summaryrefslogtreecommitdiffstats
path: root/doc/install/Production-RHEL7.md
diff options
context:
space:
mode:
Diffstat (limited to 'doc/install/Production-RHEL7.md')
-rw-r--r--doc/install/Production-RHEL7.md238
1 files changed, 0 insertions, 238 deletions
diff --git a/doc/install/Production-RHEL7.md b/doc/install/Production-RHEL7.md
deleted file mode 100644
index 4e003dd46..000000000
--- a/doc/install/Production-RHEL7.md
+++ /dev/null
@@ -1,238 +0,0 @@
-# Production Installation on Red Hat Enterprise Linux 7.1+
-
-## Install Red Hat Enterprise Linux (x64) 7.1+
-1. Set up 3 machines with RHEL with 2GB of RAM or more. The servers will be used for the Load Balancer, Mattermost (this must be x64 to use pre-built binaries), and Database.
- - **Optional:** You can also use a single machine for all 3 components in this install guide, depending on the standards of your data center.
-2. Make sure the system is up to date with the most recent security patches.
- * ``` sudo yum update```
- * ``` sudo yum upgrade```
-
-## Set up Database Server
-1. For the purposes of this guide we will assume this server has an IP address of `10.10.10.1`
- - **Optional:** if installing on the same machine substitute `10.10.10.1` with `127.0.0.1`
-1. Install PostgreSQL 9.4+ (or MySQL 5.6+)
- * ``` sudo yum install http://yum.postgresql.org/9.4/redhat/rhel-6-x86_64/pgdg-redhat94-9.4-1.noarch.rpm```
- * ``` sudo yum install postgresql94-server postgresql94-contrib```
- * ``` sudo /usr/pgsql-9.4/bin/postgresql94-setup initdb```
- * ``` sudo systemctl enable postgresql-9.4.service```
- * ``` sudo systemctl start postgresql-9.4.service```
-1. PostgreSQL created a user account called `postgres`. You will need to log into that account with:
- * ``` sudo -i -u postgres```
-1. You can get a PostgreSQL prompt by typing:
- * ``` psql```
-1. Create the Mattermost database by typing:
- * ```postgres=# CREATE DATABASE mattermost;```
-1. Create the Mattermost user by typing:
- * ```postgres=# CREATE USER mmuser WITH PASSWORD 'mmuser_password';```
-1. Grant the user access to the Mattermost database by typing:
- * ```postgres=# GRANT ALL PRIVILEGES ON DATABASE mattermost to mmuser;```
-1. You can exit out of PostgreSQL by typing:
- * ```postgres=# \q```
-1. You can exit the Postgres account by typing:
- * ``` exit```
-1. Allow Postgres to listen on all assigned IP Addresses:
- * ```sudo vi /var/lib/pgsql/9.4/data/postgresql.conf```
- * Uncomment 'listen_addresses' and change 'localhost' to '*'
-1. Alter `pg_hba.conf` to allow the Mattermost Server to talk to the Postgres database:
- * ```sudo vi /var/lib/pgsql/9.4/data/pg_hba.conf```
- * Add the following line to the 'IPv4 local connections':
- * host all all 10.10.10.2/32 md5
-1. Reload Postgres database:
- * ```sudo systemctl reload postgresql-9.4.service```
-1. Attempt to connect with the new created user to verify everything looks good:
- * ```psql --host=10.10.10.1 --dbname=mattermost --username=mmuser --password```
- * ```mattermost=> \q```
-
-
-## Set up Mattermost Server
-1. For the purposes of this guide we will assume this server has an IP address of `10.10.10.2`
-1. Download the latest Mattermost Server by typing:
- * ``` wget https://github.com/mattermost/platform/releases/download/v1.3.0/mattermost.tar.gz```
-1. Install Mattermost under `/opt`
- * Unzip the Mattermost Server by typing:
- * ``` tar -xvzf mattermost.tar.gz```
- * ``` sudo mv mattermost /opt```
-1. Create the storage directory for files. We assume you will have attached a large drive for storage of images and files. For this setup we will assume the directory is located at `/opt/mattermost/data`.
