Server Setup (Linux)

This document covers a basic server configuration under Linux. The operating system used here is Linux with the distribution Debian Buster 10.

HumHub is being installed into the /var/www/humhub directory in this case and runs with the user/group www-data.

The URL https://temp.humhub.dev is used in this example. Replace it with an URL of your choice.

important

HumHub can of course also be run on an existing server setup or shared hosting if all requirements are met.

Database

In this section we will create a database with the following values:

  • Datebase: humhub_prod_db
  • User: humhub_prod
  • Password: change-me

Of course these values, especially the password, should be changed according to your environment.

Installation

Install and configure the MariaDB Server using Debian packages.

apt update
apt install mariadb-server mariadb-client automysqlbackup
mysql_secure_installation

Create Database Schema

Open the MySQL console

mysql -u root -p

Create a new database user

mysql> CREATE USER 'humhub_prod' IDENTIFIED BY 'change-me';

Create a MySQL Database, e.g.:

mysql> CREATE DATABASE `humhub_prod_db` CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
mysql> GRANT ALL ON `humhub_prod_db`.* TO `humhub_prod`@localhost IDENTIFIED BY 'change-me';
mysql> FLUSH PRIVILEGES;
important

Do not forget to change the change-me placeholder!

PHP

Installation

apt update
apt install php php-cli \
php-imagick php-curl php-bz2 php-gd php-intl \
php-mysql php-zip php-apcu-bc php-apcu php-xml php-ldap

Configuration

Set the following parameters inside the PHP configuration file php.ini to at least following values:

upload_max_filesize = 32M
post_max_size = 32M
max_execution_time = 120

The php.ini file is located in one of the following folders depending on the runtime mode (FPM or Apache2 module):

  • /etc/php/7.3/apache2/php.ini
  • /etc/php/7.3/fpm/php.ini

Example for Apache2 module:

sed -i 's/max_execution_time = 30/max_execution_time = 600/g' /etc/php/7.3/apache2/php.ini
sed -i 's/post_max_size = 8M/post_max_size = 128M/g' /etc/php/7.3/apache2/php.ini
sed -i 's/upload_max_filesize = 2M/upload_max_filesize = 128M/g' /etc/php/7.3/apache2/php.ini
systemctl restart apache2

Example for FPM:

sed -i 's/max_execution_time = 30/max_execution_time = 600/g' /etc/php/7.3/fpm/php.ini
sed -i 's/post_max_size = 8M/post_max_size = 128M/g' /etc/php/7.3/fpm/php.ini
sed -i 's/upload_max_filesize = 2M/upload_max_filesize = 128M/g' /etc/php/7.3/fpm/php.ini
systemctl restart php7.3-fpm

WebServer

Preparation

Install Certbot and obtain SSL certificates for the portal.

apt install certbot
certbot certonly --standalone -d temp.humhub.dev

Apache

Install Apache 2.4 core and modules from Debian package repositories.

apt update
apt install apache2 \
libapache2-mod-xsendfile \
php-fpm

Create configuration file /etc/apache2/site-available/humhub.conf with the following content:

<VirtualHost *:443>
ServerName temp.humhub.dev
ServerAdmin root@temp.humhub.dev
SSLEngine on
SSLCertificateFile /etc/letsencrypt/live/temp.humhub.dev/cert.pem
SSLCertificateKeyFile /etc/letsencrypt/live/temp.humhub.dev/privkey.pem
SSLCertificateChainFile /etc/letsencrypt/live/temp.humhub.dev/fullchain.pem
DocumentRoot /var/www/humhub
<Directory /var/www/humhub/>
Options -Indexes -FollowSymLinks
AllowOverride All
</Directory>
<DirectoryMatch "/var/www/humhub/(\.|protected|themes/\w+/views|uploads/file)">
Order Deny,Allow
Deny from all
</DirectoryMatch>
<FilesMatch "^\.">
Order Deny,Allow
Deny from all
</FilesMatch>
<DirectoryMatch "/var/www/humhub/(static|uploads|themes|assets)">
Header set Cache-Control "max-age=172800, public"
</DirectoryMatch>
</VirtualHost>
<VirtualHost *:80>
ServerName temp.humhub.dev
Redirect / https://temp.humhub.dev
</VirtualHost>

Enable the virtual host, additional Apache2 configurations and required modules.

a2enmod ssl rewrite headers proxy_fcgi setenvif
a2enconf php7.3-fpm
a2ensite humhub
systemctl reload apache2

NGINX

apt update
apt install nginx \
php-fpm
server {
listen 80;
listen [::]:80;
server_name temp.humhub.dev;
return 301 https://$server_name:443$request_uri;
}
server {
listen 443 ssl;
listen [::]:443 ssl;
root /var/www/humhub;
server_name temp.humhub.dev;
include snippets/letsencrypt.conf;
ssl_certificate /etc/letsencrypt/live/temp.humhub.dev/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/temp.humhub.dev/privkey.pem;
charset utf-8;
client_max_body_size 256M;
location / {
index index.php index.html ;
try_files $uri $uri/ /index.php?$args;
}
location ~ ^/(protected|framework|themes/\w+/views|\.|uploads/file) {
deny all;
}
location ~ ^/(assets|static|themes|uploads) {
expires 10d;
add_header Cache-Control "public, no-transform";
}
location ~ \.php {
fastcgi_split_path_info ^(.+\.php)(.*)$;
#let yii catch the calls to unexisting PHP files
set $fsn /index.php;
if (-f $document_root$fastcgi_script_name){
set $fsn $fastcgi_script_name;
}
fastcgi_pass unix:/var/run/php/php7.3-fpm.sock;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fsn;
}
}

Mail

If emails are supposed to be sent directly from this server, an SMTP server has to be installed.

Postfix

apt update
apt install postfix

Please choose Internet Site as installation type.

Edit this page