Information

Previously failed with Cypress and Sass, but they look like dev dependencies and possibly optional with --production (source)

Prerequisites

Dependencies

su -

pkg install git-lite php84-mysqli php84-composer node23 npm-node23 php84-simplexml php84-dom php84-iconv php84-sodium

Download Source

su -

git clone --branch '6.0-dev' --depth '1' --recurse-submodules 'https://github.com/joomla/joomla-cms.git' '/usr/local/www/main' && chown -R 'www':'www' '/usr/local/www/main' && sync

Environment

https://docs.joomla.org/Special:MyLanguage/J5.x:Setting_Up_Your_Local_Environment

Composer

su -

cd '/usr/local/www/main' && su -m 'www' -c "'/usr/local/bin/composer' install --ignore-platform-req='ext-ldap' --no-dev"

Node.js

su -

cd '/usr/local/www/main' && su -m 'www' -c "'/usr/local/bin/npm' ci --verbose --cache '/tmp/main' --ignore-scripts"

Databases

mariadb -u 'root' -p

CREATE DATABASE joomla_db;

CREATE USER 'joomla'@'localhost' IDENTIFIED BY 'x';

GRANT ALL PRIVILEGES ON joomla_db.* to 'joomla'@'localhost';

FLUSH PRIVILEGES;

EXIT

nginx + PHP-FPM Configuration

PHP-FPM Socket

su -

ee '/usr/local/etc/php-fpm.d/main.conf' && service 'php_fpm' restart

[main]

; User/Group
user = www
group = www

; Socket
listen = 127.0.0.1:9001
listen.allowed_clients = 127.0.0.1

; Process Management
pm = ondemand
pm.max_children = 4
pm.process_idle_timeout = 30

; General
php_value[date.timezone] = "America/New_York"

; End

FastCGI

su -

ee '/usr/local/etc/nginx/default.d/main.conf'

# PHP-FPM
location ~ \.(php|phar)(/.*)?$ {
    fastcgi_split_path_info ^(.+\.(?:php|phar))(/.*)$;
    fastcgi_intercept_errors on;
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param HTTPS on;
    fastcgi_pass 127.0.0.1:9001;
}

# End

Server Block

su -

ee '/usr/local/etc/nginx/vhosts.d/main.conf' && service 'nginx' reload && sync

server {
    listen 443 ssl;
#    http2 on;
    server_name 'realmofespionage.xyz';
    root '/usr/local/www/main';
    index 'index.php';

    include '/usr/local/etc/nginx/default.d/main.conf';
    include '/usr/local/etc/nginx/default.d/headers.conf';

    client_max_body_size '30M';

#    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'" always;

#    access_log  /var/log/nginx/main-access.log;
#    error_log  /var/log/nginx/main-error.log;

    location /api/ {
	try_files $uri $uri/ /api/index.php?$args;
    }

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
        return 403;
        error_page 403 /403_error.html;
    }

    location ~* \.(ico|pdf|flv)$ {
        expires 1y;
    }

    location ~* \.(js|css|png|jpg|jpeg|gif|swf|xml|txt)$ {
        expires 14d;
    }
 
}

Initial Setup

https://realmofespionage.xyz
If Joomla gives a 500 error, it's likely the sessions folder not having the right permissions, see nginx - Permissions

Settings

Purity III Template

Purity III

Install

Downloads
Download Purity III Template and T3 System Plugin ( not 20 MB+ quickstarts; not Purity III for Joomla 5)

System Dashboard

Templates → Site Template Styles
Set purity_III - Default to Default

Theme Settings

General → Show T3 Logo: Off

Theme → Logo Type: Text
Theme → Site Name: Realm of Espionage

Navigation → Megamenu Configuration → Animation: Fading
Navigation → Megamenu Configuration → Duration: 300

Add-ons → Off-canvas Sidebar → Enable: Off

Assignment → Toggle Selection

Copyright

Last tested: 2024/02/01 on Joomla 5.1.0-dev, T3 Framework 3.2.0, and Purity III 2.1.0