- * Create the directory by typing:
- * ``` sudo mkdir -p /opt/mattermost/data```
-1. Create a system user and group called mattermost that will run this service:
- * ``` sudo useradd -r mattermost -U```
- * Set the Mattermost account as the directory owner by typing:
- * ``` sudo chown -R mattermost:mattermost /opt/mattermost```
- * ``` sudo chmod -R g+w /opt/mattermost```
- * Add yourself to the mattermost group to ensure you can edit these files:
- * ``` sudo usermod -aG mattermost USERNAME```
-1. Configure Mattermost Server by editing the `config.json` file at `/opt/mattermost/config`
- * ``` cd /opt/mattermost/config```
- * Edit the file by typing:
- * ``` sudo vi config.json```
- * replace `DriverName": "mysql"` with `DriverName": "postgres"`
- * replace `"DataSource": "mmuser:mostest@tcp(dockerhost:3306)/mattermost_test?charset=utf8mb4,utf8"` with `"DataSource": "postgres://mmuser:mmuser_password@10.10.10.1:5432/mattermost?sslmode=disable&connect_timeout=10"`
- * Optionally you may continue to edit configuration settings in `config.json` or use the System Console described in a later section to finish the configuration.
-1. Test the Mattermost Server
- * ``` cd /opt/mattermost/bin```
- * Run the Mattermost Server by typing:
- * ``` ./platform```
- * You should see a console log like `Server is listening on :8065` letting you know the service is running.
- * Stop the server for now by typing `Ctrl-C`
-1. Set up Mattermost to use the systemd init daemon which handles supervision of the Mattermost process:
- * ``` sudo touch /etc/systemd/system/mattermost.service```
- * ``` sudo vi /etc/systemd/system/mattermost.service```
- * Copy the following lines into `/etc/systemd/system/mattermost.service`
-```
-[Unit]
-Description=Mattermost
-After=syslog.target network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/mattermost/bin
-User=mattermost
-ExecStart=/opt/mattermost/bin/platform
-PIDFile=/var/spool/mattermost/pid/master.pid
-
-[Install]
-WantedBy=multi-user.target
-```
- * Make sure the service is executable with ``` sudo chmod 664 /etc/systemd/system/mattermost.service```
- * Reload the services with `sudo systemctl daemon-reload`
- * Start Mattermost service with `sudo systemctl start mattermost.service`
- * `sudo chkconfig mattermost on`
- * Start server on reboot `sudo systemctl enable mattermost.service`
-
-
-## Set up Nginx Server
-1. For the purposes of this guide we will assume this server has an IP address of `10.10.10.3`
-1. We use Nginx for proxying request to the Mattermost Server. The main benefits are:
- * SSL termination
- * HTTP to HTTPS redirect
- * Port mapping :80 to :8065
- * Standard request logs
-1. Install Nginx on RHEL with
- * ``` sudo vi /etc/yum.repos.d/nginx.repo```
- * Copy the below into the file
-```
-[nginx]
-name=nginx repo
-baseurl=http://nginx.org/packages/rhel/7/$basearch/
-gpgcheck=0
-enabled=1
-```
- * ``` sudo yum install nginx.x86_64```
- * ``` sudo service nginx start```
- * ``` sudo chkconfig nginx on```
-1. Verify Nginx is running
- * ``` curl http://10.10.10.3```
- * You should see a *Welcome to nginx!* page
-1. Map a FQDN (fully qualified domain name) like **mattermost.example.com** to point to the Nginx server.
