OpenProject Install

iramireze · May 30, 2023, 2:42am

Hi -

I’m trying to install OpenOffice using DEB/RPM (Install OpenProject with DEB/RPM packages), but don’t know how to create templates for its subdomain.

There is a “guide” on addon-apache2/conf at master · pkgr/addon-apache2 · GitHub of specific templates fr OpenProject, but can’t figure out how to make the work.

As starting point, instructions says: web server such as Apache2 or Nginx to function as the web server forwarding to our internal server listening at localhost:6000 by proxying.

Can anyone help me please?

Thanks in advance…

eris · May 30, 2023, 5:37am

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/cp.tpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%proxy_port%;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
        
    include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;

    location / {
    return 301 https://%domain_idn%/;
    }

    location /error/ {
        alias   %home%/%user%/web/%domain%/document_errors/;
    }

This file has been truncated. show original

and

github.com

jaapmarcus/web-templates/blob/master/templates/nginx/cp.stpl

#=======================================================================#
# Default Web Domain Template                                           #
# DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS #
#=======================================================================#

server {
    listen      %ip%:%proxy_ssl_port% ssl http2;
    server_name %domain_idn% %alias_idn%;
    index       index.php index.html index.htm;
    ssl_certificate      %ssl_pem%;
    ssl_certificate_key  %ssl_key%;
    ssl_stapling on;
    ssl_stapling_verify on;
    error_log  /var/log/%web_system%/domains/%domain%.error.log error;

    include %home%/%user%/conf/web/%domain%/nginx.hsts.conf*;

    location / {
        proxy_pass      https://%ip%:8083;
    }

This file has been truncated. show original

But change:

github.com

jaapmarcus/web-templates/blob/46d943839811454fe1923e1c8f48189a8868d783/templates/nginx/cp.stpl#LL18C4-L21C1


      
          location / {
              proxy_pass      https://%ip%:8083;
          }

to

proxy_pass http://%ip%:6000;

iramireze · May 30, 2023, 5:29pm

Hi @eris -

Thanks for your kind and quick response. I tried to follow your recommendation, but I’m not sure what’s wrong.

I found openproject templates under /usr/local/hestia/data/templates/web/nginx/php-fpm folder.
Copied those templates (openproject.tpl and openproject.stpl) to /usr/local/hestia/data/templates/web/nginx/.
Selected openproject template in webpanel for the Proxy Template and Save.
Rebuilt user with v-rebuild-user CLI.

Still there is no success to get into the OpenProject web interface.

Can you please advice me?

Thanks in advance…

eris · May 30, 2023, 6:12pm

You can’t use templates from /usr/local/hestia/data/templates/web/nginx/php-fpm

and use it for: /usr/local/hestia/data/templates/web/nginx/

github.com

hestiacp/hestiacp/blob/35866300bbf1d0082f910485c430a89de228998a/install/deb/templates/web/nginx/php-fpm/openproject.stpl#L8


      
          #=========================================================================#
          # Default Web Domain Template                                             #
          # DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS   #
          # https://hestiacp.com/docs/server-administration/web-templates.html      #
          #=========================================================================#
          
          
server {
              listen      %ip%:%web_ssl_port% ssl http2;
              server_name %domain_idn% %alias_idn%;
              root        %sdocroot%;
              index       index.php index.html index.htm;
              access_log  /var/log/nginx/domains/%domain%.log combined;
              access_log  /var/log/nginx/domains/%domain%.bytes bytes;
              error_log   /var/log/nginx/domains/%domain%.error.log error;
          
          
    ssl_certificate      %ssl_pem%;
              ssl_certificate_key  %ssl_key%;
              ssl_stapling on;

Needs to replaced with proxy_ssl_port

and same for

github.com

hestiacp/hestiacp/blob/35866300bbf1d0082f910485c430a89de228998a/install/deb/templates/web/nginx/php-fpm/openproject.tpl#L8


      
          #=========================================================================#
          # Default Web Domain Template                                             #
          # DO NOT MODIFY THIS FILE! CHANGES WILL BE LOST WHEN REBUILDING DOMAINS   #
          # https://hestiacp.com/docs/server-administration/web-templates.html      #
          #=========================================================================#
          
          
server {
              listen      %ip%:%web_port%;
              server_name %domain_idn% %alias_idn%;
              root        %docroot%;
              index       index.php index.html index.htm;
              access_log  /var/log/nginx/domains/%domain%.log combined;
              access_log  /var/log/nginx/domains/%domain%.bytes bytes;
              error_log   /var/log/nginx/domains/%domain%.error.log error;
          
          
    include %home%/%user%/conf/web/%domain%/nginx.forcessl.conf*;
          
          
    location / {

proxy_port

For the rest it should work fine

iramireze · May 30, 2023, 8:22pm

Thank you @eris again for your help,

It seems there is something missing. Using the OpenProject instructions and skipping the Apache2 installation, they suggest to use an Apache config file as follows:

