|
@@ -5682,192 +5682,10 @@ Then extract and install it.
|
5682
|
5682
|
#+BEGIN_SRC: bash
|
5683
|
5683
|
export HOSTNAME=mywikidomainname.com
|
5684
|
5684
|
tar -xzvf dokuwiki.tgz
|
5685
|
|
-mv /var/www/$HOSTNAME/htdocs /var/www/$HOSTNAME/htdocs_old
|
|
5685
|
+rm -rf /var/www/$HOSTNAME/htdocs
|
5686
|
5686
|
mv dokuwiki /var/www/$HOSTNAME/htdocs
|
5687
|
5687
|
#+END_SRC
|
5688
|
5688
|
|
5689
|
|
-Edit the Apache configuration for your wiki site.
|
5690
|
|
-
|
5691
|
|
-#+BEGIN_SRC: bash
|
5692
|
|
-editor /etc/apache2/sites-available/$HOSTNAME
|
5693
|
|
-#+END_SRC
|
5694
|
|
-
|
5695
|
|
-The settings should look something like the following. Replace /mywikidomainname.com/ with your wiki domain name.
|
5696
|
|
-
|
5697
|
|
-#+BEGIN_SRC: bash
|
5698
|
|
-<VirtualHost *:80>
|
5699
|
|
- ServerAdmin myusername@mywikidomainname.com
|
5700
|
|
- ServerName mydomainname.com
|
5701
|
|
-
|
5702
|
|
- DocumentRoot /var/www/mywikidomainname.com/htdocs
|
5703
|
|
-
|
5704
|
|
- <Directory /var/www/mywikidomainname.com/htdocs>
|
5705
|
|
- order deny,allow
|
5706
|
|
- allow from all
|
5707
|
|
- </Directory>
|
5708
|
|
-
|
5709
|
|
- <LocationMatch "/(data|conf|bin|inc)/">
|
5710
|
|
- order allow,deny
|
5711
|
|
- deny from all
|
5712
|
|
- satisfy all
|
5713
|
|
- </LocationMatch>
|
5714
|
|
-
|
5715
|
|
- <Directory />
|
5716
|
|
- Options FollowSymLinks
|
5717
|
|
- AllowOverride All
|
5718
|
|
- </Directory>
|
5719
|
|
-
|
5720
|
|
- ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
|
5721
|
|
- <Directory "/usr/lib/cgi-bin">
|
5722
|
|
- AllowOverride All
|
5723
|
|
- Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
|
5724
|
|
- Order allow,deny
|
5725
|
|
- Allow from all
|
5726
|
|
- </Directory>
|
5727
|
|
-
|
5728
|
|
- ErrorLog ${APACHE_LOG_DIR}/error.log
|
5729
|
|
-
|
5730
|
|
- # Possible values include: debug, info, notice, warn, error, crit,
|
5731
|
|
- # alert, emerg.
|
5732
|
|
- LogLevel error
|
5733
|
|
-
|
5734
|
|
- CustomLog ${APACHE_LOG_DIR}/access.log combined
|
5735
|
|
-</VirtualHost>
|
5736
|
|
-
|
5737
|
|
-<IfModule mod_ssl.c>
|
5738
|
|
-<VirtualHost *:443>
|
5739
|
|
- ServerAdmin myusername@mywikidomainname.com
|
5740
|
|
- ServerName mywikidomainname.com
|
5741
|
|
-
|
5742
|
|
- DocumentRoot /var/www/mywikidomainname.com/htdocs
|
5743
|
|
-
|
5744
|
|
- <Directory /var/www/mywikidomainname.com/htdocs>
|
5745
|
|
- order deny,allow
|
5746
|
|
- allow from all
|
5747
|
|
- </Directory>
|
5748
|
|
-
|
5749
|
|
- <LocationMatch "/(data|conf|bin|inc)/">
|
5750
|
|
- order allow,deny
|
5751
|
|
- deny from all
|
5752
|
|
- satisfy all
|
5753
|
|
- </LocationMatch>
|
5754
|
|
-
|
5755
|
|
- <Directory />
|
5756
|
|
- Options FollowSymLinks
|
5757
|
|
- AllowOverride All
|
5758
|
|
- </Directory>
|
5759
|
|
-
|
5760
|
|
- ScriptAlias /cgi-bin/ /usr/lib/cgi-bin/
|
5761
|
|
- <Directory "/usr/lib/cgi-bin">
|
5762
|
|
- AllowOverride All
|
5763
|
|
- Options +ExecCGI -MultiViews +SymLinksIfOwnerMatch
|
5764
|
|
- Order allow,deny
|
5765
|
|
- Allow from all
|
5766
|
|
- </Directory>
|
5767
|
|
-
|
5768
|
|
- ErrorLog ${APACHE_LOG_DIR}/error.log
|
5769
|
|
-
|
5770
|
|
- # Possible values include: debug, info, notice, warn, error, crit,
|
5771
|
|
- # alert, emerg.
