Information
- Prerequisites
- Notes
Dependencies
Download Source
Environment
- PHP
  - Old
- Composer
- Node.js
Database
nginx + PHP-CGI Configuration
- PHP-CGI
  - Process
- Server Block
Initial Setup
Settings
Services
- Updater
  - Service
  - Timer
- Maintenance
  - Service
  - Timer
- Backup
  - Files
  - Database
Backup
- Server
- Client
  - Transfer Files To Client
Restore
- Client
- Server
Batch Files
- PHP-CGI

Information

Prerequisites

Notes

Purity III ThemeMagic is not available with Joomla 4.x (source)

2024/06/27: WIP

Dependencies

Git

https://www.git-scm.com/download/win
Last tested: Git-2.45.2-64-bit.exe

Git from the command line and also from 3rd-party software

MySQL

https://dev.mysql.com/downloads/windows/
Last tested: mysql-installer-community-8.0.37.0.msi

SQLyog Community Edition

https://github.com/webyog/sqlyog-community/wiki/Downloads
Last tested: SQLyog-13.2.1-0.x64Community.exe

Composer

https://getcomposer.org/download/
Last tested version: v2.7.7

Node.js

https://nodejs.org/en/download/prebuilt-installer (Current)
Last tested: node-v22.3.0-x64.msi

Download Source

git clone --branch "5.2-dev" --depth "1" --recurse-submodules "https://github.com/joomla/joomla-cms.git" "C:\www\main"

explorer "C:\www\main"

Environment

https://docs.joomla.org/Special:MyLanguage/J5.x:Setting_Up_Your_Local_Environment

PHP

notepad++ "%SystemDrive%\www\php\main-php.ini"

[PHP]
extension_dir = ".\ext"
extension="gd"
extension="sodium"
extension="ldap"
extension="mysqli"
extension="openssl"

[Date]
date.timezone = "America/New_York"

Old

; Fedora php.ini Defaults
php_value[session.save_handler] = "files"
php_value[session.save_path] = "/var/lib/php/session"

; General
php_value[max_execution_time] = "200"
php_value[memory_limit] = "512M"
php_value[post_max_size] = "30M"
php_value[upload_max_filesize] = "30M"
php_value[post_max_size] = "30M"
php_value[max_file_uploads] = "100"
php_value[upload_tmp_dir] = "/tmp"

Composer

CD "%SystemDrive%\php-"*"-nts-Win32-vs16-x64\" && "php.exe" -c "%SystemDrive%\www\php\main-php.ini" "%ProgramData%\ComposerSetup\bin\composer.phar" install --working-dir="%SystemDrive%\www\main"

Node.js

CD "%SystemDrive%\www\main\" && npm ci && npm audit fix

Database

CD "%ProgramFiles%\MySQL\MySQL Server 8.0\bin\" && mysql --user="root" --password

CREATE USER "joomla"@"localhost" IDENTIFIED BY "x";

CREATE DATABASE joomla_db;

GRANT ALL PRIVILEGES ON joomla_db.* to "joomla"@"localhost";

FLUSH PRIVILEGES;

EXIT

nginx + PHP-CGI Configuration

PHP-CGI

notepad++ "%SystemDrive%\www\nginx-default.d\main.conf"

# PHP-CGI
location ~ \.(php|phar)(/.*)?$ {
    fastcgi_split_path_info ^(.+\.(?:php|phar))(/.*)$;
    fastcgi_intercept_errors on;
    fastcgi_index index.php;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    fastcgi_param PATH_INFO $fastcgi_path_info;
    fastcgi_param HTTPS on;
    fastcgi_pass 127.0.0.1:9001;
}

Process

Server Block

2023/09/12: CSPs disabled; TODO: Re-figure out CSPs
Nginx - Joomla! Documentation

notepad++ "%SystemDrive%\www\nginx-vhosts.d\main.conf"

server {
    listen "443" "ssl";
    http2 "on";
    server_name "realmofespionage.xyz";
    root "C:/www/main";
    index "index.php";

    include C:/www/nginx-default.d/main.conf;
    include C:/www/nginx-default.d/headers.conf;

    client_max_body_size "30M";

#    add_header Content-Security-Policy "default-src "self"; script-src "self" "unsafe-inline" "unsafe-eval"; style-src "self" "unsafe-inline"" always;

#    access_log  logs/main-access.log;
#    error_log  logs/main-error.log;

    location /api/ {
	try_files $uri $uri/ /api/index.php?$args;
    }

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~* /(images|cache|media|logs|tmp)/.*\.(php|pl|py|jsp|asp|sh|cgi)$ {
        return 403;
        error_page 403 /403_error.html;
    }

    location ~* \.(ico|pdf|flv)$ {
        expires 1y;
    }

    location ~* \.(js|css|png|jpg|jpeg|gif|swf|xml|txt)$ {
        expires 14d;
    }
 
