RoE | Wiki

User Tools

Site Tools

Trace: • piwigo
servers:bsd:nginx:piwigo

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
servers:bsd:nginx:piwigo [2025/05/16 20:40] – Sean Rhoneservers:bsd:nginx:piwigo [2025/05/24 05:45] (current) – Sean Rhone
Line 3: Line 3:
   * Piwigo ((https://piwigo.org/))   * Piwigo ((https://piwigo.org/))
   * Bootstrap Darkroom Theme ((https://github.com/Piwigo/piwigo-bootstrap-darkroom))   * Bootstrap Darkroom Theme ((https://github.com/Piwigo/piwigo-bootstrap-darkroom))
-  * ''master'' Branches ((https://github.com/Piwigo/Piwigo/tree/master)) ((https://github.com/Piwigo/piwigo-bootstrap-darkroom/tree/master)) 
   * [[Information:Realm of Espionage]]   * [[Information:Realm of Espionage]]
   * https://media.realmofespionage.xyz   * https://media.realmofespionage.xyz
- 
-  * :!: WIP 
  
 ===== Prerequisites ===== ===== Prerequisites =====
Line 24: Line 21:
   su -   su -
  
-  pkg install git-lite php84-mysqli php84-intl php84-mbstring php84-xml+  pkg install git-lite php84-exif php84-gd php84-mysqli php84-mbstring
  
 ====== Download Source ====== ====== Download Source ======
Line 31: Line 28:
   * https://github.com/Piwigo/piwigo-bootstrap-darkroom/commits/master/   * https://github.com/Piwigo/piwigo-bootstrap-darkroom/commits/master/
  
-  sudo git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/Piwigo.git' '/var/www/media' && sudo git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/piwigo-bootstrap-darkroom.git' '/var/www/media/themes/bootstrap_darkroom' && sudo semanage fcontext --add --type 'httpd_sys_rw_content_t' '/var/www/media(/.*)?' && sudo restorecon -F -I -R '/var/www/media' && sudo chown -R 'nginx':'nginx' '/var/www/media' && sync+  su - 
 + 
 +  git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/Piwigo.git' '/usr/local/www/media' && chown -R 'www':'www' '/usr/local/www/media' && sync 
 + 
 +  git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/piwigo-bootstrap-darkroom.git' '/usr/local/www/media/themes/bootstrap_darkroom' && chown -R 'www':'www' '/usr/local/www/media' && sync
  
 ====== Database ====== ====== Database ======
Line 51: Line 52:
 ===== PHP-FPM Socket ===== ===== PHP-FPM Socket =====
  
-  sudo -e '/etc/php-fpm.d/media.conf' && sudo systemctl restart 'php-fpm'+  su - 
 + 
 +  ee '/usr/local/etc/php-fpm.d/media.conf' && service 'php_fpm' restart
  
 <code> <code>
Line 57: Line 60:
  
 ; User/Group ; User/Group
-user = nginx +user = www 
-group = nginx+group = www
  
 ; Socket ; Socket
-listen = /run/php-fpm/media.sock +listen = 127.0.0.1:9003
-listen.acl_users = nginx+
 listen.allowed_clients = 127.0.0.1 listen.allowed_clients = 127.0.0.1
  
Line 69: Line 71:
 pm.max_children = 4 pm.max_children = 4
 pm.process_idle_timeout = 30 pm.process_idle_timeout = 30
- 
-; Fedora php.ini Defaults 
-php_value[session.save_handler] = "files" 
-php_value[session.save_path] = "/var/lib/php/session" 
  
 ; General ; General
Line 86: Line 84:
 ===== FastCGI ===== ===== FastCGI =====
  
-  sudo -e '/etc/nginx/default.d/media.conf'+  su - 
 + 
 +  ee '/usr/local/etc/nginx/default.d/media.conf'
  
 <code> <code>
Line 97: Line 97:
     fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;     fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
     fastcgi_param PATH_INFO $fastcgi_path_info;     fastcgi_param PATH_INFO $fastcgi_path_info;
-    fastcgi_pass unix:/run/php-fpm/media.sock; +    fastcgi_param HTTPS on; 
-}</code>+    fastcgi_pass 127.0.0.1:9003; 
 +} 
 + 
 +# End</code>
  
 ===== Server Block ===== ===== Server Block =====
  
-  * 2023/09/12: CSPs disabled; TODO: Re-figure out CSPs+  su -
  
-  sudo -e '/etc/nginx/vhosts.d/media.conf' && sudo systemctl reload 'nginx' && sync+  ee '/usr/local/etc/nginx/vhosts.d/media.conf' && service 'nginx' reload && sync
  
