• Friendica ^{1) 2)}
• Realm of Espionage
• https://social.realmofespionage.xyz

• openSUSE Tumbleweed
• MariaDB
• nginx + PHP + PHP-FPM
• Let's Encrypt

sudo zypper install php8-posix php8-gmp openssl php8-pcntl php8-xdebug

sudo git clone --branch 'develop' --depth '1' --recurse-submodules 'https://github.com/friendica/friendica.git' '/srv/www/social' && sudo git clone --branch 'develop' --depth '1' --recurse-submodules 'https://github.com/friendica/friendica-addons.git' '/srv/www/social/addon' && sudo chown -R 'nginx':'nginx' '/srv/www/social' && sync

sudo su 'nginx' -s '/bin/bash'

cd '/srv/www/social' && COMPOSER_CACHE_DIR='/dev/null' '/srv/www/social/bin/composer.phar' install --no-dev && sync

sudo mysql

CREATE DATABASE friendica;

GRANT ALL PRIVILEGES ON friendica.* to 'friendica'@'localhost' IDENTIFIED BY 'x';

FLUSH PRIVILEGES;

EXIT

sudo mysql 'friendica' < '/srv/www/social/database.sql' && sync

sudo -e '/etc/php8/fpm/php-fpm.d/social.conf' && sudo systemctl restart 'php-fpm'

[social]

; User/Group
user = nginx
group = nginx

; Socket
listen = 127.0.0.1:9005
listen.acl_users = nginx
listen.allowed_clients = 127.0.0.1

; Process Management
pm = ondemand
pm.max_children = 4
pm.process_idle_timeout = 30

; openSUSE TW php.ini Defaults
php_value[session.save_path] = "/var/lib/php8/sessions"

; General
php_value[date.timezone] = "America/New_York"
php_value[max_execution_time] = "200"
php_value[memory_limit] = "512M"
php_value[post_max_size] = "10M"
php_value[upload_max_filesize] = "10M"
php_value[max_file_uploads] = "100"
php_value[register_argc_argv] = "On"
php_value[upload_tmp_dir] = "/tmp"

; End

sudo -e '/etc/nginx/default.d/social.conf'

# PHP-FPM
location ~ \.(php|phar)(/.*)?$ {
    fastcgi_split_path_info ^(.+\.(?:php|phar))(/.*)$;

    fastcgi_intercept_errors on;
    fastcgi_index  index.php;
    include        fastcgi_params;
    fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
    fastcgi_param  PATH_INFO $fastcgi_path_info;
    fastcgi_pass 127.0.0.1:9005;
}

# PHP-FPM
location ~* \.php$ {
#    fastcgi_intercept_errors on;
#    fastcgi_param  PATH_INFO $fastcgi_path_info;
    fastcgi_pass 127.0.0.1:9005;
    fastcgi_buffers 8 16k;
    fastcgi_buffer_size 32k;
    fastcgi_connect_timeout 60;
    fastcgi_send_timeout 300;
    fastcgi_read_timeout 300;
    fastcgi_split_path_info ^(.+?\.php)(/.*)$;
    try_files $uri =404;
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}

sudo -e '/etc/nginx/vhosts.d/social.conf' && sudo systemctl reload 'nginx' && sync

server {
    listen '443' 'ssl' 'http2';
    server_name 'social.realmofespionage.xyz';
    root '/srv/www/social';
    index 'index.php';

    include '/etc/nginx/default.d/social.conf';
    include '/etc/nginx/default.d/headers.conf';

    client_max_body_size '10M';

    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' blob:" always;

#    access_log  /var/log/nginx/social-access.log;
#    error_log  /var/log/nginx/social-error.log;

    location / {
        try_files $uri /index.php?pagename=$uri&$args;
    }

    location ^~ /.well-known/ {
        allow all;
        rewrite ^ /index.php?pagename=$uri;
    }

    location ~* \.(tpl|md|tgz|log|out)$ {
        deny all;
    }

    location ~ /\. {
        deny all;
    }
}

    if (!-e $request_filename) {
        rewrite ^(.*)$ /index.php?pagename=$1;
    }

    client_max_body_size 50M;
    client_body_buffer_size 128k;

  location ^~ /.well-known/ {
    allow all;
   if (!-e $request_filename) {
     rewrite ^(.*)$ /index.php?pagename=$1;
   }
  }

nano '/srv/www/social/config/local-sample.config.php'

sudo -e '/srv/www/social/config/local-custom.config.php' && sudo chown 'nginx':'nginx' '/srv/www/social/config/local-custom.config.php' && sync

