256 lines
6.1 KiB
ReStructuredText
256 lines
6.1 KiB
ReStructuredText
Install
|
|
=======
|
|
|
|
QuartzMap is installed using the included installation scripts.
|
|
|
|
The script will attempt to provision an SSL certificate using Certbot.
|
|
|
|
.. warning::
|
|
Ensure that your hostname is properly set. If not set the hostname using 'hostnamectl set-hostname domain.com'
|
|
|
|
|
|
Basic Install
|
|
------------
|
|
|
|
Clone the repository::
|
|
|
|
git clone https://git.acugis.com/AcuGIS/GeoSync.git
|
|
|
|
Change to the quartz directory::
|
|
|
|
cd quartz
|
|
|
|
Execute the scripts in order::
|
|
|
|
$ ./installer/postgres.sh
|
|
$ ./installer/app-install.sh
|
|
|
|
Upon completion, you should see the message below::
|
|
|
|
Backend installation is finished.
|
|
|
|
|
|
Complete setup by navigating to https://domain.com/admin.setup.php to complete the installation.
|
|
|
|
.. image:: images/installer-2.png
|
|
|
|
|
|
Populate the required fields with whatever values you want to use.
|
|
|
|
|
|
Manual Installation on Ubuntu 22
|
|
--------------------------------
|
|
|
|
Follow below to customize your installation.
|
|
|
|
|
|
Install PostgreSQL with PostGIS
|
|
------------------------------------------
|
|
|
|
QuartzMap requires PostgreSQL with PostGIS.
|
|
|
|
If you do not already have it installed, install it now.
|
|
|
|
.. code-block:: bash
|
|
|
|
#!/bin/bash -e
|
|
|
|
apt install postgresql postgresql-contrib
|
|
|
|
|
|
Install Prerequisties
|
|
------------------------------------------
|
|
|
|
For Community Edition:
|
|
|
|
.. code-block:: bash
|
|
|
|
apt-get -y install apache2 libapache2-mod-php php-{pgsql,zip,gd,simplexml} proftpd postfix python3-certbot-apache
|
|
|
|
For Commerical Edition:
|
|
|
|
.. code-block:: bash
|
|
|
|
apt-get -y install apache2 libapache2-mod-php php-{pgsql,zip,gd,simplexml} proftpd libapache2-mod-fcgid postfix python3-certbot-apache
|
|
install_qgis_server
|
|
|
|
|
|
Create the PostGIS Database
|
|
--------------------------------
|
|
|
|
.. code-block:: sql
|
|
|
|
CREATE USER quartz with password 'SuperSecret';
|
|
|
|
CREATE DATABASE quartz with OWNER quartz;
|
|
|
|
|
|
Create the Database Objects
|
|
--------------------------------
|
|
|
|
.. code-block:: sql
|
|
|
|
CREATE TYPE public.userlevel AS ENUM ('Admin', 'User');
|
|
|
|
CREATE TABLE public.user ( id SERIAL PRIMARY KEY,
|
|
name character varying(250),
|
|
email character varying(250),
|
|
password character varying(255),
|
|
ftp_user character varying(250),
|
|
accesslevel public.userlevel,
|
|
owner_id integer NOT NULL REFERENCES public.user(id),
|
|
UNIQUE(email)
|
|
);
|
|
|
|
CREATE TABLE public.access_groups ( id SERIAL PRIMARY KEY,
|
|
name character varying(255) NOT NULL,
|
|
owner_id integer NOT NULL REFERENCES public.user(id)
|
|
);
|
|
|
|
CREATE TABLE public.user_access ( id SERIAL PRIMARY KEY,
|
|
user_id integer NOT NULL REFERENCES public.user(id),
|
|
access_group_id integer NOT NULL REFERENCES public.access_groups(id),
|
|
UNIQUE(user_id, access_group_id)
|
|
);
|
|
|
|
CREATE TABLE public.map ( id SERIAL PRIMARY KEY,
|
|
name character varying(50) NOT NULL,
|
|
description character varying(50) NOT NULL,
|
|
is_public BOOLEAN DEFAULT false,
|
|
owner_id integer NOT NULL REFERENCES public.user(id)
|
|
);
|
|
|
|
CREATE TABLE public.map_access ( id SERIAL PRIMARY KEY,
|
|
map_id integer NOT NULL REFERENCES public.map(id),
|
|
access_group_id integer NOT NULL REFERENCES public.access_groups(id),
