Wiki

MediaWiki:Installasi on Ubuntu 20.04 (Nginx): Difference between revisions

← Older edit
Kangtain (talk | contribs)
Bureaucrats, Interface administrators, Suppressors, Administrators
9,154 edits
VisualWikitext
No edit summary
 
(11 intermediate revisions by the same user not shown)
Line 1: Line 1:
==Step 1: Downloading MediaWiki==
__NOTOC__
===Step 1: Downloading MediaWiki===
*Download the latest stable version of MediaWiki:
*Download the latest stable version of MediaWiki:
  wget https://releases.wikimedia.org/mediawiki/1.36/mediawiki-1.36.2.tar.gz
  wget <nowiki>https://releases.wikimedia.org/mediawiki/1.36/mediawiki-1.36.2.tar.gz</nowiki>


*Extract the archive to /var/www/.
*Extract the archive to /var/www/.
Line 9: Line 10:


*Rename the directory.
*Rename the directory.
sudo mv /var/www/mediawiki-1.36.2 /var/www/nama_situs


sudo mv /var/www/mediawiki-1.36.2 /var/www/nama_situs
*Then we need to install some PHP extensions required by MediaWiki.
sudo apt install php7.4-mbstring php7.4-xml php7.4-fpm php7.4-json php7.4-mysql php7.4-curl php7.4-intl php7.4-gd php7.4-mbstring texlive imagemagick


Then we need to install some PHP extensions required by MediaWiki.
*Next, we need to install external dependencies via Composer (a PHP dependency manager).
sudo apt install composer


sudo apt install php7.4-mbstring php7.4-xml php7.4-fpm php7.4-json php7.4-mysql php7.4-curl php7.4-intl php7.4-gd php7.4-mbstring texlive imagemagick
cd /var/www/mediawiki/


If you use Apache web server, then you need to restart Apache.
sudo composer install --no-dev


sudo systemctl restart apache2
<blockquote>
'''Note:''' That MediaWiki currently doesn’t support PHP8.0. If you have installed PHP8.0 on your Ubuntu server, then you should run sudo update-alternatives --config php command to set PHP7.4 as the default version.
</blockquote>


Next, we need to install external dependencies via Composer (a PHP dependency manager).
*Once all dependencies are installed, run the following command to set web server user (www-data) as the owner of this directory.


sudo apt install composer
sudo chown www-data:www-data /var/www/mediawiki/ -R


cd /var/www/mediawiki/
===Step 2: Creating a Database===
*Log into [[MariaDB]] server with the command below.
sudo mysql -u root


sudo composer install --no-dev
*Create a database for MediaWiki. This tutorial name the database mediawiki, but you can use whatever name you like.
CREATE DATABASE <span style="color:#ff0000">mediawiki</span>;


Note that MediaWiki currently doesn’t support PHP8.0. If you have installed PHP8.0 on your Ubuntu server, then you should run sudo update-alternatives --config php command to set PHP7.4 as the default version.
*Then run the following command at MariaDB prompt to create a database user and grant privileges to this user. Replace mediawiki, wikiuser and password with your preferred database name, database username and user password respectively.
GRANT ALL PRIVILEGES ON <span style="color:#ff0000">mediawiki</span>.* TO '<span style="color:#ff0000">wikiuser</span>'@'localhost' IDENTIFIED BY '<span style="color:#ff0000">password</span>';


Once all dependencies are installed, run the following command to set web server user (www-data) as the owner of this directory.
*Next, flush MariaDB privileges and exit.
flush privileges;


sudo chown www-data:www-data /var/www/mediawiki/ -R
exit;


Step 2: Creating a Database
===Step 3: Create Apache Virtual Host or Nginx Config File for MediaWiki===
===Nginx===
*If you use Nginx web server, create a server block file for MediaWiki under <code>/etc/nginx/conf.d/</code> directory.


Log into MariaDB server with the command below.
sudo nano /etc/nginx/conf.d/mediawiki.conf


sudo mysql -u root
*Copy the following text and paste it into the file. Replace wiki.your-domain.com with your actual domain name. Don’t forget to create DNS A record for this domain name.
 
server {
Create a database for MediaWiki. This tutorial name the database mediawiki, but you can use whatever name you like.
        listen 80;
 
        listen [::]:80;
CREATE DATABASE mediawiki;
        server_name <span style="color:#ff0000">wiki.your-domain.com</span>;  
 
Then run the following command at MariaDB prompt to create a database user and grant privileges to this user. Replace mediawiki, wikiuser and password with your preferred database name, database username and user password respectively.
        root <span style="color:#ff0000">/var/www/mediawiki</span>;
 
        index index.php;
GRANT ALL PRIVILEGES ON mediawiki.* TO 'wikiuser'@'localhost' IDENTIFIED BY 'password';
   
 
        error_log /var/log/nginx/mediawiki.error;
Next, flush MariaDB privileges and exit.
        access_log /var/log/nginx/mediawiki.access;  
 
flush privileges;
        location / {
 
                try_files $uri $uri/ /index.php;
exit;
        }
 
Step 3: Create Apache Virtual Host or Nginx Config File for MediaWiki
        location ~ /.well-known {
Apache
            allow all;
 
        }
If you use Apache web server, create a virtual host for MediaWiki.
 
        location ~ /\.ht {
sudo nano /etc/apache2/sites-available/mediawiki.conf
          deny all;
 
