Mention official domains
This commit is contained in:
parent
0eec345e61
commit
8f2ed0cda9
|
@ -75,7 +75,7 @@ Other supported boards are cubieboard2, cubietruck and olinuxino-lime2.
|
||||||
* Checklist
|
* Checklist
|
||||||
Before installing Freedombone you will need a few things.
|
Before installing Freedombone you will need a few things.
|
||||||
|
|
||||||
* Have some domains, or subdomains, registered with a dynamic DNS service
|
* Have some domains, or subdomains, registered with a dynamic DNS service. For the full install you may need two "official" purchased domains or be using a subdomain provider which is supported by Let's Encrypt.
|
||||||
* System with a new installation of Debian Jessie or a downloaded/prepared disk image
|
* System with a new installation of Debian Jessie or a downloaded/prepared disk image
|
||||||
* Ethernet connection between the system and your internet router
|
* Ethernet connection between the system and your internet router
|
||||||
* That it is possible to forward ports from the internet router to the system, typically via firewall settings
|
* That it is possible to forward ports from the internet router to the system, typically via firewall settings
|
||||||
|
|
|
@ -150,15 +150,8 @@ When the install is complete you will see a lot of warnings but just ignore thos
|
||||||
| User settings | Bio limit 1000 |
|
| User settings | Bio limit 1000 |
|
||||||
| Access settings | /Invite only/ ticked |
|
| Access settings | /Invite only/ ticked |
|
||||||
* Social Network
|
* Social Network
|
||||||
** Certificates
|
** Domains
|
||||||
You will need to have a non self-signed SSL certificate in order to use Hubzilla. Put the public certificate in */etc/ssl/certs/yourhubzilladomainname.crt* and the private certificate in */etc/ssl/private/yourhubzilladomainname.key*. If there is an intermediate certificate needed (such as with StartSSL) then this will need to be concatenated onto the end of the crt file, like this:
|
Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
|
||||||
|
|
||||||
#+BEGIN_SRC bash
|
|
||||||
cat /etc/ssl/certs/yourhubzilladomainname.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem >
|
|
||||||
/etc/ssl/certs/yourhubzilladomainname.bundle.crt
|
|
||||||
#+END_SRC
|
|
||||||
|
|
||||||
Then change ssl_certificate to */etc/ssl/certs/yourhubzilladomainname.bundle.crt* within */etc/nginx/sites-available/yourhubzilladomainname*
|
|
||||||
** Initial install
|
** Initial install
|
||||||
Visit the URL of your Hubzilla site and you should be taken through the rest of the installation procedure. Note that this may take a few minutes so don't be concerned if it looks as if it has crashed - just leave it running.
|
Visit the URL of your Hubzilla site and you should be taken through the rest of the installation procedure. Note that this may take a few minutes so don't be concerned if it looks as if it has crashed - just leave it running.
|
||||||
|
|
||||||
|
|
|
@ -3,7 +3,7 @@
|
||||||
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
||||||
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
||||||
<head>
|
<head>
|
||||||
<!-- 2015-12-18 Fri 22:53 -->
|
<!-- 2015-12-19 Sat 22:28 -->
|
||||||
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||||
<title></title>
|
<title></title>
|
||||||
|
@ -291,7 +291,7 @@ Before installing Freedombone you will need a few things.
|
||||||
</p>
|
</p>
|
||||||
|
|
||||||
<ul class="org-ul">
|
<ul class="org-ul">
|
||||||
<li>Have some domains, or subdomains, registered with a dynamic DNS service</li>
|
<li>Have some domains, or subdomains, registered with a dynamic DNS service. For the full install you may need two "official" purchased domains or be using a subdomain provider which is supported by Let's Encrypt.</li>
|
||||||
<li>System with a new installation of Debian Jessie or a downloaded/prepared disk image</li>
|
<li>System with a new installation of Debian Jessie or a downloaded/prepared disk image</li>
|
||||||
<li>Ethernet connection between the system and your internet router</li>
|
<li>Ethernet connection between the system and your internet router</li>
|
||||||
<li>That it is possible to forward ports from the internet router to the system, typically via firewall settings</li>
|
<li>That it is possible to forward ports from the internet router to the system, typically via firewall settings</li>
|
||||||
|
|
|
@ -3,7 +3,7 @@
|
||||||
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
|
||||||
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">
|
||||||
<head>
|
<head>
|
||||||
<!-- 2015-12-18 Fri 22:25 -->
|
<!-- 2015-12-19 Sat 22:29 -->
|
||||||
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
|
||||||
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
||||||
<title></title>
|
<title></title>
|
||||||
|
@ -544,21 +544,10 @@ When the install is complete you will see a lot of warnings but just ignore thos
|
||||||
<h2 id="orgheadline6">Social Network</h2>
|
<h2 id="orgheadline6">Social Network</h2>
|
||||||
<div class="outline-text-2" id="text-orgheadline6">
|
<div class="outline-text-2" id="text-orgheadline6">
|
||||||
</div><div id="outline-container-orgheadline14" class="outline-3">
|
</div><div id="outline-container-orgheadline14" class="outline-3">
|
||||||
<h3 id="orgheadline14">Certificates</h3>
|
<h3 id="orgheadline14">Domains</h3>
|
||||||
<div class="outline-text-3" id="text-orgheadline14">
|
<div class="outline-text-3" id="text-orgheadline14">
|
||||||
<p>
|
<p>
|
||||||
You will need to have a non self-signed SSL certificate in order to use Hubzilla. Put the public certificate in <b>/etc/ssl/certs/yourhubzilladomainname.crt</b> and the private certificate in <b>/etc/ssl/private/yourhubzilladomainname.key</b>. If there is an intermediate certificate needed (such as with StartSSL) then this will need to be concatenated onto the end of the crt file, like this:
|
Both Hubzilla and GNU Social try to obtain certificates automatically at the time of installation via Let's Encrypt. This will likely mean that in order for this to work you'll need to have obtained at least one "official" domain via a domain selling service, since Let's Encrypt mostly doesn't seem to work with free subdomains from sites such as freeDNS.
|
||||||
</p>
|
|
||||||
|
|
||||||
<div class="org-src-container">
|
|
||||||
|
|
||||||
<pre class="src src-bash">cat /etc/ssl/certs/yourhubzilladomainname.crt /etc/ssl/chains/startssl-sub.class1.server.ca.pem >
|
|
||||||
/etc/ssl/certs/yourhubzilladomainname.bundle.crt
|
|
||||||
</pre>
|
|
||||||
</div>
|
|
||||||
|
|
||||||
<p>
|
|
||||||
Then change ssl_certificate to <b>/etc/ssl/certs/yourhubzilladomainname.bundle.crt</b> within <b>/etc/nginx/sites-available/yourhubzilladomainname</b>
|
|
||||||
</p>
|
</p>
|
||||||
</div>
|
</div>
|
||||||
</div>
|
</div>
|
||||||
|
|
Loading…
Reference in New Issue