 <code> <code>
 server { server {
-    listen '443' 'ssl' 'http2';+    listen '443' 'ssl'; 
 +#    http2 'on';
     server_name 'media.realmofespionage.xyz';     server_name 'media.realmofespionage.xyz';
-    root '/var/www/media';+    root '/usr/local/www/media';
     index 'index.php';     index 'index.php';
  
-    include '/etc/nginx/default.d/media.conf'; +    include '/usr/local/etc/nginx/default.d/media.conf'; 
-    include '/etc/nginx/default.d/headers.conf';+    include '/usr/local/etc/nginx/default.d/headers.conf';
  
 #    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'" always; #    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'" always;
Line 132: Line 136:
     }     }
  
-}</code>+} 
 + 
 +# End</code>
  
 ====== Initial Setup ====== ====== Initial Setup ======
Line 172: Line 178:
 // Minimal Logging // Minimal Logging
 $conf['log_level'] = 'EMERGENCY'; $conf['log_level'] = 'EMERGENCY';
 +
 +// Hide PHP Warnings
 +$conf['show_php_errors'] = E_ALL & ~E_DEPRECATED & ~E_NOTICE & ~E_WARNING;
  
 // Header Links // Header Links
Line 177: Line 186:
   'https://realmofespionage.xyz' => 'Realm of Espionage',   'https://realmofespionage.xyz' => 'Realm of Espionage',
   'https://wiki.realmofespionage.xyz' => 'RoE | Wiki',   'https://wiki.realmofespionage.xyz' => 'RoE | Wiki',
-  'https://social.realmofespionage.xyz/profile/espionage724' => 'RoE | Social', 
   'https://blog.realmofespionage.xyz' => 'RoE | Blog',   'https://blog.realmofespionage.xyz' => 'RoE | Blog',
-  'https://wiki.realmofespionage.xyz/personal:social_media' => 'Webmaster Info', +  'https://wiki.realmofespionage.xyz/user:espionage724' => 'Webmaster Info', 
-  'https://wiki.realmofespionage.xyz/servers:nginx:piwigo' => 'Instance Configuration Notes',+  'https://wiki.realmofespionage.xyz/servers:bsd:nginx:piwigo' => 'Instance Configuration Notes',
   );   );
  
Line 206: Line 214:
   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media/themes/bootstrap_darkroom' pull origin 'master'"   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media/themes/bootstrap_darkroom' pull origin 'master'"
  
-===== Etc =====+===== Maintenance ===== 
 + 
 +==== Media ====
  
   su -   su -
Line 217: Line 227:
  
   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media' fsck --full --strict"   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media' fsck --full --strict"
 +
 +  mariadb-check -u 'root' -p -o -f -e --auto-repair 'piwigo'
 +
 +==== Theme ====
 +
 +  su -
  
   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media/themes/bootstrap_darkroom' reset --hard"   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media/themes/bootstrap_darkroom' reset --hard"
Line 225: Line 241:
  
