Installing Flarum on Amazon AWS

webeindustry

Wait, you used my install script? Why would you be mucking with the default config file if you used the install script?
Do you not have a config file specifically for the site?

InderdeepSBajwa

webeindustry Yes there is. However I was not able to reach the form, so I though changing the root folder in Nginx would do the job. Am I doing something wrong? May you please help me this?

webeindustry

InderdeepSBajwa

Yea I would delete the default config file, it's kinda out of order and going to conflict with your flarum config file.

Paste your flarum config file. If I'm understanding you correctly, you installed flarum with the script, wanted to get SSL, followed a guide that showed using the default config file, issued the cert, then the forum broke. Is that correct?

We want to work within the flarum config file, and adapt it to use SSL. I can help you with this.

InderdeepSBajwa

webeindustry Yes you get it absolutely right. I broke it exactly the way you said.
Here's the file :

server {
  listen 80;

        server_name forum.desktopluxury.com;
        location / {
      return https://$host$request_uri;
  }
       }

server {
        server_name  forum.desktopluxury.comg;
        root /var/www/forum.desktopluxury.com;
index index.php index.html index.htm;

    # SSL configuration

    listen 443 ssl default_server;
    listen [::]:443 ssl default_server;
    include snippets/snakeoil.conf;
    include snippets/ssl-params.conf;

  root /var/www/forum.desktopluxury.com;
  index index.php index.html index.htm;
  error_log /var/log/nginx/error.log error;

  server_name forum.desktopluxury.com;




    location / { try_files $uri $uri/ /index.php?$query_string; }
    location /api { try_files $uri $uri/ /api.php?$query_string; }
    location /admin { try_files $uri $uri/ /admin.php?$query_string; }

    location /flarum {
        deny all;
        return 404;
    }

    location ~ .php$ {
        fastcgi_split_path_info ^(.+.php)(/.+)$;
        fastcgi_pass unix:/var/run/php7-fpm.forum.desktopluxury.com.sock;
        fastcgi_index index.php;
        include fastcgi_params;



        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }

    location ~* \.html$ {
        expires -1;
    }

    location ~* \.(css|js|gif|jpe?g|png)$ {
        expires 1M;
        add_header Pragma public;
        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
    }

    gzip on;
    gzip_http_version 1.1;
    gzip_vary on;
    gzip_comp_level 6;
    gzip_proxied any;
    gzip_types application/atom+xml
               application/javascript
               application/json
               application/vnd.ms-fontobject
               application/x-font-ttf
               application/x-web-app-manifest+json
               application/xhtml+xml
               application/xml
               font/opentype
               image/svg+xml
               image/x-icon
               text/css
               text/plain
               text/xml;
    gzip_buffers 16 8k;
    gzip_disable "MSIE [1-6]\.(?!.*SV1)";


}

webeindustry

No no! Not that file. That has sensitive information.

That script should have created a file /etc/nginx/sites-enabled/forum.desktopluxury.com

Do you have this file? We need the contents of THAT file.

It's okay I got this. Hold up for 2 minutes. I think you've given me all the information I need to make you a complete config file.

InderdeepSBajwa

webeindustry Yes I realized that later that I posted the DB info config file. I apologize to myself for that and the answer has been updated.

webeindustry

So delete the default config file .../sites-enabled/default and make the /etc/nginx/sites-enabled/forum.desktopluxlury.com file have this contents exactly

Then issue nginx -t to see if it success, if not paste the fail, else service nginx restart


server {
  listen 80;

  server_name forum.desktopluxury.com;
      location / {
      return https://$host$request_uri;
  }
       }

server {


  listen 443 ssl http2;
  listen [::]:443 ssl http2;

  include snippets/ssl-forum.desktopluxury.com.conf;
  include snippets/ssl-params.conf;

  root /var/www/forum.desktopluxury.com;
  index index.php index.html index.htm;
  error_log /var/log/nginx/error.log error;

  server_name forum.desktopluxury.com;

location ~ /\.
         {
             deny all;
         }

    location ~ /(\.htaccess|\.git|composer\.(json|lock)) {
        return 404;
    }


    location / { try_files $uri $uri/ /index.php?$query_string; }
    location /api { try_files $uri $uri/ /api.php?$query_string; }
    location /admin { try_files $uri $uri/ /admin.php?$query_string; }

    location /flarum {
        deny all;
        return 404;
    }

    location ~ .php$ {
        fastcgi_split_path_info ^(.+.php)(/.+)$;
        fastcgi_pass unix:/var/run/php7-fpm.forum.desktopluxury.com;
        fastcgi_index index.php;
        include fastcgi_params;



