3,704
edits
Changes
Jump to navigation
Jump to search
mLine 1:
Line 1: − {{WIP box}} Line 7:
Line 6: − + − + + + + + + + + + + + Line 42:
Line 51: − + Line 72:
Line 81: − I wanted to restrict access to the administration backend to my LAN, so an outside user couldn't even get to the login page. To do this, I created an .htaccess file like this:+ − + + + + + + + + − + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + − +
→Set the PHP version for the ibay: libmcrypt dependency is in epel repo
{{Level|Medium|These instructions assume familiarity with basic shell commands}}
{{Level|Medium|These instructions assume familiarity with basic shell commands}}
[[Category:Howto|J]] [[Category:Webapps]]
[[Category:Howto|J]] [[Category:Webapps]]
[http://www.joomla.org/ Joomla!] is a powerful, flexible content management system (CMS) that is in wide use across the Internet. This How-To will cover configuration of the SME 9.0 server to support Joomla! 3, and installation of Joomla! 3 on the SME 9.0 server. It will not cover configuration or use of Joomla! itself; those subjects are covered by the Joomla! documentation and many other sources.
[http://www.joomla.org/ Joomla!] is a powerful, flexible content management system (CMS) that is in wide use across the Internet. This How-To will cover configuration of the SME 9.0 server to support Joomla! 3, and installation of Joomla! 3 on the SME 9.0 server. It will not cover configuration or use of Joomla! itself; those subjects are covered by the Joomla! documentation and many other sources.
As of this writing, the most recent version of Joomla! 3 is 3.3.6. This version requires PHP 5.3.10 or greater, which is a greater version than installed by default with SME 9.0. You can either upgrade PHP following [[Upgrade php/mysql|these instructions]], or install Joomla! 3.2.7, which will work with the stock version of PHP.
As of this writing, the most recent version of Joomla! 3 is 3.3.6. This version requires PHP 5.3.10 or greater, which is a greater version than installed by default with SME 9.0. To avoid potential conflicts with packages in SME server which depend on the stock version of PHP, you will use [[PHP Software Collections]] to install a newer version alongside the installed version. Install and configure that contrib before proceeding with these instructions.
Installation of Joomla! involves creating an ibay to house Joomla!, creating a MySQL user for Joomla!, downloading and extracting the Joomla! package, and going through the Joomla! web setup.
Installation of Joomla! involves creating an ibay to house Joomla!, creating a MySQL user for Joomla!, downloading and extracting the Joomla! package, and going through the Joomla! web setup. In the text boxes below, commands you type will be in '''bold''', while any response from the system will be in normal print.
===Create the ibay===
===Create the ibay===
Create an ibay for Joomla! to live in. You can call it anything you want, but I'll use joomla for this example. I used the following settings:
Create an ibay for Joomla! to live in. You can call it anything you want, but I'll use joomla for this example. I used the following settings:
[[File:joomla_ibay.png]]
[[File:joomla_ibay.png]]
If you expect to give remote users the ability to log in, you should probably set "Force secure connections" to "Enabled".
If you expect to give remote users the ability to log in, you should probably set "Force secure connections" to "Enabled".
===Set the PHP version for the ibay===
Browse to the PHP-SCL versions panel in the server manager (if you don't see it, return to the [[PHP Software Collections]] page and complete the installation). Select php55 as the version for your ibay.
You will also need to install a PHP module which doesn't come installed as a default. This also requires libmcrypt, which is available from the [[epel]] repository. So you need to enable the [[epel]] repository first, then:
yum install libmcrypt --enablerepo=epel
Then from the command line:
[root@e-smith ~]# '''yum --enablerepo=remi install php54-php-mcrypt php55-php-mcrypt php56-php-mcrypt'''
===Create the MySQL user===
===Create the MySQL user===
===Download and extract the Joomla! package===
===Download and extract the Joomla! package===
Download the Joomla! package (either version 3.2.7 if you have chosen not to upgrade PHP, or the most recent version if you have upgraded PHP) to joomla/html and unzip it. You can do this from the command line like this (substituting the link for the most recent version). These commands will also move the .zip file out of your web-accessible space, and set ownership and permissions appropriately.
Download the Joomla! package to joomla/html and unzip it. You can do this from the command line like this (substituting the link for the most recent version). These commands will also move the .zip file out of your web-accessible space, and set ownership and permissions appropriately.
[root@e-smith ~]# '''cd ~joomla/../html'''
[root@e-smith ~]# '''cd ~joomla/../html'''
===Security===
===Security===
Two possible security measures are to restrict access to the administration backend to users on your LAN, and to enable two-factor authentication.
[root@e-smith html]# '''nano administrator/.htaccess'''
====Restrict access to backend====
I wanted to restrict access to the administration backend to my LAN, so an outside user couldn't even get to the login page. To do this, I created a custom template fragment:
[root@e-smith ~]# '''mkdir -p /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf'''
[root@e-smith ~]# '''cd /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf'''
[root@e-smith httpd.conf]# '''nano -w 92Joomla'''
The contents of the file look like this:
The contents of the file look like this:
# /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/92Joomla
<Directory /home/e-smith/files/ibays/'''joomla'''/html/administrator>
Order Deny,Allow
Order Deny,Allow
Deny from all
Deny from all
Allow from 192.168.x.0/24
Allow from 192.168.'''0'''.0/24
</Directory>
You'll need to change the directory name to reflect your ibay name, and the "Allow" IP range to reflect your LAN IP address range. Then, expand the template and restart Apache:
[root@e-smith httpd.conf]# '''expand-template /etc/httpd/conf/httpd.conf'''
[root@e-smith httpd.conf]# '''service httpd-e-smith restart'''
Restarting httpd-e-smith [ OK ]
====Enable two-factor authentication====
Two-factor authentication allows you to use Google Authenticator, or any compatible app or device, to further secure your installation by requiring a six-digit PIN that changes every 30 seconds. You can require this for all users, or specific users. Enabling this is part of the Joomla! configuration, and is not discussed here.
==Removing Joomla!==
To remove Joomla! from your system, you will need to remove the ibay, the database, the database user, and the httpd.conf template fragment, if you added one.
===Remove the ibay===
Remove the ibay using the server-manager
===Remove the database and database user===
[root@e-smith html]# '''mysql'''
mysql> '''revoke all privileges from joomla@localhost;'''
mysql> '''drop user joomla@localhost;'''
mysql> '''drop database joomla;'''
mysql> '''quit'''
===Remove the httpd.conf template fragment===
[root@e-smith html]# '''rm /etc/e-smith/templates-custom/etc/httpd/conf/httpd.conf/92Joomla'''
[root@e-smith httpd.conf]# '''expand-template /etc/httpd/conf/httpd.conf'''
[root@e-smith httpd.conf]# '''service httpd-e-smith restart'''
Restarting httpd-e-smith [ OK ]
--[[User:DanB35|DanB35]] ([[User talk:DanB35|talk]]) 20:01, 10 October 2014 (CEST)
--[[User:DanB35|DanB35]] ([[User talk:DanB35|talk]]) 23:54, 10 October 2014 (CEST)