2.2.1",
+      "resolved": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-2.2.1.tgz",
+      "integrity": "sha512-x+dN/fBH8Ro8TFwJ+rkB2AmuVw9Yu2mockR/p3W8f8YtExwFgDvBDi0GWyb4ZLkpahtDGZgtr3zLovanJghPqg==",
      "requires": {
        "after": "0.8.2",
        "arraybuffer.slice": "0.0.7",
-        "base64-arraybuffer": "0.1.5",
+        "base64-arraybuffer": "0.1.4",
        "blob": "0.0.5",
        "has-binary2": "1.0.3"
      }
@@ -1678,6 +1656,16 @@
      "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
      "dev": true
    },
+    "get-intrinsic": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.1.1.tgz",
+      "integrity": "sha512-kWZrnVM42QCiEA2Ig1bG8zjoIMOgxWwYCEeNdwY6Tv/cOSeGpcoX4pXHfKUxNKVoArnrEr2e9srnAxxGIraS9Q==",
+      "requires": {
+        "function-bind": "1.1.1",
+        "has": "1.0.3",
+        "has-symbols": "1.0.2"
+      }
+    },
    "get-paths": {
      "version": "0.0.7",
      "resolved": "https://registry.npmjs.org/get-paths/-/get-paths-0.0.7.tgz",
@@ -1807,9 +1795,9 @@
      "integrity": "sha1-tdRU3CGZriJWmfNGfloH87lVuv0="
    },
    "has-symbols": {
-      "version": "1.0.1",
-      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz",
-      "integrity": "sha512-PLcsoqu++dmEIZB+6totNFKq/7Do+Z0u4oT0zKOJNl3lYK6vGwwu2hjHs+68OEZbTjiUE9bgOABXbP/GvrS0Kg=="
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.2.tgz",
+      "integrity": "sha512-chXa79rL/UC2KlX17jo3vRGz0azaWEx5tGqZg5pO3NUyEJVB17dMruQlzCCOfUvElghKcm5194+BCRvi2Rv/Gw=="
    },
    "has-unicode": {
      "version": "2.0.1",
@@ -2085,11 +2073,12 @@
      "integrity": "sha512-+lP4/6lKUBfQjZ2pdxThZvLUAafmZb8OAxFb8XXtiQmS35INgr85hdOGoEs124ez1FCnZJt6jau/T+alh58QFQ=="
    },
    "is-regex": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.1.tgz",
-      "integrity": "sha512-1+QkEcxiLlB7VEyFtyBg94e08OAsvq7FUBgApTq/w2ymCLyKJgDPsybBENVtA7XCQEgEXxKPonG+mvYRxh/LIg==",
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/is-regex/-/is-regex-1.1.2.tgz",
+      "integrity": "sha512-axvdhb5pdhEVThqJzYXwMlVuZwC+FF2DpcOhTS+y/8jVq4trxyPgfcwIxIKiyeuLlSQYKkmUaPQJ8ZE4yNKXDg==",
      "requires": {
-        "has-symbols": "1.0.1"
+        "call-bind": "1.0.2",
+        "has-symbols": "1.0.2"
      }
    },
    "is-typedarray": {
@@ -2773,11 +2762,6 @@
      "resolved": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
      "integrity": "sha1-IQmtx5ZYh8/AXLvUQsrIv7s2CGM="
    },
-    "object-component": {
-      "version": "0.0.3",
-      "resolved": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz",
-      "integrity": "sha1-8MaapQ78lbhmwYb0AKM3acsvEpE="
-    },
    "on-finished": {
      "version": "2.3.0",
      "resolved": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz",
@@ -2882,20 +2866,14 @@
      }
    },
    "parseqs": {
-      "version": "0.0.5",
-      "resolved": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.5.tgz",
-      "integrity": "sha1-1SCKNzjkZ2bikbouoXNoSSGouJ0=",
-      "requires": {
-        "better-assert": "1.0.2"
-      }
+      "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.6.tgz",
+      "integrity": "sha512-jeAGzMDbfSHHA091hr0r31eYfTig+29g3GKKE/PPbEQ65X0lmMwlEoqmhzu0iztID5uJpZsFlUPDP8ThPL7M8w=="
    },
    "parseuri": {
-      "version": "0.0.5",
-      "resolved": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.5.tgz",
-      "integrity": "sha1-gCBKUNTbt3m/3G6+J3jZDkvOMgo=",
-      "requires": {
-        "better-assert": "1.0.2"
-      }
+      "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.6.tgz",
+      "integrity": "sha512-AUjen8sAkGgao7UyCX6Ahv0gIK2fABKmYjvP4xmy5JaKvcbTRueIqIPHLAfq30xJddqSE033IOMUSOMCcK3Sow=="
    },
    "parseurl": {
      "version": "1.3.3",
@@ -3062,7 +3040,7 @@
        "mailparser": "3.0.1",
        "nodemailer": "6.4.17",
        "open": "7.3.0",
-        "pug": "3.0.0",
+        "pug": "3.0.2",
        "uuid": "8.3.2"
      },
      "dependencies": {
@@ -3109,17 +3087,17 @@
      }
    },
    "pug": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/pug/-/pug-3.0.0.tgz",
-      "integrity": "sha512-inmsJyFBSHZaiGLaguoFgJGViX0If6AcfcElimvwj9perqjDpUpw79UIEDZbWFmoGVidh08aoE+e8tVkjVJPCw==",
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/pug/-/pug-3.0.2.tgz",
+      "integrity": "sha512-bp0I/hiK1D1vChHh6EfDxtndHji55XP/ZJKwsRqrz6lRia6ZC2OZbdAymlxdVFwd1L70ebrVJw4/eZ79skrIaw==",
      "requires": {
-        "pug-code-gen": "3.0.1",
+        "pug-code-gen": "3.0.2",
        "pug-filters": "4.0.0",
-        "pug-lexer": "5.0.0",
+        "pug-lexer": "5.0.1",
        "pug-linker": "4.0.0",
        "pug-load": "3.0.0",
        "pug-parser": "6.0.0",
-        "pug-runtime": "3.0.0",
+        "pug-runtime": "3.0.1",
        "pug-strip-comments": "2.0.0"
      }
    },
@@ -3130,20 +3108,20 @@
      "requires": {
        "constantinople": "4.0.1",
        "js-stringify": "1.0.2",
-        "pug-runtime": "3.0.0"
+        "pug-runtime": "3.0.1"
      }
    },
    "pug-code-gen": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/pug-code-gen/-/pug-code-gen-3.0.1.tgz",
-      "integrity": "sha512-xJIGvmXTQlkJllq6hqxxjRWcay2F9CU69TuAuiVZgHK0afOhG5txrQOcZyaPHBvSWCU/QQOqEp5XCH94rRZpBQ==",
+      "version": "3.0.2",
+      "resolved": "https://registry.npmjs.org/pug-code-gen/-/pug-code-gen-3.0.2.tgz",
+      "integrity": "sha512-nJMhW16MbiGRiyR4miDTQMRWDgKplnHyeLvioEJYbk1RsPI3FuA3saEP8uwnTb2nTJEKBU90NFVWJBk4OU5qyg==",
      "requires": {
        "constantinople": "4.0.1",
        "doctypes": "1.1.0",
        "js-stringify": "1.0.2",
        "pug-attrs": "3.0.0",
        "pug-error": "2.0.0",
-        "pug-runtime": "3.0.0",
+        "pug-runtime": "3.0.1",
        "void-elements": "3.1.0",
        "with": "7.0.2"
      }
@@ -3162,13 +3140,13 @@
        "jstransformer": "1.0.0",
        "pug-error": "2.0.0",
        "pug-walk": "2.0.0",
-        "resolve": "1.19.0"
+        "resolve": "1.20.0"
      },
      "dependencies": {
        "resolve": {
-          "version": "1.19.0",
-          "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.19.0.tgz",
-          "integrity": "sha512-rArEXAgsBG4UgRGcynxWIWKFvh/XZCcS8UJdHhwy91zwAvCZIbcs+vAbflgBnNjYMs/i/i+/Ux6IZhML1yPvxg==",
+          "version": "1.20.0",
+          "resolved": "https://registry.npmjs.org/resolve/-/resolve-1.20.0.tgz",
+          "integrity": "sha512-wENBPt4ySzg4ybFQW2TT1zMQucPK95HSh/nq2CFTZVOGut2+pQvSsgtda4d26YrYcr067wjbmzOG8byDPBX63A==",
          "requires": {
            "is-core-module": "2.2.0",
            "path-parse": "1.0.6"
@@ -3177,9 +3155,9 @@
      }
    },
    "pug-lexer": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/pug-lexer/-/pug-lexer-5.0.0.tgz",
-      "integrity": "sha512-52xMk8nNpuyQ/M2wjZBN5gXQLIylaGkAoTk5Y1pBhVqaopaoj8Z0iVzpbFZAqitL4RHNVDZRnJDsqEYe99Ti0A==",
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/pug-lexer/-/pug-lexer-5.0.1.tgz",
+      "integrity": "sha512-0I6C62+keXlZPZkOJeVam9aBLVP2EnbeDw3An+k0/QlqdwH6rv8284nko14Na7c0TtqtogfWXcRoFE4O4Ff20w==",
      "requires": {
        "character-parser": "2.2.0",
        "is-expression": "4.0.0",
@@ -3214,9 +3192,9 @@
      }
    },
    "pug-runtime": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/pug-runtime/-/pug-runtime-3.0.0.tgz",
-      "integrity": "sha512-GoEPcmQNnaTsePEdVA05bDpY+Op5VLHKayg08AQiqJBWU/yIaywEYv7TetC5dEQS3fzBBoyb2InDcZEg3mPTIA=="
+      "version": "3.0.1",
+      "resolved": "https://registry.npmjs.org/pug-runtime/-/pug-runtime-3.0.1.tgz",
+      "integrity": "sha512-L50zbvrQ35TkpHwv0G6aLSuueDRwc/97XdY8kL3tOT0FmhgG7UypU3VztfV/LATAvmUfYi4wNxSajhSAeNN+Kg=="
    },
    "pug-strip-comments": {
      "version": "2.0.0",
@@ -3621,16 +3599,16 @@
      "integrity": "sha1-vQSN23TefRymkV+qSldXCzVQwtc="
    },
    "socket.io": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/socket.io/-/socket.io-2.3.0.tgz",
-      "integrity": "sha512-2A892lrj0GcgR/9Qk81EaY2gYhCBxurV0PfmmESO6p27QPrUK1J3zdns+5QPqvUYK2q657nSj0guoIil9+7eFg==",
+      "version": "2.4.1",
