Pre-Requirements<\/h2>\n
To begin with, log in to your server console with the root account or an account with root powers and issue the following commands in order to assure that your Debian system is up-to-date with the latest security patches, software, repositories and kernel updates.<\/p>\n
apt update<\/p>\n
apt upgrade<\/p>\n
In the next step, setup a descriptive name for your machine hostname with the command below (replace your hostname variable accordingly).<\/p>\n
hostnamectl set-hostname www.mysharedfiles.com<\/p>\n
Verify machine hostname and the record applied in system hosts file by issuing the following commands.<\/p>\n
hostnamectl<\/p>\n
cat \/etc\/hostname<\/p>\n
hostname \u2013f<\/p>\n
hostname \u2013s<\/p>\n
Finally, reboot the server to apply kernel updates and the hostname changes properly.<\/p>\n
systemctl reboot<\/p>\n
In the next step, log in back to the system with root privileges and install the following system utilities, such as zip, unzip (to decompress zip archives), curl and wget (download online files) and bash-completion command line autocompletion.<\/p>\n
su –<\/p>\n
apt install bash-completion zip unzip curl wget\u00a0 imagemagick unoconv<\/p>\n
In order to edit, compose or convert different image formats and convert documents via Pydio web interface, install ImageMagick software and unoconv – Universal Office Converter utilities by executing the following command.<\/p>\n
apt install imagemagick unoconv<\/p>\n
If you have Samba shares that need to be mounted in Pydio workspaces, install samba client in Debian with the following command.<\/p>\n
apt-get install smbclient<\/p>\n
Install Apache and PHP<\/h2>\n
In the next step, we\u2019ll start by installing the server side components of the LAMP stack required by Pydio web share file cloud: the Apache HTTP server and the PHP programming language interpreter. We\u2019ll also install all the required Pydio PHP modules and extensions. Issue the following command to install all described software components we just discussed.<\/p>\n
apt install apache2 libapache2-mod-php7.0 php7.0 php7.0-gd php7.0-opcache php7.0-json php7.0-mbstring php7.0-xml\u00a0 php7.0-cli php7.0-curl php7.0-zip php7.0-xmlrpc php7.0-intl php-imagick php-smbclient<\/p>\n
Next, check if all installed PHP modules are enabled in your system, something you can do by executing the following command.<\/p>\n
php7.0 \u2013m<\/p>\n
In the next step, enable Apache HTTP server rewrite and SSL modules which will allow the use of .htaccess files in web server document root path so we can force visitors to securely browse the website via the HTTPS protocol. The SSL module will secure the traffic between the server and your client browsers with a Self-Signed Certificate automatically issued by Apache. Enable Apache SSL configuration file in order for the SSL module to work properly. Execute the following command to activate all required configurations.<\/p>\n
a2enmod ssl rewrite<\/p>\n
a2ensite default-ssl.conf<\/p>\n
Next, open Apache default SSL site configuration file with a text editor and add the URL rewrite rules code lines after the DocumentRoot<\/em><\/strong> directive, as shown in the sample below.<\/p>\n nano \/etc\/apache2\/sites-enabled\/default-ssl.conf<\/p>\n SSL site configuration file excerpt:<\/p>\n Save and close the SSL Apache conf file and also open default vhost conf file for editing.\u00a0 Here, add the same URL rewrite rules as for SSL configuration file. Insert the lines of code after the DocumentRoot<\/strong> statement as shown in the example below.<\/p>\n nano \/etc\/apache2\/sites-enabled\/000-default.conf<\/p>\n 000-default.conf file excerpt:<\/p>\n In order to apply all the changes made so far you need to restart the Apache daemon by issuing the command below.<\/p>\n systemctl restart apache2<\/p>\n Before visiting your domain name or server IP address via a web browser opened in a computer at your premises, first add the required firewall rules to allow web traffic to pass the firewall. If your Debian server ships with UFW firewall application, you should add some new rules to allow HTTP\/S traffic to pass through the firewall by issuing the following commands.<\/p>\n ufw allow ‘WWW Full’<\/p>\n or<\/p>\n ufw allow 80\/tcp<\/p>\n ufw allow 443\/tcp<\/p>\n You should also allow SSH traffic to pass through UFW firewall in case of remote connections to the server.