root
5 years ago
commit
fe38b76a14
15 changed files with 3990 additions and 0 deletions
@ -0,0 +1,16 @@ |
|||||
|
FROM debian:stable |
||||
|
CMD [ "/sbin/init" ] |
||||
|
|
||||
|
# We can't use timedatectl because systemd isn't available |
||||
|
# during the build process, so we have to set it manually |
||||
|
ENV TZ=US/Central |
||||
|
RUN rm /etc/localtime && \ |
||||
|
ln -s /usr/share/zoneinfo/$TZ /etc/localtime && \ |
||||
|
echo $TZ > /etc/timezone |
||||
|
|
||||
|
# Install packages |
||||
|
RUN apt update -y |
||||
|
RUN apt upgrade -y |
||||
|
RUN apt install -y systemd sudo wget nano less |
||||
|
RUN apt autoremove -y --purge |
||||
|
RUN apt clean -y |
||||
@ -0,0 +1,7 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
# Variables |
||||
|
today=$(date "+%Y-%m-%d-T%H%M") |
||||
|
proj=debian |
||||
|
|
||||
|
podman build -f Containerfile -t $proj:$today -t $proj:latest --squash |
||||
@ -0,0 +1,67 @@ |
|||||
|
### Meta ### |
||||
|
FROM localhost/debian |
||||
|
|
||||
|
# Versions of various packages that we may need to refer to |
||||
|
ARG phpv=7.3 |
||||
|
ARG psqlv=11 |
||||
|
|
||||
|
EXPOSE 80/tcp |
||||
|
|
||||
|
### Basics ### |
||||
|
RUN apt update -y && apt install -y systemd sudo wget apache2 php-fpm \ |
||||
|
php-gd php-zip php-pgsql php-curl php-mbstring php-intl php-imagick \ |
||||
|
php-xml php-json redis-server php-redis postgresql postgresql-doc unzip |
||||
|
|
||||
|
RUN mkdir -p /srv/nextcloud/database /srv/nextcloud/files && chown -R www-data:www-data \ |
||||
|
/srv/nextcloud |
||||
|
|
||||
|
COPY resources/bin/ /usr/local/bin/ |
||||
|
|
||||
|
### Apache ### |
||||
|
RUN a2enmod rewrite headers env dir mime proxy_fcgi && a2enconf php${phpv}-fpm |
||||
|
|
||||
|
COPY resources/site.conf /etc/apache2/sites-available/ |
||||
|
|
||||
|
WORKDIR /etc/apache2/sites-enabled |
||||
|
|
||||
|
RUN rm 000-default.conf && ln -s ../sites-available/site.conf |
||||
|
|
||||
|
### PHP ### |
||||
|
RUN systemctl enable php${phpv}-fpm |
||||
|
|
||||
|
COPY resources/php.ini /etc/php/${phpv}/fpm/ |
||||
|
COPY config/php/www.conf /etc/php/${phpv}/fpm/pool.d/ |
||||
|
|
||||
|
### Redis ### |
||||
|
COPY --chown=redis:redis resources/redis.conf /etc/redis/ |
||||
|
|
||||
|
RUN usermod -a -G redis www-data |
||||
|
|
||||
|
### PostgreSQL ### |
||||
|
COPY --chown=postgres:postgres resources/pg_hba.conf /etc/postgresql/${psqlv}/main/pg_hba.conf |
||||
|
|
||||
|
COPY --chown=postgres:postgres resources/redo.sql /usr/local/lib/psql/ |
||||
|
|
||||
|
#RUN db-redo |
||||
|
|
||||
|
### Nextcloud ### |
||||
|
WORKDIR /var/www/html |
||||
|
|
||||
|
RUN wget https://download.nextcloud.com/server/releases/latest.zip && \ |
||||
|
unzip latest.zip && \ |
||||
|
chown -R www-data:www-data nextcloud && \ |
||||
|
rm latest.zip |
||||
|
|
||||
|
COPY --chown=www-data:www-data config/nextcloud/my.config.php nextcloud/config/ |
||||
|
|
||||
|
#RUN nc-occ maintenance:install --data-dir "/srv/nextcloud/files/" --database "pgsql" --database-host "/var/run/postgresql" --database-name "nextcloud" --database-user "ncadmin" --database-pass "" --admin-user "admin" --admin-pass "admin" |
||||
|
|
||||
|
#RUN nc-occ maintenance:update:htaccess && nc-occ db:add-missing-indices && nc-occ db:convert-filecache-bigint |
||||
|
|
||||
|
# TODO: install apps via occ |
||||
|
|
||||
|
### Crontab |
||||
|
WORKDIR /root |
||||
|
COPY resources/crontab . |
||||
|
RUN crontab -u www-data crontab && rm crontab |
||||
|
|
||||
@ -0,0 +1,7 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
# Variables |
||||
|
today=$(date "+%Y-%m-%d-T%H%M") |
||||
|
proj=nextcloud |
||||
|
|
||||
|
podman build -f Containerfile -t $proj:$today -t $proj:latest #--squash |
||||
@ -0,0 +1,38 @@ |
|||||
|
<?php |
||||
|
$CONFIG = array( |
||||
|
|
||||
|
/** Setup **/ |
||||
|
'datadirectory' => '/srv/nextcloud/files/', |
||||
|
'htaccess.RewriteBase' => '/', |
||||
|
|
||||
|
/** Database **/ |
||||
|
'dbtype' => 'pgsql', |
||||
|
'dbname' => 'nextcloud', |
||||
|
'dbuser' => 'ncadmin', |
||||
|
'dbpassword' => '', |
||||
|
'dbhost' => '/var/run/postgresql', |
||||
|
'dbtableprefix' => 'oc_', |
||||
|
|
||||
|
/** Network **/ |
||||
|
'trusted_domains' => |