+      "resolved": "https://registry.npmjs.org/socket.io/-/socket.io-2.4.1.tgz",
+      "integrity": "sha512-Si18v0mMXGAqLqCVpTxBa8MGqriHGQh8ccEOhmsmNS3thNCGBwO8WGrwMibANsWtQQ5NStdZwHqZR3naJVFc3w==",
      "requires": {
        "debug": "4.1.1",
-        "engine.io": "3.4.0",
+        "engine.io": "3.5.0",
        "has-binary2": "1.0.3",
-        "socket.io-adapter": "1.1.1",
-        "socket.io-client": "2.3.0",
-        "socket.io-parser": "3.4.0"
+        "socket.io-adapter": "1.1.2",
+        "socket.io-client": "2.4.0",
+        "socket.io-parser": "3.4.1"
      },
      "dependencies": {
        "debug": {
@@ -3638,73 +3616,37 @@
          "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz",
          "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==",
          "requires": {
-            "ms": "2.1.2"
+            "ms": "2.1.3"
          }
        },
        "ms": {
-          "version": "2.1.2",
-          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
+          "version": "2.1.3",
+          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+          "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
        }
      }
    },
    "socket.io-adapter": {
-      "version": "1.1.1",
-      "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-1.1.1.tgz",
-      "integrity": "sha1-KoBeihTWNyEk3ZFZrUUC+MsH8Gs="
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-1.1.2.tgz",
+      "integrity": "sha512-WzZRUj1kUjrTIrUKpZLEzFZ1OLj5FwLlAFQs9kuZJzJi5DKdU7FsWc36SNmA8iDOtwBQyT8FkrriRM8vXLYz8g=="
    },
    "socket.io-client": {
-      "version": "2.3.0",
-      "resolved": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-2.3.0.tgz",
-      "integrity": "sha512-cEQQf24gET3rfhxZ2jJ5xzAOo/xhZwK+mOqtGRg5IowZsMgwvHwnf/mCRapAAkadhM26y+iydgwsXGObBB5ZdA==",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-2.4.0.tgz",
+      "integrity": "sha512-M6xhnKQHuuZd4Ba9vltCLT9oa+YvTsP8j9NcEiLElfIg8KeYPyhWOes6x4t+LTAC8enQbE/995AdTem2uNyKKQ==",
      "requires": {
        "backo2": "1.0.2",
-        "base64-arraybuffer": "0.1.5",
        "component-bind": "1.0.0",
-        "component-emitter": "1.2.1",
-        "debug": "4.1.1",
-        "engine.io-client": "3.4.0",
-        "has-binary2": "1.0.3",
-        "has-cors": "1.1.0",
-        "indexof": "0.0.1",
-        "object-component": "0.0.3",
-        "parseqs": "0.0.5",
-        "parseuri": "0.0.5",
-        "socket.io-parser": "3.3.0",
-        "to-array": "0.1.4"
-      },
-      "dependencies": {
-        "component-emitter": {
-          "version": "1.2.1",
-          "resolved": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz",
-          "integrity": "sha1-E3kY1teCg/ffemt8WmPhQOaUJeY="
-        },
-        "debug": {
-          "version": "4.1.1",
-          "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz",
-          "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==",
-          "requires": {
-            "ms": "2.1.2"
-          }
-        },
-        "isarray": {
-          "version": "2.0.1",
-          "resolved": "https://registry.npmjs.org/isarray/-/isarray-2.0.1.tgz",
-          "integrity": "sha1-o32U7ZzaLVmGXJ92/llu4fM4dB4="
-        },
-        "ms": {
-          "version": "2.1.2",
-          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
-        },
-        "socket.io-parser": {
-          "version": "3.3.0",
-          "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-3.3.0.tgz",
-          "integrity": "sha512-hczmV6bDgdaEbVqhAeVMM/jfUfzuEZHsQg6eOmLgJht6G3mPKMxYm75w2+qhAQZ+4X+1+ATZ+QFKeOZD5riHng==",
-          "requires": {
-            "component-emitter": "1.2.1",
+        "component-emitter": "1.3.0",
        "debug": "3.1.0",
-            "isarray": "2.0.1"
+        "engine.io-client": "3.5.1",
+        "has-binary2": "1.0.3",
+        "indexof": "0.0.1",
+        "parseqs": "0.0.6",
+        "parseuri": "0.0.6",
+        "socket.io-parser": "3.3.2",
+        "to-array": "0.1.4"
      },
      "dependencies": {
        "debug": {
@@ -3715,19 +3657,27 @@
            "ms": "2.0.0"
          }
        },
-            "ms": {
-              "version": "2.0.0",
-              "resolved": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
-              "integrity": "sha1-VgiurfwAvmwpAd9fmGF4jeDVl8g="
-            }
+        "isarray": {
+          "version": "2.0.1",
+          "resolved": "https://registry.npmjs.org/isarray/-/isarray-2.0.1.tgz",
+          "integrity": "sha1-o32U7ZzaLVmGXJ92/llu4fM4dB4="
+        },
+        "socket.io-parser": {
+          "version": "3.3.2",
+          "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-3.3.2.tgz",
+          "integrity": "sha512-FJvDBuOALxdCI9qwRrO/Rfp9yfndRtc1jSgVgV8FDraihmSP/MLGD5PEuJrNfjALvcQ+vMDM/33AWOYP/JSjDg==",
+          "requires": {
+            "component-emitter": "1.3.0",
+            "debug": "3.1.0",
+            "isarray": "2.0.1"
          }
        }
      }
    },
    "socket.io-parser": {
-      "version": "3.4.0",
-      "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-3.4.0.tgz",
-      "integrity": "sha512-/G/VOI+3DBp0+DJKW4KesGnQkQPFmUCbA/oO2QGT6CWxU7hLGWqU3tyuzeSK/dqcyeHsQg1vTe9jiZI8GU9SCQ==",
+      "version": "3.4.1",
+      "resolved": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-3.4.1.tgz",
+      "integrity": "sha512-11hMgzL+WCLWf1uFtHSNvliI++tcRUWdoeYuwIl+Axvwy9z2gQM+7nJyN3STj1tLj5JyIUH8/gpDGxzAlDdi0A==",
      "requires": {
        "component-emitter": "1.2.1",
        "debug": "4.1.1",
@@ -3744,7 +3694,7 @@
          "resolved": "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz",
          "integrity": "sha512-pYAIzeRo8J6KPEaJ0VWOh5Pzkbw/RetuzehGM7QRRX5he4fPHx2rdKMB256ehJCkX+XRQm16eZLqLNS8RSZXZw==",
          "requires": {
-            "ms": "2.1.2"
+            "ms": "2.1.3"
          }
        },
        "isarray": {
@@ -3753,9 +3703,9 @@
          "integrity": "sha1-o32U7ZzaLVmGXJ92/llu4fM4dB4="
        },
        "ms": {
-          "version": "2.1.2",
-          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
-          "integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
+          "version": "2.1.3",
+          "resolved": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
+          "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA=="
        }
      }
    },
@@ -4425,8 +4375,8 @@
      "resolved": "https://registry.npmjs.org/with/-/with-7.0.2.tgz",
      "integrity": "sha512-RNGKj82nUPg3g5ygxkQl0R937xLyho1J24ItRCBTr/m1YnZkzJy1hUiHUJrc/VlsDQzsCnInEGSg3bci0Lmd4w==",
      "requires": {
-        "@babel/parser": "7.12.11",
-        "@babel/types": "7.12.12",
+        "@babel/parser": "7.13.10",
+        "@babel/types": "7.13.0",
        "assert-never": "1.2.1",
        "babel-walk": "3.0.0-canary-5"
      }
@@ -4514,12 +4464,9 @@
      "integrity": "sha1-tSQ9jz7BqjXxNkYFvA0QNuMKtp8="
    },
    "ws": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-7.2.0.tgz",
-      "integrity": "sha512-+SqNqFbwTm/0DC18KYzIsMTnEWpLwJsiasW/O17la4iDRRIO9uaHbvKiAS3AHgTiuuWerK/brj4O6MYZkei9xg==",
-      "requires": {
-        "async-limiter": "1.0.1"
-      }
+      "version": "7.4.4",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-7.4.4.tgz",
+      "integrity": "sha512-Qm8k8ojNQIMx7S+Zp8u/uHOx7Qazv3Yv4q68MiWWWOJhiwG5W3x7iqmRtJo8xxrciZUY4vRxUTJCKuRnF28ZZw=="
    },
    "xmlhttprequest-ssl": {
      "version": "1.5.5",
@@ -62,7 +62,7 @@
    "pg-hstore": "^2.3.3",
    "rate-limiter-flexible": "^2.1.15",
    "sequelize": "^6.3.5",
-    "socket.io": "^2.3.0",
+    "socket.io": "^2.4.1",
    "tokgen": "^1.0.0",
    "umzug": "^2.3.0"
  },
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -29,7 +29,6 @@ const types = [
  'CreateFamilyByMailTokenRequest',
  'SignIntoFamilyRequest',
  'RecoverParentPasswordRequest',
-  'CanRecoverPasswordRequest',
  'RegisterChildDeviceRequest',
  'SerializedParentAction',
  'SerializedAppLogicAction',
@@ -52,5 +52,4 @@ async function main() {

