1.2. CMS Setup ‐ Linux

OrionCMS Setup - Linux

cd /var/www/
rm -r html
git clone https://github.com/Orion-Server/cms.git
cd cms
cp .env.example .env

APP_NAME="OrionCMS"
APP_ENV=production
APP_KEY=
APP_DEBUG=false
APP_URL=https://mydomain.com # Change
SESSION_DOMAIN=mydomain.com # Change
SESSION_DRIVER=file
SESSION_LIFETIME=120
LOG_CHANNEL=stack
LOG_DEPRECATIONS_CHANNEL=null
LOG_LEVEL=error
# Change those to match your database settings
DB_CONNECTION=mysql
DB_HOST=127.0.0.1
DB_PORT=3306
DB_DATABASE=habbo
DB_USERNAME=cms
DB_PASSWORD="YOUR PASSWORD"

composer install # Press enter by [yes]
yarn install && yarn build
php artisan key:generate
php artisan migrate --seed
chown -R www-data:www-data /var/www/cms/
cd /var/www/cms
chmod -R 775 storage
chmod -R 775 bootstrap/cache

NGINX Setup

cd /etc/nginx
>nginx.conf
rm sites-available/default
rm sites-enabled/default
vi /etc/nginx/nginx.conf

user www-data;
worker_processes auto;
worker_rlimit_nofile 20000;
pid /run/nginx.pid;
include /etc/nginx/modules-enabled/*.conf;
events {
 worker_connections 1024;
 multi_accept off;
}
http {
 ##
 # Basic Settings
 ##
 sendfile on;
 tcp_nopush on;
 tcp_nodelay on;
 keepalive_timeout 65;
 types_hash_max_size 2048;
 client_max_body_size 100M;
 # server_tokens off;
 # server_names_hash_bucket_size 64;
 # server_name_in_redirect off;
 include /etc/nginx/mime.types;
 default_type application/octet-stream;
 # Rate limiting
 limit_conn_zone $binary_remote_addr zone=addr:10m;
 limit_req_zone $binary_remote_addr zone=req_limit_per_ip:10m rate=25r/s;
 # SSL Settings
 log_format custom '$remote_user [$time_local] - $remote_addr :'
 '"$request" $status $body_bytes_sent - '
 'Refer:"$http_referer" Country:"$http_cf_ipcountry"';
 ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
 # Dropping SSLv3, ref: POODLE
 ssl_prefer_server_ciphers on;
 # Logging Settings
 access_log /var/log/nginx/access.log;
 error_log /var/log/nginx/error.log;
 # Gzip Settings
 #gzip on;
 # Virtual Host Configs
 include /etc/nginx/cloudflare;
 include /etc/nginx/conf.d/*.conf;
 include /etc/nginx/sites-enabled/*;
}

server {
 listen 80;
 listen [::]:80;
 
 index index.php index.html index.htm;
 autoindex off;
 server_tokens off;
 add_header X-Frame-Options SAMEORIGIN;
 add_header AtomCMS "This is an SpongeBob server";
 add_header X-Content-Type-Options "nosniff" always;
 add_header Referrer-Policy "strict-origin-when-cross-origin";
 add_header X-XSS-Protection "1; mode=block";
 add_header Permissions-Policy "autoplay=(self), encrypted-media=(), fullscreen=(), geolocation=(), microphone=(), midi=()";
 add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
 
 access_log /var/log/nginx/cms.log custom;
 error_log /var/log/nginx/cms_error.log;
 server_name ### Domain Expl: mydomain.com www.mydomain.com ###;
 
 root /var/www/cms/public;
 index index.php index.html index.htm;
 location / {
 try_files $uri $uri/ /index.php?$query_string;
 limit_conn addr 10;
 autoindex off;
 }
 location ~ \.php$ {
 include snippets/fastcgi-php.conf;
 fastcgi_param PHP_ADMIN_VALUE "allow_url_fopen=1";
 fastcgi_param PHP_ADMIN_VALUE "file_uploads=0";
 fastcgi_param PHP_VALUE open_basedir="/var/www/cms/:/tmp/";
 fastcgi_pass unix:/var/run/php/php8.3-fpm.sock;
 }
}

mkdir /var/scripts
vi /var/scripts/CF_Refresh.cf

#!/bin/bash
CLOUDFLARE_FILE_PATH=/etc/nginx/cloudflare
echo "#Cloudflare" > $CLOUDFLARE_FILE_PATH;
echo "" >> $CLOUDFLARE_FILE_PATH;
echo "# - IPv4" >> $CLOUDFLARE_FILE_PATH;
for i in `curl https://www.cloudflare.com/ips-v4`; do
 echo "set_real_ip_from $i;" >> $CLOUDFLARE_FILE_PATH;
done
echo "" >> $CLOUDFLARE_FILE_PATH;
echo "# - IPv6" >> $CLOUDFLARE_FILE_PATH;
for i in `curl https://www.cloudflare.com/ips-v6`; do
 echo "set_real_ip_from $i;" >> $CLOUDFLARE_FILE_PATH;
done
echo "" >> $CLOUDFLARE_FILE_PATH;
echo "real_ip_header CF-Connecting-IP;" >> $CLOUDFLARE_FILE_PATH;

nginx -t && systemctl reload nginx

chmod +x /var/scripts/CF_Refresh.cf

ln -s /etc/nginx/sites-available/cms.conf /etc/nginx/sites-enabled/