Openlitespeed possible?

ananda

Hello,

I’ve tried installing Flarum on OpenLiteSpeed with the following configuration:
Enable Rewrite: Yes
Auto Load from .htaccess: No

Context Static Rewrite Rules:
RewriteEngine On
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

Is this the correct way to set it up?

The problem is that OpenLiteSpeed runs as the user nobody, which has no shell access. So whenever I want to install an extension, I have to do something like this:

chown -R myuser:myuser flarum/
composer require flarum/some-extension
composer install --no-dev --optimize-autoloader
/usr/local/lsws/lsphp83/bin/php flarum cache:clear
chown -R nobody:nogroup flarum/

Is there a better way to handle this on OpenLiteSpeed?

clarkwinkelmann

ananda do you have access to the su shell command? It would allow you to switch which user you interact as, and run Composer directly as the nobody user.

Or the opposite, is there any way to change the user the webserver runs as to be the same as the shell user?

A last option would be to chmod the files to 755 or 777 (should be avoided unless absolutely necessary). If you don't use the package manager but only Composer over the command line, the Composer files don't have to belong to the webserver user, you just need to make sure the webserver can read them. The problem here is usually the cache clear command which would mess up the file permissions. If you only clear the cache via the web interface, it should work fine. If you do need to clear the cache over the command line, either switch user with su or chown the storage folder again to make sure permissions are correct.

ananda

root@psst:~$ su nobody
This account is currently not available.

The default OpenLiteSpeed nobody user has no shell access for security reasons.
It seems that I could change the default OLS user/group in the server configuration, but only globally – which isn’t an option for me since I have multiple vhosts running.

~~I guess I’ll just have to write a small script or alias to handle all the necessary commands. Other than that, it’s running well so far.~~

Edit:
It is possible to run commands through it with "sudo -u nobody composer require ......"

I’m not sure if I should set Auto Load from .htaccess to Yes and remove the static context rewrite rules.