FeministWiki:Server setup - Historique des versions

Technician : /* Put config files in place */

2021-08-31T19:44:01Z

Put config files in place

← Older revision		Revision as of 19:44, 31 August 2021
Line 135:		Line 135:
	* After copying in the new {{C\|/etc/aliases}} file, run {{C\|newaliases}} for the changes to take effect		* After copying in the new {{C\|/etc/aliases}} file, run {{C\|newaliases}} for the changes to take effect
	* After populating {{C\|/etc/letsencrypt/renewal-hooks}}, remember to {{C\|chmod +x}} all the scripts		* After populating {{C\|/etc/letsencrypt/renewal-hooks}}, remember to {{C\|chmod +x}} all the scripts
	* Likewise, don't forget {{C\|chmod +x}} for ~~{{C\|~~/etc/cron.*}} and {{C\|/etc/boot.d}}		* Likewise, don't forget {{C\|chmod +x}} for <code>/etc/cron.{hourly,daily,weekly,monthly}</code> and {{C\|/etc/boot.d}}

	=== Enable Apache modules, config, and sites ===		=== Enable Apache modules, config, and sites ===

Technician : /* Put config files in place */

2021-08-31T19:38:06Z

Put config files in place

← Older revision		Revision as of 19:38, 31 August 2021
Line 135:		Line 135:
	* After copying in the new {{C\|/etc/aliases}} file, run {{C\|newaliases}} for the changes to take effect		* After copying in the new {{C\|/etc/aliases}} file, run {{C\|newaliases}} for the changes to take effect
	* After populating {{C\|/etc/letsencrypt/renewal-hooks}}, remember to {{C\|chmod +x}} all the scripts		* After populating {{C\|/etc/letsencrypt/renewal-hooks}}, remember to {{C\|chmod +x}} all the scripts
			* Likewise, don't forget {{C\|chmod +x}} for {{C\|/etc/cron.*}} and {{C\|/etc/boot.d}}

	=== Enable Apache modules, config, and sites ===		=== Enable Apache modules, config, and sites ===

Technician : /* Initial setup of the new server */

2021-08-26T19:05:43Z

Initial setup of the new server

← Older revision		Revision as of 19:05, 26 August 2021
Line 4:		Line 4:

	This section describes various initialization tasks for the new server that are independent of the old server.		This section describes various initialization tasks for the new server that are independent of the old server.

			=== Configure reverse DNS ===

			In the settings of the VPS host (e.g. Strato AG), you can configure reverse-DNS for the IP address of the server. Set the FQDN for the IP address to {{C\|feministwiki.org}}. It's good to do this early since it can take some time to propagate.

	=== Make feministwiki.dev point to the new server ===		=== Make feministwiki.dev point to the new server ===
Line 174:		Line 178:
	adduser ejabberd ssl-cert		adduser ejabberd ssl-cert
	adduser irc ssl-cert		adduser irc ssl-cert

	~~=== Configure reverse DNS ===~~

	~~In the settings of the VPS host (e.g. Strato AG), you can configure reverse-DNS for the IP address of the server. Set the FQDN for the IP address to {{C\|feministwiki.org}}.~~

	== Copying over live data ==		== Copying over live data ==

Technician le 26 août 2021 à 19:05

2021-08-26T19:05:02Z

← Older revision		Revision as of 19:05, 26 August 2021
Line 174:		Line 174:
	adduser ejabberd ssl-cert		adduser ejabberd ssl-cert
	adduser irc ssl-cert		adduser irc ssl-cert

			=== Configure reverse DNS ===

			In the settings of the VPS host (e.g. Strato AG), you can configure reverse-DNS for the IP address of the server. Set the FQDN for the IP address to {{C\|feministwiki.org}}.

	== Copying over live data ==		== Copying over live data ==

Technician : /* Finishing up */

2021-08-26T19:02:56Z

Finishing up

← Older revision		Revision as of 19:02, 26 August 2021
Line 347:		Line 347:
	=== Copy over the live data one more time ===		=== Copy over the live data one more time ===

	~~The techniques and commands described above in~~ the section '''Copying over live data''' ~~are~~ ''idempotent'', meaning you can simply repeat them and they will make sure that the new copy of the live data is fresh and doesn't leave any outdated data on the new server. (For instance, the {{C\|--delete}} argument to the {{C\|rsync}} command and the {{C\|--add-drop-database}} argument to the {{C\|mysqldump}} command help to make sure of this.)		'''Simply repeat the whole section ''Copying over live data''.'''

	So in ~~short~~, just repeat the steps from that section exactly one more time.		The techniques and commands described above in the section ''Copying over live data'' are ''idempotent'', meaning you can simply repeat them and they will make sure that the new copy of the live data is fresh and doesn't leave any outdated data on the new server. For instance, the {{C\|--delete}} argument to the {{C\|rsync}} command and the {{C\|--add-drop-database}} argument to the {{C\|mysqldump}} command help to make sure of this.

			So just repeat the steps from that section exactly one more time.

			=== Reboot the new server ===

			At this point we can reboot the new server again, to make sure all services are properly restarted.