||||
|
array ( |
||||
|
0 => 'nextcloud.lxd', |
||||
|
), |
||||
|
'overwriteprotocol' => 'http', |
||||
|
'overwritehost' => 'medusa.casa.alemor.org', |
||||
|
'overwritewebroot' => '/nextcloud', |
||||
|
'overwrite.cli.url' => 'http://medusa.casa.alemor.org/nextcloud/', |
||||
|
|
||||
|
/** Memory Caching **/ |
||||
|
'memcache.local' => '\\OC\\Memcache\\Redis', |
||||
|
'memcache.distributed' => '\\OC\\Memcache\\Redis', |
||||
|
'memcache.locking' => '\\OC\\Memcache\\Redis', |
||||
|
'filelocking.enabled' => 'true', |
||||
|
'redis' => |
||||
|
array ( |
||||
|
'host' => '/var/run/redis/redis-server.sock', |
||||
|
'port' => 0, |
||||
|
'timeout' => 0.0, |
||||
|
), |
||||
|
|
||||
|
); |
||||
@ -0,0 +1,423 @@ |
|||||
|
; Start a new pool named 'www'. |
||||
|
; the variable $pool can be used in any directive and will be replaced by the |
||||
|
; pool name ('www' here) |
||||
|
[www] |
||||
|
|
||||
|
; Per pool prefix |
||||
|
; It only applies on the following directives: |
||||
|
; - 'access.log' |
||||
|
; - 'slowlog' |
||||
|
; - 'listen' (unixsocket) |
||||
|
; - 'chroot' |
||||
|
; - 'chdir' |
||||
|
; - 'php_values' |
||||
|
; - 'php_admin_values' |
||||
|
; When not set, the global prefix (or /usr) applies instead. |
||||
|
; Note: This directive can also be relative to the global prefix. |
||||
|
; Default Value: none |
||||
|
;prefix = /path/to/pools/$pool |
||||
|
|
||||
|
; Unix user/group of processes |
||||
|
; Note: The user is mandatory. If the group is not set, the default user's group |
||||
|
; will be used. |
||||
|
user = www-data |
||||
|
group = www-data |
||||
|
|
||||
|
; The address on which to accept FastCGI requests. |
||||
|
; Valid syntaxes are: |
||||
|
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on |
||||
|
; a specific port; |
||||
|
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on |
||||
|
; a specific port; |
||||
|
; 'port' - to listen on a TCP socket to all addresses |
||||
|
; (IPv6 and IPv4-mapped) on a specific port; |
||||
|
; '/path/to/unix/socket' - to listen on a unix socket. |
||||
|
; Note: This value is mandatory. |
||||
|
listen = /run/php/php7.2-fpm.sock |
||||
|
|
||||
|
; Set listen(2) backlog. |
||||
|
; Default Value: 511 (-1 on FreeBSD and OpenBSD) |
||||
|
;listen.backlog = 511 |
||||
|
|
||||
|
; Set permissions for unix socket, if one is used. In Linux, read/write |
||||
|
; permissions must be set in order to allow connections from a web server. Many |
||||
|
; BSD-derived systems allow connections regardless of permissions. |
||||
|
; Default Values: user and group are set as the running user |
||||
|
; mode is set to 0660 |
||||
|
listen.owner = www-data |
||||
|
listen.group = www-data |
||||
|
;listen.mode = 0660 |
||||
|
; When POSIX Access Control Lists are supported you can set them using |
||||
|
; these options, value is a comma separated list of user/group names. |
||||
|
; When set, listen.owner and listen.group are ignored |
||||
|
;listen.acl_users = |
||||
|
;listen.acl_groups = |
||||
|
|
||||
|
; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. |
||||
|
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original |
||||
|
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address |
||||
|
; must be separated by a comma. If this value is left blank, connections will be |
||||
|
; accepted from any ip address. |
||||
|
; Default Value: any |
||||
|
;listen.allowed_clients = 127.0.0.1 |
||||
|
|
||||
|
; Specify the nice(2) priority to apply to the pool processes (only if set) |
||||
|
; The value can vary from -19 (highest priority) to 20 (lower priority) |
||||
|
; Note: - It will only work if the FPM master process is launched as root |
||||
|
; - The pool processes will inherit the master process priority |
||||
|
; unless it specified otherwise |
||||
|
; Default Value: no set |
||||
|
; process.priority = -19 |
||||
|
|
||||
|
; Set the process dumpable flag (PR_SET_DUMPABLE prctl) even if the process user |
||||
|
; or group is differrent than the master process user. It allows to create process |
||||
|
; core dump and ptrace the process for the pool user. |
||||
|
; Default Value: no |
||||
|
; process.dumpable = yes |