 main().catch((ex) => {
  console.warn(ex)
-  process.exit(1)
 })
@@ -64,7 +64,11 @@ async function startMariadb() {
  }

  return {
-    shutdown: () => task.kill('SIGINT'),
+    shutdown: () => {
+      spawnAsync('mysql', ['-S', socketPath, '-u', 'root', '-e', 'SHUTDOWN;'], { stdio: 'inherit' }).catch((ex) => {
+        console.warn(ex)
+      })
+    },
    socketPath,
    dataDir,
    database,
@@ -16,10 +16,13 @@
 */

 const { spawn } = require('child_process')
+const { resolve } = require('path')

 function startMainApp(env) {
+  const initPath = resolve(__dirname, '../../build/index.js')
+
  return new Promise((resolve, reject) => {
-    const task = spawn('npm', ['start'], {
+    const task = spawn('node', [initPath], {
      stdio: ['inherit', 'pipe', 'inherit'],
      env: { ...process.env, PORT: 0 /* random port */, ...env }
    })
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -21,7 +21,6 @@ import { BadRequest, Forbidden, Unauthorized } from 'http-errors'
 import { config } from '../config'
 import { Database, Transaction } from '../database'
 import { removeDevice } from '../function/device/remove-device'
-import { canRecoverPassword } from '../function/parent/can-recover-password'
 import { createAddDeviceToken } from '../function/parent/create-add-device-token'
 import { createFamily } from '../function/parent/create-family'
 import { getStatusByMailToken } from '../function/parent/get-status-by-mail-address'
@@ -30,7 +29,7 @@ import { recoverParentPassword } from '../function/parent/recover-parent-passwor
 import { signInIntoFamily } from '../function/parent/sign-in-into-family'
 import { WebsocketApi } from '../websocket'
 import {
-  isCanRecoverPasswordRequest, isCreateFamilyByMailTokenRequest,
+  isCreateFamilyByMailTokenRequest,
  isCreateRegisterDeviceTokenRequest, isLinkParentMailAddressRequest,
  isMailAuthTokenRequestBody, isRecoverParentPasswordRequest,
  isRemoveDeviceRequest, isSignIntoFamilyRequest
@@ -113,24 +112,6 @@ export const createParentRouter = ({ database, websocket }: {database: Database,
    }
  })

