Blame

f1509e Ralph Thesen 2023-11-18 14:39:06 1
# Installation
2
bb20b4 Ralph Thesen 2024-05-05 09:06:07 3
The recommend way of running An Otter Wiki is via [[docker compose|Installation#using-docker-compose]]. For deploying in kubernetes via [[Helm|Installation#kubernetes]].
f1509e Ralph Thesen 2023-11-18 14:39:06 4
5
## Requirements
6
7
The **CPU** requirements are pretty low, you can run it on a Raspberry Pi 1 A (ARMv6). The **RAM** required is around 100MiB (according to `docker stats`). The required disk **storage** depends on the content, please keep in mind, that the backend is a git repository that never forgets: Deleting a page or an attachment does not free up any space. The wiki needs no internet access. Clients using the wiki need only access to the server running the wiki, so it can run in an environment which is _isolated_ from the internet.
8
9
As URLs as dedicated domain (e.g. `wiki.domain.tld`) is required, it can not be mapped into a subfolder.
10
f7923b Ralph Thesen 2023-12-06 16:58:57 11
Client requirement: Javascript must be activated in your browser to use the wiki.
12
ab255a Ralph Thesen 2023-11-26 13:35:43 13
## Using docker cli
f1509e Ralph Thesen 2023-11-18 14:39:06 14
679b7f Ralph Thesen 2024-05-05 09:04:15 15
An Otter Wiki is published as a Docker image on Docker hub as [`redimp/otterwiki`](https://hub.docker.com/r/redimp/otterwiki). The stable images are build for the plattforms `amd64`, `arm64`, `armv7` and `armv6`.
f1509e Ralph Thesen 2023-11-18 14:39:06 16
17
Make sure you have [docker](https://docs.docker.com/engine/install/) installed.
18
ab255a Ralph Thesen 2023-11-26 13:35:43 19
To run an otter wiki via docker cli, listening on port 8080 and using a local directory for data persistency, use the following command:
20
```bash
21
docker run --name otterwiki \
679b7f Ralph Thesen 2024-05-05 09:04:15 22
-p 8080:80 \
ab255a Ralph Thesen 2023-11-26 13:35:43 23
-v $PWD/app-data:/app-data \
14546e Ralph Thesen 2024-01-03 11:15:44 24
redimp/otterwiki:2
f1509e Ralph Thesen 2023-11-18 14:39:06 25
```
26
Open the wiki via http://127.0.0.1:8080 if you are running the docker command on your machine.
27
679b7f Ralph Thesen 2024-05-05 09:04:15 28
You can configure the application with environment variables e.g.
f1509e Ralph Thesen 2023-11-18 14:39:06 29
```
30
-e SITE_NAME="My Wiki" -e SITE_DESCRIPTION="An otter wiki run via docker"
31
```
32
For all configuration options please see [[Configuration]].
33
34
## Using docker compose
35
679b7f Ralph Thesen 2024-05-05 09:04:15 36
The recommended way of running An Otter Wiki is via `docker compose`.
f1509e Ralph Thesen 2023-11-18 14:39:06 37
38
1. Create a `docker-compose.yaml` file
39
40
```yaml
41
services:
42
otterwiki:
14546e Ralph Thesen 2024-01-03 11:15:44 43
image: redimp/otterwiki:2
f1509e Ralph Thesen 2023-11-18 14:39:06 44
restart: unless-stopped
45
ports:
46
- 8080:80
47
volumes:
48
- ./app-data:/app-data
49
```
50
51
2. Run `docker compose up -d`
52
3. Access the wiki via http://127.0.0.1:8080 if run on your machine.
53
4. Register your account. The first account is an admin-account with access to the application settings. The first accounts email address doesn't need to be confirmed nor has the account to be activated.
54
5. Customize the settings to your liking.
55
6. It's highly recommended to use a webserver as reverse proxy to connect to the docker process, see [Reverse Proxy](#reverse-proxy) below.
56
57
Alternativly you can configure the application using environment variables, for example:
58
59
```yaml
60
services:
61
otterwiki:
14546e Ralph Thesen 2024-01-03 11:15:44 62
image: redimp/otterwiki:2
f1509e Ralph Thesen 2023-11-18 14:39:06 63
restart: unless-stopped
64
ports:
65
- 8080:80
66
volumes:
67
- ./app-data:/app-data
334777 Ralph Thesen 2024-10-30 23:19:20 68
environment:
f1509e Ralph Thesen 2023-11-18 14:39:06 69
MAIL_DEFAULT_SENDER: no-reply@example.com
70
MAIL_SERVER: smtp.server.tld
679b7f Ralph Thesen 2024-05-05 09:04:15 71
MAIL_PORT: 465
f1509e Ralph Thesen 2023-11-18 14:39:06 72
MAIL_USERNAME: otterwiki@example.com
679b7f Ralph Thesen 2024-05-05 09:04:15 73
MAIL_PASSWORD: somepassword
74
MAIL_USE_SSL: True
f1509e Ralph Thesen 2023-11-18 14:39:06 75
```
76
77
For all configuration options please see [[Configuration]].