||||
|
|
||||
|
; Choose how the process manager will control the number of child processes. |
||||
|
; Possible Values: |
||||
|
; static - a fixed number (pm.max_children) of child processes; |
||||
|
; dynamic - the number of child processes are set dynamically based on the |
||||
|
; following directives. With this process management, there will be |
||||
|
; always at least 1 children. |
||||
|
; pm.max_children - the maximum number of children that can |
||||
|
; be alive at the same time. |
||||
|
; pm.start_servers - the number of children created on startup. |
||||
|
; pm.min_spare_servers - the minimum number of children in 'idle' |
||||
|
; state (waiting to process). If the number |
||||
|
; of 'idle' processes is less than this |
||||
|
; number then some children will be created. |
||||
|
; pm.max_spare_servers - the maximum number of children in 'idle' |
||||
|
; state (waiting to process). If the number |
||||
|
; of 'idle' processes is greater than this |
||||
|
; number then some children will be killed. |
||||
|
; ondemand - no children are created at startup. Children will be forked when |
||||
|
; new requests will connect. The following parameter are used: |
||||
|
; pm.max_children - the maximum number of children that |
||||
|
; can be alive at the same time. |
||||
|
; pm.process_idle_timeout - The number of seconds after which |
||||
|
; an idle process will be killed. |
||||
|
; Note: This value is mandatory. |
||||
|
pm = dynamic |
||||
|
|
||||
|
; The number of child processes to be created when pm is set to 'static' and the |
||||
|
; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. |
||||
|
; This value sets the limit on the number of simultaneous requests that will be |
||||
|
; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. |
||||
|
; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP |
||||
|
; CGI. The below defaults are based on a server without much resources. Don't |
||||
|
; forget to tweak pm.* to fit your needs. |
||||
|
; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' |
||||
|
; Note: This value is mandatory. |
||||
|
pm.max_children = 32 |
||||
|
|
||||
|
; The number of child processes created on startup. |
||||
|
; Note: Used only when pm is set to 'dynamic' |
||||
|
; Default Value: min_spare_servers + (max_spare_servers - min_spare_servers) / 2 |
||||
|
pm.start_servers = 12 |
||||
|
|
||||
|
; The desired minimum number of idle server processes. |
||||
|
; Note: Used only when pm is set to 'dynamic' |
||||
|
; Note: Mandatory when pm is set to 'dynamic' |
||||
|
pm.min_spare_servers = 8 |
||||
|
|
||||
|
; The desired maximum number of idle server processes. |
||||
|
; Note: Used only when pm is set to 'dynamic' |
||||
|
; Note: Mandatory when pm is set to 'dynamic' |
||||
|
pm.max_spare_servers = 16 |
||||
|
|
||||
|
; The number of seconds after which an idle process will be killed. |
||||
|
; Note: Used only when pm is set to 'ondemand' |
||||
|
; Default Value: 10s |
||||
|
;pm.process_idle_timeout = 10s; |
||||
|
|
||||
|
; The number of requests each child process should execute before respawning. |
||||
|
; This can be useful to work around memory leaks in 3rd party libraries. For |
||||
|
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. |
||||
|
; Default Value: 0 |
||||
|
pm.max_requests = 500 |
||||
|
|
||||
|
; The URI to view the FPM status page. If this value is not set, no URI will be |
||||
|
; recognized as a status page. It shows the following informations: |
||||
|
; pool - the name of the pool; |
||||
|
; process manager - static, dynamic or ondemand; |
||||
|
; start time - the date and time FPM has started; |
||||
|
; start since - number of seconds since FPM has started; |
||||
|
; accepted conn - the number of request accepted by the pool; |
||||
|
; listen queue - the number of request in the queue of pending |
||||
|
; connections (see backlog in listen(2)); |
||||
|
; max listen queue - the maximum number of requests in the queue |
||||
|
; of pending connections since FPM has started; |
||||
|
; listen queue len - the size of the socket queue of pending connections; |
||||
|
; idle processes - the number of idle processes; |