<\/p>\n ufw allow 22\/tcp<\/p>\n If your Debian server is behind an iptables<\/strong> firewall, add the following iptables raw rules to allow ports 80 and 443 inbound traffic to pass the firewall so that external visitors can browse the application.<\/p>\n apt-get install -y iptables-persistent<\/p>\n iptables -I INPUT -p tcp –destination-port 80 -j ACCEPT<\/p>\n iptables -I INPUT -p tcp –destination-port 443 -j ACCEPT<\/p>\n netfilter-persistent save<\/p>\n systemctl restart netfilter-persistent<\/p>\n systemctl status netfilter-persistent<\/p>\n systemctl enable netfilter-persistent.service<\/p>\n In case you\u2019re connected to the Debian server remotely via SSH, you should first add the below rule to allow SSH traffic to pass through iptables firewall. Otherwise, you will be locked up, because the firewall will start dropping all incoming traffic to port 22.<\/p>\n iptables -I INPUT -p tcp –destination-port 22 -j ACCEPT<\/p>\n netfilter-persistent save<\/p>\n systemctl restart netfilter-persistent<\/p>\n Finally, to test if you can reach Apache HTTP server from a remote computer in your LAN, open a browser and visit your domain name or IP address of the server via HTTPS protocol. To display the server IP address, execute ifconfig<\/strong> or ip a<\/strong> command in\u00a0the terminal. If your machine is a part of your internal infrastructure network and is hidden behind a NAT-ed network, execute the below command to get the public IP address.<\/p>\n curl ipinfo.io\/ip<\/p>\n Because you\u2019re using the automatically Self-Signed certificates pairs issued by Apache at installation, the certificate would be marked as untrusted by the browser and an error warning should be displayed in the browser.\u00a0 Hit on continue to bypass this warning, accept the untrusted certificate and continue to be redirected to Apache default web page.<\/p>\n https:\/\/yourdomain.tld<\/strong><\/em><\/p>\n So far, we\u2019ve only installed Apache web server and PHP interpreter in our Debian server. To complete the LAMP stack, needed to install Pydio file sharing solution, we need to install one final component that is missing: an RDBMS database backend.<\/p>\n In this tutorial, we\u2019ll install Pydio with MariaDB database server as backend. In MariaDB database, the Pydio application will store users, website configurations, and other various data. In order to install MariaDB database server and client and the PHP MySQL extension in Debian 9, issue the following command.<\/p>\n apt install mariadb-server mariadb-client php7.0-mysql<\/p>\n By default, the database root account can be accessed by supplying a password in Debian 9. To overcome this security issue and secure the database server, first log in to MySQL console and execute the following commands to secure the MariaDB root account.<\/p>\n mysql -h localhost<\/p>\n Welcome to the MariaDB monitor.\u00a0 Commands end with ; or \\g.<\/em><\/p>\n Your MariaDB connection id is 2<\/em><\/p>\n Server version: 10.1.26-MariaDB-0+deb9u1 Debian 9.1<\/em><\/p>\n Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/em><\/p>\n Type ‘help;’ or ‘\\h’ for help. Type ‘\\c’ to clear the current input statement.<\/em><\/p>\n MariaDB [(none)]> use mysql;<\/p>\n Reading table information for completion of table and column names<\/em><\/p>\n You can turn off this feature to get a quicker startup with -A<\/em><\/p>\n Database changed<\/em><\/p>\n MariaDB [mysql]> update user set plugin=” where user=’root’;<\/p>\n Query OK, 1 row affected (0.00 sec)<\/em><\/p>\n Rows matched: 1\u00a0 Changed: 1\u00a0 Warnings: 0<\/em><\/p>\n MariaDB [mysql]> flush privileges;<\/p>\n Query OK, 0 rows affected (0.00 sec)<\/em><\/p>\n MariaDB [mysql]> exit<\/p>\n On the next step, start to secure MariaDB server by executing the script\u00a0mysql_secure_installation<\/strong>. A series of questions designed to secure MariaDB database will be asked by this script. Answer with \u201cyes\u201d to all questions: remove anonymous users, disable remote root log in and delete the test database. Also, make sure you setup a strong password for database root account, as shown in the below excerpt.<\/p>\n mysql_secure_installation<\/em><\/p>\n ==========================================================================================<\/em><\/p>\n NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB<\/em><\/p>\n \u00a0\u00a0\u00a0\u00a0\u00a0 SERVERS IN PRODUCTION USE!\u00a0 PLEASE READ EACH STEP CAREFULLY!<\/em><\/p>\n In order to log into MariaDB to secure it, we’ll need the current<\/em><\/p>\n password for the root user.