diff --git a/Admin/Phabricator/README b/Admin/Phabricator/README --- a/Admin/Phabricator/README +++ b/Admin/Phabricator/README @@ -1,87 +1,93 @@ Phabricator server ================== - https://www.phacility.com/phabricator Slogan: "Discuss. Plan. Code. Review. Test. Every application your project needs, all in one tool." - Ubuntu 18.04 LTS Linux Server standard installation with Apache and MySQL https://help.ubuntu.com/lts/serverguide https://help.ubuntu.com/lts/serverguide/httpd.html https://help.ubuntu.com/lts/serverguide/mysql.html - Apache HTTPS via "Let's Encrypt": https://letsencrypt.org/getting-started - Installation: https://secure.phabricator.com/book/phabricator/article/installation_guide https://secure.phabricator.com/source/phabricator/browse/master/scripts/install/install_ubuntu.sh ./bin/storage upgrade --force admin user: makarius - Configuration/Setup Issues: ignore "Alternate File Domain Not Configured" Add Auth Provider: Username/Password ./bin/auth lock ./bin/phd start - Configuration / Authentication: https://secure.phabricator.com/book/phabricator/article/configuring_accounts_and_registration . only local User/Password, *not* Google, Github etc. . auth.require-email-verification true . policy.allow-public true - Configuration/Mail: https://secure.phabricator.com/book/phabricator/article/configuring_outbound_email e.g. external SMTP via suitable mailers.json: $ ./bin/config set --stdin cluster.mailers < mailers.json - Configuration/SSH: https://secure.phabricator.com/book/phabricator/article/diffusion_hosting - $ cp ssh/ssh-hook /usr/local/bin/. - $ cp ssh/sshd_config.phabricator /etc/ssh/. - $ cp ssh/sshd-phabricator.service /etc/systemd/system/. - $ cp ssh/sudoers.d/phabricator /etc/sudoers.d/. + /etc/ssh/sshd_config: + Port 222 /etc/passwd: phab-daemon:x:118:126::/nonexistent:/bin/false vcs:x:119:125::/home/vcs:/bin/bash /etc/group: phab-daemon:x:126: vcs:x:125: - ./bin/config set phd.user phab-daemon - ./bin/config set diffusion.ssh-user vcs - ./bin/config set diffusion.ssh-port 2222 + $ cp ssh/ssh-hook /usr/local/bin/. + $ cp ssh/sshd_config.phabricator /etc/ssh/. + $ cp ssh/sshd-phabricator.service /lib/systemd/system/. + $ cp ssh/sudoers.d/phabricator /etc/sudoers.d/. - Test: - $ echo "{}" | ssh -p2222 vcs@phabricator.sketis.net conduit conduit.ping + $ ./bin/config set phd.user phab-daemon + $ ./bin/config set diffusion.ssh-user vcs + $ ./bin/config set diffusion.ssh-port 22 + + $ systemctl start sshd-phabricator + $ systemctl enable sshd-phabricator + + Test on local machine: + $ echo "{}" | ssh vcs@phabricator.sketis.net conduit conduit.ping - Repository Local Path: mkdir -p /var/www/phabricator/repo chown phab-daemon:phab-daemon /var/www/phabricator/repo - Update: https://secure.phabricator.com/book/phabricator/article/upgrading sudo ./update ./bin/diviner generate - Backup: https://secure.phabricator.com/book/phabricator/article/configuring_backups $ apt install automysqlbackup edit /etc/default/automysqlbackup: BACKUPDIR diff --git a/Admin/Phabricator/ssh/sshd_config.phabricator b/Admin/Phabricator/ssh/sshd_config.phabricator --- a/Admin/Phabricator/ssh/sshd_config.phabricator +++ b/Admin/Phabricator/ssh/sshd_config.phabricator @@ -1,24 +1,24 @@ # NOTE: You must have OpenSSHD 6.2 or newer; support for AuthorizedKeysCommand # was added in this version. # NOTE: Edit these to the correct values for your setup. AuthorizedKeysCommand /usr/local/bin/ssh-hook AuthorizedKeysCommandUser vcs AllowUsers vcs # You may need to tweak these options, but mostly they just turn off everything # dangerous. -Port 2222 +Port 22 Protocol 2 PermitRootLogin no AllowAgentForwarding no AllowTcpForwarding no PrintMotd no PrintLastLog no PasswordAuthentication no ChallengeResponseAuthentication no AuthorizedKeysFile none PidFile /var/run/sshd-phabricator.pid