||||
|
; active processes - the number of active processes; |
||||
|
; total processes - the number of idle + active processes; |
||||
|
; max active processes - the maximum number of active processes since FPM |
||||
|
; has started; |
||||
|
; max children reached - number of times, the process limit has been reached, |
||||
|
; when pm tries to start more children (works only for |
||||
|
; pm 'dynamic' and 'ondemand'); |
||||
|
; Value are updated in real time. |
||||
|
; Example output: |
||||
|
; pool: www |
||||
|
; process manager: static |
||||
|
; start time: 01/Jul/2011:17:53:49 +0200 |
||||
|
; start since: 62636 |
||||
|
; accepted conn: 190460 |
||||
|
; listen queue: 0 |
||||
|
; max listen queue: 1 |
||||
|
; listen queue len: 42 |
||||
|
; idle processes: 4 |
||||
|
; active processes: 11 |
||||
|
; total processes: 15 |
||||
|
; max active processes: 12 |
||||
|
; max children reached: 0 |
||||
|
; |
||||
|
; By default the status page output is formatted as text/plain. Passing either |
||||
|
; 'html', 'xml' or 'json' in the query string will return the corresponding |
||||
|
; output syntax. Example: |
||||
|
; http://www.foo.bar/status |
||||
|
; http://www.foo.bar/status?json |
||||
|
; http://www.foo.bar/status?html |
||||
|
; http://www.foo.bar/status?xml |
||||
|
; |
||||
|
; By default the status page only outputs short status. Passing 'full' in the |
||||
|
; query string will also return status for each pool process. |
||||
|
; Example: |
||||
|
; http://www.foo.bar/status?full |
||||
|
; http://www.foo.bar/status?json&full |
||||
|
; http://www.foo.bar/status?html&full |
||||
|
; http://www.foo.bar/status?xml&full |
||||
|
; The Full status returns for each process: |
||||
|
; pid - the PID of the process; |
||||
|
; state - the state of the process (Idle, Running, ...); |
||||
|
; start time - the date and time the process has started; |
||||
|
; start since - the number of seconds since the process has started; |
||||
|
; requests - the number of requests the process has served; |
||||
|
; request duration - the duration in µs of the requests; |
||||
|
; request method - the request method (GET, POST, ...); |
||||
|
; request URI - the request URI with the query string; |
||||
|
; content length - the content length of the request (only with POST); |
||||
|
; user - the user (PHP_AUTH_USER) (or '-' if not set); |
||||
|
; script - the main script called (or '-' if not set); |
||||
|
; last request cpu - the %cpu the last request consumed |
||||
|
; it's always 0 if the process is not in Idle state |
||||
|
; because CPU calculation is done when the request |
||||
|
; processing has terminated; |
||||
|
; last request memory - the max amount of memory the last request consumed |
||||
|
; it's always 0 if the process is not in Idle state |
||||
|
; because memory calculation is done when the request |
||||
|
; processing has terminated; |
||||
|
; If the process is in Idle state, then informations are related to the |
||||
|
; last request the process has served. Otherwise informations are related to |
||||
|
; the current request being served. |
||||
|
; Example output: |
||||
|
; ************************ |
||||
|
; pid: 31330 |
||||
|
; state: Running |
||||
|
; start time: 01/Jul/2011:17:53:49 +0200 |
||||
|
; start since: 63087 |
||||
|
; requests: 12808 |
||||
|
; request duration: 1250261 |
||||
|
; request method: GET |
||||
|
; request URI: /test_mem.php?N=10000 |
||||
|
; content length: 0 |
||||
|
; user: - |
||||
|
; script: /home/fat/web/docs/php/test_mem.php |
||||
|
; last request cpu: 0.00 |
||||
|
; last request memory: 0 |
||||
|
; |
||||
|
; Note: There is a real-time FPM status monitoring sample web page available |
||||
|
; It's available in: /usr/share/php/7.2/fpm/status.html |
||||
|
; |
||||
|
; Note: The value must start with a leading slash (/). The value can be |
||||
|
; anything, but it may not be a good idea to use the .php extension or it |
||||
|
; may conflict with a real PHP file. |
||||
|
; Default Value: not set |
||||
|
;pm.status_path = /status |
||||
|
|
||||
|
; The ping URI to call the monitoring page of FPM. If this value is not set, no |
||||
|
