WIKI Liberasys

Cette page est en lecture seule. Vous pouvez afficher le texte source, mais ne pourrez pas le modifier. Contactez votre administrateur si vous pensez qu'il s'agit d'une erreur.
====== Owncloud ======

<code bash>
export ADMINMAIL="admin@liberasys.com"
export ROOTSSLURL="https://owncloud.liberasys.com"
export SSLCERTFILE="/etc/ssl/certs/STAR_liberasys_com.chain.pem"
export SSLCERTKEY="/etc/ssl/private/STAR_liberasys_com.key"
echo 'deb http://download.opensuse.org/repositories/isv:/ownCloud:/community/Debian_8.0/ /' >> /etc/apt/sources.list.d/owncloud.list 
wget http://download.opensuse.org/repositories/isv:ownCloud:community/Debian_8.0/Release.key
apt-key add - < Release.key 
rm Release.key
apt-get update
apt-get install owncloud php5-apcu
</code>

Nouveau mot de passe du superutilisateur de MySQL : créer un mot de passe dans keepass (mysql/root) et le coller  
got tu http://FQDI/

===== owncloud as host http root =====

Follow apache staging
<code bash>
sed -i 's|Alias /owncloud "/var/www/owncloud/"|#Alias /owncloud "/var/www/owncloud/"|g' /etc/apache2/conf-enabled/owncloud.conf
  
cat << 'EOF' > /etc/apache2/sites-available/000-default.conf
  <VirtualHost *:80>
    ServerAdmin _ADMINMAIL_
    DocumentRoot /var/www/apache2-default/
    Options None
    Redirect permanent / _ROOTSSLURL_
  </VirtualHost>
  EOF

sed -i "s|_ADMINMAIL_|${ADMINMAIL}|g" /etc/apache2/sites-available/000-default.conf
sed -i "s|_ROOTSSLURL_|${ROOTSSLURL}|g" /etc/apache2/sites-available/000-default.conf
cat << 'EOF' > /etc/apache2/sites-available/default-ssl.conf
  <IfModule mod_ssl.c>
    # Intermediate configuration, tweak to your needs
    SSLProtocol             all -SSLv2 -SSLv3
    SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
    SSLHonorCipherOrder     on
    SSLCompression          off
  
    # OCSP Stapling, only in httpd 2.3.3 and later
    SSLUseStapling On
    SSLStaplingCache shmcb:${APACHE_RUN_DIR}/ssl_stapling(32768)
    SSLStaplingResponderTimeout 5
    SSLStaplingReturnResponderErrors off
  
    # Enable this if your want HSTS (recommended)
    Header add Strict-Transport-Security "max-age=15768000"
  
    <VirtualHost _default_:443>
      ServerAdmin _ADMINMAIL_
      DocumentRoot /var/www/owncloud/
      Options None
      ErrorLog ${APACHE_LOG_DIR}/error.log
      LogLevel warn
      CustomLog ${APACHE_LOG_DIR}/access.log combined
  
      SSLEngine on
      SSLCertificateFile _SSLCERTFILE_
      SSLCertificateKeyFile _SSLCERTKEY_
  
      <FilesMatch "\.(cgi|shtml|phtml|php)$">
        SSLOptions +StdEnvVars
      </FilesMatch>
      <Directory /usr/lib/cgi-bin>
        SSLOptions +StdEnvVars
      </Directory>
      BrowserMatch "MSIE [2-6]" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
      BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
  
    </VirtualHost>
  </IfModule>
  EOF

sed -i "s|_ADMINMAIL_|${ADMINMAIL}|g" /etc/apache2/sites-available/default-ssl.conf
sed -i "s|_ROOTSSLURL_|${ROOTSSLURL}|g" /etc/apache2/sites-available/default-ssl.conf
sed -i "s|_SSLCERTFILE_|${SSLCERTFILE}|g" /etc/apache2/sites-available/default-ssl.conf
sed -i "s|_SSLCERTKEY_|${SSLCERTKEY}|g" /etc/apache2/sites-available/default-ssl.conf
a2enmod ssl
a2enmod autoindex
a2enmod headers
a2enmod rewrite
a2ensite default-ssl
</code>

Installer les certificats

<code bash>
service apache2 stop
service apache2 start
</code>

Créer une nouvelle base de données MySQL

<code bash>
vi /var/www/owncloud/config/config.php

  'default_language' => 'fr',
  'enable_avatars' => false,
  'logtimezone' => 'Europe/Paris'
</code>

__RQ :__ cache apcu not working in debian jessie, waiting ownCloud team finds solution for easy user cache

<code bash>
  cat << 'EOF' > /etc/cron.d/owncloud
  # crontab -u www-data -e
  */15  *  *  *  * www-data php -f /var/www/owncloud/cron.php > /dev/null 2>&1
  EOF

chown root:root /etc/cron.d/owncloud
chmod 644 /etc/cron.d/owncloud
service cron stop
service cron start

Go to http://FQDN/

===== Configuration française : admin owncloud =====

  - cocher "//Autoriser les utilisateurs à envoyer des notifications par courriel concernant les partages//"
  - décocher "//Autoriser les utilisateurs de ce serveur à envoyer des partages vers d'autres serveurs//"
  - décocher "//Autoriser les utilisateurs de ce serveur à recevoir des partages d'autres serveurs//"
  - cron : choisir "//cron//"
  - décocher "//Autoriser le repartage//"

Bugs/doc : https://forum.owncloud.org/viewtopic.php?f=31&t=26310

===== Client OwnCloud =====

Owncloud client version 2.0.0 with debian jessie backports
<code bash>
echo "deb http://http.debian.net/debian jessie-backports main" >> /etc/apt/sources.list
apt-get update
apt-get -t jessie-backports install "owncloud-client"
</code>