Skip to Content
Last modified by Alexandru Pentilescu on 2023/06/25 18:56
From version 15.1
edited by Alexandru Pentilescu
on 2022/06/08 21:25
Change comment: There is no comment for this version
To version 25.1
edited by Alexandru Pentilescu
on 2022/06/08 22:11
Change comment: There is no comment for this version

Summary

Details

Page properties
Content
... ... @@ -150,10 +150,55 @@
150 150  
151 151  [[image:Screenshot_20220607_015727.png]]
152 152  
153 -**While it may be tempting to immediately try to setup an administrator account from this portal, unless you're browsing this page from localhost (i.e. the XWiki server is on the exact same machine that you're running your web browser from) DO NOT register an account YET! All traffic is unencrypted to the server and may be intercepted by anyone sniffing your internet packets. We must first configure an X509 TLS certificate with Nginx and configure Nginx to act as a reverse proxy for this wiki**
153 +**While it may be tempting to immediately try to setup an administrator account from this portal, unless you're browsing this page from localhost (i.e. the XWiki server is on the exact same machine that you're running your web browser from) DO NOT register an account YET! All traffic is unencrypted to the server and may be intercepted by anyone sniffing your internet packets. We must first configure an X.509 TLS certificate with Nginx and configure Nginx to act as a reverse proxy for this wiki**
154 154  
155 155  For the time being, press the "Later" button on the dialog (not the "Never" one!) and then run a "docker-compose down" to stop the container from running. The first test run was a success! Congratulations!
156 156  
157 += Nginx reverse proxy configuration =
158 +
159 +We assume you already have Nginx installed and properly configured on your machine. Also, we will assume you have an X.509 certificate whose Subject Alt Names includes both your domain name, as well as the subdomain for your wiki (i.e. in my case for pentilescu.com and wiki.pentilescu.com, respectively) and you've configured Nginx to utilize both of them! If this is not the case or you're unsure how to perform these configurations, please check the internal "How to setup an Nginx reverse proxy and also provide a global X.509 certificate for it" guide at the bottom of this page.
160 +
161 +In "/etc/nginx/sites-available/", please create a "xwiki.conf" file with the following contents:
162 +
163 +{{code language="nginx"}}
164 +server {
165 + server_name wiki.pentilescu.com;
166 +
167 + listen [::]:443 ssl http2; # managed by Certbot
168 + listen 443 ssl http2; # managed by Certbot
169 +
170 + include /etc/nginx/snippets/ssl.conf;
171 +
172 + location / {
173 + proxy_pass http://localhost:8081;
174 + }
175 +}
176 +{{/code}}
177 +
178 +Please replace "wiki.pentilescu.com" with the domain and subdomains that you desire for your particular website. Also, please adapt "/etc/nginx/snippets/ssl.conf" to reference the X.509 Nginx configuration file on your particular server. If you do not wish to support TLS at all, you may remove this line, as well as the "listen" directives from above.
179 +
180 +Effectively, what this configuration file will do is tell Nginx to redirect all HTTP/HTTPS connection verbs directed at wiki.pentilescu.com to localhost port 8081, optionally also injecting the TLS certificates into the connection to secure it as well. By doing this, instead of having to connect to port 8081 on your server manually, future users of your XWiki instance will have to type the subdomain in their browser's address bar instead, which is usually more human readable and more memorable for most people. Typing in "wiki.pentilescu.com" into your browser's address bar is more human friendly than typing "pentilescu.com:8081". Not only are numeric port numbers difficult to remember, but Nginx will also inject TLS into the connection to secure it if you configured the X.509 certificates properly, effectively securing your visitors' connection every time so that their login credentials are protected even against network sniffers.
181 +
182 +Once you've done this, create a symbolic link with the following command to activate your new configuration:
183 +
184 +{{code language="bash"}}
185 +sudo ln -s /etc/nginx/sites-available/xwiki.conf /etc/nginx/sites-enabled/xwiki.conf
186 +{{/code}}
187 +
188 +Finally, test your configuration before restarting Nginx with:
189 +
190 +{{code language="bash"}}
191 +sudo nginx -t
192 +{{/code}}
193 +
194 +If errors are reported, please review your configuration files and repair all the detected issues. If everything is fine then issue a "sudo systemctl restart nginx" and then you're pretty much good to go!
195 +
196 += Retrieving files for installing the Standard flavor packages and all its extensions=
197 +While the docker container contains all the necessary system utilities to run the XWiki server internally, a lot of functionality for the Wiki will be missing as it is.
198 +The XWiki container is very lackluster even in administration features and not installing the Standard flavor will give you a very barebones and almost functionally broken experience. As such, while optional, it is very strongly encouraged to install the Standard flavor along with XWiki to activate many of its most basic features.
199 +To do so, we will have to download a very specific XIP package from XWiki's download portal. Visit [[here>>https://www.xwiki.org/xwiki/bin/view/Download/]] this aforementioned download portal and click the "Download" button for the Long Term Support option on that page. On the new page, click the "Download" button for the "XIP Package" section. This will allow you to download the XIP package in question to your local computer.
200 +Unzip the contents of this XIP package (XIP is just a specific flavor of a ZIP archive so you can just rename the file to use the ".zip" extension if your archive program doesn't recognize it) and upload the unzipped contents to the server where the docker image of XWiki is running, under the "data/xwiki-data/data/extension/repository/" subdirectory of your XWiki directory.
157 157  = External references =
158 158  
159 159  [[Official docker guide for installing XWiki>>https://github.com/xwiki/xwiki-docker/blob/master/README.md]]
204 +How to setup an Nginx reverse proxy and also provide a global X.509 certificate for it -- NOT YET WRITTEN!--
Screenshot_20220607_015843.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.AlexandruPentilescu
Size
... ... @@ -1,0 +1,1 @@
1 +104.4 KB
Content
Screenshot_20220607_020931.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.AlexandruPentilescu
Size
... ... @@ -1,0 +1,1 @@
1 +97.0 KB
Content
Screenshot_20220607_020959.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.AlexandruPentilescu
Size
... ... @@ -1,0 +1,1 @@
1 +127.7 KB
Content
Screenshot_20220607_021031.png
Author
... ... @@ -1,0 +1,1 @@
1 +XWiki.AlexandruPentilescu
Size
... ... @@ -1,0 +1,1 @@
1 +182.0 KB
Content