; URI will be recognized as a ping page. This could be used to test from outside |
||||
|
; that FPM is alive and responding, or to |
||||
|
; - create a graph of FPM availability (rrd or such); |
||||
|
; - remove a server from a group if it is not responding (load balancing); |
||||
|
; - trigger alerts for the operating team (24/7). |
||||
|
; Note: The value must start with a leading slash (/). The value can be |
||||
|
; anything, but it may not be a good idea to use the .php extension or it |
||||
|
; may conflict with a real PHP file. |
||||
|
; Default Value: not set |
||||
|
;ping.path = /ping |
||||
|
|
||||
|
; This directive may be used to customize the response of a ping request. The |
||||
|
; response is formatted as text/plain with a 200 response code. |
||||
|
; Default Value: pong |
||||
|
;ping.response = pong |
||||
|
|
||||
|
; The access log file |
||||
|
; Default: not set |
||||
|
;access.log = log/$pool.access.log |
||||
|
|
||||
|
; The access log format. |
||||
|
; The following syntax is allowed |
||||
|
; %%: the '%' character |
||||
|
; %C: %CPU used by the request |
||||
|
; it can accept the following format: |
||||
|
; - %{user}C for user CPU only |
||||
|
; - %{system}C for system CPU only |
||||
|
; - %{total}C for user + system CPU (default) |
||||
|
; %d: time taken to serve the request |
||||
|
; it can accept the following format: |
||||
|
; - %{seconds}d (default) |
||||
|
; - %{miliseconds}d |
||||
|
; - %{mili}d |
||||
|
; - %{microseconds}d |
||||
|
; - %{micro}d |
||||
|
; %e: an environment variable (same as $_ENV or $_SERVER) |
||||
|
; it must be associated with embraces to specify the name of the env |
||||
|
; variable. Some exemples: |
||||
|
; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e |
||||
|
; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e |
||||
|
; %f: script filename |
||||
|
; %l: content-length of the request (for POST request only) |
||||
|
; %m: request method |
||||
|
; %M: peak of memory allocated by PHP |
||||
|
; it can accept the following format: |
||||
|
; - %{bytes}M (default) |
||||
|
; - %{kilobytes}M |
||||
|
; - %{kilo}M |
||||
|
; - %{megabytes}M |
||||
|
; - %{mega}M |
||||
|
; %n: pool name |
||||
|
; %o: output header |
||||
|
; it must be associated with embraces to specify the name of the header: |
||||
|
; - %{Content-Type}o |
||||
|
; - %{X-Powered-By}o |
||||
|
; - %{Transfert-Encoding}o |
||||
|
; - .... |
||||
|
; %p: PID of the child that serviced the request |
||||
|
; %P: PID of the parent of the child that serviced the request |
||||
|
; %q: the query string |
||||
|
; %Q: the '?' character if query string exists |
||||
|
; %r: the request URI (without the query string, see %q and %Q) |
||||
|
; %R: remote IP address |
||||
|
; %s: status (response code) |
||||
|
; %t: server time the request was received |
||||
|
; it can accept a strftime(3) format: |
||||
|
; %d/%b/%Y:%H:%M:%S %z (default) |
||||
|
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag |
||||
|
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t |
||||
|
; %T: time the log has been written (the request has finished) |
||||
|
; it can accept a strftime(3) format: |
||||
|
; %d/%b/%Y:%H:%M:%S %z (default) |
||||
|
; The strftime(3) format must be encapsuled in a %{<strftime_format>}t tag |
||||
|
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t |
||||
|
; %u: remote user |
||||
|
; |
||||
|
; Default: "%R - %u %t \"%m %r\" %s" |
||||
|
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{mili}d %{kilo}M %C%%" |
||||
|
|
||||
|
; The log file for slow requests |
||||
|
; Default Value: not set |
||||
|
; Note: slowlog is mandatory if request_slowlog_timeout is set |
||||
|
;slowlog = log/$pool.log.slow |
||||
|
|
||||
|
; The timeout for serving a single request after which a PHP backtrace will be |
||||
|
; dumped to the 'slowlog' file. A value of '0s' means 'off'. |
||||
|
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) |
||||
|
; Default Value: 0 |
||||
|
;request_slowlog_timeout = 0 |
||||
|
|
||||
|
; Depth of slow log stack trace. |
||||
|
; Default Value: 20 |
||||
|
;request_slowlog_trace_depth = 20 |
||||
|
|
||||
|
