1,086
edits
FeministWiki:Server setup: Difference between revisions
→Install miscellaneous tools
Technician (talk | contribs) |
Technician (talk | contribs) |
||
| (16 intermediate revisions by the same user not shown) | |||
| Line 28: | Line 28: | ||
bsdutils \ | bsdutils \ | ||
certbot \ | certbot \ | ||
composer \ | |||
curl \ | curl \ | ||
dnsutils \ | dnsutils \ | ||
| Line 33: | Line 34: | ||
git \ | git \ | ||
imagemagick \ | imagemagick \ | ||
iotop \ | |||
ldap-utils \ | ldap-utils \ | ||
mg \ | mg \ | ||
| Line 154: | Line 156: | ||
apt-get install ejabberd/$(lsb_release -sc)-backports # e.g. ejabberd/bookworm-backports | apt-get install ejabberd/$(lsb_release -sc)-backports # e.g. ejabberd/bookworm-backports | ||
=== Make sure Postfix can connect to OpenDKIM === | |||
mkdir -p /var/spool/postfix/opendkim | |||
chown opendkim:opendkim /var/spool/postfix/opendkim | |||
adduser postfix opendkim | |||
=== Install PHP and modules === | === Install PHP and modules === | ||
| Line 164: | Line 172: | ||
php${php_version}-apcu \ | php${php_version}-apcu \ | ||
php${php_version}-bcmath \ | php${php_version}-bcmath \ | ||
php${php_version}-bz2 \ | |||
php${php_version}-cli \ | php${php_version}-cli \ | ||
php${php_version}-curl \ | php${php_version}-curl \ | ||
| Line 178: | Line 187: | ||
php${php_version}-xml \ | php${php_version}-xml \ | ||
php${php_version}-zip | php${php_version}-zip | ||
We also want {{C|php-luasandbox}}, which may not have a PHP version attached to the package name, in which case you'll have to make sure it supports the PHP version currently in use. If not, you can use the standalone Lua binary instead by setting {{C|$wgScribuntoDefaultEngine = 'luastandalone';}} in MediaWiki's {{C|LocalSettings.php}} configuration file. | |||
# See if this works first: | |||
apt-get install php${php_version}-luasandbox | |||
# Otherwise... | |||
apt-get install php-luasandbox | |||
# Check the package contents to see which PHP versions are supported | |||
dpkg -L php-luasandbox | |||
=== Copy over certificates === | === Copy over certificates === | ||
| Line 216: | Line 235: | ||
Enable PHP FPM and other Apache modules: | Enable PHP FPM and other Apache modules: | ||
a2enmod expires headers proxy_fcgi | a2enmod expires headers proxy_fcgi rewrite | ||
a2enconf php${php_version}-fpm | a2enconf php${php_version}-fpm | ||
| Line 397: | Line 416: | ||
Note that the trailing slash in {{C|/var/www/}} is important; if not provided, it will copy the directory to {{C|/var/www/www}} on the new server. | Note that the trailing slash in {{C|/var/www/}} is important; if not provided, it will copy the directory to {{C|/var/www/www}} on the new server. | ||
There's actually a systemd service found in {{C|/var/www/fw/wiki}} that you'll want to enable on the new server: | |||
systemctl enable /var/www/fw/wiki/fw-wiki-job-runner.service | |||
No need to actually start it yet. | |||
=== SQL databases === | === SQL databases === | ||
| Line 402: | Line 427: | ||
Run the following command from the old server: | Run the following command from the old server: | ||
mariadb-dump -u root -p"$(cat /root/pwd/ | mariadb-dump -u root -p"$(cat /root/pwd/mariadb)" \ | ||
--add-drop-database \ | --add-drop-database \ | ||
--databases feministblogs \ | --databases feministblogs \ | ||
| Line 426: | Line 451: | ||
Note that the trailing slash in {{C|/home/vmail/}} is important. | Note that the trailing slash in {{C|/home/vmail/}} is important. | ||
=== Elasticsearch === | |||
Temporarily stop Elasticsearch on the old server and copy over the data: | |||
systemctl stop elasticsearch | |||
rsync -az --delete /var/lib/elasticsearch/ feministwiki.dev:/var/lib/elasticsearch | |||
systemctl start elasticsearch | |||
=== Mailman data === | === Mailman data === | ||
| Line 506: | Line 539: | ||
systemctl stop dovecot | systemctl stop dovecot | ||
systemctl stop ejabberd | systemctl stop ejabberd | ||
systemctl stop elasticsearch | |||
systemctl stop fw-wiki-job-runner | |||
systemctl stop inspircd | systemctl stop inspircd | ||
systemctl stop | systemctl stop nginx | ||
systemctl stop opendkim | |||
systemctl stop postfix | systemctl stop postfix | ||
systemctl stop slapd | systemctl stop slapd | ||
Note that we leave MariaDB running, since it needs to be live for data transfer. | |||
== Finishing up == | == Finishing up == | ||
| Line 519: | Line 557: | ||
Stop all the services that interface with users and/or are responsible for modifying live data: | Stop all the services that interface with users and/or are responsible for modifying live data: | ||
for port in 25 80 443 465 587 993 995 5222 5223 5269 5270 5443 6697 7777 | |||
do ufw delete allow proto tcp to 0.0.0.0/0 port $port | |||
done | |||
systemctl stop apache2 | systemctl stop apache2 | ||
systemctl stop dovecot | systemctl stop dovecot | ||
systemctl stop ejabberd | systemctl stop ejabberd | ||
systemctl stop elasticsearch | |||
systemctl stop fw-wiki-job-runner | |||
systemctl stop inspircd | systemctl stop inspircd | ||
systemctl stop | systemctl stop nginx | ||
systemctl stop opendkim | |||
systemctl stop postfix | systemctl stop postfix | ||
systemctl stop slapd | systemctl stop slapd | ||
As with the old server, we leave MariaDB running since it will be needed for data transfer. | |||
=== Copy over the live data one more time === | === Copy over the live data one more time === | ||
| Line 537: | Line 578: | ||
'''Simply repeat the whole section ''Copying over live data''.''' | '''Simply repeat the whole section ''Copying over live data''.''' | ||
The techniques and commands described above in the section ''Copying over live data'' are ''idempotent'', meaning you can simply repeat them and they will make sure that the new copy of the live data is fresh and doesn't leave any outdated data on the new server. For instance, the {{C|--delete}} argument to the {{C|rsync}} command and the {{C|--add-drop-database}} argument to the {{C| | The techniques and commands described above in the section ''Copying over live data'' are ''idempotent'', meaning you can simply repeat them and they will make sure that the new copy of the live data is fresh and doesn't leave any outdated data on the new server. For instance, the {{C|--delete}} argument to the {{C|rsync}} command and the {{C|--add-drop-database}} argument to the {{C|mariadb-dump}} command help to make sure of this. | ||
So just repeat the steps from that section exactly one more time. | So just repeat the steps from that section exactly one more time. | ||