FeministWiki:Server setup

    From FeministWiki

    !!! WORK IN PROGRESS !!!

    These are the steps required to set up a new FeministWiki Debian server.

    Add repositories

    Install software-properties-common:

     apt-get update
     apt-get install software-properties-common
    

    Backports:

     echo deb http://deb.debian.org/debian $(lsb_release -sc)-backports main > /etc/apt/sources.list.d/backports.list
    

    PHP repo only if a very new version is needed:

     wget -O /etc/apt/trusted.gpg.d/sury-php.gpg https://packages.sury.org/php/apt.gpg
     echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" > /etc/apt/sources.list.d/sury-php.list
    

    MariaDB repo only if a very new version is needed:

     wget https://mariadb.org/mariadb_release_signing_key.asc
     apt-key add mariadb_release_signing_key.asc
     echo "deb http://mirror.23media.de/mariadb/repo/10.4/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/mariadb.list
    

    Update & upgrade

     apt-get update
     apt-get upgrade
     apt-get dist-upgrade
    

    Set up firewall

     apt-get install ufw
     
     for port in 22 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777
     do ufw allow proto tcp to 0.0.0.0/0 port $port
     done
     
     ufw enable
    

    Install server components

    Now install all the software used by FeministWiki. You might want to install some of these from backports instead to get newer versions.

     apt-get install apache2
     apt-get install dovecot-core
     apt-get install ejabberd
     apt-get install fail2ban
     apt-get install mariadb-server
     apt-get install opendkim
     apt-get install php7.4 # or whatever version we're on
     apt-get install postfix
     apt-get install slapd
     apt-get install ufw
    

    Example for installing ejabberd from backports instead:

     apt-get install ejabberd/$(lsb_release -sc)-backports