; The timeout for serving a single request after which the worker process will |
||||
|
; be killed. This option should be used when the 'max_execution_time' ini option |
||||
|
; does not stop script execution for some reason. A value of '0' means 'off'. |
||||
|
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) |
||||
|
; Default Value: 0 |
||||
|
;request_terminate_timeout = 0 |
||||
|
|
||||
|
; Set open file descriptor rlimit. |
||||
|
; Default Value: system defined value |
||||
|
;rlimit_files = 1024 |
||||
|
|
||||
|
; Set max core size rlimit. |
||||
|
; Possible Values: 'unlimited' or an integer greater or equal to 0 |
||||
|
; Default Value: system defined value |
||||
|
;rlimit_core = 0 |
||||
|
|
||||
|
; Chroot to this directory at the start. This value must be defined as an |
||||
|
; absolute path. When this value is not set, chroot is not used. |
||||
|
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one |
||||
|
; of its subdirectories. If the pool prefix is not set, the global prefix |
||||
|
; will be used instead. |
||||
|
; Note: chrooting is a great security feature and should be used whenever |
||||
|
; possible. However, all PHP paths will be relative to the chroot |
||||
|
; (error_log, sessions.save_path, ...). |
||||
|
; Default Value: not set |
||||
|
;chroot = |
||||
|
|
||||
|
; Chdir to this directory at the start. |
||||
|
; Note: relative path can be used. |
||||
|
; Default Value: current directory or / when chroot |
||||
|
;chdir = /var/www |
||||
|
|
||||
|
; Redirect worker stdout and stderr into main error log. If not set, stdout and |
||||
|
; stderr will be redirected to /dev/null according to FastCGI specs. |
||||
|
; Note: on highloaded environement, this can cause some delay in the page |
||||
|
; process time (several ms). |
||||
|
; Default Value: no |
||||
|
;catch_workers_output = yes |
||||
|
|
||||
|
; Clear environment in FPM workers |
||||
|
; Prevents arbitrary environment variables from reaching FPM worker processes |
||||
|
; by clearing the environment in workers before env vars specified in this |
||||
|
; pool configuration are added. |
||||
|
; Setting to "no" will make all environment variables available to PHP code |
||||
|
; via getenv(), $_ENV and $_SERVER. |
||||
|
; Default Value: yes |
||||
|
clear_env = no |
||||
|
|
||||
|
; Limits the extensions of the main script FPM will allow to parse. This can |
||||
|
; prevent configuration mistakes on the web server side. You should only limit |
||||
|
; FPM to .php extensions to prevent malicious users to use other extensions to |
||||
|
; execute php code. |
||||
|
; Note: set an empty value to allow all extensions. |
||||
|
; Default Value: .php |
||||
|
;security.limit_extensions = .php .php3 .php4 .php5 .php7 |
||||
|
|
||||
|
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from |
||||
|
; the current environment. |
||||
|
; Default Value: clean env |
||||
|
;env[HOSTNAME] = $HOSTNAME |
||||
|
;env[PATH] = /usr/local/bin:/usr/bin:/bin |
||||
|
;env[TMP] = /tmp |
||||
|
;env[TMPDIR] = /tmp |
||||
|
;env[TEMP] = /tmp |
||||
|
|
||||
|
; Additional php.ini defines, specific to this pool of workers. These settings |
||||
|
; overwrite the values previously defined in the php.ini. The directives are the |
||||
|
; same as the PHP SAPI: |
||||
|
; php_value/php_flag - you can set classic ini defines which can |
||||
|
; be overwritten from PHP call 'ini_set'. |
||||
|
; php_admin_value/php_admin_flag - these directives won't be overwritten by |
||||
|
; PHP call 'ini_set' |
||||
|
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. |
||||
|
|
||||
|
; Defining 'extension' will load the corresponding shared extension from |
||||
|
; extension_dir. Defining 'disable_functions' or 'disable_classes' will not |
||||
|
; overwrite previously defined php.ini values, but will append the new value |
||||
|
; instead. |
||||
|
|
||||
|
; Note: path INI options can be relative and will be expanded with the prefix |
||||
|
; (pool, global or /usr) |
||||
|
|
||||
|
; Default Value: nothing is defined by default except the values in php.ini and |
||||
|
; specified at startup with the -d argument |
||||
|
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com |