<?php
return [
    'database' => [
        'hostname' => 'localhost',
        'username' => 'friendica',
        'password' => 'x',
        'database' => 'friendica',
        'charset' => 'utf8mb4',
    ],

    'config' => [
        'admin_email' => '',
        'sitename' => 'RoE | Social',
        'register_policy' => \Friendica\Module\Register::CLOSED,
        'register_text' => '',
    ],
    'system' => [
        'default_timezone' => 'UTC',
        'language' => 'en',
        'url' => 'https://social.realmofespionage.xyz',
        'session_handler' => 'cache',
    ],
];

sudo su 'nginx' -s '/bin/bash'

cd '/srv/www/social/' && '/srv/www/social/bin/console' autoinstall --dbhost 'localhost' --dbport '3365' --dbuser 'friendica' --dbpass '' --dbdata 'friendica' -U --url 'https://social.realmofespionage.xyz'

• https://social.realmofespionage.xyz

sudo -e '/etc/systemd/system/social-d.service'

[Service]
User=nginx
Group=nginx
Type=oneshot
WorkingDirectory=/srv/www/social
ExecStart='/usr/bin/php' '/srv/www/social/bin/worker.php'
ExecStartPost='/usr/bin/sync'

• Every 5 minutes

sudo -e '/etc/systemd/system/social-d.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'social-d.timer' --now

[Unit]
Description=friendica Worker Daemon
After=network-online.target
Wants=network-online.target

[Timer]
OnBootSec=5m
OnUnitActiveSec=5m

[Install]
WantedBy=timers.target

sudo -e '/etc/systemd/system/social-up.service'

[Service]
User=nginx
Group=nginx
Type=oneshot
WorkingDirectory=/srv/www/social
Environment="COMPOSER_CACHE_DIR=/dev/null"
ExecStart='/usr/bin/git' -C '/srv/www/social' pull origin 'develop'
ExecStart='/usr/bin/git' -C '/srv/www/social/addon' pull origin 'develop'
ExecStart='/srv/www/social/bin/composer.phar' install --no-dev
ExecStartPost='/usr/bin/sync'

• Every day at 02:00:00

sudo -e '/etc/systemd/system/social-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'social-up.timer' --now && sudo systemctl start 'social-up' && sudo systemctl status 'social-up' -l

[Unit]
Description=friendica Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 02:00:00
Persistent=true

[Install]
WantedBy=timers.target

sudo -e '/etc/systemd/system/social-m.service'

[Service]
User=nginx
Group=nginx
Type=oneshot
ExecStart='/usr/bin/git' -C '/srv/www/social' gc --aggressive --prune='all'
ExecStart='/usr/bin/git' -C '/srv/www/social' fsck --full --strict
ExecStart='/usr/bin/git' -C '/srv/www/social/addon' gc --aggressive --prune='all'
ExecStart='/usr/bin/git' -C '/srv/www/social/addon' fsck --full --strict
ExecStartPost='/usr/bin/sync'

• 01 day of every month at 02:20:00

sudo -e '/etc/systemd/system/social-m.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'social-m.timer' --now

[Unit]
Description=friendica Maintenance
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-01 02:20:00
Persistent=true

[Install]
WantedBy=timers.target

mkdir -p ~/'backups' && sudo -e '/etc/systemd/system/social-fb.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/social-fb.service'

[Service]
Type=oneshot
WorkingDirectory=/srv/www
ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -czf "/home/CHANGEME/backups/friendica-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "social"'
ExecStartPost='/usr/bin/sync'

