Présentation d'installation d'un serveur EtherPad sur debian 9.
Dans cette présentation, nous allons configurer un site https://pad.sleto.net.
Nous utiliserons les variables DBNAME, DBUSER et DBPASSWD respectivement pour le nom, l'utilisateur et le mot de passe de base de données.
Utilise un Serveur web sécurisé (Nginx / Let's Encrypt).
Nécessite également les outils :
sudo apt-get install -y postgresql postgresql-contrib supervisor git
Vous devrez également ajouter le domaine pad.sleto.net dans le Serveur DNS (bind9)
Nous allons créé une base de donnée PostgreSQL:
sudo -u postgres psql -c "CREATE USER $DBUSER;" sudo -u postgres psql -c "ALTER USER $DBUSER PASSWORD '$DBPASSWD';" sudo -u postgres psql -c "CREATE DATABASE $DBNAME OWNER $DBUSER;"
Création d'un utilisateur etherpad:
adduser --system --home /opt/etherpad --shell /bin/bash --disabled-password --quiet etherpad install -d -m 755 -o $DBUSER /opt/etherpad
Ecrire le fichier /tmp/settings.json (attention de bien remplacer $DBNAME, $DBUSER et $DBPASSWD):
{
"title": "Éditeur text",
"favicon": "favicon.ico",
"ip": "0.0.0.0",
"port" : 9001,
"showSettingsInAdminPage" : true,
"dbType" : "postgres",
"dbSettings" : {
"user" : "$DBUSER",
"host" : "localhost",
"port" : 5432,
"password": "$DBPASSWD",
"database": "$DBNAME",
"charset" : "utf8mb4"
},
"defaultPadText" : "Bienvenu dans l'éditeur de text.",
"padOptions": {
"noColors": false,
"showControls": true,
"showChat": true,
"showLineNumbers": true,
"useMonospaceFont": false,
"userName": false,
"userColor": false,
"rtl": false,
"alwaysShowChat": false,
"chatAndUsers": false,
"lang": "fr-FR"
},
"padShortcutEnabled" : {
"altF9" : true, /* focus on the File Menu and/or editbar */
"altC" : true, /* focus on the Chat window */
"cmdShift2" : true, /* shows a gritter popup showing a line author */
"delete" : true,
"return" : true,
"esc" : true, /* in mozilla versions 14-19 avoid reconnecting pad */
"cmdS" : true, /* save a revision */
"tab" : true, /* indent */
"cmdZ" : true, /* undo/redo */
"cmdY" : true, /* redo */
"cmdI" : true, /* italic */
"cmdB" : true, /* bold */
"cmdU" : true, /* underline */
"cmd5" : true, /* strike through */
"cmdShiftL" : true, /* unordered list */
"cmdShiftN" : true, /* ordered list */
"cmdShift1" : true, /* ordered list */
"cmdShiftC" : true, /* clear authorship */
"cmdH" : true, /* backspace */
"ctrlHome" : true, /* scroll to top of pad */
"pageUp" : true,
"pageDown" : true
},
"suppressErrorsInPadText" : false,
"requireSession" : false,
"editOnly" : true,
"sessionNoPassword" : false,
"minify" : true,
"maxAge" : 21600, // 60 * 60 * 6 = 6 hours
"abiword" : null,
"soffice" : null,
"tidyHtml" : null,
"allowUnknownFileEnds" : true,
"requireAuthentication" : false,
"requireAuthorization" : false,
"trustProxy" : true,
"disableIPlogging" : false,
"automaticReconnectionTimeout" : 0,
"scrollWhenFocusLineIsOutOfViewport": {
"percentage": {
"editionAboveViewport": 0,
"editionBelowViewport": 0
},
"duration": 0,
"scrollWhenCaretIsInTheLastLineOfViewport": false,
"percentageToScrollWhenUserPressesArrowUp": 0
},
"users": {
"admin": {
// "password" can be replaced with "hash" if you install ep_hash_auth
"password": "$DBPASSWD",
"is_admin": true
},
},
"socketTransportProtocols" : ["xhr-polling", "jsonp-polling", "htmlfile"],
"loadTest": false,
"loglevel": "INFO",
"logconfig" :
{ "appenders": [
{ "type": "console"
//, "category": "access"// only logs pad access
},
{ "type": "file"
, "filename": "/var/log/etherpad-lite/etherpad.log"
, "maxLogSize": 1024
, "backups": 3 // how many log files there're gonna be at max
//, "category": "test" // only log a specific category
}
]
} // logconfig
}
Installation de l'outil:
date | base64 > /tmp/APIKEY.txt su - etherpad <<EOF node --version git clone git://github.com/ether/etherpad-lite.git ~/etherpad-lite cp /tmp/settings.json ~/etherpad-lite/ cp /tmp/APIKEY.txt ~/etherpad-lite/ ~/etherpad-lite/bin/installDeps.sh EOF
Créer le fichier de gestion de service /etc/systemd/system/etherpad.service:
[Unit] Description=Etherpad-lite, the collaborative editor. After=syslog.target [Service] Type=simple User=etherpad Group=nogroup WorkingDirectory=/opt/etherpad/etherpad-lite Environment=NODE_ENV=production ExecStart=/usr/bin/node /opt/etherpad/etherpad-lite/src/node/server.js Restart=always [Install] WantedBy=multi-user.target
Et l'instruction:
systemctl daemon-reload systemctl start etherpad.service systemctl enable etherpad.service
Créer un fichier /opt/etherpad/nginx-pad:
server {
listen 80;
server_name pad.sleto.net;
return 301 https://$host$request_uri;
}
server {
listen 443 ssl;
server_name pad.sleto.net;
access_log /var/log/nginx/pad.sleto.net.access.log;
error_log /var/log/nginx/pad.sleto.net.error.log;
include /opt/ssl/pad.sleto.net.conf;
location / {
proxy_pass http://localhost:9001;
rewrite /pad(/.*)$ $1 break;
proxy_redirect off;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
proxy_http_version 1.1;
proxy_connect_timeout 90;
proxy_send_timeout 90;
proxy_read_timeout 90;
proxy_buffers 32 4k;
proxy_intercept_errors on;
}
}
Notons que /opt/ssl/pad.sleto.net.conf contiendra les informations relatives aux clefs privé et public HTTPS/SSL (voir Serveur web sécurisé (Nginx / Let's Encrypt)).
Activer la configuration web par:
ln -sf /opt/$DBUSER/nginx-pad /etc/nginx/sites-enabled
Pour rafraîchir les services nginx
service nginx restart