        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }

    location ~* \.html$ {
        expires -1;
    }


    location ~* \.(css|js|gif|jpe?g|png)$ {
        expires 1M;
        add_header Pragma public;
        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
    }

    gzip on;
    gzip_http_version 1.1;
    gzip_vary on;
    gzip_comp_level 6;
    gzip_proxied any;
    gzip_types application/atom+xml
               application/javascript
               application/json
               application/vnd.ms-fontobject
               application/x-font-ttf
               application/x-web-app-manifest+json
               application/xhtml+xml
               application/xml
               font/opentype
               image/svg+xml
               image/x-icon
               text/css
               text/plain
               text/xml;
    gzip_buffers 16 8k;
    gzip_disable "MSIE [1-6]\.(?!.*SV1)";


}

InderdeepSBajwa

webeindustry Thank you so much for investing you time helping me. Your help was really helpful. Deleting the ~~~ /etc/nginx/sites-available/default~~ ~ and updating /forum.desktopluxury.com with the SSL configurations did the job.

If this could help in developing Flarum, I'd like to publish what I have right now in the /sites-avaliable/forum.desktopluxury.com


server {
  listen 80;

        server_name forum.desktopluxury.com;
        location / {
      return https://$host$request_uri;
  }
       }

server {

        server_name  forum.desktopluxury.com;
        root /var/www/forum.desktopluxury.com;
index index.php index.html index.htm;

    # SSL configuration

    listen 443 ssl default_server;
    listen [::]:443 ssl default_server;
    include snippets/ssl-forum.desktopluxury.com.conf;
    include snippets/ssl-params.conf;

  server_name forum.desktopluxury.com;




    location / { try_files $uri $uri/ /index.php?$query_string; }
    location /api { try_files $uri $uri/ /api.php?$query_string; }
    location /admin { try_files $uri $uri/ /admin.php?$query_string; }

    location /flarum {
        deny all;
        return 404;
    }

    location ~ .php$ {
        fastcgi_split_path_info ^(.+.php)(/.+)$;
        fastcgi_pass unix:/var/run/php7-fpm.forum.desktopluxury.com.sock;
        fastcgi_index index.php;
        include fastcgi_params;



        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    }

    location ~* \.html$ {
        expires -1;
    }

    location ~* \.(css|js|gif|jpe?g|png)$ {
        expires 1M;
        add_header Pragma public;
        add_header Cache-Control "public, must-revalidate, proxy-revalidate";
    }

    gzip on;
    gzip_http_version 1.1;
    gzip_vary on;
    gzip_comp_level 6;
    gzip_proxied any;
    gzip_types application/atom+xml
               application/javascript
               application/json
               application/vnd.ms-fontobject
               application/x-font-ttf
               application/x-web-app-manifest+json
               application/xhtml+xml
               application/xml
               font/opentype
               image/svg+xml
               image/x-icon
               text/css
               text/plain
               text/xml;
    gzip_buffers 16 8k;
    gzip_disable "MSIE [1-6]\.(?!.*SV1)";


}

InderdeepSBajwa

webeindustry Another error here!


Your connection is not secure

The owner of forum.desktopluxury.com has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.

webeindustry

InderdeepSBajwa

Firefox has issues with mixed protocols being displayed on site.

Try with chrome and see if you get the green lock. Inspect the page for links that are http only.

InderdeepSBajwa

webeindustry Restarting into Windows made a lag in time settings of my computer which made the connection insecure due to interval in server time, maybe.

Now fixed. Thanks again!

MikeJones

0E800 If I registered a domain name do I need to set it up first before running the script?

Frink

MikeJones I think you should, because LetsEncrypt will require verification for the domain name

MikeJones

0E800 To test, just create a new free-tier Ubuntu 16.04 EC2 instance. SSH to it and type the following:

I just spun up my AWS server (getting excited), is there a specific place I should run this command in the directories?

Also is there anything else I should do first? I did register a domain name but having trouble figuring out how to tie it together.

I tried following this here:

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/set-hostname.html

But I do not have anything at: /etc/sysconfig/network

0E800

MikeJones
Wherever you registered your domain name, you point that to your AWS instance.

I would practice installing and destroying a instance or two while you get the hang of using Flarum and getting accustomed to AWS and domain registration before you set it up as a production server .

Create instance
You will need to enable http and https as I believe ssh is already enabled by default.

Run the script , I believe you need to use the sudo command.

Name the server the IP of your instance
You can always change it later. I'm not sure if your using a dynamic or static instance , most likely when you reboot your server it won't come back with the same IP .

Review :
https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/routing-to-ec2-instance.html

« Previous Page