110 lines
4.9 KiB
Markdown
110 lines
4.9 KiB
Markdown
## Setup on a server
|
|
|
|
This will guide you through the whole kibicara server setup on an OpenBSD server with OpenSMTPd as MTA (+ Relay at `relay.example.com`) and `https://kibicara.example.com` as domain. The kibicara server will also run on other Unix-like systems, just modify the guide to your needs.
|
|
|
|
Prerequisites:
|
|
- python>=3.8 + pip
|
|
|
|
### Set up server environment
|
|
- Create a new user: `adduser kibicara`
|
|
- Install packages: `pkg_add git python%3.8 opensmtpd-extras`
|
|
- (Optional) Create a symlink to python3: `ln -s /usr/local/bin/python3.8 /usr/local/bin/python3`
|
|
- Ensure pip is installed: `python3 -m ensurepip --default-pip`
|
|
- Switch to kibicara user: `su -l kibicara`
|
|
- Add pip packages to PATH by appending it to the `.profile` of user `kibicara` (remember that a new login is needed for it to work). This ensures that you can call kibicara without its full path:
|
|
```
|
|
PIP_PACKAGES="${HOME}/.local"
|
|
export PATH="$PATH:$PIP_PACKAGES/bin"
|
|
```
|
|
|
|
### Build backend on the server
|
|
- Clone the repository: `git clone https://github.com/acipm/kibicara`
|
|
- Install the backend: `cd kibicara && pip install -U --user pip setuptools wheel && pip install --user .`
|
|
|
|
### Build frontend on your local machine
|
|
Since the Angular CLI is quite bloaty and your server may not have enough resouces, we recommend building the frontend locally and copying it onto the server. The same steps can be used on the server if it has enough resources.
|
|
|
|
- Install npm: `pkg_add node`
|
|
- Configure npm to use global install (`-g`) without root
|
|
```
|
|
mkdir "${HOME}/.npm-packages"
|
|
npm config set prefix "${HOME}/.npm-packages"
|
|
```
|
|
- Add npm package path to PATH in `.profile` by appending:
|
|
```
|
|
NPM_PACKAGES="${HOME}/.npm-packages"
|
|
export PATH="$PATH:$NPM_PACKAGES/bin"
|
|
```
|
|
- Install Angular CLI: `npm install -g @angular/cli`
|
|
- Clone repository locally: `git clone https://github.com/acipm/kibicara`
|
|
- Change production settings in `kibicara/kibicara-frontend/src/environments/environment.prod.ts` to use your domain:
|
|
```
|
|
export const environment = {
|
|
production: true,
|
|
API_BASE_PATH: 'https://kibicara.example.com',
|
|
EMAIL_DOMAIN: 'kibicara.example.com',
|
|
};
|
|
```
|
|
- Build frontend with `cd kibicara/kibicara-frontend && ng build --prod`
|
|
- Copy the generated frontend to your server to `/home/kibicara/kibicara-frontend`: `scp -r kibicara/kibicara-frontend/dist/kibicara-frontend <your_server>:/home/kibicara`
|
|
|
|
### Configure Ticketfrei Core
|
|
- Write config file to `/etc/kibicara.conf` and replace the domain with yours:
|
|
```
|
|
database_connection = 'sqlite:////home/kibicara/kibicara.sqlite'
|
|
frontend_path = '/home/kibicara/kibicara-frontend'
|
|
frontend_url = 'https://kibicara.example.com'
|
|
```
|
|
|
|
#### SSL
|
|
You can use the SSL stuff provided by hypercorn by generating an SSL Certificate and passing its paths to the config options `certfile` and `keyfile` in `/etc/kibicara.conf`.
|
|
|
|
### Configure Ticketfrei platforms
|
|
|
|
#### Configure E-Mail (OpenSMTPd + Relay)
|
|
To send and receive e-mails (necessary for registration confirmation and e-mail bot) you will need an MTA. We use OpenSMTPd:
|
|
|
|
- Configure OpenSMTPd by writing the `/etc/mail/smtpd.conf`. Basically all lines with `kibicara` in it are relavant, if you already have a different setup just copy those.
|
|
```
|
|
table aliases file:/etc/mail/aliases
|
|
table kibicara_mailaddr sqlite:/etc/mail/kibicara_mailaddr.conf
|
|
|
|
listen on all
|
|
|
|
action "local_mail" mbox alias <aliases>
|
|
action "outbound" relay host "relay.example.com"
|
|
action "kibicara" mda "/home/kibicara/.local/bin/kibicara_mda %{dest.user}" virtual { "@" => kibicara } user kibicara
|
|
|
|
match from any for domain "kibicara.example.com" rcpt-to <kibicara_mailaddr> action "kibicara"
|
|
match from any for domain "kibicara.example.com" action "local_mail"
|
|
match from local for local action "local_mail"
|
|
match from local for any action "outbound"
|
|
```
|
|
- Read accepted inbox addresses from the database by configuring `/etc/mail/kibicara_mailaddr.conf`:
|
|
```
|
|
dbpath /home/kibicara/kibicara.sqlite
|
|
query_mailaddr SELECT 1 FROM email WHERE ? IN (name || '@kibicara.example.com');
|
|
```
|
|
- Don't forget to restart OpenSMTPd when you change your database: `rcctl stop && rcctl start`
|
|
|
|
#### Configure Twitter
|
|
|
|
Twitter needs you to create a Twitter App, which hood admins can permit to read and write messages.
|
|
|
|
- Create Twitter account and app: https://developer.twitter.com
|
|
- Get your customer key and customer secret and append this to `/etc/kibicara.conf`:
|
|
```
|
|
[twitter]
|
|
consumer_key = '<your_consumer_key>'
|
|
consumer_secret = '<your_consumer_secret>'
|
|
```
|
|
- You need to configure a Callback Url in your Twitter App:
|
|
- Go to: `https://developer.twitter.com/en/apps`
|
|
- Add `https://kibicara.example.com/dashboard/twitter-callback` as Callback Url of your Twitter App. This is needed to successfully create a twitter oauth handshake.
|
|
|
|
#### Configure Telegram
|
|
Nothing to do, because telegram has a nice API.
|
|
|
|
### Start Ticketfrei
|
|
Run `kibicara` with your kibicara user. To have more verbose output add `-vvv`.
|