-  router.post('/can-recover-password', json(), async (req, res, next) => {
-    try {
-      if (!isCanRecoverPasswordRequest(req.body)) {
-        throw new BadRequest()
-      }
-
-      const canRecover = await canRecoverPassword({
-        database,
-        parentUserId: req.body.parentUserId,
-        mailAuthToken: req.body.mailAuthToken
-      })
-
-      res.json({ canRecover })
-    } catch (ex) {
-      next(ex)
-    }
-  })
-
  router.post('/recover-parent-password', json(), async (req, res, next) => {
    try {
      if (!isRecoverParentPasswordRequest(req.body)) {
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -82,11 +82,6 @@ export interface RecoverParentPasswordRequest {
  password: ParentPassword
 }

-export interface CanRecoverPasswordRequest {
-  mailAuthToken: string
-  parentUserId: string
-}
-
 export interface RegisterChildDeviceRequest {
  registerToken: string
  childDevice: NewDeviceInfo
@@ -1,5 +1,5 @@
 // tslint:disable 
-import { ClientPushChangesRequest, ClientPullChangesRequest, MailAuthTokenRequestBody, CreateFamilyByMailTokenRequest, SignIntoFamilyRequest, RecoverParentPasswordRequest, CanRecoverPasswordRequest, RegisterChildDeviceRequest, SerializedParentAction, SerializedAppLogicAction, SerializedChildAction, CreateRegisterDeviceTokenRequest, CanDoPurchaseRequest, FinishPurchaseByGooglePlayRequest, LinkParentMailAddressRequest, UpdatePrimaryDeviceRequest, RemoveDeviceRequest, RequestWithAuthToken, SendMailLoginCodeRequest, SignInByMailCodeRequest } from './schema'
+import { ClientPushChangesRequest, ClientPullChangesRequest, MailAuthTokenRequestBody, CreateFamilyByMailTokenRequest, SignIntoFamilyRequest, RecoverParentPasswordRequest, RegisterChildDeviceRequest, SerializedParentAction, SerializedAppLogicAction, SerializedChildAction, CreateRegisterDeviceTokenRequest, CanDoPurchaseRequest, FinishPurchaseByGooglePlayRequest, LinkParentMailAddressRequest, UpdatePrimaryDeviceRequest, RemoveDeviceRequest, RequestWithAuthToken, SendMailLoginCodeRequest, SignInByMailCodeRequest } from './schema'
 import Ajv from 'ajv'
 const ajv = new Ajv()

@@ -2576,24 +2576,6 @@ export const isRecoverParentPasswordRequest: (value: object) => value is Recover
  "definitions": definitions,
  "$schema": "http://json-schema.org/draft-07/schema#"
 })
-export const isCanRecoverPasswordRequest: (value: object) => value is CanRecoverPasswordRequest = ajv.compile({
-  "type": "object",
-  "properties": {
-    "mailAuthToken": {
-      "type": "string"
-    },
-    "parentUserId": {
-      "type": "string"
-    }
-  },
-  "additionalProperties": false,
-  "required": [
-    "mailAuthToken",
-    "parentUserId"
-  ],
-  "definitions": definitions,
-  "$schema": "http://json-schema.org/draft-07/schema#"
-})
 export const isRegisterChildDeviceRequest: (value: object) => value is RegisterChildDeviceRequest = ajv.compile({
  "type": "object",
  "properties": {
@@ -47,5 +47,6 @@ export const createConfigModel = (sequelize: Sequelize.Sequelize): ConfigModelSt

 export const configItemIds = {
  statusMessage: 'status_message',
-  selfTestData: 'self_test_data'
+  selfTestData: 'self_test_data',
+  secondSelfTestData: 'self_test_data_two'
 }
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -15,130 +15,6 @@
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