||||
|
;php_flag[display_errors] = off |
||||
|
;php_admin_value[error_log] = /var/log/fpm-php.www.log |
||||
|
;php_admin_flag[log_errors] = on |
||||
|
;php_admin_value[memory_limit] = 32M |
||||
@ -0,0 +1,38 @@ |
|||||
|
#!/bin/bash |
||||
|
|
||||
|
hour=$(date +%H) |
||||
|
day=$(date +%d) |
||||
|
month=$(date +%m) |
||||
|
year=$(date +%Y) |
||||
|
|
||||
|
dbdir=/srv/nextcloud/database |
||||
|
dbname=nextcloud |
||||
|
dbuser=ncadmin |
||||
|
|
||||
|
mkdir -p $dbdir |
||||
|
cd $dbdir |
||||
|
|
||||
|
if [[ -z "$1" ]]; then |
||||
|
echo "[$year-$month-$day] Error: called with missing hour parameter. Script exited without running." | tee error.log |
||||
|
exit 1 |
||||
|
fi |
||||
|
|
||||
|
if [[ $hour == "$1" ]]; then |
||||
|
nc-occ maintenance:mode --on |
||||
|
fi |
||||
|
|
||||
|
pg_dump -U $dbuser -d $dbname > $dbname-hourly-$hour.sql 2>> error.log |
||||
|
|
||||
|
if [[ $hour == "$1" ]]; then |
||||
|
nc-occ maintenance:mode --off |
||||
|
mv $dbname-hourly-$hour.sql $dbname-daily-$day.sql 2>> error.log |
||||
|
fi |
||||
|
|
||||
|
if [[ $day == "01" ]]; then |
||||
|
mv $dbname-daily-$day.sql $dbname-$year-$month-$day.sql 2>> error.log |
||||
|
fi |
||||
|
|
||||
|
# If error.log is size 0, erase it because I don't like seeing it |
||||
|
if [[ ! -s ./error.log ]]; then |
||||
|
rm error.log |
||||
|
fi |
||||
@ -0,0 +1,2 @@ |
|||||
|
#!/bin/bash |
||||
|
sudo -u postgres psql -f /usr/local/lib/psql/redo.sql |
||||
@ -0,0 +1,2 @@ |
|||||
|
#!/bin/sh |
||||
|
sudo -u www-data php /var/www/html/nextcloud/occ "$@" |
||||
@ -0,0 +1,7 @@ |
|||||
|
# m h dom mon dow command |
||||
|
# Run Nextcloud cron tasks every 5 minutes |
||||
|
*/5 * * * * php -f /var/www/html/nextcloud/cron.php |
||||
|
# Dump database every hour |
||||
|
10 * * * * /usr/local/bin/dbdump 01 |
||||
|
# Scan for new files every 15 minutes |
||||
|
*/15 * * * * nc-occ files:scan --all |
||||
@ -0,0 +1,102 @@ |
|||||
|
# PostgreSQL Client Authentication Configuration File |
||||
|
# =================================================== |
||||
|
# |
||||
|
# Refer to the "Client Authentication" section in the PostgreSQL |
||||
|
# documentation for a complete description of this file. A short |
||||
|
# synopsis follows. |
||||
|
# |
||||
|
# This file controls: which hosts are allowed to connect, how clients |
||||
|
# are authenticated, which PostgreSQL user names they can use, which |
||||
|
# databases they can access. Records take one of these forms: |
||||
|
# |
||||
|
# local DATABASE USER METHOD [OPTIONS] |
||||
|
# host DATABASE USER ADDRESS METHOD [OPTIONS] |
||||
|
# hostssl DATABASE USER ADDRESS METHOD [OPTIONS] |
||||
|
# hostnossl DATABASE USER ADDRESS METHOD [OPTIONS] |
||||
|
# |
||||
|
# (The uppercase items must be replaced by actual values.) |
||||
|
# |
||||
|
# The first field is the connection type: "local" is a Unix-domain |
||||
|
# socket, "host" is either a plain or SSL-encrypted TCP/IP socket, |
||||
|
# "hostssl" is an SSL-encrypted TCP/IP socket, and "hostnossl" is a |
||||
|
# plain TCP/IP socket. |
||||
|
# |
||||
|
# DATABASE can be "all", "sameuser", "samerole", "replication", a |
||||
|
# database name, or a comma-separated list thereof. The "all" |
||||
|
# keyword does not match "replication". Access to replication |
||||
|
# must be enabled in a separate record (see example below). |
||||
|
# |
||||
|
# USER can be "all", a user name, a group name prefixed with "+", or a |
||||
|
# comma-separated list thereof. In both the DATABASE and USER fields |
||||
|
# you can also write a file name prefixed with "@" to include names |
||||
|
# from a separate file. |
||||
|
# |
||||
|
# ADDRESS specifies the set of hosts the record matches. It can be a |
||||
|
# host name, or it is made up of an IP address and a CIDR mask that is |
||||
|
# an integer (between 0 and 32 (IPv4) or 128 (IPv6) inclusive) that |
||||
|
# specifies the number of significant bits in the mask. A host name |
||||
|
# that starts with a dot (.) matches a suffix of the actual host name. |
||||
|
# Alternatively, you can write an IP address and netmask in separate |
||||
|
# columns to specify the set of hosts. Instead of a CIDR-address, you |
||||
