FeministWiki:Server setup: Difference between revisions

m
no edit summary
mNo edit summary
 
(2 intermediate revisions by the same user not shown)
Line 34: Line 34:
                 git \
                 git \
                 imagemagick \
                 imagemagick \
                iotop \
                 ldap-utils \
                 ldap-utils \
                 mg \
                 mg \
Line 187: Line 188:
                 php${php_version}-zip
                 php${php_version}-zip


We also want {{C|php-luasandbox}}, which may not have a PHP version attached to the package name, in which case you'll have to make sure it supports the PHP version currently in use. If not, you can use the standalone Lua binary instead by setting {{C|$wgScribuntoDefaultEngine = 'luastandalone';}} in MediaWiki's {{C|LocalSettings.php}} configuration file.
We also want {{C|php-luasandbox}}, which may not have a PHP version attached to the package name, in which case you'll have to make sure it supports the PHP version currently in use. If not, you can use the standalone Lua binary instead by setting {{C|$wgScribuntoDefaultEngine {{=}} 'luastandalone';}} in MediaWiki's {{C|LocalSettings.php}} configuration file.


  # See if this works first:
  # See if this works first:
Line 202: Line 203:


  # Run on old server
  # Run on old server
  rsync -avz /etc/fw-certs feministwiki.dev:/etc/fw-certs
  rsync -avz /etc/feministwiki/certs feministwiki.dev:/etc/feministwiki/certs


The {{C|/etc/fw-certs}} directory and its contents should be owned by the group {{C|ssl-cert}}.  Make sure this is the case on the new server after running the command above, since the group ID might be different on the new server.  If the group doesn't exist at all, just create it.
The {{C|/etc/feministwiki/certs}} directory and its contents should be owned by the group {{C|ssl-cert}}.  Make sure this is the case on the new server after running the command above, since the group ID might be different on the new server.  If the group doesn't exist at all, just create it.


Further, files in that directory which contain the private key ({{C|privkey.pem}} and {{C|bundle.pem}}) should only be readable by group members.  That is, their permission mode should be 640, displayed as {{C|-rw-r-----}} in the output of {{C|ls -l}}.  Make sure this really the case.
Further, files in that directory which contain the private key ({{C|privkey.pem}} and {{C|bundle.pem}}) should only be readable by group members.  That is, their permission mode should be 640, displayed as {{C|-rw-r-----}} in the output of {{C|ls -l}}.  Make sure this really the case.