• 01 day of every month at 02:50:00

sudo -e '/etc/systemd/system/social-fb.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'social-fb.timer' --now && sudo systemctl start 'social-fb' && sudo systemctl status 'social-fb' -l

[Unit]
Description=friendica Files Backup

[Timer]
OnCalendar=*-*-01 02:50:00
Persistent=true

[Install]
WantedBy=timers.target

sudo mkdir -p '/var/lib/mysql/auth' && sudo -e '/var/lib/mysql/auth/friendica' && sudo chown -R 'mysql':'mysql' '/var/lib/mysql/auth/friendica' && sudo chmod '600' '/var/lib/mysql/auth/friendica' && sync

[mysqldump]
user=friendica
password=x

mkdir -p ~/'backups' && sudo mkdir -p '/var/lib/mysql/tmp' && sudo -e '/etc/systemd/system/social-db.service' && sudo sed -i 's/'CHANGEME'/'$USER'/g' '/etc/systemd/system/social-db.service'

[Service]
Type=oneshot
WorkingDirectory=/var/lib/mysql/tmp
ExecStartPre='/usr/bin/mysqldump' --defaults-extra-file='/var/lib/mysql/auth/friendica' --single-transaction 'friendica' -r '/var/lib/mysql/tmp/friendica.sql'
ExecStart='/usr/bin/gzip' -f '/var/lib/mysql/tmp/friendica.sql'
ExecStart='/usr/bin/bash' -c '"/usr/bin/mv" "/var/lib/mysql/tmp/friendica.sql.gz" "/home/CHANGEME/backups/friendica-database-auto-"$$(date +%%Y-%%m-%%d)".sql.gz"'
ExecStartPost='/usr/bin/sync'

• Every day at 02:15:00

sudo -e '/etc/systemd/system/social-db.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'social-db.timer' --now && sudo systemctl start 'social-db' && sudo systemctl status 'social-db' -l

[Unit]
Description=friendica Database Backup
After=mariadb.service

[Timer]
OnCalendar=*-*-* 02:15:00
Persistent=true

[Install]
WantedBy=timers.target

• Create backup archive on server and transfer to client computer

sudo systemctl stop nginx php-fpm

cd '/srv/www' && sudo tar -cvzf ~/'friendica-files-manual-'$(date +%Y-%m-%d)'.tar.gz' 'social' && cd ~ && sync

sudo mysqldump --defaults-extra-file='/var/lib/mysql/auth/friendica' --single-transaction 'friendica' -r ~/'friendica-database-manual-'$(date +%Y-%m-%d)'.sql' && sync

sudo systemctl start nginx php-fpm

scp espionage724@192.168.1.152:~/'friendica-files-'*'.tar.gz' espionage724@192.168.1.152:~/'friendica-database-'*'.sql' ~/'Downloads' && sync

• This is only needed if restoring an automated database backup ³⁾

gunzip ~/'Downloads/friendica-database-'*'.sql.gz'

scp ~/'Downloads/friendica-files-'*'.tar.gz' ~/'Downloads/friendica-database-'*'.sql' espionage724@192.168.1.152:~

rm -f ~/'Downloads/friendica-files-'*'.tar.gz' ~/'Downloads/friendica-database-'*'.sql' && sync

sudo systemctl stop nginx php-fpm

sudo rm -Rf '/srv/www/social'

cd '/srv/www' && sudo tar -xvzf ~/'friendica-files-'*'.tar.gz' 'social' && sudo chown -R 'nginx':'nginx' '/srv/www/social' && cd ~ && sync

sudo mysql

DROP DATABASE friendica;

FLUSH TABLES;

EXIT

sudo mysql

CREATE DATABASE friendica;

EXIT

sudo mysql 'friendica' < ~/'friendica-database-'*'.sql' && sync

sudo mysql

GRANT ALL PRIVILEGES ON friendica.* to 'friendica'@'localhost' IDENTIFIED BY 'x';

FLUSH PRIVILEGES;

EXIT

sudo systemctl start nginx php-fpm

• Verify that friendica works before running

rm ~/'friendica-files-'*'.tar.gz' ~/'friendica-database-'*'.sql' && sync