-1. Configure Nginx to proxy connections from the internet to the Mattermost Server
- * Create a configuration for Mattermost
- * ``` sudo touch /etc/nginx/conf.d/mattermost.conf```
- * Below is a sample configuration with the minimum settings required to configure Mattermost
-```
- server {
- server_name mattermost.example.com;
-
- location / {
- client_max_body_size 50M;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header X-Frame-Options SAMEORIGIN;
- proxy_pass http://10.10.10.2:8065;
- }
- }
-```
- * Remove the existing file with:
- * ``` sudo mv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.bak```
- * Restart Nginx by typing:
- * ``` sudo service nginx restart```
- * Verify you can see Mattermost thru the proxy by typing:
- * ``` curl http://localhost```
- * You should see a page titles *Mattermost - Signup*
- * Not seeing the page? Look for errors with ``` sudo cat /var/log/audit/audit.log | grep nginx | grep denied```
- * **Optional** if you're running on the same server as the Mattermost server and see 502 errors you may need to run `sudo setsebool -P httpd_can_network_connect true` because SELinux is preventing the connection
-
-## Set up Nginx with SSL (Recommended)
-1. You will need a SSL cert from a certificate authority.
-1. For simplicity we will generate a test certificate.
- * ``` mkdir /top/mattermost/cert```
- * ``` cd /top/mattermost/cert```
- * ``` sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout mattermost.key -out mattermost.crt```
- * Input the following info
-```
- Country Name (2 letter code) [AU]:US
- State or Province Name (full name) [Some-State]:California
- Locality Name (eg, city) []:Palo Alto
- Organization Name (eg, company) [Internet Widgits Pty Ltd]:Example LLC
- Organizational Unit Name (eg, section) []:
- Common Name (e.g. server FQDN or YOUR name) []:mattermost.example.com
- Email Address []:admin@mattermost.example.com
-```
-1. Run `openssl dhparam -out dhparam.pem 4096` (it will take some time).
-1. Modify the file at `/etc/nginx/conf.d/mattermost.conf` and add the following lines
-```
- server {
- listen 80;
- server_name mattermost.example.com;
- return 301 https://$server_name$request_uri;
- }
-
- server {
- listen 443 ssl;
- server_name mattermost.example.com;
-
- ssl on;
- ssl_certificate /home/ubuntu/cert/mattermost.crt;
- ssl_certificate_key /home/ubuntu/cert/mattermost.key;
- ssl_dhparam /home/ubuntu/cert/dhparam.pem;
- ssl_session_timeout 5m;
- ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
- ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH';
- ssl_prefer_server_ciphers on;
- ssl_session_cache shared:SSL:10m;
-
- location / {
- gzip off;
- proxy_set_header X-Forwarded-Ssl on;
- client_max_body_size 50M;
- proxy_set_header Upgrade $http_upgrade;
- proxy_set_header Connection "upgrade";
- proxy_set_header Host $http_host;
- proxy_set_header X-Real-IP $remote_addr;
- proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
- proxy_set_header X-Forwarded-Proto $scheme;
- proxy_set_header X-Frame-Options SAMEORIGIN;
- proxy_pass http://10.10.10.2:8065;
- }
- }
-```
-
-## Finish Mattermost Server setup
-1. Navigate to `https://mattermost.example.com` and create a team and user.
-1. The first user in the system is automatically granted the `system_admin` role, which gives you access to the System Console.
-1. From the `town-square` channel click the dropdown and choose the `System Console` option
-1. Update Email Settings. We recommend using an email sending service. The example below assumes AmazonSES.
- * Set *Send Email Notifications* to true
- * Set *Require Email Verification* to true
- * Set *Feedback Name* to `No-Reply`
- * Set *Feedback Email* to `mattermost@example.com`
- * Set *SMTP Username* to `AFIADTOVDKDLGERR`
- * Set *SMTP Password* to `DFKJoiweklsjdflkjOIGHLSDFJewiskdjf`
- * Set *SMTP Server* to `email-smtp.us-east-1.amazonaws.com`
- * Set *SMTP Port* to `465`
- * Set *Connection Security* to `TLS`
- * Save the Settings
-1. Update File Settings:
- * Change *Local Directory Location* from `./data/` to `/opt/mattermost/data`
-1. Update Log Settings:
- * Set *Log to The Console* to `false`
-1. Update Rate Limit Settings:
- * Set *Vary By Remote Address* to false
- * Set *Vary By HTTP Header* to X-Real-IP
-1. Feel free to modify other settings
-1. Restart the Mattermost Service by typing:
- * ``` sudo restart mattermost```