-import * as Sequelize from 'sequelize'
-import { generateIdWithinFamily } from '../util/token'
-import { AddDeviceTokenModelStatic, createAddDeviceTokenModel } from './adddevicetoken'
-import { AppModelStatic, createAppModel } from './app'
-import { AppActivityModelStatic, createAppActivityModel } from './appactivity'
-import { AuthTokenModelStatic, createAuthtokenModel } from './authtoken'
-import { CategoryModelStatic, createCategoryModel } from './category'
-import { CategoryAppModelStatic, createCategoryAppModel } from './categoryapp'
-import { CategoryNetworkIdModelStatic, createCategoryNetworkIdModel } from './categorynetworkid'
-import { ChildTaskModelStatic, createChildTaskModel } from './childtask'
-import { configItemIds, ConfigModelStatic, createConfigModel } from './config'
-import { createDeviceModel, DeviceModelStatic } from './device'
-import { createFamilyModel, FamilyModelStatic } from './family'
-import { createMailLoginTokenModel, MailLoginTokenModelStatic } from './maillogintoken'
-import { createUmzug } from './migration/umzug'
-import { createOldDeviceModel, OldDeviceModelStatic } from './olddevice'
-import { createPurchaseModel, PurchaseModelStatic } from './purchase'
-import { createSessionDurationModel, SessionDurationModelStatic } from './sessionduration'
-import { createTimelimitRuleModel, TimelimitRuleModelStatic } from './timelimitrule'
-import { createUsedTimeModel, UsedTimeModelStatic } from './usedtime'
-import { createUserModel, UserModelStatic } from './user'
-import { createUserLimitLoginCategoryModel, UserLimitLoginCategoryModelStatic } from './userlimitlogincategory'
-
-export type Transaction = Sequelize.Transaction
-
-export interface Database {
-  addDeviceToken: AddDeviceTokenModelStatic
-  authtoken: AuthTokenModelStatic
-  app: AppModelStatic
-  appActivity: AppActivityModelStatic
-  category: CategoryModelStatic
-  categoryApp: CategoryAppModelStatic
-  categoryNetworkId: CategoryNetworkIdModelStatic
-  childTask: ChildTaskModelStatic
-  config: ConfigModelStatic
-  device: DeviceModelStatic
-  family: FamilyModelStatic
-  mailLoginToken: MailLoginTokenModelStatic
-  oldDevice: OldDeviceModelStatic
-  purchase: PurchaseModelStatic
-  sessionDuration: SessionDurationModelStatic
-  timelimitRule: TimelimitRuleModelStatic
-  usedTime: UsedTimeModelStatic
-  user: UserModelStatic
-  userLimitLoginCategory: UserLimitLoginCategoryModelStatic
-  transaction: <T> (autoCallback: (t: Transaction) => Promise<T>, options?: { transaction: Transaction }) => Promise<T>
-  dialect: string
-}
-
-const createDatabase = (sequelize: Sequelize.Sequelize): Database => ({
-  addDeviceToken: createAddDeviceTokenModel(sequelize),
-  authtoken: createAuthtokenModel(sequelize),
-  app: createAppModel(sequelize),
-  appActivity: createAppActivityModel(sequelize),
-  category: createCategoryModel(sequelize),
-  categoryApp: createCategoryAppModel(sequelize),
-  childTask: createChildTaskModel(sequelize),
-  categoryNetworkId: createCategoryNetworkIdModel(sequelize),
-  config: createConfigModel(sequelize),
-  device: createDeviceModel(sequelize),
-  family: createFamilyModel(sequelize),
-  mailLoginToken: createMailLoginTokenModel(sequelize),
-  oldDevice: createOldDeviceModel(sequelize),
-  purchase: createPurchaseModel(sequelize),
-  sessionDuration: createSessionDurationModel(sequelize),
-  timelimitRule: createTimelimitRuleModel(sequelize),
-  usedTime: createUsedTimeModel(sequelize),
-  user: createUserModel(sequelize),
-  userLimitLoginCategory: createUserLimitLoginCategoryModel(sequelize),
-  transaction: <T> (autoCallback: (transaction: Transaction) => Promise<T>, options?: { transaction: Transaction }) => (sequelize.transaction({
-    isolationLevel: Sequelize.Transaction.ISOLATION_LEVELS.READ_COMMITTED,
-    transaction: options?.transaction
-  }, autoCallback) as any) as Promise<T>,
-  dialect: sequelize.getDialect()
-})
-
-export const sequelize = new Sequelize.Sequelize(process.env.DATABASE_URL || 'sqlite://test.db', {
-  define: {
-    timestamps: false
-  },
-  logging: false
-})
-
-export const defaultDatabase = createDatabase(sequelize)
-export const defaultUmzug = createUmzug(sequelize)
-
-class NestedTransactionTestException extends Error {}
-class TestRollbackException extends NestedTransactionTestException {}
-class NestedTransactionsNotWorkingException extends NestedTransactionTestException { constructor () { super('NestedTransactionsNotWorkingException') } }
-class IllegalStateException extends NestedTransactionTestException {}
-
-export async function assertNestedTransactionsAreWorking (database: Database) {
-  const testValue = generateIdWithinFamily()
-
-  // clean up just for the case
-  await database.config.destroy({ where: { id: configItemIds.selfTestData } })
-
-  await database.transaction(async (transaction) => {
-    const readOne = await database.config.findOne({ where: { id: configItemIds.selfTestData }, transaction })
-
-    if (readOne) throw new IllegalStateException()
-
-    await database.transaction(async (transaction) => {
-      await database.config.create({ id: configItemIds.selfTestData, value: testValue }, { transaction })
-
-      const readTwo = await database.config.findOne({ where: { id: configItemIds.selfTestData }, transaction })
-
-      if (readTwo?.value !== testValue) throw new IllegalStateException()
-
-      try {
-        await database.transaction(async (transaction) => {
-          await database.config.destroy({ where: { id: configItemIds.selfTestData }, transaction })
-
-          throw new TestRollbackException()
-        }, { transaction })
-      } catch (ex) {
-        if (!(ex instanceof TestRollbackException)) throw ex
-      }
-
-      const readThree = await database.config.findOne({ where: { id: configItemIds.selfTestData }, transaction })
-
-      if (readThree?.value !== testValue) throw new NestedTransactionsNotWorkingException()
-
-      await database.config.destroy({ where: { id: configItemIds.selfTestData }, transaction })
-    }, { transaction })
-  })
-}
+export { Transaction, Database, defaultDatabase, defaultUmzug } from './main'
+export { assertNestedTransactionsAreWorking } from './utils/nested-transactions'
+export { assertSerializeableTransactionsAreWorking, shouldRetryWithException } from './utils/serialized'
@@ -0,0 +1,101 @@
+/*
+ * server component for the TimeLimit App
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, version 3 of the License.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import * as Sequelize from 'sequelize'
+import { AddDeviceTokenModelStatic, createAddDeviceTokenModel } from './adddevicetoken'
+import { AppModelStatic, createAppModel } from './app'
+import { AppActivityModelStatic, createAppActivityModel } from './appactivity'
+import { AuthTokenModelStatic, createAuthtokenModel } from './authtoken'
+import { CategoryModelStatic, createCategoryModel } from './category'
+import { CategoryAppModelStatic, createCategoryAppModel } from './categoryapp'
+import { CategoryNetworkIdModelStatic, createCategoryNetworkIdModel } from './categorynetworkid'
+import { ChildTaskModelStatic, createChildTaskModel } from './childtask'
+import { ConfigModelStatic, createConfigModel } from './config'
+import { createDeviceModel, DeviceModelStatic } from './device'
+import { createFamilyModel, FamilyModelStatic } from './family'
+import { createMailLoginTokenModel, MailLoginTokenModelStatic } from './maillogintoken'
+import { createUmzug } from './migration/umzug'
+import { createOldDeviceModel, OldDeviceModelStatic } from './olddevice'
+import { createPurchaseModel, PurchaseModelStatic } from './purchase'
+import { createSessionDurationModel, SessionDurationModelStatic } from './sessionduration'
+import { createTimelimitRuleModel, TimelimitRuleModelStatic } from './timelimitrule'
+import { createUsedTimeModel, UsedTimeModelStatic } from './usedtime'
+import { createUserModel, UserModelStatic } from './user'
+import { createUserLimitLoginCategoryModel, UserLimitLoginCategoryModelStatic } from './userlimitlogincategory'