          }
Copy and paste the following text into the file. Replace wiki.your-domain.com with your actual domain name. Don’t forget to create DNS A record for this domain name.
 
        location ~ \.php$ {
<VirtualHost *:80>
            fastcgi_pass unix:/run/php/php7.4-fpm.sock;
    ServerAdmin admin@your-domain.com
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    DocumentRoot /var/www//mediawiki/
            include fastcgi_params;
    ServerName wiki.your-domain.com
            include snippets/fastcgi-php.conf;
 
    <Directory /var/www/html/mediawiki/>
        Options FollowSymLinks
        AllowOverride All
        Order allow,deny
        allow from all
    </Directory>
 
    ErrorLog /var/log/apache2/mediawiki_error
    CustomLog /var/log/apache2/mediawiki_access common
</VirtualHost>
 
Save and close the file. Then enable this virtual host.
 
sudo a2ensite mediawiki.conf
 
Reload Apache for the above changes to take effect.
 
sudo systemctl reload apache2
 
Nginx
 
If you use Nginx web server, create a server block file for MediaWiki under /etc/nginx/conf.d/ directory.
 
sudo nano /etc/nginx/conf.d/mediawiki.conf
 
Copy the following text and paste it into the file. Replace wiki.your-domain.com with your actual domain name. Don’t forget to create DNS A record for this domain name.
 
server {
        listen 80;
        listen [::]:80;
        server_name wiki.your-domain.com;
 
        root /var/www/mediawiki;
        index index.php;
 
        error_log /var/log/nginx/mediawiki.error;
        access_log /var/log/nginx/mediawiki.access;
 
        location / {
                try_files $uri $uri/ /index.php;
        }
 
        location ~ /.well-known {
            allow all;
        }
 
        location ~ /\.ht {
          deny all;
         }
         }
}


        location ~ \.php$ {
*Save and close the file. Then test Nginx configuration.
            fastcgi_pass unix:/run/php/php7.4-fpm.sock;
sudo nginx -t
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include fastcgi_params;
            include snippets/fastcgi-php.conf;
        }
}
 
Save and close the file. Then test Nginx configuration.
 
sudo nginx -t
 
If the test is successful, reload Nginx web server.
 
sudo systemctl reload nginx
 
Step 4: Enabling HTTPS
 
To encrypt the HTTP traffic, we can enable HTTPS by installing a free TLS certificate issued from Let’s Encrypt. Run the following command to install Let’s Encrypt client (certbot) on Ubuntu 20.04 server.
 
sudo apt install certbot
 
If you use Apache, install the Certbot Apache plugin.
 
sudo apt install python3-certbot-apache


And run this command to obtain and install TLS certificate.
'''Output sample'''
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful


sudo certbot --apache --agree-tos --redirect --hsts --staple-ocsp --email you@example.com -d wiki.your-domain.com
*If the test is successful, reload Nginx web server.
sudo systemctl reload nginx


If you use Nginx, then you also need to install the Certbot Nginx plugin.
===Step 4: Enabling HTTPS===
*To encrypt the HTTP traffic, we can enable HTTPS by installing a free TLS certificate issued from Let’s Encrypt. Run the following command to install Let’s Encrypt client (certbot) on Ubuntu 20.04 server.
sudo apt install certbot


sudo apt install python3-certbot-nginx
*If you use Nginx, then you also need to install the Certbot Nginx plugin.
sudo apt install python3-certbot-nginx


Next, run the following command to obtain and install TLS certificate.
*Next, run the following command to obtain and install TLS certificate.
sudo certbot --nginx --agree-tos --redirect --hsts --staple-ocsp --email <span style="color:#ff0000">you@example.com</span> -d <span style="color:#ff0000">wiki.your-domain.com</span>


sudo certbot --nginx --agree-tos --redirect --hsts --staple-ocsp --email you@example.com -d wiki.your-domain.com
'''Where'''
*<code>--nginx</code>: Use the nginx plugin.
*<code>--apache</code>: Use the Apache plugin.
*<code>--agree-tos</code>: Agree to terms of service.
*<code>--redirect</code>: Force HTTPS by 301 redirect.
*<code>--hsts</code>: Add the Strict-Transport-Security header to every HTTP response. Forcing browser to always use TLS for the domain. Defends against SSL/TLS Stripping.
*<code>--staple-ocsp</code>: Enables OCSP Stapling. A valid OCSP response is stapled to the certificate that the server offers during TLS.


Where
*The certificate should now be obtained and automatically installed.


    --nginx: Use the nginx plugin.
==Terkait==
    --apache: Use the Apache plugin.
*[[MariaDB]]
    --agree-tos: Agree to terms of service.
*[[Server]]
    --redirect: Force HTTPS by 301 redirect.
*[[MediaWiki]]
    --hsts: Add the Strict-Transport-Security header to every HTTP response. Forcing browser to always use TLS for the domain. Defends against SSL/TLS Stripping.
    --staple-ocsp: Enables OCSP Stapling. A valid OCSP response is stapled to the certificate that the server offers during TLS.


The certificate should now be obtained and automatically installed.
[[Category:Tutorial]]
[[Category:CMS]]
[[Category:Server]]
Retrieved from "https://kangtain.com/wiki/index.php/MediaWiki:Installasi_on_Ubuntu_20.04_(Nginx)"