====== Information ======

  * Friendica
  * [[information:realm_of_espionage|Realm of Espionage]]
  * https://social.realmofespionage.xyz

===== Resources =====

  * https://wiki.friendi.ca/docs/bbcode

===== Prerequisites =====

  * [[bsd:server:freebsd_15.0|FreeBSD 15.0]]
  * [[servers:bsd:freenginx_php_php-fpm|freenginx + PHP + PHP-FPM]]
  * [[servers:bsd:nginx:lets_encrypt|Let's Encrypt]]
  * [[servers:bsd:mariadb|MariaDB]]

====== Dependencies ======

  * https://friendi.ca/resources/requirements/
  * https://wiki.friendi.ca/docs/install#requirements

  su -

  pkg install git-lite php85-composer php85-curl php85-gd php85-gmp php85-pdo php85-mbstring php85-intl php85-mysqli php85-zip php85-fileinfo php85-posix php85-dom php85-iconv php85-simplexml php85-pdo_mysql

====== Download Source ======

  * https://github.com/friendica/friendica/commits/develop/

  su -

  git clone --branch 'develop' --depth '1' --recurse-submodules 'https://github.com/friendica/friendica.git' '/usr/local/www/social' && chown -R 'www':'www' '/usr/local/www/social'

===== Addons =====

  * https://github.com/friendica/friendica-addons/commits/develop/
  * :!: Required for ''composer install'' even without any addons enabled

  git clone --branch 'develop' --depth '1' --recurse-submodules 'https://github.com/friendica/friendica-addons.git' '/usr/local/www/social/addon' && chown -R 'www':'www' '/usr/local/www/social/addon'

====== Environment ======

===== Composer =====

  su -

  cd '/tmp' && su -m 'www' -c "cd '/tmp' && '/usr/local/bin/composer.phar' --working-dir='/usr/local/www/social' --no-cache install --no-dev"

====== Database ======

  su -

  mariadb

  CREATE DATABASE friendica;

  CREATE USER friendica@localhost IDENTIFIED BY 'x';

  GRANT ALL PRIVILEGES ON friendica.* to friendica@localhost;

  FLUSH PRIVILEGES;EXIT;

====== nginx + PHP-FPM Configuration ======

===== PHP-FPM Socket =====

  su -

  ee '/usr/local/etc/php-fpm.d/social.conf' && service 'php_fpm' reload

<code>
[social]

; User/Group
user = www
group = www

; Socket
listen = 127.0.0.1:9005
listen.allowed_clients = 127.0.0.1

; Process Management
pm = ondemand
pm.max_children = 4
pm.process_idle_timeout = 30

; General
php_value[date.timezone] = "America/New_York"
php_value[max_execution_time] = "200"
php_value[memory_limit] = "512M"
php_value[post_max_size] = "100M"
php_value[upload_max_filesize] = "20M"
php_value[max_file_uploads] = "100"
php_value[register_argc_argv] = "Off"

; Errors
php_value[error_reporting] = "~E_ALL"
php_value[display_errors] = "Off"

; End</code>

===== FastCGI =====

  su -

  ee '/usr/local/etc/freenginx/default.d/social.conf'

<code>
location ~ \.(php|phar)(/.*)?$ {
    fastcgi_split_path_info ^(.+\.(?:php|phar))(/.*)$;
    fastcgi_intercept_errors on;
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param HTTPS on;
    fastcgi_pass 127.0.0.1:9005;
}

# End</code>

===== Server Block =====

  su -

  ee '/usr/local/etc/freenginx/vhosts.d/social.conf' && service 'nginx' reload && sync

<code>
server {
    listen '443' 'ssl';
    http2 'on';
    server_name 'social.realmofespionage.xyz';
    root '/usr/local/www/social';
    index 'index.php';

    include '/usr/local/etc/freenginx/default.d/social.conf';
    include '/usr/local/etc/freenginx/default.d/headers.conf';

