Differences

This shows you the differences between two versions of the page.

--- servers:nginx:piwigo [2022/12/27 18:45] – [Settings] Sean Rhone
+++ servers:nginx:piwigo [2024/02/01 11:45] (current) – [Page Banner] Sean Rhone
@@ Line 1: / Line 1: @@
 ====== Information ======
-  * Piwigo ((https://piwigo.org/)) ((https://github.com/Piwigo))
+  * Piwigo ((https://piwigo.org/))
+  * Bootstrap Darkroom Theme ((https://github.com/Piwigo/piwigo-bootstrap-darkroom))
+  * ''master'' Branches ((https://github.com/Piwigo/Piwigo/tree/master)) ((https://github.com/Piwigo/piwigo-bootstrap-darkroom/tree/master))
   * [[Information:Realm of Espionage]]
   * https://media.realmofespionage.xyz
@@ Line 18: / Line 20: @@
   * https://github.com/Piwigo/piwigo-videojs/wiki/Synchronize#requirement
-  sudo dnf install perl-Image-ExifTool mediainfo ffmpeg-free libvorbis poppler-utils
+  sudo dnf install php-mysqlnd php-imagick php-gd perl-Image-ExifTool mediainfo ffmpeg-free libvorbis poppler-utils
-===== Non-free =====
-  * :!: Remove ''ffmpeg-free'' from above if using ''ffmpeg''
-  ffmpeg x264-libs
 ====== Download Source ======
@@ Line 30: / Line 26: @@
   * Also includes the [[https://github.com/Piwigo/piwigo-bootstrap-darkroom|Bootstrap Darkroom]] theme
-  sudo git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/Piwigo.git' '/var/www/media' && sudo git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/piwigo-bootstrap-darkroom.git' '/var/www/media/themes/bootstrap_darkroom' && sudo chown -R 'nginx':'nginx' '/var/www/media' && sudo restorecon -F -I -R '/var/www/media' && sync
+  sudo git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/Piwigo.git' '/var/www/media' && sudo git clone --branch 'master' --depth '1' --recurse-submodules 'https://github.com/Piwigo/piwigo-bootstrap-darkroom.git' '/var/www/media/themes/bootstrap_darkroom' && sudo semanage fcontext --add --type 'httpd_sys_rw_content_t' '/var/www/media(/.*)?' && sudo restorecon -F -I -R '/var/www/media' && sudo chown -R 'nginx':'nginx' '/var/www/media' && sync
 ====== Database ======
-  sudo mysql
+  sudo mariadb
   CREATE DATABASE piwigo;
@@ Line 89: / Line 85: @@
 location ~ \.(php|phar)(/.*)?$ {
     fastcgi_split_path_info ^(.+\.(?:php|phar))(/.*)$;
     fastcgi_intercept_errors on;
     fastcgi_index index.php;
     include fastcgi_params;
-    fastcgi_param SCRIPT_FILENAME  $document_root$fastcgi_script_name;
+    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
     fastcgi_param PATH_INFO $fastcgi_path_info;
     fastcgi_pass unix:/run/php-fpm/media.sock;
@@ Line 100: / Line 95: @@
 ===== Server Block =====
-  * The ''default-src'' Piwigo URL allows Theme preview images to load, but isn't mandatory
+  * 2023/09/12: CSPs disabled; TODO: Re-figure out CSPs
   sudo -e '/etc/nginx/vhosts.d/media.conf' && sudo systemctl reload 'nginx' && sync
@@ Line 114: / Line 109: @@
     include '/etc/nginx/default.d/headers.conf';
-    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'" always;
+#    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'" always;
 #    add_header Content-Security-Policy "default-src 'self' https://piwigo.org/ext/upload/; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'" always;
 #    access_log  /var/log/nginx/media-access.log;
@@ Line 138: / Line 133: @@