\u00a0 If you’ve just installed MariaDB, and<\/em><\/p>\n you haven’t set the root password yet, the password will be blank,<\/em><\/p>\n so you should just press enter here.<\/em><\/p>\n \u00a0<\/em><\/p>\n Enter current password for root (enter for none):<\/em><\/p>\n OK, successfully used password, moving on…<\/em><\/p>\n \u00a0<\/em><\/p>\n Setting the root password ensures that nobody can log into the MariaDB<\/em><\/p>\n root user without the proper authorisation.<\/em><\/p>\n \u00a0<\/em><\/p>\n You already have a root password set, so you can safely answer ‘n’.<\/em><\/p>\n Change the root password? [Y\/n]\u00a0y<\/strong><\/em><\/p>\n New password:<\/em><\/p>\n Re-enter new password:<\/em><\/p>\n Password updated successfully!<\/em><\/p>\n Reloading privilege tables..<\/em><\/p>\n \u00a0… Success!<\/em><\/p>\n \u00a0<\/em><\/p>\n By default, a MariaDB installation has an anonymous user, allowing anyone<\/em><\/p>\n to log into MariaDB without having to have a user account created for<\/em><\/p>\n them.\u00a0 This is intended only for testing, and to make the installation<\/em><\/p>\n go a bit smoother.\u00a0 You should remove them before moving into a<\/em><\/p>\n production environment.<\/em><\/p>\n \u00a0<\/em><\/p>\n Remove anonymous users? [Y\/n]\u00a0y<\/strong><\/em><\/p>\n \u00a0… Success!<\/em><\/p>\n \u00a0<\/em><\/p>\n Normally, root should only be allowed to connect from ‘localhost’.\u00a0 This<\/em><\/p>\n ensures that someone cannot guess at the root password from the network.<\/em><\/p>\n \u00a0<\/em><\/p>\n Disallow root login remotely? [Y\/n]\u00a0y<\/strong><\/em><\/p>\n \u00a0… Success!<\/em><\/p>\n \u00a0<\/em><\/p>\n By default, MariaDB comes with a database named ‘test’ that anyone can<\/em><\/p>\n access.\u00a0 This is also intended only for testing, and should be removed<\/em><\/p>\n before moving into a production environment.<\/em><\/p>\n \u00a0<\/em><\/p>\n Remove test database and access to it? [Y\/n]\u00a0y<\/strong><\/em><\/p>\n \u00a0– Dropping test database…<\/em><\/p>\n \u00a0… Success!<\/em><\/p>\n \u00a0– Removing privileges on test database…<\/em><\/p>\n \u00a0… Success!<\/em><\/p>\n \u00a0<\/em><\/p>\n Reloading the privilege tables will ensure that all changes made so far<\/em><\/p>\n will take effect immediately.<\/em><\/p>\n \u00a0<\/em><\/p>\n Reload privilege tables now? [Y\/n] y<\/strong><\/em><\/p>\n \u00a0… Success!<\/em><\/p>\n Cleaning up…<\/em><\/p>\n All done!\u00a0 If you’ve completed all of the above steps, your MariaDB<\/em><\/p>\n installation should now be secure.<\/em><\/p>\n Thanks for using MariaDB!<\/em><\/p>\n ======================================================================================<\/p>\n After the script completes, try to log in to the database from console with no root password. The access to the database should be denied if no password is provided for the root account, as illustrated in the below command excerpt:<\/p>\n mysql -h localhost -u root<\/p>\n If the password is supplied, the log in process should be granted to MySQL console, as shown in the command sample. Type exit to leave the database console.<\/p>\n mysql -h localhost -u root -p<\/p>\n Enter password:<\/p>\n Welcome to the MariaDB monitor.\u00a0 Commands end with ; or \\g.<\/p>\n Your MariaDB connection id is 15<\/p>\n Server version: 10.1.26-MariaDB-0+deb9u1 Debian 9.1<\/p>\n Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n Type ‘help;’ or ‘\\h’ for help. Type ‘\\c’ to clear the current input statement.<\/p>\n MariaDB [(none)]> exit<\/strong><\/p>\n Bye<\/p>\n Next, open PHP default configuration file for editing and change the following PHP variables as described below. Set the PHP timezone<\/strong> setting to match your system geographical location. The PHP date.timezone<\/em><\/strong> variable can be found by consulting the list of time zones provided by PHP docs at the following link http:\/\/php.net\/manual\/en\/timezones.php<\/a>\u00a0<\/p>\n First, make a backup of the PHP configuration file.<\/p>\n cp \/etc\/php\/7.0\/apache2\/php.ini{,.backup}<\/p>\n nano \/etc\/php\/7.0\/apache2\/php.ini<\/p>\n Search, edit and change the following variables in the php.ini<\/strong> configuration file:<\/p>\n file_uploads = On<\/p>\n memory_limit = 128M<\/p>\n post_max_size = 80M<\/p>\n upload_max_filesize = 80M<\/p>\n output_buffering = 0<\/p>\n date.timezone = Europe\/London<\/p>\n You should increase upload_max_file_size<\/strong> variable in PHP configuration file in order to support large file attachments.