#    access_log  /var/log/nginx/social-access.log;
#    error_log  /var/log/nginx/social-error.log;

    location / {
        try_files $uri /index.php?pagename=$uri&$args;
    }

    location ^~ /.well-known/ {
        allow all;
        rewrite ^ /index.php?pagename=$uri;
    }

    location ~* \.(tpl|md|tgz|log|out)$ {
        deny all;
    }

    location ~ /\. {
        deny all;
    }
}

# End</code>

====== Initial Setup ======

===== Initialize =====

  * :!: Change ''--dbpass'', and ''--admin'' to email
  * :!: 2025/10/30: This failed to find a file and didn't seem to work ((restoring a previous-install works fine bypassing this initial set-up))

  su -

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/www/social/bin/console' autoinstall --dbhost 'localhost' --dbport '3365' --dbuser 'friendica' --dbdata 'friendica' --url 'https://social.realmofespionage.xyz' --dbpass 'x' --admin 'x'"

===== Website =====

  * https://social.realmofespionage.xyz
  * :!: Be sure the email matches what was used on the above command

===== User =====

  * :!: ''x'' is the **nickname** chosen at website registration, lower-case

  su -

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/www/social/bin/console' user password x"

===== Etc =====

  su -

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' worker"

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' dbstructure update --force"

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' dbstructure drop --execute"

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' postupdate"

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' cache clear"

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' clearavatarcache"

  cd '/usr/local/www/social' && su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' -h"

====== Scripts ======

===== Updater =====

  mkdir -p ~/'.local/scripts/www/social' && ee ~/'.local/scripts/www/social/updater.sh' && chmod +x ~/'.local/scripts/www/social/updater.sh'

<code>
#!/bin/sh

su -m 'www' -c "git -C '/usr/local/www/social' reset --hard 'origin/develop'"
su -m 'www' -c "git -C '/usr/local/www/social' pull 'origin' 'develop' --rebase"

su -m 'www' -c "git -C '/usr/local/www/social/addon' reset --hard 'origin/develop'"
su -m 'www' -c "git -C '/usr/local/www/social/addon' pull 'origin' 'develop' --rebase"

su -m 'www' -c "'/usr/local/bin/composer.phar' --working-dir='/usr/local/www/social' --no-cache install --no-dev"

cd '/usr/local/www/social'

su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' worker"

su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' dbstructure update --force"
su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' dbstructure drop --execute"
su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' postupdate"

# End</code>

  ~/'.local/scripts/www/social/updater.sh'

  su 'root' -c ~/'.local/scripts/www/social/updater.sh'

===== Maintenance =====

  mkdir -p ~/'.local/scripts/www/social' && ee ~/'.local/scripts/www/social/maintenance.sh' && chmod +x ~/'.local/scripts/www/social/maintenance.sh'

<code>
#!/bin/sh

su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/social' gc --aggressive --prune='all'"
su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/social' fsck --full --strict"

su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/social/addon' gc --aggressive --prune='all'"
su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/social/addon' fsck --full --strict"

su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' cache clear"
su -m 'www' -c "'/usr/local/bin/php' '/usr/local/www/social/bin/console.php' clearavatarcache"

'/usr/local/bin/mariadb-check' -o -f -e --auto-repair 'friendica'

# End</code>

  ~/'.local/scripts/www/social/maintenance.sh'

  su 'root' -c ~/'.local/scripts/www/social/maintenance.sh'

===== Git Fix =====

  * :!: Set email for both ''user.email''
  * :!: Requires [[#etc|Etc]] commands afterwards

  mkdir -p ~/'.local/scripts/www/social' && ee ~/'.local/scripts/www/social/git-fix.sh' && chmod +x ~/'.local/scripts/www/social/git-fix.sh'

<code>
#!/bin/sh

su -m 'www' -c "rm -Rf '/usr/local/www/social/.git'"
su -m 'www' -c "git -C '/usr/local/www/social' init --initial-branch='develop'"
su -m 'www' -c "git -C '/usr/local/www/social' add '.'"

