Difference between revisions of "Install a new server"
|Line 96:||Line 96:|
== Next steps ==
== Next steps ==
Revision as of 02:21, 14 March 2009
|Install a new server|
Organic Design procedure
Download and install Debian
If the server has no OS then download and install Debian first. Depending on the kind of access you have to the server, the following links may be of interest here:
Setting up the software environment
Ensure that you're using the same package repository for your Debian installation as we are:
Bring the system up to date and install the organicdesign-server package:
If you would like math markup support, also install the following, and see Enabling math markup for more details.
You will have a functioning server and LAMP environment.
Post install checklist
- /etc/hostname, hostname -F /etc/hostname, /etc/hosts
- tzselect, tzconfig
- DB info for wikia, webmail, crm
- /var/www and /home structures (should be automatically maintained by adding new server as a peer)
- Exim4 (this will need to be configured even for sending mail, see Configure mail server)
- Import spamassassin bayesian rules
Setting up the Wikia file structure
Either copy the /var/www directory structure from an existing wikia installation (excluding the specific content from the domains and wikis directories). Alternatively, unpack a recent www-yyyy-mm-dd.tgz backup into /var/www and remove specific wiki content.
You will need to adjust the following items in the structure:
The easiest way to configure this is to copy the vhosts file which originated from the backup file over the default Apache configuration file, and then make the vhosts file a symlink pointing at the default configuration as usual. Then adjust the file to the wikia's specific needs.
The differences to the default php.ini file in our servers are as follows:
Adjust the names of the symlinks in the /var/www/domains directory to local domain names and ensure that those names are added to the /etc/hosts file.
Extracting Databases from a Backup
Extract the most recent database backup (this may overwrite existing databases of the same names)
Setting up FTP access
Some clients may require standard FTP access which although not very secure, can have some restrictions put on it to make it a little safer such as restricting users to their home directories and using a non standard port. We use the GPL proFTPD server in standalone mode.
Edit the /etc/proftpd/proftpd.conf file and change the port to something other than 22 and add the following directive to restrict users to their home directories.
Setting up SSL for Apache
This procedure applies to a wildcard self-signed certificate.
mkdir /var/www/ssl cd /var/www/ssl openssl req -new -newkey rsa:1024 -days 3650 -nodes -x509 -keyout organicdesign.co.nz.pem -out organicdesign.co.nz.pem
Open the pem in a text editor and separate the key and cert into two files
/var/www/ssl/organicdesign.co.nz.crt /var/www/ssl/organicdesign.co.nz.key chown www-data organicdesign.co.nz*
Create a file in the same dir called organicdesign.co.nz with this content.