https://wiki.openclonk.org/index.php?action=history&feed=atom&title=Server_SetupServer Setup - Revision history2026-04-29T00:06:36ZRevision history for this page on the wikiMediaWiki 1.44.5https://wiki.openclonk.org/index.php?title=Server_Setup&diff=1929&oldid=prevLuchs: Notes on adding new applications2020-07-20T14:48:11Z<p>Notes on adding new applications</p>
<p><b>New page</b></p><div>Admin notes on the openclonk.org server.<br />
<br />
<br />
== Applications ==<br />
<br />
Each application (e.g., mwforum, mediawiki, ...) runs under its own user and is managed by a systemd user instance.<br />
<br />
<br />
=== Adding a new application ===<br />
<br />
<nowiki><br />
Create a new user:<br />
# adduser $APP<br />
<br />
Enable systemd user units without logging in:<br />
# loginctl enable-linger $APP<br />
<br />
Create unit files:<br />
# sudo -iu $APP<br />
$ mkdir -p ~/.config/systemd/user<br />
$ vim ~/.config/systemd/user/$APP.service<br />
$ systemctl --user enable --now $APP.service<br />
<br />
Allow nginx access to files in /home/$APP by adding nginx to the app's group:<br />
# usermod -aG $APP nginx<br />
Note: SELinux only allows nginx access to files in /home/$APP/www<br />
<br />
Listen on Unix socket for nginx:<br />
# echo "d /run/$APP 0750 $APP $APP" > /etc/tmpfiles.d/$APP.conf<br />
# semanage fcontext -a -t httpd_var_run_t "/var/run/$APP(/.*)?"<br />
# systemd-tmpfiles --create<br />
Now let the application create its socket in /run/$APP/<br />
</nowiki></div>Luchs