##################################################
su -m 'www' -c "git -C '/usr/local/www/social' config 'user.email' 'espionage724@x'"
##################################################

su -m 'www' -c "git -C '/usr/local/www/social' commit --message='x'"

su -m 'www' -c "git -C '/usr/local/www/social' remote add 'origin' 'https://github.com/friendica/friendica.git'"
su -m 'www' -c "git -C '/usr/local/www/social' pull --depth '1' --recurse-submodules 'origin' 'develop' --rebase"

su -m 'www' -c "git -C '/usr/local/www/social' reset --hard 'origin/develop'"
su -m 'www' -c "git -C '/usr/local/www/social' gc --aggressive --prune='all'"
su -m 'www' -c "git -C '/usr/local/www/social' fsck --full --strict"

su -m 'www' -c "rm -Rf '/usr/local/www/social/addon/.git'"
su -m 'www' -c "git -C '/usr/local/www/social/addon' init --initial-branch='develop'"
su -m 'www' -c "git -C '/usr/local/www/social/addon' add '.'"

##################################################
su -m 'www' -c "git -C '/usr/local/www/social/addon' config 'user.email' 'espionage724@x'"
##################################################

su -m 'www' -c "git -C '/usr/local/www/social/addon' commit --message='x'"

su -m 'www' -c "git -C '/usr/local/www/social/addon' remote add 'origin' 'https://github.com/friendica/friendica-addons.git'"
su -m 'www' -c "git -C '/usr/local/www/social/addon' pull --depth '1' --recurse-submodules 'origin' 'develop' --rebase"

su -m 'www' -c "git -C '/usr/local/www/social/addon' reset --hard 'origin/develop'"
su -m 'www' -c "git -C '/usr/local/www/social/addon' gc --aggressive --prune='all'"
su -m 'www' -c "git -C '/usr/local/www/social/addon' fsck --full --strict"

# End</code>

  ~/'.local/scripts/www/social/git-fix.sh'

  su 'root' -c ~/'.local/scripts/www/social/git-fix.sh'

====== cron ======

===== Updater =====

  * 04:00AM Every day

  su -

  ee '/etc/cron.d/social-updater'

<code>
#
SHELL=/bin/sh

0 4 * * * root '/home/espionage724/.local/scripts/www/social/updater.sh'

# End</code>

====== Backup ======

===== Folder =====

  su -

  tar -czf '/home/espionage724/friendica-files-manual-'$(date +%Y-%m-%d)'.tar.gz' -C '/usr/local/www' 'social'

===== Database =====

****

  mariadb-dump -u root -p --single-transaction --quick 'friendica' -r '/home/espionage724/friendica-database-manual-'$(date +%Y-%m-%d)'.sql'

===== scp =====

****

  scp espionage724@192.168.1.152:~/'friendica-files-'*'.tar.gz' espionage724@192.168.1.152:~/'friendica-database-'*'.sql' ~/'Downloads' && sync

====== Restore ======

===== scp =====

****

  scp ~/'Downloads/friendica-files-'*'.tar.gz' ~/'Downloads/friendica'*'.sql' espionage724@192.168.1.152:~

===== Folder =====

  su -

  rm -Rf '/usr/local/www/social'

  tar -xzf '/home/espionage724/friendica-files-'*'.tar.gz' -C '/usr/local/www' 'social' && chown -R 'www':'www' '/usr/local/www/social' && sync

===== Database =====

  * [[#database|Initial set-up]]

  mariadb -u 'root' -p --execute='CREATE DATABASE friendica;'

  cat ~/'friendica'*'.sql' | mariadb -u 'root' -p 'friendica'

===== Settings =====

  su -

  su -m 'www' -c "ee '/usr/local/www/social/config/local.config.php'"

  'hostname' => '127.0.0.1',

  'php_path' => '/usr/local/bin/php',

  'basepath' => '/usr/local/www/social',