User Tools

Site Tools


servers:nginx:dokuwiki

This is an old revision of the document!


Information

Prerequisites

Download Source

sudo git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/splitbrain/dokuwiki.git' '/srv/www/wiki' && sudo chown -R 'wwwrun':'www' '/srv/www/wiki' && sync

nginx + PHP-FPM Configuration

PHP-FPM Socket

  • :!: This report links to other reports of broken pages, and has a few different solutions. Disabling Pcre JIT fixes the rendering issue in this instance's case as of 2021/07/02
sudo -e '/etc/php8/fpm/php-fpm.d/wiki.conf' && sudo systemctl restart 'php-fpm'
[wiki]
user = wwwrun
group = www

listen = 127.0.0.1:9001
listen.owner = wwwrun
listen.group = www
listen.allowed_clients = 127.0.0.1

pm = ondemand
pm.max_children = 4
pm.process_idle_timeout = 30

php_value[date.timezone] = "America/New_York"
php_value[pcre.jit] = "0"

FastCGI

sudo -e '/etc/nginx/snippets.d/wiki.conf'
# PHP-FPM
location ~ \.(php|phar)(/.*)?$ {
    fastcgi_split_path_info ^(.+\.(?:php|phar))(/.*)$;

    fastcgi_intercept_errors on;
    fastcgi_index doku.php;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_pass 127.0.0.1:9001;
}

Server Block

sudo -e '/etc/nginx/vhosts.d/wiki.conf' && sudo systemctl reload 'nginx' && sync
server {
    listen '443' 'ssl' 'http2';
    server_name 'wiki.realmofespionage.xyz';
    root '/srv/www/wiki';
    index 'doku.php';

    include 'snippets.d/wiki.conf';
    include 'snippets.d/headers.conf';

    client_max_body_size '10M';

    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:" always;

#    access_log  /var/log/nginx/wiki-access.log;
#    error_log  /var/log/nginx/wiki-error.log;

#    location = /install.php {
#        deny all;
#    }

#    location ~ /(conf|bin|inc)/ {
#        deny all;
#    }

#    location ~ /data/ {
#        internal;
#    }

    location / { try_files $uri $uri/ @dokuwiki; }

    location @dokuwiki {
        rewrite ^/_media/(.*) /lib/exe/fetch.php?media=$1 last;
        rewrite ^/_detail/(.*) /lib/exe/detail.php?media=$1 last;
        rewrite ^/_export/([^/]+)/(.*) /doku.php?do=export_$1&id=$2 last;
        rewrite ^/(.*) /doku.php?id=$1&$args last;
    }
}

AppArmor

Rule Build

sudo aa-complain '/etc/apparmor.d/php-fpm'

Audit

sudo aa-logprof

Enforce

sudo aa-enforce '/etc/apparmor.d/php-fpm'

Initial Setup

Settings

Code Box Click Issue

Template Style Settings

  • Alternative background color: #484848
  • The general link color: #3d8bff
  • :!: The width of the full site: 100em 5)

nginx Server Block Deny Directives

  • Uncomment commented sections (except logs)
  • Do after initial setup
sudo -e '/etc/nginx/vhosts.d/wiki.conf' && sudo systemctl reload 'nginx'

URL Rewrite

  • Admin → Configuration Settings
  • Set Use nice URLs to .htaccess

Double-hyphen Convert Disable

  • This prevents -- from becoming a – (long hyphen), which breaks some command's syntax
echo '--      --' | sudo tee '/srv/www/wiki/conf/entities.local.conf' > '/dev/null' && sudo chown 'wwwrun':'www' '/srv/www/wiki/conf/entities.local.conf'

Services

Updater

Service

sudo -e '/etc/systemd/system/wiki-up.service'
[Service]
User=wwwrun
Group=www
Type=oneshot
ExecStart='/usr/bin/git' -C '/srv/www/wiki' pull origin 'master'
ExecStartPost='/usr/bin/sync'

Timer

  • Every day at 01:00:00
sudo -e '/etc/systemd/system/wiki-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'wiki-up.timer' --now && sudo systemctl start 'wiki-up' && sudo systemctl status 'wiki-up' -l
[Unit]
Description=DokuWiki Git Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 01:00:00
Persistent=true

[Install]
WantedBy=timers.target

Maintenance

Service

  • :!: The commented ExecStart would remove page edits older than 90 days
sudo -e '/etc/systemd/system/wiki-m.service'
[Service]
User=wwwrun
Group=www
Type=oneshot
WorkingDirectory=/srv/www/wiki
ExecStart='/usr/bin/git' -C '/srv/www/wiki' gc --aggressive --prune='all'
ExecStart='/usr/bin/git' -C '/srv/www/wiki' fsck --full --strict
#ExecStart='/usr/bin/bash' -c "find '/srv/www/wiki/data'/{attic,cache,locks,media_attic}/ -type 'f' -mtime +'90' -delete"
ExecStart='/usr/bin/bash' -c "find '/srv/www/wiki/data'/{attic,cache,index,locks,media,media_attic,media_meta,meta,pages,tmp}/ -mindepth '1' -type 'd' -empty -delete"
ExecStart='/usr/bin/php' '/srv/www/wiki/bin/indexer.php' --clear
ExecStartPost='/usr/bin/sync'

