Loading...
 

Tiki Suite Install

Servers

Server 1 example.org

ClearOS

  • Install from ISOQuestion, latest stable version, or USBQuestion
  • system registration is part of the post-installation wizard, which, while not mandatory, is recommended.Question
    • All Tiki Suite software will be packaged as "apps" in the ClearCenter marketplace, and thus, you need to have an account unless you are going to install all the apps manually (if you have the skills to do this, please instead join the Tiki Suite team!)
  • Activate & configure the features you need from the ClearCenter Marketplace. We are compiling a Quick Select File (QSF)Question
  • You should have an SSL if you don't want to use self-signed certificate automatically made by ClearOS
    • Wildcard SSL is better because several sub-domains will need to be secured (for XMPP, etc.)
  • You should disable SSLv2 and SSLv3Question and the weak ciphers
    • Edit /etc/httpd/conf.d/ssl.conf to be like this (only edit appropriate section)
      Copy to clipboard
      #   SSL Protocol support:
# List the enable protocol levels with which clients will be able to
# connect.  Disable SSLv2 access by default:
# SSLProtocol all -SSLv2
SSLProtocol All -SSLv2 -SSLv3

#   SSL Cipher Suite:
# List the ciphers that the client is permitted to negotiate.
# See the mod_ssl documentation for a complete list.
# SSLCipherSuite ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:!MEDIUM:+HIGH
    • Edit /etc/httpd/conf.d/flex-443.conf to be like this (do this for each domain name)
      Copy to clipboard
      # SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
# SSLCipherSuite ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:!EXP:+eNULL
SSLCipherSuite ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:!MEDIUM:+HIGH
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0
SSLProtocol All -SSLv2 -SSLv3
    • Then restart httpd
      Copy to clipboard
      # service httpd restart
  • Install DenyHosts for SSH brute force attack protectionQuestion
  • To make file management easier: http://www.clearfoundation.com/docs/howtos/midnight_commanderQuestion

Zarafa

SMTP
Domain name configuration
Related software
  • For ActiveSync configuration tips, see below
  • If you want offline access to emails, see the Thunderbird section below (you will need to open firewall ports)

Tiki


After this beta period, Tiki will become an app in the marketplace. More info at: Tiki on ClearOS

We can also get OPcache. It's standard in PHP 5.5, but we can install on 5.3:
http://www.clearfoundation.com/docs/howtos/opcacheQuestion

In ClearOS, you can't create a group which has the same name as a user. In Tiki, this is possible, so you should have a convention. Ex.: Users: first.name groups: must be different than usernames, no dots (.)

Other useful tools include:


To check logs (error, access, etc.), visit:
https://example.org:81/app/log_viewer/indexQuestion
Cron job

This is an adaptation of http://doc.tiki.org/Cron+Job+to+Rebuild+Search+IndexQuestion for ClearOS

Create/edit the crontab for the apache user (so the search index is created with this user)
Copy to clipboard
$ crontab -u apache -e
Add this line for a daily rebuild in Tiki11 and up
Copy to clipboard
0 0 * * * cd /var/www/html/; php console.php index:rebuild >/dev/null 2>&1
To verify that all is OK
Copy to clipboard
[root@labalab html]# crontab -u apache -l
0 0 * * * cd /var/www/html/; php console.php index:rebuild >/dev/null 2>&1


See also: http://www.clearfoundation.com/docs/howtos/cronQuestion

PHP 5.5

Piwik

Openfire Meetings

The base package is with Openfire Meetings (XMPP+WebRTC). If you also need a PBX phone system: FreeSWITCH + FusionPBX

Todo: document how to install Openfire Meetings on ClearOS with

    • OpenLDAP integration
    • Firewall ports
    • SRV records (If your server name is different than your XMPP domain)
    • Turn Server
    • SSL

Todo
RADIUS Server
Turn Server
QoS
POTS
  • Todo: connect JitMeet to FreeSWITCH
    • to call out to attendees
    • for attendees to be able to call in


Elasticsearch

https://doc.tiki.org/ElasticsearchQuestion
http://wikisuite.org/How-to-install-Elasticsearch-on-ClearOSQuestion

TogetherJS

  • For real-time collaborative editing of eventually all features in Tiki, TogetherJS integration has started. By default, it uses the always up to date version hosted by Mozilla. But you can host your ownQuestion
    • This is still quite experimental so you should probably skip this unless you want to help code this 😉 -> Together

Server 2 - Kaltura

If you are not managing videos, just skip this one and install later

Laptops

  • On each client (Windows, MacOS X, GNU/Linux), install the following.

Firefox

Jitsi

Copy to clipboard
https://example.org/tiki-ajax_services.php?controller=suite&action=jitsi?username=${username}&password=${password}
    • This is another example in trunk
Copy to clipboard
http://demo.tiki.org/trunk/tiki-ajax_services.php?controller=suite&action=jitsi&username=${username}&password=${password}
  • Bug & feature requests are here: Jitsi
  • Later, we'll also do SIP / FreeSWITCH

Thunderbird

Syncthing

https://github.com/syncthing/syncthing-gtkQuestion is a nice GUI for Syncthing

OpenVPN


A quick way is to grab the 5 files in https://example.org:81/app/user_certificatesQuestion and add them to a subdirectory of OpenVPN's config folder

ex.:
C:\Program Files\OpenVPN\config\projectA\(5 files for project A go here)
C:\Program Files\OpenVPN\config\projectB\(5 files for project B go here)

On Windows, you need to start OpenVPN as an administrator.

Mobile

ActiveSync Mail-Contacts-Calendar

  • Configure ActiveSync with Zarafa
  • How to move mail from one account to another? It works in Thunderbird, but how to do with ActiveSync?
  • To test ActiveSync: https://testconnectivity.microsoft.com/Question
  • 2014-02-25: There was an issue with ActiveSync not connecting, which was related to error reporting.
    Peter Baldwin wrote
    Copy to clipboard
    I turned off PHP error reporting for z-push by adding the following to /etc/httpd/conf.d/zarafa-z-push.conf

    # Make sure error reporting is off
    php_flag display_errors off

SIP-XMPP

OpenVPN

Created by: Last Modification: Monday 20 November 2023 16:39:58 UTC by admin
History
Similar
List Slides
Export PDF
Handouts
Exit Slideshow