|
5772
|
|
- LogLevel error
|
5773
|
|
-
|
5774
|
|
- CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
|
5775
|
|
-
|
5776
|
|
- # SSL Engine Switch:
|
5777
|
|
- # Enable/Disable SSL for this virtual host.
|
5778
|
|
- SSLEngine on
|
5779
|
|
-
|
5780
|
|
- # A self-signed certificate
|
5781
|
|
- SSLCertificateFile /etc/ssl/certs/mydomainname.com.crt
|
5782
|
|
- SSLCertificateKeyFile /etc/ssl/private/mydomainname.com.key
|
5783
|
|
-
|
5784
|
|
- # Options based on bettercrypto.org
|
5785
|
|
- SSLProtocol All -SSLv2 -SSLv3
|
5786
|
|
- SSLHonorCipherOrder On
|
5787
|
|
- SSLCompression off
|
5788
|
|
- SSLCipherSuite EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHA
|
5789
|
|
-
|
5790
|
|
- # SSL Engine Options:
|
5791
|
|
- # Set various options for the SSL engine.
|
5792
|
|
- # o FakeBasicAuth:
|
5793
|
|
- # Translate the client X.509 into a Basic Authorisation. This means that
|
5794
|
|
- # the standard Auth/DBMAuth methods can be used for access control. The
|
5795
|
|
- # user name is the `one line' version of the client's X.509 certificate.
|
5796
|
|
- # Note that no password is obtained from the user. Every entry in the user
|
5797
|
|
- # file needs this password: `xxj31ZMTZzkVA'.
|
5798
|
|
- # o ExportCertData:
|
5799
|
|
- # This exports two additional environment variables: SSL_CLIENT_CERT and
|
5800
|
|
- # SSL_SERVER_CERT. These contain the PEM-encoded certificates of the
|
5801
|
|
- # server (always existing) and the client (only existing when client
|
5802
|
|
- # authentication is used). This can be used to import the certificates
|
5803
|
|
- # into CGI scripts.
|
5804
|
|
- # o StdEnvVars:
|
5805
|
|
- # This exports the standard SSL/TLS related `SSL_*' environment variables.
|
5806
|
|
- # Per default this exportation is switched off for performance reasons,
|
5807
|
|
- # because the extraction step is an expensive operation and is usually
|
5808
|
|
- # useless for serving static content. So one usually enables the
|
5809
|
|
- # exportation for CGI and SSI requests only.
|
5810
|
|
- # o StrictRequire:
|
5811
|
|
- # This denies access when "SSLRequireSSL" or "SSLRequire" applied even
|
5812
|
|
- # under a "Satisfy any" situation, i.e. when it applies access is denied
|
5813
|
|
- # and no other module can change it.
|
5814
|
|
- # o OptRenegotiate:
|
5815
|
|
- # This enables optimized SSL connection renegotiation handling when SSL
|
5816
|
|
- # directives are used in per-directory context.