   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media/themes/bootstrap_darkroom' fsck --full --strict"   su -m 'www' -c "'/usr/local/bin/git' -C '/usr/local/www/media/themes/bootstrap_darkroom' fsck --full --strict"
- 
-====== Services ====== 
- 
-===== Updater ===== 
- 
-==== Service ==== 
- 
-  sudo -e '/etc/systemd/system/media-up.service' 
- 
-<code> 
-[Service] 
-User=nginx 
-Group=nginx 
-Type=oneshot 
-WorkingDirectory=/var/www/media 
-ExecStart='/usr/bin/git' -C '/var/www/media' pull origin 'master' 
-ExecStart='/usr/bin/git' -C '/var/www/media/themes/bootstrap_darkroom' pull origin 'master' 
-ExecStartPost='/usr/bin/sync'</code> 
- 
-==== Timer ==== 
- 
-  * Every day at ''05:00:00'' 
- 
-  sudo -e '/etc/systemd/system/media-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-up.timer' --now && sudo systemctl start 'media-up' && sudo systemctl status 'media-up' -l 
- 
-<code> 
-[Unit] 
-Description=Piwigo Updater 
-After=network-online.target 
-Wants=network-online.target 
- 
-[Timer] 
-OnCalendar=*-*-* 05:00:00 
-Persistent=true 
- 
-[Install] 
-WantedBy=timers.target</code> 
- 
-===== Maintenance ===== 
- 
-==== Service ==== 
- 
-  sudo -e '/etc/systemd/system/media-m.service' 
- 
-<code> 
-[Service] 
-User=nginx 
-Group=nginx 
-Type=oneshot 
-ExecStart='/usr/bin/git' -C '/var/www/media' gc --aggressive --prune='all' 
-ExecStart='/usr/bin/git' -C '/var/www/media' fsck --full --strict 
-ExecStart='/usr/bin/git' -C '/var/www/media/themes/bootstrap_darkroom' gc --aggressive --prune='all' 
-ExecStart='/usr/bin/git' -C '/var/www/media/themes/bootstrap_darkroom' fsck --full --strict 
-ExecStartPost='/usr/bin/sync'</code> 
- 
-==== Timer ==== 
- 
-  * ''01'' day of every month at ''05:20:00'' 
- 
-  sudo -e '/etc/systemd/system/media-m.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-m.timer' --now && sudo systemctl start 'media-m' && sudo systemctl status 'media-m' -l 
- 
-<code> 
-[Unit] 
-Description=Piwigo Maintenance 
-After=network-online.target 
-Wants=network-online.target 
- 
-[Timer] 
-OnCalendar=*-*-01 05:20:00 
-Persistent=true 
- 
-[Install] 
-WantedBy=timers.target</code> 
- 
-===== Backup ===== 
- 
-==== Files ==== 
- 
-=== Service === 
- 
-  mkdir -p ~/'backups' && sudo -e '/etc/systemd/system/media-fb.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/media-fb.service' 
- 
-<code> 
-[Service] 
-Type=oneshot 
-WorkingDirectory=/var/www 
-ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -czf "/home/CHANGEME/backups/piwigo-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "media"' 
-ExecStartPost='/usr/bin/sync'</code> 
- 
-=== Timer === 
- 
-  * ''01'' day of every month at ''05:35:00'' 
- 
-  sudo -e '/etc/systemd/system/media-fb.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-fb.timer' --now && sudo systemctl start 'media-fb' && sudo systemctl status 'media-fb' -l 
- 
-<code> 
-[Unit] 
-Description=Piwigo Files Backup 
- 
-[Timer] 
-OnCalendar=*-*-01 05:35:00 
-Persistent=true 
- 
-[Install] 
-WantedBy=timers.target</code> 
- 
-==== Database ==== 
- 
-=== Database Auth === 
- 
-  sudo mkdir -p '/var/lib/mysql/auth' && sudo -e '/var/lib/mysql/auth/piwigo' && sudo chown -R 'mysql':'mysql' '/var/lib/mysql/auth/piwigo' && sudo chmod '600' '/var/lib/mysql/auth/piwigo' && sync 
- 
-<code> 
-[mariadb-dump] 
-user=piwigo 
-password=x</code> 
- 
-=== Service === 
- 
-  mkdir -p ~/'backups' && sudo mkdir -p '/var/lib/mysql/tmp' && sudo -e '/etc/systemd/system/media-db.service' && sudo sed -i 's/'CHANGEME'/'$USER'/g' '/etc/systemd/system/media-db.service' 
- 
-<code> 
-[Service] 
-Type=oneshot 
-WorkingDirectory=/var/lib/mysql/tmp 
-ExecStartPre='/usr/bin/mariadb-dump' --defaults-extra-file='/var/lib/mysql/auth/piwigo' --single-transaction 'piwigo' -r '/var/lib/mysql/tmp/piwigo.sql' 
-ExecStart='/usr/bin/gzip' -f '/var/lib/mysql/tmp/piwigo.sql' 
-ExecStart='/usr/bin/bash' -c '"/usr/bin/mv" "/var/lib/mysql/tmp/piwigo.sql.gz" "/home/CHANGEME/backups/piwigo-database-auto-"$$(date +%%Y-%%m-%%d)".sql.gz"' 
-ExecStartPost='/usr/bin/sync'</code> 
- 
-=== Timer === 
- 
-  * Every day at ''05:45:00'' 
- 
-  sudo -e '/etc/systemd/system/media-db.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-db.timer' --now && sudo systemctl start 'media-db' && sudo systemctl status 'media-db' -l 
- 
-<code> 
-[Unit] 
-Description=Piwigo Database Backup 
-After=mariadb.service 
- 
-[Timer] 
-OnCalendar=*-*-* 05:45:00 
-Persistent=true 
- 
-[Install] 
-WantedBy=timers.target</code> 
  
 ====== Backup ====== ====== Backup ======
  
-  * Create backup archive on server and transfer to client computer+===== Folder =====
  
-===== Server =====+  su -
  
-==== Stop Services ====+  cd '/usr/local/www' && tar -cvzf '/home/espionage724/piwigo-files-manual-'$(date +%Y-%m-%d)'.tar.gz' 'media'
  
-**** +===== Database =====
- +
-  sudo systemctl stop nginx php-fpm +
- +
-==== Backup Folder ====+
  
 **** ****
  
-  cd '/var/www' && sudo tar -cvzf ~/'piwigo-files-manual-'$(date +%Y-%m-%d)'.tar.gz' 'media' && cd ~ && sync+  mariadb-dump -u root -p --single-transaction 'piwigo' -r '/home/espionage724/piwigo-database-manual-'$(date +%Y-%m-%d)'.sql'
  