			=== Open ports on the new server ===

			Now we can open the ports again on the new server:

			for port in 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777
			do ufw allow proto tcp to 0.0.0.0/0 port $port
			done

	=== Update DNS entries ===		=== Update DNS entries ===

Technician : /* Deactivate again */

2021-08-26T18:59:11Z

Deactivate again

← Older revision		Revision as of 18:59, 26 August 2021
Line 309:		Line 309:
	=== Deactivate again ===		=== Deactivate again ===

	After we're done testing, we can "deactivate" the server again to prepare it for the final switch-over:		After we're done testing, we can "deactivate" the new server again to prepare it for the final switch-over:

	for port in 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777		for port in 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777
	do ufw delete allow proto tcp to 0.0.0.0/0 port $port		do ufw delete allow proto tcp to 0.0.0.0/0 port $port
	done		done

			systemctl stop apache2
			systemctl stop dovecot
			systemctl stop ejabberd
			systemctl stop inspircd
			systemctl stop mailman
			systemctl stop postfix
			systemctl stop slapd

	== Finishing up ==		== Finishing up ==

Technician : /* Test */

2021-08-26T18:58:33Z

Test

← Older revision		Revision as of 18:58, 26 August 2021
Line 306:		Line 306:

	Some things may not work because they're hard-coded to work as "feministwiki.org" and not under the "feministwiki.dev" name. This is a point of future improvement: all the services should be configured, if at all possible, in a way that they will work when invoked as feministwiki.dev just as well.		Some things may not work because they're hard-coded to work as "feministwiki.org" and not under the "feministwiki.dev" name. This is a point of future improvement: all the services should be configured, if at all possible, in a way that they will work when invoked as feministwiki.dev just as well.

			=== Deactivate again ===

			After we're done testing, we can "deactivate" the server again to prepare it for the final switch-over:

			for port in 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777
			do ufw delete allow proto tcp to 0.0.0.0/0 port $port
			done

	== Finishing up ==		== Finishing up ==

Technician : /* Mailman data */

2021-08-26T18:53:33Z

Mailman data

← Older revision		Revision as of 18:53, 26 August 2021
Line 249:		Line 249:

	cd /var/lib/mailman		cd /var/lib/mailman
	~~tar~~ -~~czf~~ - archives data lists ~~\| ssh~~ root@feministwiki.dev ~~'cd~~ /var/lib/mailman ~~&& tar -xzf - && check_perms -f'~~		rsync -az --delete archives data lists root@feministwiki.dev:/var/lib/mailman

	The {{C\|check_perms}} command, which is part of GNU Mailman, will take care of fixing ~~the group~~ ownership ~~of the extracted files~~.		And then this on the new server:

			check_perms -f

			The {{C\|check_perms}} command, which is part of GNU Mailman, will take care of fixing file ownership and permissions.

	== Recreate SQL users ==		== Recreate SQL users ==

Technician : /* Recreate SQL users */

2021-08-25T18:05:32Z

Recreate SQL users

← Older revision		Revision as of 18:05, 25 August 2021
Line 272:		Line 272:
	create user feministwiki@localhost identified by '$(cat ~/pwd/mysql-wiki)';		create user feministwiki@localhost identified by '$(cat ~/pwd/mysql-wiki)';
	grant all on feministwiki.* to feministwiki@localhost;		grant all on feministwiki.* to feministwiki@localhost;
			grant all on feministwiki_de.* to feministwiki@localhost;
			grant all on feministwiki_es.* to feministwiki@localhost;
			grant all on feministwiki_it.* to feministwiki@localhost;
			grant all on feministwiki_pt.* to feministwiki@localhost;

	create user fff@localhost identified by '$(cat ~/pwd/mysql-fff)';		create user fff@localhost identified by '$(cat ~/pwd/mysql-fff)';

Technician : /* Install PHP and modules */

2021-08-23T00:04:26Z

Install PHP and modules

← Older revision		Revision as of 00:04, 23 August 2021
Line 104:		Line 104:
	php_version=7.4 # or whatever version we're on		php_version=7.4 # or whatever version we're on

	apt-get install php${php_version}		apt-get install php${php_version} \
	~~apt-get install~~ php${php_version}-apcu		php${php_version}-apcu \
	~~apt-get install~~ php${php_version}-bcmath		php${php_version}-bcmath \
	~~apt-get install~~ php${php_version}-cli		php${php_version}-cli \
	~~apt-get install~~ php${php_version}-ctype		php${php_version}-ctype \
	~~apt-get install~~ php${php_version}-curl		php${php_version}-curl \
	~~apt-get install~~ php${php_version}-gd		php${php_version}-gd \
	~~apt-get install~~ php${php_version}-gmp		php${php_version}-gmp \
	~~apt-get install~~ php${php_version}-iconv		php${php_version}-iconv \
	~~apt-get install~~ php${php_version}-imagick		php${php_version}-imagick \
	~~apt-get install~~ php${php_version}-intl		php${php_version}-intl \
	~~apt-get install~~ php${php_version}-json		php${php_version}-json \
	~~apt-get install~~ php${php_version}-ldap		php${php_version}-ldap \
	~~apt-get install~~ php${php_version}-mbstring		php${php_version}-mbstring \
	~~apt-get install~~ php${php_version}-mysql		php${php_version}-mysql \
	~~apt-get install~~ php${php_version}-opcache		php${php_version}-opcache \
	~~apt-get install~~ php${php_version}-readline		php${php_version}-readline \
	~~apt-get install~~ php${php_version}-xml		php${php_version}-xml \
	~~apt-get install~~ php${php_version}-zip		php${php_version}-zip

	=== Put config files in place ===		=== Put config files in place ===

FeministWiki:Server setup - Historique des versions

Technician : /* Put config files in place */

Technician : /* Put config files in place */

Technician : /* Initial setup of the new server */

Technician le 26 août 2021 à 19:05

Technician : /* Finishing up */

Technician : /* Deactivate again */

Technician : /* Test */

Technician : /* Mailman data */

Technician : /* Recreate SQL users */

Technician : /* Install PHP and modules */

Technician : /* Put config files in place */

Technician : /* Put config files in place */

Technician : /* Initial setup of the new server */

Technician : /* Finishing up */

Technician : /* Deactivate again */

Technician : /* Test */

Technician : /* Mailman data */

Technician : /* Recreate SQL users */

Technician : /* Install PHP and modules */