{{lastupdated_at}} by {{lastupdated_by}}

{{>toc}}

h1. ResourceSpace Installation

h2. Initial setup

* The following packages are needed for installation: apache2 mysql-server php5 php5-dev php5-gd php5-mysql imagemagick ghostscript antiword xpdf libav-tools postfix libimage-exiftool-perl cron wget
* ResourceSpace can be either installed via  SVN or via tar.gz. I did it via the point release tar.gz file
* unpack in /var/www/resourcespace and chown -R www-data:www-data /var/www/resourcespace
* if file storage will be in /var/www/resourcespace create filestore directory if it will be elsewhere create a symlink to the filestore directory

h2. Database (mysql)

* log into mysql as root user
* create database resourcespace; 
* create user resourcespace 
<pre>CREATE USER 'username'@'localhost' IDENTIFIED BY 'password';
CREATE DATABASE IF NOT EXISTS resourcespace;
GRANT ALL PRIVILEGES ON resourcespace.* TO 'username'@'localhost' IDENTIFIED BY 'password';</pre>

h2. Apache config

* No site.conf file is included so we will have to make our own. 
<pre><IfModule mod_ssl.c>
<VirtualHost *:443>
        ServerName cloud.example.org

        ServerAdmin webmaster@localhost
        DocumentRoot /var/www/resourcespace
        <Directory /var/www/resourcespace>
                AllowOverride All
                Options Indexes FollowSymLinks MultiViews
                Order allow,deny
                allow from all
        </Directory>
    <Directory /var/www/resourcespace/filestore>
    Options -Indexes
    AllowOverride All
    Order allow,deny
    allow from all
    </Directory>

        ErrorLog ${APACHE_LOG_DIR}/resourcespace.error.log
        CustomLog ${APACHE_LOG_DIR}/resourcespace.access.log combined

SSLCertificateFile /path/to/cert.pem
SSLCertificateKeyFile /path/to/key.key
Include /etc/letsencrypt/options-ssl-apache.conf
Header always add Strict-Transport-Security "max-age=15768000"
</VirtualHost>
</pre>
* We should also create .htaccess file in the filestore directory as an added measure
<pre><ifModule mod_authz_core.c>
Require all denied
</ifModule>

# line below if for Apache 2.2
<ifModule !mod_authz_core.c>
deny from all
Satisfy All
</ifModule>

# section for Apache 2.2 and 2.4
IndexIgnore *
</pre>