 ====== Settings ======
-  * :!: Using a long password with symbols passed set-up fine, but failed to log-in later; use less-complex password
+  * :!: Using a long password with symbols passed setup fine, but failed to log-in later; use less-complex password
   * :!: Use a relay or bogus email address during account creation to protect against potential spam ((the webmaster URL in the footer shows the email in plaintext and looks tasty to bots))
-  * :!: Disable ''Allow user registration'' immediately under Configuration -> Options -> General -> Permissions
+  * :!: Disable ''Allow user registration'' **immediately** under Configuration -> Options -> General -> Permissions
-  * :!: Seemingly have to enable ''Activate comments'' in order to prevent broken CSS on the bottom of image pages, but can uncheck ''Comments for all'' so that nobody public can leave comments
+  * Seemingly have to enable ''Activate comments'' in order to prevent broken CSS on the bottom of image pages, but can uncheck ''Comments for all'' so that nobody public can leave comments
   * Activate Boostrap Darkroom theme
-  * :!: TODO: Sometimes(?) when writing a log file, SELinux will deny it and cause the Admin panel to break; possibly setting logging level to ''EMERGENCY'' prevents most actions from causing logging and thus no log file to be created
 ===== Page Banner =====
+****
 <code>
@@ Line 153: / Line 149: @@
   * [[https://piwigo.org/forum/viewtopic.php?pid=159584#p159584|nginx Rewrite source]]
+  * [[https://piwigo.org/forum/viewtopic.php?pid=179504#p179504|Video Uploading source]]
   * [[https://github.com/Piwigo/Piwigo/blob/master/include/config_default.inc.php|More Settings]]
@@ Line 173: / Line 170: @@
   'https://social.realmofespionage.xyz/profile/espionage724' => 'RoE | Social',
   'https://blog.realmofespionage.xyz' => 'RoE | Blog',
-  'https://wiki.realmofespionage.xyz/personal/social_media' => 'Webmaster Info',
+  'https://wiki.realmofespionage.xyz/personal:social_media' => 'Webmaster Info',
-  'https://wiki.realmofespionage.xyz/servers/nginx/piwigo' => 'Instance Configuration Notes',
+  'https://wiki.realmofespionage.xyz/servers:nginx:piwigo' => 'Instance Configuration Notes',
+  );
+// Video Uploading
+$conf['upload_form_all_types'] = true;
+$conf['file_ext'] = array_merge(
+  $conf['picture_ext'],
+  array('tiff', 'tif', 'mpg','zip','avi','mp3','ogg','pdf','webm','mp4')
   );
@@ Line 238: / Line 242: @@
   * ''01'' day of every month at ''05:20:00''
-  sudo -e '/etc/systemd/system/media-m.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-m.timer' --now
+  sudo -e '/etc/systemd/system/media-m.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-m.timer' --now && sudo systemctl start 'media-m' && sudo systemctl status 'media-m' -l
 <code>
@@ Line 265: / Line 269: @@
 Type=oneshot
 WorkingDirectory=/var/www
-ExecStartPre='/usr/sbin/restorecon' -F -I -R '/var/www/media'
 ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -czf "/home/CHANGEME/backups/piwigo-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "media"'
 ExecStartPost='/usr/bin/sync'</code>
@@ Line 271: / Line 274: @@