Logo

wget -O '/tmp/cc-by-sa-40.png' 'https://licensebuttons.net/l/by-sa/4.0/80x15.png' && sudo mv '/tmp/cc-by-sa-40.png' '/var/www/main/images/cc-by-sa-40.png' && sudo chown 'nginx':'nginx' '/var/www/main/images/cc-by-sa-40.png' && sudo restorecon -F -I -R '/var/www/main/images/cc-by-sa-40.png' && sync

Text

Place text within the <section class=“t3-copyright”> section underneath the Bootstrap by Twitter and Font Awesome mentions
Remove Bootstrap by Twitter and Font Awesome mentions

sudo -e '/var/www/main/templates/purity_iii/tpls/blocks/footer.php' && sudo chown 'nginx':'nginx' '/var/www/main/templates/purity_iii/tpls/blocks/footer.php'

          <small>
            <img src="https://realmofespionage.xyz/images/cc-by-sa-40.png" width="80" height="15" /> All content and data available on Realm of Espionage is available under the <a href="https://creativecommons.org/licenses/by-sa/4.0" target="_blank">Creative Commons Attribution-ShareAlike 4.0 International</a> license.
          </small>

Custom CSS

This shrinks the footer height, and places it back at the bottom of the screen instead of floating half-way up the page when little content exists (source 1, source 2)
Also replaces ThemeMagic for Brand Primary Color, Footer Background, and Footer Text Color

Last tested: 2024/02/01 on Joomla 5.1.0-dev, T3 Framework 3.2.0, and Purity III 2.1.0

sudo -e '/var/www/main/templates/purity_iii/css/custom.css' && sudo chown 'nginx':'nginx' '/var/www/main/templates/purity_iii/css/custom.css'

html,

body {
  height: 100%;
}

a {
  color: #3D8BFF;
}

a:hover {
  color: #196BE4;
}

.t3-mainnav {
  background-color: #3D8BFF;
}

.logo a {
  background: none;
}

.logo a:hover {
  background: #196BE4;
}

.t3-wrapper {
  position: relative;
  min-height: 100%;
}

.t3-footer {
  position: absolute;
  bottom: 0;
  left: 0;
  right: 0;
  background-color: #484848;
  color: #FFFFFF;
}

.t3-copyright {
  padding-top: 20px;
  padding-bottom: 0px;
}

Articles

Home

Toggle Editor for raw-HTML paste

<p><br>Welcome! Realm of Espionage is <a href="https://wiki.realmofespionage.xyz/user:espionage724" target="_blank" rel="noopener">my</a> creative space online, and the umbrella name I provide my services under. RoE is entirely self-hosted, in-house, with free and open-source software, and fully-documented in my unique notes style on <a href="https://wiki.realmofespionage.xyz/" target="_blank" rel="noopener">RoE | Wiki</a>, my encyclopedia of technical notes and no-nonsense automation.</p>
<p> </p>
<p>This domain serves as a landing page and provides links to the services I offer, some of my online profiles, and projects showcase. To view them, use the navigation bar (desktop) or the ≡ hamburger icon (mobile) at the top of the screen.</p>
<!-- End -->

Temp

<p> </p>
<p>(website is under construction and there aren't any links in the nav bar yet; my <a href="https://wiki.realmofespionage.xyz/">wiki</a> is far-more interesting! <a href="https://wiki.realmofespionage.xyz/user:espionage724">webmaster info</a>, <a href="https://wiki.realmofespionage.xyz/servers:linux:nginx:joomla" target="_blank" rel="noopener">dev notes</a>)</p>
<!-- End -->

Offline Message

This site is being built behind-the-scenes, check back later!
<br />
In the meantime, check out my wiki: <a href="https://wiki.realmofespionage.xyz/">RoE | Wiki</a>

Menus

Main menu headers are: System Links → URL → # to allow tapping as-expected on mobile
Icon sizes are 24×24
Menu entries should be named normally before saving for a proper alias, and then add a space on the title afterwards to make it look better with the icon

Global Configuration

Site Meta Description

Realm of Espionage is my creative space, and the umbrella name I provide my services under. RoE is self-hosted, with free and open-source software, and fully-documented in my unique notes style on "RoE | Wiki", my encyclopedia of technical notes and no-nonsense automation