<\/p>\n You should also add OPCache plugin configurations for PHP7 in order to increase the load speed of the web application. Edit php.ini file and append the following lines of code at the bottom of the file, under the [opcache]<\/em><\/strong> statement, as detailed below:<\/p>\n nano \/etc\/php\/7.0\/apache2\/php.ini<\/p>\n After you\u2019ve added all the code lines described below, close the php.ini<\/em><\/strong> configuration file and check if the OPCache variables had been correctly added by issuing the following command.<\/p>\n grep opcache\u00a0 \/etc\/php\/7.0\/apache2\/php.ini<\/p>\n In order to encrypt and protect Pydio files via PHP encoding, install Ioncube software on your Debian server by issuing the following commands:<\/p>\n wget https:\/\/downloads.ioncube.com\/loader_downloads\/ioncube_loaders_lin_x86-64.tar.gz<\/p>\n tar xfz ioncube_loaders_lin_x86-64.tar.gz<\/p>\n cp ioncube\/ioncube_loader_lin_7.0.so \/usr\/lib\/php\/20151012\/<\/p>\n Then, edit the ioncube configuration file and add the following line.<\/p>\n nano \/etc\/php\/7.0\/apache2\/conf.d\/00-ioncube.ini<\/p>\n 00-ioncube.ini<\/strong> file excerpt:<\/p>\n Restart Apache server to apply the Ioncube extension.<\/p>\n systemctl restart apache2<\/p>\n As the final step in configuring LAMP stack, create a PHP info file in web server webroot path by executing the following command.<\/p>\n echo ‘<?php phpinfo(); ?>’| tee \/var\/www\/html\/info.php<\/p>\n Visit the PHP info script file from a browser at the following URL, and check if Ioncube Zend has been successfully loaded and, also, scroll down to date<\/strong> setting to check PHP time zone configuration. The timezone settings should reflect your PHP geographical location configured earlier.<\/p>\n https:\/\/domain.tld\/info.php<\/em><\/strong><\/p>\n Now that all system requirements have been met for installing Pydio community software, open a browser and navigate to Pydio official download page at https:\/\/pydio.com\/en\/community<\/a> and copy the download link in order to grab the latest zip archive in your system via the wget utility.<\/p>\n wget https:\/\/download.pydio.com\/pub\/core\/archives\/pydio-core-8.0.2.zip<\/p>\n After Pydio zip archive download finishes, extract the zip archive file to your current working directory and list the extracted files with the ls command.<\/p>\n unzip pydio-core-8.0.2.zip<\/p>\n ls<\/p>\n Next, remove the default index.html file installed by the Apache web server to webroot path and also delete the info.php file created earlier.<\/p>\n rm \/var\/www\/html\/index.html<\/p>\n rm \/var\/www\/html\/public\/info.php<\/p>\n Copy Pydio installation files located in your current working directory in pydio-core-8.0.2\/<\/strong> directory. Issue ls<\/strong> command to list this directory files for hidden files. Copy all the content of the extracted directory to your web server document root path by issuing the following command. Also, make sure you copy the hidden file .htaccess<\/em> to webroot path.<\/p>\n ls -al pydio-core-8.0.2<\/p>\n cp -rf pydio-core-8.0.2\/* \/var\/www\/html\/<\/p>\n cp pydio-core-8.0.2\/.htaccess \/var\/www\/html\/<\/p>\n chown -R www-data:www-data \/var\/www\/html\/<\/p>\n ls -al \/var\/www\/html\/<\/p>\n Next, open Pydio bootstrap_conf.php<\/strong> configuration file located in the webroot path and modify the below lines, as shown in the below file excerpt:<\/p>\n nano \/var\/www\/html\/conf\/bootstrap_conf.php<\/p>\n \u00a0bootstrap_conf.php<\/strong> file sample:<\/p>\n In the next step, log in to MariaDB database console and create the Pydio application database. Also, add a new MySQL user for managing Pydio database and setup a strong password for this user. Issue the below commands to create database and user and make sure you replace the database name, user and password used in this guide with your own settings.<\/p>\n mysql \u2013u root -p<\/p>\n Welcome to the MariaDB monitor.\u00a0 Commands end with ; or \\g.<\/p>\n Your MariaDB connection id is 305<\/p>\n Server version: 10.1.26-MariaDB-0+deb9u1 Debian 9.1<\/p>\n Copyright (c) 2000, 2017, Oracle, MariaDB Corporation Ab and others.<\/p>\n Type ‘help;’ or ‘\\h’ for help. Type ‘\\c’ to clear the current input statement.<\/p>\n MariaDB [(none)]> CREATE DATABASE pydio_db;<\/p>\n Query OK, 1 row affected (0.00 sec)<\/p>\n MariaDB [(none)]> grant all privileges on pydio_db.