78
79
## podman and podman-compose
80
81
An Otter Wiki can be run with `podman` and `podman-compose` in the same way as with` docker` and `docker compose` please see above.
82
92d0d9 Ralph Thesen 2024-10-19 16:04:09 83
> [!IMPORTANT]
84
> If you are running podman in an SELinux environment, please check the
85
> [[FAQ|FAQ#environments-with-selinux]] section about environments with SELinux.
86
21867d Ralph Thesen 2024-10-19 17:56:40 87
## The `-slim` image variant
88
89
The image of An Otter Wiki runs as root user (with uid=0) and comes bundled with nginx that listens on port 80. The lighter image variant is the `-slim` image: It's based on alpine, has no nginx bundled and an uWSGI server is running as unprivileged `www-data` user (with uid=33). uWSGI serves both An Otter Wiki and the static files and listens on port 8080.
90
91
Except for the exposes port, the images are interchangeable. For example a `docker-compose.yaml` running the most recent version of a `-slim` image:
92
93
```yaml
94
services:
95
otterwiki:
96
image: redimp/otterwiki:2-slim
97
restart: unless-stopped
98
ports:
99
- 8080:8080
100
volumes:
101
- ./app-data:/app-data
102
```
103
104
The `redimp/otterwiki:2-slim` image is as stable as the 'fat' image, after all it is what is running [otterwiki.com](https://otterwiki.com).
105
679b7f Ralph Thesen 2024-05-05 09:04:15 106
## Kubernetes
107
108
An Otter Wiki can be conveniently deployed on kubernetes using the official Helm Chart.
109
For example you can create a new deployment with an ingress on `otterwiki.example.com` with
110
111
```bash
112
helm install otterwiki-example \
113
--set config.SITE_DESCRIPTION="An Otter Wiki deployed with Helm" \
114
--set ingress.enabled=true \
115
--set ingress.hosts[0].host="otterwiki.example.com" \
efcbe1 Ralph Thesen 2024-07-04 21:14:05 116
--version 0.1.0 \
679b7f Ralph Thesen 2024-05-05 09:04:15 117
oci://registry-1.docker.io/redimp/otterwiki
118
```
119
120
Please refer to the [chart](https://github.com/redimp/otterwiki/tree/main/helm) for
121
a detailed README with instructions, more examples and informations about the default values
122
of the chart.
123
f1509e Ralph Thesen 2023-11-18 14:39:06 124
## From source as WSGI application with uwsgi
125
126
1. Install the prerequisites
127
679b7f Ralph Thesen 2024-05-05 09:04:15 128
i. Debian / Ubuntu
f1509e Ralph Thesen 2023-11-18 14:39:06 129
```
130
apt install git build-essential python3-dev python3-venv
131
```
132
ii. RHEL8 / Fedora / CentOS8 / Rocky Linux 8
133
```
134
yum install make python3-devel
135
```
136
2. Clone the otterwiki repository and enter the directory
679b7f Ralph Thesen 2024-05-05 09:04:15 137
```
f1509e Ralph Thesen 2023-11-18 14:39:06 138
git clone https://github.com/redimp/otterwiki.git
679b7f Ralph Thesen 2024-05-05 09:04:15 139
cd otterwiki
f1509e Ralph Thesen 2023-11-18 14:39:06 140
```
141
3. Create and initialize the repository where the otterwiki data lives
142
```bash
143
mkdir -p app-data/repository
144
# initialize the empty repository
ec48ab Ralph Thesen 2024-10-27 12:11:25 145
git init -b main app-data/repository
f1509e Ralph Thesen 2023-11-18 14:39:06 146
```
147
4. Create a minimal `settings.cfg` e.g. via
679b7f Ralph Thesen 2024-05-05 09:04:15 148
```bash
f1509e Ralph Thesen 2023-11-18 14:39:06 149
echo "REPOSITORY='${PWD}/app-data/repository'" >> settings.cfg
679b7f Ralph Thesen 2024-05-05 09:04:15 150
echo "SQLALCHEMY_DATABASE_URI='sqlite:///${PWD}/app-data/db.sqlite'" >> settings.cfg
ec48ab Ralph Thesen 2024-10-27 12:11:25 151
echo "SECRET_KEY='$(python -c 'import secrets; print(secrets.token_hex())')'" >> settings.cfg
f1509e Ralph Thesen 2023-11-18 14:39:06 152
```
153
5. Create a virtual environment and install An Otter Wiki
679b7f Ralph Thesen 2024-05-05 09:04:15 154
```
f1509e Ralph Thesen 2023-11-18 14:39:06 155
python3 -m venv venv
156
./venv/bin/pip install -U pip uwsgi
157
./venv/bin/pip install .