+
+export type Transaction = Sequelize.Transaction
+
+export interface Database {
+  addDeviceToken: AddDeviceTokenModelStatic
+  authtoken: AuthTokenModelStatic
+  app: AppModelStatic
+  appActivity: AppActivityModelStatic
+  category: CategoryModelStatic
+  categoryApp: CategoryAppModelStatic
+  categoryNetworkId: CategoryNetworkIdModelStatic
+  childTask: ChildTaskModelStatic
+  config: ConfigModelStatic
+  device: DeviceModelStatic
+  family: FamilyModelStatic
+  mailLoginToken: MailLoginTokenModelStatic
+  oldDevice: OldDeviceModelStatic
+  purchase: PurchaseModelStatic
+  sessionDuration: SessionDurationModelStatic
+  timelimitRule: TimelimitRuleModelStatic
+  usedTime: UsedTimeModelStatic
+  user: UserModelStatic
+  userLimitLoginCategory: UserLimitLoginCategoryModelStatic
+  transaction: <T> (autoCallback: (t: Transaction) => Promise<T>, options?: { transaction: Transaction }) => Promise<T>
+  dialect: string
+}
+
+const createDatabase = (sequelize: Sequelize.Sequelize): Database => ({
+  addDeviceToken: createAddDeviceTokenModel(sequelize),
+  authtoken: createAuthtokenModel(sequelize),
+  app: createAppModel(sequelize),
+  appActivity: createAppActivityModel(sequelize),
+  category: createCategoryModel(sequelize),
+  categoryApp: createCategoryAppModel(sequelize),
+  childTask: createChildTaskModel(sequelize),
+  categoryNetworkId: createCategoryNetworkIdModel(sequelize),
+  config: createConfigModel(sequelize),
+  device: createDeviceModel(sequelize),
+  family: createFamilyModel(sequelize),
+  mailLoginToken: createMailLoginTokenModel(sequelize),
+  oldDevice: createOldDeviceModel(sequelize),
+  purchase: createPurchaseModel(sequelize),
+  sessionDuration: createSessionDurationModel(sequelize),
+  timelimitRule: createTimelimitRuleModel(sequelize),
+  usedTime: createUsedTimeModel(sequelize),
+  user: createUserModel(sequelize),
+  userLimitLoginCategory: createUserLimitLoginCategoryModel(sequelize),
+  transaction: <T> (autoCallback: (transaction: Transaction) => Promise<T>, options?: { transaction: Transaction }) => (sequelize.transaction({
+    isolationLevel: Sequelize.Transaction.ISOLATION_LEVELS.SERIALIZABLE,
+    transaction: options?.transaction
+  }, autoCallback) as any) as Promise<T>,
+  dialect: sequelize.getDialect()
+})
+
+export const sequelize = new Sequelize.Sequelize(process.env.DATABASE_URL || 'sqlite://test.db', {
+  define: {
+    timestamps: false
+  },
+  logging: false
+})
+
+export const defaultDatabase = createDatabase(sequelize)
+export const defaultUmzug = createUmzug(sequelize)
@@ -0,0 +1,62 @@
+/*
+ * server component for the TimeLimit App
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, version 3 of the License.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import { generateIdWithinFamily } from '../../util/token'
+import { configItemIds } from '../config'
+import { Database } from '../main'
+
+class NestedTransactionTestException extends Error {}
+class TestRollbackException extends NestedTransactionTestException {}
+class NestedTransactionsNotWorkingException extends NestedTransactionTestException { constructor () { super('NestedTransactionsNotWorkingException') } }
+class IllegalStateException extends NestedTransactionTestException {}
+
+export async function assertNestedTransactionsAreWorking (database: Database) {
+  const testValue = generateIdWithinFamily()
+
+  // clean up just for the case
+  await database.config.destroy({ where: { id: configItemIds.selfTestData } })
+
+  await database.transaction(async (transaction) => {
+    const readOne = await database.config.findOne({ where: { id: configItemIds.selfTestData }, transaction })
+
+    if (readOne) throw new IllegalStateException()
+
+    await database.transaction(async (transaction) => {
+      await database.config.create({ id: configItemIds.selfTestData, value: testValue }, { transaction })
+
+      const readTwo = await database.config.findOne({ where: { id: configItemIds.selfTestData }, transaction })
+
+      if (readTwo?.value !== testValue) throw new IllegalStateException()
+
+      try {
+        await database.transaction(async (transaction) => {
+          await database.config.destroy({ where: { id: configItemIds.selfTestData }, transaction })
+
+          throw new TestRollbackException()
+        }, { transaction })
+      } catch (ex) {
+        if (!(ex instanceof TestRollbackException)) throw ex
+      }
+
+      const readThree = await database.config.findOne({ where: { id: configItemIds.selfTestData }, transaction })
+
+      if (readThree?.value !== testValue) throw new NestedTransactionsNotWorkingException()
+
+      await database.config.destroy({ where: { id: configItemIds.selfTestData }, transaction })
+    }, { transaction })
+  })
+}
@@ -0,0 +1,104 @@
+/*
+ * server component for the TimeLimit App
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
+ *
+ * This program is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Affero General Public License as
+ * published by the Free Software Foundation, version 3 of the License.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU Affero General Public License for more details.
+ *
+ * You should have received a copy of the GNU Affero General Public License
+ * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ */
+
+import * as Sequelize from 'sequelize'
+import { configItemIds } from '../config'
+import { Database } from '../main'
+
+export class SerializationFeatureCheckException extends Error {}
+
+export function shouldRetryWithException (database: Database, e: any): boolean {
+  if (e instanceof Sequelize.TimeoutError) return true
+
+  if (!(e instanceof Sequelize.DatabaseError)) return false
+
+  const parent = e.parent
+
+  if (database.dialect === 'sqlite') {
+    if (parent.message.startsWith('SQLITE_BUSY:')) return true
+  } else if (database.dialect === 'postgres') {
+    // 40001 = serialization_failure
+    if ((parent as any).code === '40001') return true
+    // 40P01 = deadlock detected
+    if ((parent as any).code === '40P01') return true
+  } else if (database.dialect === 'mariadb') {
+    const errno = (parent as any).errno
+
+    // ER_LOCK_DEADLOCK
+    // Deadlock found when trying to get lock; try restarting transaction
+    if (errno === 1213) return true
+  }
+
+  return false
+}
+
+export async function assertSerializeableTransactionsAreWorking (database: Database) {
+  // clean up just for the case
+  await database.config.destroy({
+    where: {
+      id: {
+        [Sequelize.Op.in]: [ configItemIds.selfTestData, configItemIds.secondSelfTestData ]
+      }
+    }
+  })
+
+  // insert specific data
+  await database.config.bulkCreate([
+    {
+      id: configItemIds.selfTestData,
+      value: '123'
+    },
+    {
+      id: configItemIds.secondSelfTestData,
+      value: '456'
+    }
+  ])
+
+  try {
+    // use two parallel transactions
+    await database.transaction(async (transactionOne) => {
+      await database.transaction(async (transactionTwo) => {
+        await database.config.findAll({ transaction: transactionOne })
+        await database.config.findAll({ transaction: transactionTwo })
+
+        await Promise.all([
+          (async () => {
+            await database.config.update({ value: 'c' }, { where: { id: configItemIds.selfTestData }, transaction: transactionOne })
+          })(),
+          (async () => {
+            await database.config.update({ value: 'd' }, { where: { id: configItemIds.secondSelfTestData }, transaction: transactionTwo })
+          })()
+        ])
+      })
+    })
+
+    throw new SerializationFeatureCheckException()
+  } catch (ex) {
+    if (!shouldRetryWithException(database, ex)) {
+      throw new SerializationFeatureCheckException()
+    }
+  }
+
+  // finish clean up
+  await database.config.destroy({
+    where: {
+      id: {
+        [Sequelize.Op.in]: [ configItemIds.selfTestData, configItemIds.secondSelfTestData ]
+      }
+    }
+  })
+}
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -16,7 +16,6 @@
 */

