h1. Canalsud

Install gérée par Farthur 0689213761

fichier des mots de passe en PJ
mdp neuraltetasudcanal

Installation de mysql et de nginx
apt-get update
apt-get install mysql-server nginx php5 php5-fpm php5-mysql
apt-get install

Création de la base de données:
mysql -u root -p
(mdp root)
create database canalsud_spip;
GRANT SELECT, INSERT, UPDATE, DELETE, CREATE, DROP, INDEX, ALTER, LOCK TABLES, CREATE TEMPORARY TABLES ON `canalsud_spip`.* TO 'canalsudSql'@'localhost' IDENTIFIED BY 'VOIR FICHIER PASSWD';

sécurisation du serveur
apt-get install fail2ban

config nginx: (A faire vérifier par un "pro" de nginx)
server {
server_name *.canalsud.tetaneutral.net;
listen 80;
listen 443 ssl;
ssl_certificate /etc/ssl/certs/ssl-cert-snakeoil.pem;
ssl_certificate_key /etc/ssl/private/ssl-cert-snakeoil.key;

client_max_body_size 10m;
root /var/www/spip;
index index.php;

location / {
try_files $uri $uri/ /spip.php?q=$uri&$args;
}

location ~^/(tmp|config)/{
return 403;
}

location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php ;
fastcgi_buffers 16 16k;
fastcgi_buffer_size 32k;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
}
}

Comptes ajoutés sur la machine
adduser adminsite
adduser adminsite www-data
chown -R www-data:www-data /var/www/spip
chmod -R 775 /var/www/spip

serveur de mail
apt-get install exim4
dpkg-reconfigure exim4-config

divers
apt-get install unzip