|
5817
|
|
- #SSLOptions +FakeBasicAuth +ExportCertData +StrictRequire
|
5818
|
|
- <FilesMatch "\.(cgi|shtml|phtml|php)$">
|
5819
|
|
- SSLOptions +StdEnvVars
|
5820
|
|
- </FilesMatch>
|
5821
|
|
- <Directory /usr/lib/cgi-bin>
|
5822
|
|
- SSLOptions +StdEnvVars
|
5823
|
|
- </Directory>
|
5824
|
|
-
|
5825
|
|
- # SSL Protocol Adjustments:
|
5826
|
|
- # The safe and default but still SSL/TLS standard compliant shutdown
|
5827
|
|
- # approach is that mod_ssl sends the close notify alert but doesn't wait for
|
5828
|
|
- # the close notify alert from client. When you need a different shutdown
|
5829
|
|
- # approach you can use one of the following variables:
|
5830
|
|
- # o ssl-unclean-shutdown:
|
5831
|
|
- # This forces an unclean shutdown when the connection is closed, i.e. no
|
5832
|
|
- # SSL close notify alert is send or allowed to received. This violates
|
5833
|
|
- # the SSL/TLS standard but is needed for some brain-dead browsers. Use
|
5834
|
|
- # this when you receive I/O errors because of the standard approach where
|
5835
|
|
- # mod_ssl sends the close notify alert.
|
5836
|
|
- # o ssl-accurate-shutdown:
|
5837
|
|
- # This forces an accurate shutdown when the connection is closed, i.e. a
|
5838
|
|
- # SSL close notify alert is send and mod_ssl waits for the close notify
|
5839
|
|
- # alert of the client. This is 100% SSL/TLS standard compliant, but in
|
5840
|
|
- # practice often causes hanging connections with brain-dead browsers. Use
|
5841
|
|
- # this only for browsers where you know that their SSL implementation
|
5842
|
|
- # works correctly.
|
5843
|
|
- # Notice: Most problems of broken clients are also related to the HTTP
|
5844
|
|
- # keep-alive facility, so you usually additionally want to disable
|
5845
|
|
- # keep-alive for those clients, too. Use variable "nokeepalive" for this.
|
5846
|
|
- # Similarly, one has to force some clients to use HTTP/1.0 to workaround
|
5847
|
|
- # their broken HTTP/1.1 implementation. Use variables "downgrade-1.0" and
|
5848
|
|
- # "force-response-1.0" for this.
|
5849
|
|
- BrowserMatch "MSIE [2-6]" \
|
5850
|
|
- nokeepalive ssl-unclean-shutdown \
|
5851
|
|
- downgrade-1.0 force-response-1.0
|
5852
|
|
- # MSIE 7 and newer should be able to use keepalive
|
5853
|
|
- BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
|
5854
|
|
-
|
5855
|
|
-</VirtualHost>
|
5856
|
|
-</IfModule>
|
5857
|
|
-#+END_SRC
|
5858
|
|
-
|
5859
|
|
-Enable your site with:
|
5860
|
|
-
|
5861
|
|
-#+BEGIN_SRC: bash
|
5862
|
|
-a2ensite
|
5863
|
|
-#+END_SRC
|
5864
|
|
-
|
5865
|
|
-then select the domain name and reload.
|
5866
|
|
-
|
5867
|
|
-#+BEGIN_SRC: bash
|
5868
|
|
-service apache2 reload
|
5869
|
|
-#+END_SRC
|
5870
|
|
-
|
5871
|
5689
|
and alter permissions:
|
5872
|
5690
|
|
5873
|
5691
|
#+BEGIN_SRC: bash
|
|
@@ -5897,7 +5715,7 @@ webm video/webm
|
5897
|
5715
|
|
5898
|
5716
|
Save and exit.
|
5899
|
5717
|
|
5900
|
|
-If you need to be able to upload large files to the wiki then edit */etc/php5/apache2/php.ini* and set *upload_max_filesize* accordingly. If the directory */etc/php5/apache2* doesn't exist then you will need to install the package *libapache2-mod-php5*.
|
|
5718
|
+If you need to be able to upload large files to the wiki then edit */etc/php5/fpm/php.ini* and set *upload_max_filesize* accordingly.
|
5901
|
5719
|
|
5902
|
5720
|
Now you can visit your wiki and begin editing.
|
5903
|
5721
|
|