FeministWiki:Server setup: Difference between revisions

    From FeministWiki
    No edit summary
    Line 25: Line 25:
       echo "deb http://mirror.23media.de/mariadb/repo/10.4/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/mariadb.list
       echo "deb http://mirror.23media.de/mariadb/repo/10.4/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/mariadb.list


    === Install software ===
    === Update & upgrade ===
     
    Always good to upgrade the system first.


      apt-get update
       apt-get upgrade
       apt-get upgrade
       apt-get dist-upgrade
       apt-get dist-upgrade
    === Set up firewall ===
      apt-get install ufw
      for port in 22 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777
      do ufw allow proto tcp to 0.0.0.0/0 port $port
      done
      ufw enable
    === Install server components ===


    Now install all the software used by FeministWiki. You might want to install some of these from backports instead to get newer versions.
    Now install all the software used by FeministWiki. You might want to install some of these from backports instead to get newer versions.
    Line 38: Line 49:
       apt-get install ejabberd
       apt-get install ejabberd
       apt-get install fail2ban
       apt-get install fail2ban
       apt-get install mariadb
       apt-get install mariadb-server
       apt-get install opendkim
       apt-get install opendkim
       apt-get install php7.4 # or whatever version we're on
       apt-get install php7.4 # or whatever version we're on
    Line 48: Line 59:


       apt-get install ejabberd/$(lsb_release -sc)-backports
       apt-get install ejabberd/$(lsb_release -sc)-backports
    === Open TCP ports ===
      for port in 22 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777
      do ufw allow proto tcp to 0.0.0.0/0 port $port
      done

    Revision as of 02:27, 4 June 2021

    !!! WORK IN PROGRESS !!!

    These are the steps required to set up a new FeministWiki Debian server.

    Add repositories

    Install software-properties-common:

     apt-get update
     apt-get install software-properties-common
    

    Backports:

     echo deb http://deb.debian.org/debian $(lsb_release -sc)-backports main > /etc/apt/sources.list.d/backports.list
    

    PHP repo only if a very new version is needed:

     wget -O /etc/apt/trusted.gpg.d/sury-php.gpg https://packages.sury.org/php/apt.gpg
     echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/sury-php.list
    

    MariaDB repo only if a very new version is needed:

     wget https://mariadb.org/mariadb_release_signing_key.asc
     apt-key add mariadb_release_signing_key.asc
     echo "deb http://mirror.23media.de/mariadb/repo/10.4/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/mariadb.list
    

    Update & upgrade

     apt-get update
     apt-get upgrade
     apt-get dist-upgrade
    

    Set up firewall

     apt-get install ufw
    
     for port in 22 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777
     do ufw allow proto tcp to 0.0.0.0/0 port $port
     done
    
     ufw enable
    

    Install server components

    Now install all the software used by FeministWiki. You might want to install some of these from backports instead to get newer versions.

     apt-get install apache2
     apt-get install dovecot-core
     apt-get install ejabberd
     apt-get install fail2ban
     apt-get install mariadb-server
     apt-get install opendkim
     apt-get install php7.4 # or whatever version we're on
     apt-get install postfix
     apt-get install slapd
     apt-get install ufw
    

    Example for installing ejabberd from backports instead:

     apt-get install ejabberd/$(lsb_release -sc)-backports