-==== Backup Database ==== +===== scp =====
- +
-**** +
- +
-  sudo mariadb-dump --defaults-extra-file='/var/lib/mysql/auth/piwigo' --single-transaction 'piwigo' -r ~/'piwigo-database-manual-'$(date +%Y-%m-%d)'.sql' && sync +
- +
-==== Start Services ==== +
- +
-**** +
- +
-  sudo systemctl start nginx php-fpm +
- +
-===== Client ===== +
- +
-==== Transfer Files To Client ====+
  
 **** ****
Line 413: Line 264:
 ====== Restore ====== ====== Restore ======
  
-===== Client ===== +===== scp =====
- +
-==== Uncompress Database ==== +
- +
-  * This is only needed if restoring an **automated** database backup ((manual doesn't gzip)) +
- +
-  gunzip ~/'Downloads/piwigo-database-'*'.sql.gz' +
- +
-==== Transfer Files To Server ====+
  
 **** ****
Line 427: Line 270:
   scp ~/'Downloads/piwigo-files-'*'.tar.gz' ~/'Downloads/piwigo-database-'*'.sql' espionage724@192.168.1.152:~   scp ~/'Downloads/piwigo-files-'*'.tar.gz' ~/'Downloads/piwigo-database-'*'.sql' espionage724@192.168.1.152:~
  
-==== Remove Files ==== +===== Folder =====
- +
-**** +
- +
-  rm -f ~/'Downloads/piwigo-files-'*'.tar.gz' ~/'Downloads/piwigo-database-'*'.sql' && sync +
- +
-===== Server ===== +
- +
-==== Stop Services ==== +
- +
-**** +
- +
-  sudo systemctl stop nginx php-fpm +
- +
-==== Remove Previous Folder ==== +
- +
-**** +
- +
-  sudo rm -Rf '/var/www/media' +
- +
-==== Restore Piwigo Folder ==== +
- +
-**** +
- +
-  cd '/var/www' && sudo tar -xvzf ~/'piwigo-files-'*'.tar.gz' 'media' && sudo semanage fcontext --add --type 'httpd_sys_rw_content_t' '/var/www/media(/.*)?' && sudo restorecon -F -I -R '/var/www/media' && sudo chown -R 'nginx':'nginx' '/var/www/media' && cd ~ && sync +
- +
-==== Drop Previous Database ==== +
- +
-  sudo mariadb +
- +
-  DROP DATABASE piwigo; +
- +
-  FLUSH TABLES; +
- +
-  EXIT +
- +
-==== Re-create Databases ==== +
- +
-  sudo mariadb +
- +
-  CREATE DATABASE piwigo; +
- +
-  EXIT +
- +
-==== Restore Database ==== +
- +
-**** +
- +
-  sudo mariadb 'piwigo' < ~/'piwigo-database-'*'.sql' && sync +
- +
-==== Reapply Permissions ==== +
- +
-  sudo mariadb +
- +
-  GRANT ALL PRIVILEGES ON piwigo.* to 'piwigo'@'localhost' IDENTIFIED BY 'x'; +
- +
-  FLUSH PRIVILEGES; +
- +
-  EXIT +
- +
-==== Start Services ==== +
- +
-**** +
- +
-  sudo systemctl start nginx php-fpm +
- +
-==== Remove Backups ==== +
- +
-  * Verify that Piwigo works before running +
- +
-  rm ~/'piwigo-files-'*'.tar.gz' ~/'piwigo-database-'*'.sql' && sync +
- +
-====== Restore ====== +
- +
-===== Files =====+
  
   su -   su -
Line 507: Line 276:
   rm -Rf '/usr/local/www/media'   rm -Rf '/usr/local/www/media'
  
-  cd '/usr/local/www' && tar -xvzf '/home/'*'/piwigo-files-'*'.tar.gz' 'media' && chown -R 'www':'www' '/usr/local/www/media' && cd ~ && sync+  cd '/usr/local/www' && tar -xvzf '/home/espionage724/piwigo-files-'*'.tar.gz' 'media' && chown -R 'www':'www' '/usr/local/www/media' && cd ~ && sync
  
 ===== Database ===== ===== Database =====
Line 515: Line 284:
   mariadb -u 'root' -p --execute='CREATE DATABASE piwigo;'   mariadb -u 'root' -p --execute='CREATE DATABASE piwigo;'
  
-  mariadb -u 'root' -p 'piwigo' < ~/'piwigo.sql'+  mariadb -u 'root' -p 'piwigo' < '/home/espionage724/piwigo-database-manual-'*'.sql'
  
/srv/www/wiki/data/attic/servers/bsd/nginx/piwigo.1747442448.txt.gz · Last modified: by Sean Rhone