 import { Conflict, InternalServerError, Unauthorized } from 'http-errors'
-import * as Sequelize from 'sequelize'
 import { config } from '../../config'
 import { Database } from '../../database'
 import { generateVersionId } from '../../util/token'
@@ -60,7 +59,6 @@ export const setPrimaryDevice = async ({ database, websocket, deviceAuthToken, c
        userId: deviceEntry.currentUserId
      },
      transaction,
-      lock: Sequelize.Transaction.LOCK.UPDATE,
      attributes: ['currentDevice']
    })

@@ -1,41 +0,0 @@
-/*
- * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
- *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, version 3 of the License.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
- *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
- */
-
-import { Database } from '../../database'
-import { requireMailByAuthToken } from '../authentication'
-
-export const canRecoverPassword = async ({ database, mailAuthToken, parentUserId }: {
-  database: Database
-  mailAuthToken: string
-  parentUserId: string
-  // no transaction here because this is directly called from an API endpoint
-}): Promise<boolean> => {
-  return database.transaction(async (transaction) => {
-    const mail = await requireMailByAuthToken({ mailAuthToken, database, transaction })
-
-    const entry = await database.user.findOne({
-      where: {
-        mail,
-        userId: parentUserId,
-        type: 'parent'
-      },
-      transaction
-    })
-
-    return !!entry
-  })
-}
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -16,7 +16,6 @@
 */

 import { Conflict, Unauthorized } from 'http-errors'
-import * as Sequelize from 'sequelize'
 import { Database } from '../../database'
 import { generateVersionId } from '../../util/token'
 import { WebsocketApi } from '../../websocket'
@@ -65,8 +64,7 @@ export const linkMailAddress = async ({ mailAuthToken, deviceAuthToken, parentUs
        familyId,
        userId: parentUserId
      },
-      transaction,
-      lock: Sequelize.Transaction.LOCK.UPDATE
+      transaction
    })

    if (!parentEntry) {
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -16,7 +16,6 @@
 */

 import { Conflict } from 'http-errors'
-import * as Sequelize from 'sequelize'
 import { Database, Transaction } from '../../database'
 import { notifyClientsAboutChangesDelayed } from '../../function/websocket'
 import { WebsocketApi } from '../../websocket'
@@ -51,8 +50,7 @@ export const addPurchase = async ({ database, familyId, type, transactionId, web
    where: {
      familyId
    },
-    transaction,
-    lock: Sequelize.Transaction.LOCK.UPDATE
+    transaction
  })

  if (!familyEntry) {
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -15,10 +15,10 @@
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

-import * as Sequelize from 'sequelize'
 import { AddUsedTimeAction } from '../../../../action'
 import { MinuteOfDay } from '../../../../util/minuteofday'
 import { Cache } from '../cache'
+import { IllegalStateException } from '../exception/illegal-state'
 import { MissingCategoryException } from '../exception/missing-item'

 export const getRoundedTimestamp = () => {
@@ -65,17 +65,32 @@ export async function dispatchAddUsedTime ({ action, cache }: {
    currentExtraTime: number
  }) => {
    if (action.timeToAdd !== 0) {
-      const maxOperator = cache.database.dialect === 'sqlite' ? 'MAX' : 'GREATEST'
-      const minOperator = cache.database.dialect === 'sqlite' ? 'MIN' : 'LEAST'
-
-      // try to update first
-      const [updatedRows] = await cache.database.usedTime.update({
-        usedTime: Sequelize.literal(`${maxOperator}(0, ${minOperator}(usedTime + ${action.timeToAdd}, ${dayLengthInMs}))`) as any,
-        lastUpdate: roundedTimestamp
-      }, {
+      const oldItem = await cache.database.usedTime.findOne({
        where: {
          familyId: cache.familyId,
-          categoryId: categoryId,
+          categoryId: action.categoryId,
+          dayOfEpoch: action.dayOfEpoch,
+          startMinuteOfDay: MinuteOfDay.MIN,
+          endMinuteOfDay: MinuteOfDay.MAX
+        },
+        transaction: cache.transaction
+      })
+
+      if (oldItem) {
+        const oldUsedTime = oldItem.usedTime
+        const newUsedTime = Math.max(0, Math.min(oldUsedTime + action.timeToAdd, dayLengthInMs))
+
+        const oldLastUpdate = parseInt(oldItem.lastUpdate, 10)
+        const newLastUpdate = parseInt(roundedTimestamp, 10)
+
+        if (oldUsedTime !== newUsedTime || oldLastUpdate !== newLastUpdate) {
+          const [updatedRows] = await cache.database.usedTime.update({
+            usedTime: newUsedTime,
+            lastUpdate: newLastUpdate.toString(10)
+          }, {
+            where: {
+              familyId: cache.familyId,
+              categoryId: action.categoryId,
              dayOfEpoch: action.dayOfEpoch,
              startMinuteOfDay: MinuteOfDay.MIN,
              endMinuteOfDay: MinuteOfDay.MAX
@@ -83,13 +98,16 @@ export async function dispatchAddUsedTime ({ action, cache }: {
            transaction: cache.transaction
          })

-      // otherwise create
          if (updatedRows === 0) {
+            throw new IllegalStateException({ staticMessage: 'could not update fetched row' })
+          }
+        }
+      } else {
        await cache.database.usedTime.create({
          familyId: cache.familyId,
-          categoryId: categoryId,
+          categoryId: action.categoryId,
          dayOfEpoch: action.dayOfEpoch,
-          usedTime: Math.min(action.timeToAdd, dayLengthInMs),
+          usedTime: Math.max(0, Math.min(action.timeToAdd, dayLengthInMs)),
          lastUpdate: roundedTimestamp,
          startMinuteOfDay: MinuteOfDay.MIN,
          endMinuteOfDay: MinuteOfDay.MAX
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -15,12 +15,11 @@
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

-import * as Sequelize from 'sequelize'
 import { AddUsedTimeActionVersion2 } from '../../../../action'
 import { EventHandler } from '../../../../monitoring/eventhandler'
 import { MinuteOfDay } from '../../../../util/minuteofday'
 import { Cache } from '../cache'
-import { SourceDeviceNotFoundException } from '../exception/illegal-state'
+import { IllegalStateException, SourceDeviceNotFoundException } from '../exception/illegal-state'
 import { getRoundedTimestamp as getRoundedTimestampForUsedTime } from './addusedtime'

 export const getRoundedTimestampForSessionDuration = () => {
@@ -92,13 +91,28 @@ export async function dispatchAddUsedTimeVersion2 ({ deviceId, action, cache, ev
      const lengthInMinutes = (end - start) + 1
      const lengthInMs = lengthInMinutes * 1000 * 60

-      const maxOperator = cache.database.dialect === 'sqlite' ? 'MAX' : 'GREATEST'
-      const minOperator = cache.database.dialect === 'sqlite' ? 'MIN' : 'LEAST'
+      const oldItem = await cache.database.usedTime.findOne({
+        where: {
+          familyId: cache.familyId,
+          categoryId: item.categoryId,
+          dayOfEpoch: action.dayOfEpoch,
+          startMinuteOfDay: start,
+          endMinuteOfDay: end
+        },
+        transaction: cache.transaction
+      })