Timer

  • 01 day of every month at 01:20:00
sudo -e '/etc/systemd/system/wiki-m.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'wiki-m.timer' --now
[Unit]
Description=DokuWiki Maintenance

[Timer]
OnCalendar=*-*-01 01:20:00
Persistent=true

[Install]
WantedBy=timers.target

Backup

  • This backs up an archive to the local disk and to a NAS

Service

  • :!: The extra ExecStarts are additional backup locations that expect vsftpd
  • TODO: Figure out Keybase and set a path here
mkdir -p ~/'backups' && sudo -e '/etc/systemd/system/wiki-fb.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/wiki-fb.service'
[Service]
Type=oneshot
WorkingDirectory=/srv/www/wiki
ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -cvzf "/home/CHANGEME/backups/dokuwiki-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "data/pages" "data/meta" "data/media" "data/media_meta" "data/attic" "data/media_attic" "conf"'
#ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -cvzf "/srv/ftp/nas1/espionage724/Servers/Scheduled Backups/dokuwiki-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "data/pages" "data/meta" "data/media" "data/media_meta" "data/attic" "data/media_attic" "conf"'
#ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -cvzf "/srv/ftp/nas2/Servers/Scheduled Backups/dokuwiki-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "data/pages" "data/meta" "data/media" "data/media_meta" "data/attic" "data/media_attic" "conf"'
ExecStartPost='/usr/bin/sync'

Keybase

#ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -cvzf "/run/user/1000/keybase/kbfs/private/espionage724/Servers/Scheduled Backups/dokuwiki-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "data/pages" "data/meta" "data/media" "data/media_meta" "data/attic" "data/media_attic" "conf"'

Timer

  • Every day at 01:50:00
sudo -e '/etc/systemd/system/wiki-fb.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'wiki-fb.timer' --now && sudo systemctl start 'wiki-fb' && sudo systemctl status 'wiki-fb' -l
[Unit]
Description=DokuWiki Files Backup

[Timer]
OnCalendar=*-*-* 01:50:00
Persistent=true

[Install]
WantedBy=timers.target

Backup

  • Create backup archive on server and transfer to client computer

Server

Archive Folders

cd '/srv/www/wiki' && sudo tar -cvzf ~/'dokuwiki-files-manual-'$(date +%Y-%m-%d)'.tar.gz' 'data/pages' 'data/meta' 'data/media' 'data/media_meta' 'data/attic' 'data/media_attic' 'conf' && cd ~ && sync

Client

Transfer Archive to Client

scp espionage724@192.168.1.152:~/'dokuwiki-files-'*'.tar.gz' ~/'Downloads' && sync

Restore

Client

Transfer Archive to Server

scp ~/'Downloads/dokuwiki-files-'*'.tar.gz' espionage724@192.168.1.152:~

Remove Archive

rm ~/'Downloads/dokuwiki-files-'*'.tar.gz' && sync

Server

Stop nginx

sudo systemctl stop 'nginx'

Remove Previous Folders

ls ~/'dokuwiki-files-'*'.tar.gz' && sudo rm -Rf '/srv/www/wiki/data/pages' '/srv/www/wiki/data/meta' '/srv/www/wiki/data/media' '/srv/www/wiki/data/media_meta' '/srv/www/wiki/data/attic' '/srv/www/wiki/data/media_attic' '/srv/www/wiki/conf'

Restore Folders

cd '/srv/www/wiki' && sudo tar -xvzf ~/'dokuwiki-files-'*'.tar.gz' 'data/pages' 'data/meta' 'data/media' 'data/media_meta' 'data/attic' 'data/media_attic' 'conf' && sudo chown -R 'wwwrun':'www' '/srv/www/wiki' && cd ~ && sync

Start nginx

sudo systemctl start 'nginx'

Remove Archive

  • Verify that DokuWiki works before running
rm -R ~/'dokuwiki-files-'*'.tar.gz' && sync
3)
you are here :p
4)
this is similar to servers:games:trinitycore_3.3.5#service with SELinux
5)
this caused some kind of scrollbar I believe on a 1280×800 laptop
/var/www/wiki/data/attic/servers/nginx/dokuwiki.1652518755.txt.gz · Last modified: 2022/05/14 04:59 by Sean Rhone