 === Timer ===
-  * ''01'' day of every month at ''05:50:00''
+  * ''01'' day of every month at ''05:35:00''
   sudo -e '/etc/systemd/system/media-fb.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-fb.timer' --now && sudo systemctl start 'media-fb' && sudo systemctl status 'media-fb' -l
@@ Line 280: / Line 283: @@
 [Timer]
-OnCalendar=*-*-01 05:50:00
+OnCalendar=*-*-01 05:35:00
 Persistent=true
@@ Line 290: / Line 293: @@
 === Database Auth ===
-  sudo -u 'mysql' -e '/var/lib/mysql/auth/piwigo' && sudo chmod '600' '/var/lib/mysql/auth/piwigo'
+  sudo mkdir -p '/var/lib/mysql/auth' && sudo -e '/var/lib/mysql/auth/piwigo' && sudo chown -R 'mysql':'mysql' '/var/lib/mysql/auth/piwigo' && sudo chmod '600' '/var/lib/mysql/auth/piwigo' && sync
 <code>
-[mysqldump]
+[mariadb-dump]
 user=piwigo
 password=x</code>
@@ Line 305: / Line 308: @@
 Type=oneshot
 WorkingDirectory=/var/lib/mysql/tmp
-ExecStartPre='/usr/bin/mysqldump' --defaults-extra-file='/var/lib/mysql/auth/piwigo' --single-transaction 'piwigo' -r '/var/lib/mysql/tmp/piwigo.sql'
+ExecStartPre='/usr/bin/mariadb-dump' --defaults-extra-file='/var/lib/mysql/auth/piwigo' --single-transaction 'piwigo' -r '/var/lib/mysql/tmp/piwigo.sql'
 ExecStart='/usr/bin/gzip' -f '/var/lib/mysql/tmp/piwigo.sql'
 ExecStart='/usr/bin/bash' -c '"/usr/bin/mv" "/var/lib/mysql/tmp/piwigo.sql.gz" "/home/CHANGEME/backups/piwigo-database-auto-"$$(date +%%Y-%%m-%%d)".sql.gz"'
@@ Line 312: / Line 315: @@
 === Timer ===
-  * Every day at ''05:15:00''
+  * Every day at ''05:45:00''
   sudo -e '/etc/systemd/system/media-db.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'media-db.timer' --now && sudo systemctl start 'media-db' && sudo systemctl status 'media-db' -l
@@ Line 322: / Line 325: @@
 [Timer]
-OnCalendar=*-*-* 05:15:00
+OnCalendar=*-*-* 05:45:00
 Persistent=true
@@ Line 350: / Line 353: @@
 ****
-  sudo mysqldump --defaults-extra-file='/var/lib/mysqlauth/piwigo' --single-transaction 'piwigo' -r ~/'piwigo-database-manual-'$(date +%Y-%m-%d)'.sql' && sync
+  sudo mariadb-dump --defaults-extra-file='/var/lib/mysql/auth/piwigo' --single-transaction 'piwigo' -r ~/'piwigo-database-manual-'$(date +%Y-%m-%d)'.sql' && sync
 ==== Start Services ====
@@ Line 406: / Line 409: @@
 ****
-  cd '/var/www' && sudo tar -xvzf ~/'piwigo-files-'*'.tar.gz' 'media' && sudo chown -R 'nginx':'nginx' '/var/www/media' && sudo restorecon -F -I -R '/var/www/media' && cd ~ && sync
+  cd '/var/www' && sudo tar -xvzf ~/'piwigo-files-'*'.tar.gz' 'media' && sudo semanage fcontext --add --type 'httpd_sys_rw_content_t' '/var/www/media(/.*)?' && sudo restorecon -F -I -R '/var/www/media' && sudo chown -R 'nginx':'nginx' '/var/www/media' && cd ~ && sync
 ==== Drop Previous Database ====
-  sudo mysql
+  sudo mariadb
   DROP DATABASE piwigo;
@@ Line 420: / Line 423: @@
 ==== Re-create Databases ====
-  sudo mysql
+  sudo mariadb
   CREATE DATABASE piwigo;
@@ Line 430: / Line 433: @@
 ****
-  sudo mysql 'piwigo' < ~/'piwigo-database-'*'.sql' && sync
+  sudo mariadb 'piwigo' < ~/'piwigo-database-'*'.sql' && sync
 ==== Reapply Permissions ====
-  sudo mysql
+  sudo mariadb
   GRANT ALL PRIVILEGES ON piwigo.* to 'piwigo'@'localhost' IDENTIFIED BY 'x';