}

"%UserProfile%\Desktop\nginx Reload.bat"

Initial Setup

https://realmofespionage.xyz
If Joomla gives a 500 error, it's likely the sessions folder not having the right permissions, see permissions

Settings

Purity III Template

Purity III

Install

Downloads
Install T3 Framework and Purity III from that downloads page

System Dashboard

Templates → Site Template Styles
Set purity_III - Default to Default

Theme Settings

General → Show T3 Logo: Off

Theme → Logo Type: Text
Theme → Site Name: Realm of Espionage

Navigation → Megamenu Configuration → Animation: Fading
Navigation → Megamenu Configuration → Duration: 300

Add-ons → Off-canvas Sidebar → Enable: Off

Assignment → Toggle Selection

Copyright

Last tested: 2024/02/01 on Joomla 5.1.0-dev, T3 Framework 3.2.0, and Purity III 2.1.0

Logo

wget -O '/tmp/cc-by-sa-40.png' 'https://licensebuttons.net/l/by-sa/4.0/80x15.png' && sudo mv '/tmp/cc-by-sa-40.png' '/var/www/main/images/cc-by-sa-40.png' && sudo chown 'nginx':'nginx' '/var/www/main/images/cc-by-sa-40.png' && sudo restorecon -F -I -R '/var/www/main/images/cc-by-sa-40.png' && sync

Text

Place text within the <section class=“t3-copyright”> section underneath the Bootstrap by Twitter and Font Awesome mentions
Remove Bootstrap by Twitter and Font Awesome mentions

sudo -e '/var/www/main/templates/purity_iii/tpls/blocks/footer.php' && sudo chown 'nginx':'nginx' '/var/www/main/templates/purity_iii/tpls/blocks/footer.php'

          <small>
            <img src="https://realmofespionage.xyz/images/cc-by-sa-40.png" width="80" height="15" /> All content and data available on Realm of Espionage is available under the <a href="https://creativecommons.org/licenses/by-sa/4.0" target="_blank">Creative Commons Attribution-ShareAlike 4.0 International</a> license.
          </small>

Custom CSS

This shrinks the footer height, and places it back at the bottom of the screen instead of floating half-way up the page when little content exists (source 1, source 2)
Also replaces ThemeMagic for Brand Primary Color, Footer Background, and Footer Text Color

Last tested: 2024/02/01 on Joomla 5.1.0-dev, T3 Framework 3.2.0, and Purity III 2.1.0

sudo -e '/var/www/main/templates/purity_iii/css/custom.css' && sudo chown 'nginx':'nginx' '/var/www/main/templates/purity_iii/css/custom.css'

html,

body {
  height: 100%;
}

a {
  color: #3D8BFF;
}

a:hover {
  color: #196BE4;
}

.t3-mainnav {
  background-color: #3D8BFF;
}

.logo a {
  background: none;
}

.logo a:hover {
  background: #196BE4;
}

.t3-wrapper {
  position: relative;
  min-height: 100%;
}

.t3-footer {
  position: absolute;
  bottom: 0;
  left: 0;
  right: 0;
  background-color: #484848;
  color: #FFFFFF;
}

.t3-copyright {
  padding-top: 20px;
  padding-bottom: 0px;
}

Articles

Home

The line-breaks are intentional and are there to make how it displays look nicer
Add links to RoE | Wiki and CC BY-SA 4.0 license

 
 

Welcome! Realm of Espionage is a personal project composed of various services. All services on RoE are free and open-source, self-hosted, and configured with strict security in-mind. My most prominent project currently is RoE | Wiki, a DokuWiki instance that holds my notes on all sorts of operating system, client, and server deployments, free for anyone to view and redistribute under the CC BY-SA 4.0 license.

 

This domain serves as a landing page and provides links to my most-used profiles and projects. To view them, use the navigation bar (desktop) or the ≡ hamburger icon (mobile) at the top of the screen.

Menus

Main menu headers are: System Links → URL → # to allow tapping as-expected on mobile
Icon sizes are 24×24
Menu entries should be named normally before saving for a proper alias, and then add a space on the title afterwards to make it look better with the icon

Global Configuration

Site Meta Description

Realm of Espionage is a personal project composed of various self-hosted services. All services are hosted in-house under secure conditions, and notes are provided for all services under the CC-BY-SA 4.0 license.