Content Rights

Creative Commons Attribution-ShareAlike 4.0 International

Articles

System → Global Configuration → Articles

Show Title: Hide
Show Category: Hide
Show Author: Hide
Show Publish Date: Hide
Show Navigation: Hide
Show Hits: Hide

Menus → Main Menu → Home → Link Type → Display in Menu: No
Menus → Main Menu → Home → Page Display → Show Page Heading: Hide

Services

Updater

Service

2023/09/12: TODO: SELinux prevents various actions with npm; is it needed?
5.3-dev branch

sudo -e '/etc/systemd/system/main-up.service'

[Service]
User=nginx
Group=nginx
Type=oneshot
WorkingDirectory=/var/www/main
Environment="COMPOSER_CACHE_DIR=/dev/null"
ExecStart='/usr/bin/git' -C '/var/www/main' pull origin '5.3-dev'
ExecStart='/usr/bin/composer' install
#ExecStart='/usr/bin/npm' ci --logs-max='0'
#ExecStart='/usr/bin/npm' audit fix --audit-level='none' --logs-max='0'
ExecStartPost='/usr/bin/sync'

Timer

Every day at 02:00:00

sudo -e '/etc/systemd/system/main-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-up.timer' --now

[Unit]
Description=Joomla Git Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 02:00:00
Persistent=true

[Install]
WantedBy=timers.target

Maintenance

Service

sudo -e '/etc/systemd/system/main-m.service'

[Service]
User=nginx
Group=nginx
Type=oneshot
ExecStart='/usr/bin/git' -C '/var/www/main' gc --aggressive --prune='all'
ExecStart='/usr/bin/git' -C '/var/www/main' fsck --full --strict
ExecStartPost='/usr/bin/sync'

Timer

01 day of every month at 02:20:00

sudo -e '/etc/systemd/system/main-m.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-m.timer' --now

[Unit]
Description=Joomla Maintenance
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-01 02:20:00
Persistent=true

[Install]
WantedBy=timers.target

Backup

Files

Service

The extra ExecStart is an additional backup location that expects vsftpd - fstab

mkdir -p ~/'backups' && sudo -e '/etc/systemd/system/main-fb.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/main-fb.service'

[Service]
Type=oneshot
WorkingDirectory=/var/www
ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -czf "/home/CHANGEME/backups/joomla-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "main"'
#ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -czf "/var/ftp/nas1/Servers/Scheduled Backups/joomla-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "main"'
ExecStartPost='/usr/bin/sync'

Timer

01 day of every month at 02:35:00

sudo -e '/etc/systemd/system/main-fb.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-fb.timer' --now && sudo systemctl start 'main-fb' && sudo systemctl status 'main-fb' -l

[Unit]
Description=Joomla Files Backup

[Timer]
OnCalendar=*-*-01 02:35:00
Persistent=true

[Install]
WantedBy=timers.target

Database

Database Auth

sudo mkdir -p '/var/lib/mysql/auth' && sudo -e '/var/lib/mysql/auth/joomla' && sudo chown -R 'mysql':'mysql' '/var/lib/mysql/auth/joomla' && sudo chmod '600' '/var/lib/mysql/auth/joomla' && sync

[mariadb-dump]
user=joomla
password=x

Service

mkdir -p ~/'backups' && sudo mkdir -p '/var/lib/mysql/tmp' && sudo chown -R 'mysql':'mysql' '/var/lib/mysql/tmp' && sudo chmod '600' '/var/lib/mysql/tmp' && sudo -e '/etc/systemd/system/main-db.service' && sudo sed -i 's/'CHANGEME'/'$USER'/g' '/etc/systemd/system/main-db.service'

[Service]
Type=oneshot
WorkingDirectory=/var/lib/mysql/tmp
ExecStartPre='/usr/bin/mariadb-dump' --defaults-extra-file='/var/lib/mysql/auth/joomla' --single-transaction 'joomla_db' -r '/var/lib/mysql/tmp/joomla.sql'
ExecStart='/usr/bin/gzip' -f '/var/lib/mysql/tmp/joomla.sql'
ExecStart='/usr/bin/bash' -c '"/usr/bin/mv" "/var/lib/mysql/tmp/joomla.sql.gz" "/home/CHANGEME/backups/joomla-database-auto-"$$(date +%%Y-%%m-%%d)".sql.gz"'
ExecStartPost='/usr/bin/sync'