|
|
UNIQUE(map_id, access_group_id)
|
|
);
|
|
|
|
CREATE TABLE public.permalink ( id SERIAL PRIMARY KEY,
|
|
description character varying(255),
|
|
query character varying(255),
|
|
map_id integer NOT NULL REFERENCES public.map(id),
|
|
created TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
|
expires TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP + interval '1 hour',
|
|
visits integer NOT NULL DEFAULT 0,
|
|
visits_limit integer NOT NULL DEFAULT 1,
|
|
hash character varying(36) NOT NULL,
|
|
owner_id integer NOT NULL REFERENCES public.user(id)
|
|
);
|
|
|
|
CREATE TABLE public.signup ( id SERIAL PRIMARY KEY,
|
|
name character varying(250),
|
|
email character varying(250),
|
|
password character varying(250),
|
|
verify character varying(250),
|
|
UNIQUE(email)
|
|
);
|
|
|
|
|
|
Configure ProFTPD
|
|
----------------------------
|
|
|
|
.. code-block:: bash
|
|
|
|
sed -i.save '
|
|
s/#DefaultRoot~/DefaultRoot ~/
|
|
s/# RequireValidShelloff/RequireValidShell off/' /etc/proftpd/proftpd.conf
|
|
systemctl enable proftpd
|
|
systemctl restart proftpd
|
|
|
|
|
|
Configure Apache
|
|
----------------------------
|
|
|
|
.. code-block:: bash
|
|
|
|
a2enmod ssl headers expires fcgid cgi
|
|
|
|
cp installer/apache2.conf /etc/apache2/sites-available/default-ssl.conf
|
|
|
|
# Below is required for Certbot to provision SSL
|
|
|
|
for f in 000-default default-ssl; do
|
|
sed -i.save "s/#ServerName example.com/#ServerName ${HNAME}/" /etc/apache2/sites-available/${f}.conf
|
|
done
|
|
|
|
a2ensite 000-default default-ssl
|
|
systemctl reload apache2
|
|
|
|
certbot --apache --agree-tos --email hostmaster@${HNAME} --no-eff-email -d ${HNAME}
|
|
|
|
|
|
Create Data and Cache Directories
|
|
----------------------------
|
|
|
|
.. code-block:: bash
|
|
|
|
mkdir -p "${APPS_DIR}"
|
|
mkdir -p "${CACHE_DIR}"
|
|
mkdir -p "${DATA_DIR}"
|
|
|
|
|
|
Grant Apache permissions
|
|
----------------------------
|
|
|
|
.. code-block:: bash
|
|
|
|
chown -R www-data:www-data "${APPS_DIR}"
|
|
chown -R www-data:www-data "${CACHE_DIR}"
|
|
chown -R www-data:www-data "${DATA_DIR}"
|
|
|
|
|
|
cp -r . /var/www/html/
|
|
chown -R www-data:www-data /var/www/html
|
|
rm -rf /var/www/html/installer
|
|
|
|
systemctl restart apache2
|
|
|
|
|
|
Create Groups and Permissions
|
|
----------------------------
|
|
|
|
.. code-block:: bash
|
|
|
|
# create group for all FTP users
|
|
groupadd qatusers
|
|
|
|
create_ftp_user
|
|
|
|
# install ftp user creation script
|
|
for f in update; do
|
|
cp installer/${f}_ftp_user.sh /usr/local/bin/
|
|
chown www-data:www-data /usr/local/bin/${f}_ftp_user.sh
|
|
chmod 0550 /usr/local/bin/${f}_ftp_user.sh
|
|
done
|
|
|
|
cat >/etc/sudoers.d/q2w <<CAT_EOF
|
|
www-data ALL = NOPASSWD: /usr/local/bin/update_ftp_user.sh
|
|
CAT_EOF
|
|
echo -e "postgres and other passwords are saved in /root/auth.txt file"
|
|
|
|
|
|
Create incl/const.php file
|
|
---------------------------------------
|
|
|
|
.. code-block:: php
|
|
|
|
cat >admin/incl/const.php <<CAT_EOF
|
|
<?php
|
|
define("DB_HOST", "localhost");
|
|
define("DB_NAME", "${APP_DB}");
|
|
define("DB_USER", "${APP_DB}");
|
|
define("DB_PASS", "${APP_DB_PASS}");
|
|
define("DB_PORT", 5432);
|
|
define("DB_SCMA", 'public');
|
|
define("APPS_DIR", "${APPS_DIR}");
|
|
define("CACHE_DIR", "${CACHE_DIR}");
|
|
define("DATA_DIR", "${DATA_DIR}");
|
|
define("SUPER_ADMIN_ID", 1);
|
|
define("SESS_USR_KEY", 'q2w_user');
|
|
?>
|
|
CAT_EOF
|
|
|
|
|
|
|