Content Rights

Creative Commons Attribution-ShareAlike 4.0 International

Articles

System → Global Configuration → Articles

Show Title: Hide
Show Category: Hide
Show Author: Hide
Show Publish Date: Hide
Show Navigation: Hide
Show Print: Hide
Show Email: Hide
Show Hits: Hide

Menus → Main Menu → Home → Link Type → Display in Menu: No
Menus → Main Menu → Home → Page Display → Show Page Heading: Hide

Services

Updater

Service

2023/09/12: TODO: SELinux prevents various actions with npm; is it even needed?

sudo -e '/etc/systemd/system/main-up.service'

[Service]
User=nginx
Group=nginx
Type=oneshot
WorkingDirectory=/var/www/main
Environment="COMPOSER_CACHE_DIR=/dev/null"
ExecStart='/usr/bin/git' -C '/var/www/main' pull origin '5.1-dev'
ExecStart='/usr/bin/composer' install
#ExecStart='/usr/bin/npm' ci --logs-max='0'
#ExecStart='/usr/bin/npm' audit fix --audit-level='none' --logs-max='0'
ExecStartPost='/usr/bin/sync'

Timer

Every day at 02:00:00

sudo -e '/etc/systemd/system/main-up.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-up.timer' --now

[Unit]
Description=Joomla Git Updater
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-* 02:00:00
Persistent=true

[Install]
WantedBy=timers.target

Maintenance

Service

sudo -e '/etc/systemd/system/main-m.service'

[Service]
User=nginx
Group=nginx
Type=oneshot
ExecStart='/usr/bin/git' -C '/var/www/main' gc --aggressive --prune='all'
ExecStart='/usr/bin/git' -C '/var/www/main' fsck --full --strict
ExecStartPost='/usr/bin/sync'

Timer

01 day of every month at 02:20:00

sudo -e '/etc/systemd/system/main-m.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-m.timer' --now

[Unit]
Description=Joomla Maintenance
After=network-online.target
Wants=network-online.target

[Timer]
OnCalendar=*-*-01 02:20:00
Persistent=true

[Install]
WantedBy=timers.target

Backup

Files

Service

mkdir -p ~/'backups' && sudo -e '/etc/systemd/system/main-fb.service' && sudo sed -i 's/CHANGEME/'$USER'/g' '/etc/systemd/system/main-fb.service'

[Service]
Type=oneshot
WorkingDirectory=/var/www
ExecStart='/usr/bin/bash' -c '"/usr/bin/tar" -czf "/home/CHANGEME/backups/joomla-files-auto-"$$(date +%%Y-%%m-%%d)".tar.gz" "main"'
ExecStartPost='/usr/bin/sync'

Timer

01 day of every month at 02:35:00

sudo -e '/etc/systemd/system/main-fb.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-fb.timer' --now && sudo systemctl start 'main-fb' && sudo systemctl status 'main-fb' -l

[Unit]
Description=Joomla Files Backup

[Timer]
OnCalendar=*-*-01 02:35:00
Persistent=true

[Install]
WantedBy=timers.target

Database

Database Auth

sudo mkdir -p '/var/lib/mysql/auth' && sudo -e '/var/lib/mysql/auth/joomla' && sudo chown -R 'mysql':'mysql' '/var/lib/mysql/auth/joomla' && sudo chmod '600' '/var/lib/mysql/auth/joomla' && sync

[mariadb-dump]
user=joomla
password=x

Service

mkdir -p ~/'backups' && sudo mkdir -p '/var/lib/mysql/tmp' && sudo chown -R 'mysql':'mysql' '/var/lib/mysql/tmp' && sudo chmod '600' '/var/lib/mysql/tmp' && sudo -e '/etc/systemd/system/main-db.service' && sudo sed -i 's/'CHANGEME'/'$USER'/g' '/etc/systemd/system/main-db.service'

[Service]
Type=oneshot
WorkingDirectory=/var/lib/mysql/tmp
ExecStartPre='/usr/bin/mariadb-dump' --defaults-extra-file='/var/lib/mysql/auth/joomla' --single-transaction 'joomla_db' -r '/var/lib/mysql/tmp/joomla.sql'
ExecStart='/usr/bin/gzip' -f '/var/lib/mysql/tmp/joomla.sql'
ExecStart='/usr/bin/bash' -c '"/usr/bin/mv" "/var/lib/mysql/tmp/joomla.sql.gz" "/home/CHANGEME/backups/joomla-database-auto-"$$(date +%%Y-%%m-%%d)".sql.gz"'
ExecStartPost='/usr/bin/sync'