Timer

Every day at 02:45:00

sudo -e '/etc/systemd/system/main-db.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-db.timer' --now && sudo systemctl start 'main-db' && sudo systemctl status 'main-db' -l

[Unit]
Description=Joomla Database Backup
After=mariadb.service

[Timer]
OnCalendar=*-*-* 02:45:00
Persistent=true

[Install]
WantedBy=timers.target

Backup

Create backup archive on server and transfer to client computer

Server

Stop Services

sudo systemctl stop nginx php-fpm

Backup Folder

cd '/var/www' && sudo tar -cvzf ~/'joomla-files-manual-'$(date +%Y-%m-%d)'.tar.gz' 'main' && cd ~ && sync

Backup Database

TODO: Looks redundant to use the auth file and sudo

sudo mariadb-dump --defaults-extra-file='/var/lib/mysql/auth/joomla' --single-transaction 'joomla_db' -r ~/'joomla-database-manual-'$(date +%Y-%m-%d)'.sql' && sync

Start Services

sudo systemctl start nginx php-fpm

Client

Transfer Files To Client

scp espionage724@192.168.1.152:~/'joomla-files-'*'.tar.gz' espionage724@192.168.1.152:~/'joomla-database-'*'.sql' ~/'Downloads' && sync

Restore

Client

Uncompress Database

This is only needed if restoring an automated database backup ²⁾

gunzip ~/'Downloads/joomla-database-'*'.sql.gz'

Transfer Files To Server

scp ~/'Downloads/joomla-files-'*'.tar.gz' ~/'Downloads/joomla-database-'*'.sql' espionage724@192.168.1.152:~

Remove Files

rm -f ~/'Downloads/joomla-files-'*'.tar.gz' ~/'Downloads/joomla-database-'*'.sql' && sync

Server

Stop Services

sudo systemctl stop nginx php-fpm

Restore Joomla Folder

cd '/var/www' && sudo tar -xvzf ~/'joomla-files-'*'.tar.gz' 'main' && sudo semanage fcontext --add --type 'httpd_sys_rw_content_t' '/var/www/main(/.*)?' && sudo restorecon -F -I -R '/var/www/main' && sudo chown -R 'nginx':'nginx' '/var/www/main' && cd ~ && sync

Database

x is path to a joomla_db .sql database dump

mariadb --user='root' --password --execute='DROP DATABASE joomla_db'

mariadb --user='root' --password --execute='CREATE DATABASE joomla_db'

mariadb --user='root' --password 'joomla_db' < x

Reapply Permissions

mariadb -u 'root' -p

GRANT ALL PRIVILEGES ON joomla_db.* to 'joomla'@'localhost';

FLUSH PRIVILEGES;

EXIT

Start Services

sudo systemctl start nginx php-fpm

Remove Backups

Verify that Joomla works before running

rm ~/'joomla-files-'*'.tar.gz' ~/'joomla-database-'*'.sql' && sync

¹⁾

https://www.joomla.org

²⁾

manual doesn't gzip

Table of Contents

Information

Prerequisites

Dependencies

Download Source

Environment

Composer

Node.js

Databases

nginx + PHP-FPM Configuration

PHP-FPM Socket

FastCGI

Server Block

Initial Setup

Settings

Purity III Template

Install

System Dashboard

Theme Settings

Footer

Copyright

Logo

Text

Custom CSS

Articles

Home

Temp

Offline Message

Menus

Global Configuration

Site Meta Description

Content Rights

Articles

Menu

Services

Updater

Service

Timer

Maintenance

Service

Timer

Backup

Files

Service

Timer

Database

Database Auth

Service

Timer

Backup

Server

Stop Services

Backup Folder

Backup Database

Start Services

Client

Transfer Files To Client

Restore

Client

Uncompress Database

Transfer Files To Server

Remove Files

Server

Stop Services

Restore Joomla Folder

Database

Reapply Permissions

Start Services

Remove Backups