|
# can write "samehost" to match any of the server's own IP addresses, |
||||
|
# or "samenet" to match any address in any subnet that the server is |
||||
|
# directly connected to. |
||||
|
# |
||||
|
# METHOD can be "trust", "reject", "md5", "password", "scram-sha-256", |
||||
|
# "gss", "sspi", "ident", "peer", "pam", "ldap", "radius" or "cert". |
||||
|
# Note that "password" sends passwords in clear text; "md5" or |
||||
|
# "scram-sha-256" are preferred since they send encrypted passwords. |
||||
|
# |
||||
|
# OPTIONS are a set of options for the authentication in the format |
||||
|
# NAME=VALUE. The available options depend on the different |
||||
|
# authentication methods -- refer to the "Client Authentication" |
||||
|
# section in the documentation for a list of which options are |
||||
|
# available for which authentication methods. |
||||
|
# |
||||
|
# Database and user names containing spaces, commas, quotes and other |
||||
|
# special characters must be quoted. Quoting one of the keywords |
||||
|
# "all", "sameuser", "samerole" or "replication" makes the name lose |
||||
|
# its special character, and just match a database or username with |
||||
|
# that name. |
||||
|
# |
||||
|
# This file is read on server startup and when the server receives a |
||||
|
# SIGHUP signal. If you edit the file on a running system, you have to |
||||
|
# SIGHUP the server for the changes to take effect, run "pg_ctl reload", |
||||
|
# or execute "SELECT pg_reload_conf()". |
||||
|
# |
||||
|
# Put your actual configuration here |
||||
|
# ---------------------------------- |
||||
|
# |
||||
|
# If you want to allow non-local connections, you need to add more |
||||
|
# "host" records. In that case you will also need to make PostgreSQL |
||||
|
# listen on a non-local interface via the listen_addresses |
||||
|
# configuration parameter, or via the -i or -h command line switches. |
||||
|
|
||||
|
|
||||
|
|
||||
|
|
||||
|
# DO NOT DISABLE! |
||||
|
# If you change this first entry you will need to make sure that the |
||||
|
# database superuser can access the database using some other method. |
||||
|
# Noninteractive access to all databases is required during automatic |
||||
|
# maintenance (custom daily cronjobs, replication, and similar tasks). |
||||
|
# |
||||
|
# Database administrative login by Unix domain socket |
||||
|
local all postgres peer |
||||
|
|
||||
|
# Allow connection to Unix domain socket without authentication |
||||
|
local all ncadmin trust |
||||
|
|
||||
|
# TYPE DATABASE USER ADDRESS METHOD |
||||
|
|
||||
|
# "local" is for Unix domain socket connections only |
||||
|
#local all all peer |
||||
|
# IPv4 local connections: |
||||
|
#host all all 127.0.0.1/32 md5 |
||||
|
# IPv6 local connections: |
||||
|
#host all all ::1/128 md5 |
||||
|
# Allow replication connections from localhost, by a user with the |
||||
|
# replication privilege. |
||||
|
#local replication all peer |
||||
|
#host replication all 127.0.0.1/32 md5 |
||||
|
#host replication all ::1/128 md5 |
||||
File diff suppressed because it is too large
File diff suppressed because it is too large
@ -0,0 +1,6 @@ |
|||||
|
DROP DATABASE IF EXISTS nextcloud; |
||||
|
DROP USER IF EXISTS ncadmin; |
||||
|
|
||||
|
CREATE USER ncadmin; |
||||
|
CREATE DATABASE nextcloud; |
||||
|
GRANT ALL PRIVILEGES ON DATABASE nextcloud TO ncadmin; |
||||
@ -0,0 +1,25 @@ |
|||||
|
<VirtualHost *:80> |
||||
|
#ServerAdmin webmaster@localhost |
||||
|
DocumentRoot /var/www/html/nextcloud/ |
||||
|
|
||||
|
<Directory /var/www/html/nextcloud/> |
||||
|
Require all granted |
||||
|
AllowOverride All |
||||
|
Options FollowSymLinks MultiViews |
||||
|
|
||||
|
<IfModule mod_dav.c> |
||||
|
Dav off |
||||
|
</IfModule> |
||||
|
</Directory> |
||||
|
|
||||
|
ErrorLog ${APACHE_LOG_DIR}/error.log |
||||
|
CustomLog ${APACHE_LOG_DIR}/access.log combined |
||||
|
#LogLevel debug |
||||
|
|
||||
|
# PHP-FPM |
||||
|
<FilesMatch "\.php$"> |
||||
|
SetHandler "proxy:unix:/var/run/php/php7.2-fpm.sock|fcgi://localhost/" |
||||
|
</FilesMatch> |
||||
|
<Proxy "fcgi://localhost/"> |
||||
|
</Proxy> |
||||
|
</VirtualHost> |
||||
Loading…
Reference in new issue