Timer

Every day at 02:45:00

sudo -e '/etc/systemd/system/main-db.timer' && sudo systemctl daemon-reload && sudo systemctl enable 'main-db.timer' --now && sudo systemctl start 'main-db' && sudo systemctl status 'main-db' -l

[Unit]
Description=Joomla Database Backup
After=mariadb.service

[Timer]
OnCalendar=*-*-* 02:45:00
Persistent=true

[Install]
WantedBy=timers.target

Backup

Create backup archive on server and transfer to client computer

Server

Stop Services

sudo systemctl stop nginx php-fpm

Backup Folder

cd '/var/www' && sudo tar -cvzf ~/'joomla-files-manual-'$(date +%Y-%m-%d)'.tar.gz' 'main' && cd ~ && sync

Backup Database

sudo mariadb-dump --defaults-extra-file='/var/lib/mysql/auth/joomla' --single-transaction 'joomla_db' -r ~/'joomla-database-manual-'$(date +%Y-%m-%d)'.sql' && sync

Start Services

sudo systemctl start nginx php-fpm

Client

Transfer Files To Client

scp espionage724@192.168.1.152:~/'joomla-files-'*'.tar.gz' espionage724@192.168.1.152:~/'joomla-database-'*'.sql' ~/'Downloads' && sync

Restore

Client

Uncompress Database

This is only needed if restoring an automated database backup ³⁾

gunzip ~/'Downloads/joomla-database-'*'.sql.gz'

Transfer Files To Server

scp ~/'Downloads/joomla-files-'*'.tar.gz' ~/'Downloads/joomla-database-'*'.sql' espionage724@192.168.1.152:~

Remove Files

rm -f ~/'Downloads/joomla-files-'*'.tar.gz' ~/'Downloads/joomla-database-'*'.sql' && sync

Server

Stop Services

sudo systemctl stop nginx php-fpm

Restore Joomla Folder

cd '/var/www' && sudo tar -xvzf ~/'joomla-files-'*'.tar.gz' 'main' && sudo semanage fcontext --add --type 'httpd_sys_rw_content_t' '/var/www/main(/.*)?' && sudo restorecon -F -I -R '/var/www/main' && sudo chown -R 'nginx':'nginx' '/var/www/main' && cd ~ && sync

Drop Previous Database

sudo mariadb

DROP DATABASE joomla_db;

FLUSH TABLES;

EXIT

Re-create Databases

sudo mariadb

CREATE DATABASE joomla_db;

EXIT

Restore Database

sudo mariadb 'joomla_db' < ~/'joomla-database-'*'.sql' && sync

Reapply Permissions

sudo mariadb

GRANT ALL PRIVILEGES ON joomla_db.* to 'joomla'@'localhost' IDENTIFIED BY 'x';

FLUSH PRIVILEGES;

EXIT

Start Services

sudo systemctl start nginx php-fpm

Remove Backups

Verify that Joomla works before running

rm ~/'joomla-files-'*'.tar.gz' ~/'joomla-database-'*'.sql' && sync

Batch Files

PHP-CGI

notepad++ "%UserProfile%\Desktop\Main php-cgi.bat"

CD "C:\php-"*"-nts-Win32-vs16-x64\"

SET PHP_FCGI_MAX_REQUESTS="0"
SET PHP_FCGI_CHILDREN="1"

START "Main PHP-CGI" php-cgi.exe -b "127.0.0.1:9001" -c "%SystemDrive%\www\php\main-php.ini"

"%UserProfile%\Desktop\Main php-cgi.bat"

¹⁾

https://www.joomla.org

²⁾

https://github.com/joomla/joomla-cms/tree/5.2-dev

³⁾

manual doesn't gzip

Table of Contents

Information

Prerequisites

Notes

Dependencies

Git

MySQL

SQLyog Community Edition

Composer

Node.js

Download Source

Environment

PHP

Old

Composer

Node.js

Database

nginx + PHP-CGI Configuration

PHP-CGI

Process

Server Block

Initial Setup

Settings

Purity III Template

Install

System Dashboard

Theme Settings

Footer

Copyright

Logo

Text

Custom CSS

Articles

Home

Menus

Global Configuration

Site Meta Description

Content Rights

Articles

Menu

Services

Updater

Service

Timer

Maintenance

Service

Timer

Backup

Files

Service

Timer

Database

Database Auth

Service

Timer

Backup

Server

Stop Services

Backup Folder

Backup Database

Start Services

Client

Transfer Files To Client

Restore

Client

Uncompress Database

Transfer Files To Server

Remove Files

Server

Stop Services

Restore Joomla Folder

Drop Previous Database

Re-create Databases

Restore Database

Reapply Permissions

Start Services

Remove Backups

Batch Files

PHP-CGI