-      // try to update first
+      if (oldItem) {
+        const oldUsedTime = oldItem.usedTime
+        const newUsedTime = Math.max(0, Math.min(oldUsedTime + item.timeToAdd, lengthInMs))
+
+        const oldLastUpdate = parseInt(oldItem.lastUpdate, 10)
+        const newLastUpdate = parseInt(roundedTimestampForUsedTime, 10)
+
+        if (oldUsedTime !== newUsedTime || oldLastUpdate !== newLastUpdate) {
          const [updatedRows] = await cache.database.usedTime.update({
-        usedTime: Sequelize.literal(`${maxOperator}(0, ${minOperator}(usedTime + ${item.timeToAdd}, ${lengthInMs}))`) as any,
-        lastUpdate: roundedTimestampForUsedTime
+            usedTime: newUsedTime,
+            lastUpdate: newLastUpdate.toString(10)
          }, {
            where: {
              familyId: cache.familyId,
@@ -110,13 +124,16 @@ export async function dispatchAddUsedTimeVersion2 ({ deviceId, action, cache, ev
            transaction: cache.transaction
          })

-      // otherwise create
          if (updatedRows === 0) {
+            throw new IllegalStateException({ staticMessage: 'could not update fetched row' })
+          }
+        }
+      } else {
        await cache.database.usedTime.create({
          familyId: cache.familyId,
          categoryId: item.categoryId,
          dayOfEpoch: action.dayOfEpoch,
-          usedTime: Math.min(item.timeToAdd, lengthInMs),
+          usedTime: Math.max(0, Math.min(item.timeToAdd, lengthInMs)),
          lastUpdate: roundedTimestampForUsedTime,
          startMinuteOfDay: start,
          endMinuteOfDay: end
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -15,7 +15,6 @@
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

-import * as Sequelize from 'sequelize'
 import { ChildChangePasswordAction } from '../../../../action'
 import { Cache } from '../cache'
 import { SourceUserNotFoundException } from '../exception/illegal-state'
@@ -31,8 +30,7 @@ export const dispatchChildChangePassword = async ({ action, childUserId, cache }
      userId: childUserId,
      type: 'child'
    },
-    transaction: cache.transaction,
-    lock: Sequelize.Transaction.LOCK.UPDATE
+    transaction: cache.transaction
  })

  if (!childEntry) {
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -15,7 +15,6 @@
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

-import * as Sequelize from 'sequelize'
 import { ChangeParentPasswordAction, InvalidChangeParentPasswordIntegrityException } from '../../../../action/changeparentpassword'
 import { Cache } from '../cache'
 import { ApplyActionException } from '../exception/index'
@@ -31,8 +30,7 @@ export async function dispatchChangeParentPassword ({ action, cache }: {
      userId: action.parentUserId,
      type: 'parent'
    },
-    transaction: cache.transaction,
-    lock: Sequelize.Transaction.LOCK.UPDATE
+    transaction: cache.transaction
  })

  if (!parentEntry) {
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -106,8 +106,7 @@ export async function dispatchRemoveUser ({ action, cache, parentUserId }: {
        familyId: cache.familyId,
        childId: action.userId
      },
-      transaction: cache.transaction,
-      lock: Sequelize.Transaction.LOCK.UPDATE
+      transaction: cache.transaction
    })

    await cache.database.categoryApp.destroy({
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -15,7 +15,6 @@
 * along with this program.  If not, see <https://www.gnu.org/licenses/>.
 */

-import * as Sequelize from 'sequelize'
 import { SetChildPasswordAction } from '../../../../action'
 import { Cache } from '../cache'
 import { MissingUserException } from '../exception/missing-item'
@@ -30,8 +29,7 @@ export async function dispatchSetChildPassword ({ action, cache }: {
      userId: action.childUserId,
      type: 'child'
    },
-    transaction: cache.transaction,
-    lock: Sequelize.Transaction.LOCK.UPDATE
+    transaction: cache.transaction
  })

  if (!childEntry) {
@@ -18,7 +18,7 @@
 import { BadRequest } from 'http-errors'
 import { ClientPushChangesRequest } from '../../../api/schema'
 import { VisibleConnectedDevicesManager } from '../../../connected-devices'
-import { Database } from '../../../database'
+import { Database, shouldRetryWithException } from '../../../database'
 import { EventHandler } from '../../../monitoring/eventhandler'
 import { WebsocketApi } from '../../../websocket'
 import { notifyClientsAboutChangesDelayed } from '../../websocket'
@@ -104,7 +104,11 @@ export const applyActionsFromDevice = async ({ database, request, websocket, con
          }
        })
      } catch (ex) {
-        if (ex instanceof ApplyActionException) {
+        if (shouldRetryWithException(ex, database)) {
+          eventHandler.countEvent('applyActionsFromDevice got exception which should cause retry')
+
+          throw ex
+        } else if (ex instanceof ApplyActionException) {
          eventHandler.countEvent('applyActionsFromDevice errorDispatchingAction:' + ex.staticMessage)
        } else {
          const stack = ex instanceof Error && ex.stack ? ex.stack.substring(0, 4096) : 'no stack'
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -19,7 +19,7 @@ import { Server } from 'http'
 import { createApi } from './api'
 import { config } from './config'
 import { VisibleConnectedDevicesManager } from './connected-devices'
-import { assertNestedTransactionsAreWorking, defaultDatabase, defaultUmzug } from './database'
+import { assertNestedTransactionsAreWorking, assertSerializeableTransactionsAreWorking, defaultDatabase, defaultUmzug } from './database'
 import { EventHandler } from './monitoring/eventhandler'
 import { InMemoryEventHandler } from './monitoring/inmemoryeventhandler'
 import { createWebsocketHandler } from './websocket'
@@ -31,6 +31,7 @@ async function main () {
  const eventHandler: EventHandler = new InMemoryEventHandler()

  await assertNestedTransactionsAreWorking(database)
+  await assertSerializeableTransactionsAreWorking(database)

  const connectedDevicesManager = new VisibleConnectedDevicesManager({
    database
@@ -1,6 +1,6 @@
 /*
 * server component for the TimeLimit App
- * Copyright (C) 2019 - 2020 Jonas Lochmann
+ * Copyright (C) 2019 - 2021 Jonas Lochmann
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Affero General Public License as
@@ -53,7 +53,6 @@ async function deleteDeprecatedPurchases ({ database, websocket }: {
      },
      attributes: ['familyId'],
      transaction,
-      lock: Sequelize.Transaction.LOCK.UPDATE,
      limit: 100
    })).map((item) => item.familyId)
Author	SHA1	Message	Date
Jonas Lochmann	769d828d2b	Add install script	2021-03-08 01:00:00 +01:00
Jonas Lochmann	f152687a37	Update some dependencies	2021-03-08 01:00:00 +01:00
Jonas Lochmann	0f9e1c50e6	Refactor adding used time to avoid exceptions	2021-03-08 01:00:00 +01:00
Jonas Lochmann	f6cc231202	Remove manual database lock usage	2021-03-08 01:00:00 +01:00
Jonas Lochmann	8665e614b5	Fix build and lint errors	2021-03-08 01:00:00 +01:00
Jonas Lochmann	828399ec14	Improve handling of exceptions which should trigger retrying an operation	2021-03-08 01:00:00 +01:00
Jonas Lochmann	21d7fa839f	Improve shutdown in the test script	2021-03-08 01:00:00 +01:00
Jonas Lochmann	24563bdc4a	Remove the obsolete can-recover-password endpoint	2021-03-01 01:00:00 +01:00