* to ‘pydio_user’@’localhost’ identified by ‘mypass123’;<\/p>\n Query OK, 0 rows affected (0.00 sec)<\/p>\n MariaDB [(none)]> flush privileges;<\/p>\n Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> exit<\/p>\n On the next installation screen, add an Application Title and the Welcome Message for Pydio application and hit on Next button to move to the next configuration screen.<\/p>\n Next, add your Pydio application administrator name and full name. Supply and confirm a strong password for admin account and hit on Next button to move to the next configuration screen.<\/p>\n In the next screen, configure database connection settings. Select MySQL as database type, use localhost as database host and add Pydio database name, user and password created earlier in order to connect to the database. Hit on the Test DB Connection button to log in to Pydio database and move forward with the installation process.<\/p>\n In advanced options screen, change application encoding dataset and server URL address if they weren\u2019t correctly detected, enable the cache setting, add your email address and default language and hit on Install Pydio button to start the installation.<\/p>\n After the installation process completes, the install wizard will automatically redirect you to Pydio Login page form. Supply the application admin username and password configured during the installation process in order to log in to Pydio dashboard.<\/p>\n You can also log in to Pydio web sharing application by visiting your domain name or server IP address via HTTPS protocol.<\/p>\n https:\/\/www.yourdomain.tld<\/em><\/strong><\/p>\n After logging in to Pydio admin dashboard, you can follow the wizard tour that will pop-up in order to quickly learn how to manage application via the web admin panel.<\/p>\n Some visitors might browse Pydio application in an unsecured way via HTTP protocol. In order to force all visitors to securely browse Pydio interface via HTTPS protocol go back to your server\u2019s console and edit the .htaccess<\/em> file located in web root directory by issuing the following command.<\/p>\n nano \/var\/www\/html\/public\/.htaccess<\/p>\n Once the .htaccess file is opened for editing, search for the line that starts with RewriteEngine on<\/em><\/strong> and add the below redirect rules under this line.<\/p>\n Also, if you want to change PHP server settings, so that you can increase file upload sizes or other PHP variables, append the below lines to the bottom of .htaccess file, as shown in the below excerpt.<\/p>\n Congratulations! You have successfully installed Pydio file sync and sharing application in Debian 9 server. For other special types of installation procedures and configurations regarding the application, visit the Pydio documentation page at the following address: https:\/\/pydio.com\/en\/docs\/administration-guides<\/a>\u00a0<\/p>\n Share this page:<\/b><\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":" Pydio is a powerful open source web file sync and file share solution software for online collaboration, similar to Gdrive or other online file-sharing services.\u00a0Mostly written in PHP programming language and Ajax, Pydio can be installed on a Linux virtual private server or physical server under Apache\/Nginx web servers, PHP and MySQL\/MariaDB database management system …<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[],"class_list":["post-3199","post","type-post","status-publish","format-standard","hentry","category-36"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/3199","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=3199"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/3199\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=3199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=3199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=3199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}DocumentRoot \u00a0\/var\/www\/html
DocumentRoot \u00a0\/var\/www\/html
Configure the Firewall<\/h2>\n
![\"Certificate](\"https:\/\/www.howtoforge.com\/images\/install_pydio_web_file_share_solution_in_debian_9\/big\/Capture.PNG\" "\\"\\"")
<\/a><\/p>\nInstall MariaDB<\/h2>\n
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)<\/em><\/pre>\n
Adjust PHP settings<\/h2>\n
[opcache]
zend_extension=ioncube_loader_lin_7.0.so<\/pre>\n
Download and Install Pydio<\/h2>\n
setlocale(LC_ALL, \"en_US.UTF-8\");
<\/a><\/p>\n
<\/em><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n<\/a><\/p>\n# Redirect to HTTPS
php_value upload_max_filesize 50M