<VirtualHost *:80>
    ServerName openproject.example.com
    redirect permanent / https://openproject.example.com/
</VirtualHost>

<VirtualHost *:443>
    #
    # SSL Start
    #

    SSLEngine On
#    SSLCertificateChainFile /etc/apache2/ssl/cdc_ca.cert.pem
    SSLCertificateFile /etc/letsencrypt/live/openproject.example.com/cert.pem
    SSLCertificateKeyFile /etc/letsencrypt/live/openproject.example.com/privkey.pem
    SSLCertificateChainFile /etc/letsencrypt/live/openproject.example.com/fullchain.pem

    # Set Forwarded protocol header to proxy
    # otherwise OpenProject doesn't know we're terminating SSL here.
    RequestHeader set X_FORWARDED_PROTO 'https'

    #
    # SSL End
    #

    ServerName      openproject.example.com
    ServerAdmin     [email protected]
    DocumentRoot    /opt/openproject/public

    # Proxy requests to localhost:6000 (puma)
    ProxyRequests off
    ProxyPass / http://127.0.0.1:6000/ retry=0
    ProxyPassReverse / http://127.0.0.1:6000/


    # Disallow internal API for external use
    # (used for repository authenticiation, if any)
    <LocationMatch "^/sys">
      <IfModule mod_authz_core.c>
	      Require local
      </IfModule>

      <IfModule !mod_authz_core.c>
        Order Deny,Allow
        Deny from all
        Allow from 127.0.0.1
      </IfModule>
    </LocationMatch>

  # Configure assets and uploads
  Alias /assets /opt/openproject/public/assets
  Alias /uploads /opt/openproject/public/uploads
  <Directory "/opt/openproject/public">
    Options -Indexes
    <IfModule mod_authz_core.c>
      # apache 2.4+
      Require all granted
    </IfModule>

    <IfModule !mod_authz_core.c>
      Order deny,allow
      Allow from all
    </IfModule>
  </Directory>

   # Don't pass assets through proxy but deliver them through apache
   ProxyPass /assets/ !
   <Location /assets/>
     # Avoid using mtime or inode information for ETag
     FileETag Size
     ExpiresActive On ExpiresDefault "access plus 1 year"
   </Location>

    # Send expiry headers for assets, that carry an asset id. Assuming, an asset
    # id is a unix timestamp, which is currently a 10 digit integer. This might
    # change in the far future.
    <FilesMatch "\.(ico|pdf|flv|jpg|jpeg|png|gif|js|css|swf)$">
      ExpiresActive On
      ExpiresDefault "access plus 1 year"
    </FilesMatch>

    # Enabling compression for common text formats
    AddOutputFilterByType DEFLATE text/html text/css application/x-javascript application/javascript

    ErrorLog    /var/log/apache2/openproject.example.com-error.log
</VirtualHost>

Is there any way to fulfill this with a template?

Thanks again…!!!

Hedy · June 8, 2023, 10:01am

Hi !
I also try to install OpenProject under HestiaCP.
Do you finally found what was going wrong with your installation ?

iramireze · June 8, 2023, 1:52pm

Hi @Hedy -

Thanks for your communication. Unfortunately, no. There is no way to put all the OpenProject files in the /home/{user}/web/{domain}/public_html folder…

We are still researching. If we found how to, we’ll let you know…

Hedy · June 8, 2023, 3:36pm

Thanks !
That’s will be annoying if we can’t do it…
I will tell you if I get the solution before you

Hedy · August 15, 2023, 12:10pm

OpenProject working beside HestiaCP with Docker.
I have to find the way to personalize URL (with subdomain, and not IP address), port and some fine tuning, but it’s looks good.

Hedy · August 15, 2023, 3:57pm

However, if someone find how to run it “classically” within HestiaCP, I will prefer (I don’t know how stable is docker in production use)

linkp · August 15, 2023, 4:00pm

Docker has been widely used in production for many years.

iramireze · August 22, 2023, 3:10pm

Hi @Hedy -

Did you find an operational way to install it in the same server with Hestiacp?

If yes, any steep by steep is more than welcome…!!

Thanks again…