158
```
159
6. Run uwsgi listening on the localhost port 8080
679b7f Ralph Thesen 2024-05-05 09:04:15 160
```bash
f1509e Ralph Thesen 2023-11-18 14:39:06 161
export OTTERWIKI_SETTINGS=$PWD/settings.cfg
cb8dde Ralph Thesen 2024-08-30 11:15:17 162
./venv/bin/uwsgi --http 127.0.0.1:8080 --master --enable-threads --die-on-term -w otterwiki.server:app
f1509e Ralph Thesen 2023-11-18 14:39:06 163
```
164
7. Open http://127.0.0.1:8080 in your browser.
165
8. Register your account. The first account is an admin-account with access to the application settings.
166
9. Alternatively can you configure the application using the `settings.cfg`. For all configuration options please see [[Configuration]].
167
10. Create a service file e.g. `/etc/systemd/system/otterwiki.service`
168
169
```systemd
170
[Unit]
171
Description=uWSGI server for An Otter Wiki
172
173
[Service]
174
User=www-data
175
Group=www-data
ec48ab Ralph Thesen 2024-10-27 12:11:25 176
Environment=OTTERWIKI_SETTINGS=/path/to/the/settings.cfg
cb8dde Ralph Thesen 2024-08-30 11:15:17 177
ExecStart=/path/to/an/otterwiki/env/bin/uwsgi --http 127.0.0.1:8080 --enable-threads --die-on-term -w otterwiki.server:app
f1509e Ralph Thesen 2023-11-18 14:39:06 178
SyslogIdentifier=otterwiki
179
180
[Install]
181
WantedBy=multi-user.target
182
```
ec48ab Ralph Thesen 2024-10-27 12:11:25 183
184
make sure to adapt the `/path/to` and that the configured User can read and write the database and the repository folder.
f1509e Ralph Thesen 2023-11-18 14:39:06 185
ec48ab Ralph Thesen 2024-10-27 12:11:25 186
11. Run `systemctl daemon-reload` and `systemctl start otterwiki.service`, check `systemctl status otterwiki.service` for errors.
187
188
> [!NOTE]
189
> It's highly recommended to use a webserver as reverse proxy to connect to uwsgi, see [Reverse Proxy](#reverse-proxy) below.
190
191
If you want to skip the reverse proxy consider to bind uwsgi not to just the local ip `127.0.0.1`, but to all ips of the host running An Otter Wiki with `--http 0.0.0.0:8080`.
f1509e Ralph Thesen 2023-11-18 14:39:06 192
193
# Reverse Proxy
194
195
A reverse proxy is a server that sits in front of web servers and forwards
196
client (e.g. web browser) requests to those web servers. They are useful
197
when hosting multiple services on a host and make it much easier to configure
198
https. Neither An Otter Wiki itself nor the in the docker image provides https.
199
200
Mini how-tos for configuring Apache, NGINX and Caddy are provided below. For complete documention please check the corresponding software documention.
201
202
## NGINX
203
204
This is a minimal example of a config that configures NGINX as a reverse proxy. The full documentation about NGINX as reverse proxy can be found [here](https://docs.nginx.com/nginx/admin-guide/web-server/reverse-proxy/).
205
206
It's assumed that An Otter Wiki is running either in a docker container or as a uwsgi process and listening on port 8080.
207
208
```nginx
209
server {
210
server_name wiki.domain.tld;
211
listen 80;
212
location / {
291014 Ralph Thesen 2024-06-08 23:49:27 213
proxy_set_header Host $http_host;
214
proxy_set_header X-Real-IP $remote_addr;
215
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
216
proxy_set_header X-Forwarded-Host $http_host;
217
proxy_pass http://127.0.0.1:8080;
218
client_max_body_size 64M; # for attachments of a size up to 64 Mb
f1509e Ralph Thesen 2023-11-18 14:39:06 219
}
220
}
221
```
222
223
### NGINX on Debian, Ubuntu and derivates
224
225
- Install nginx via `apt install -y nginx`
226
- Create the `otterwiki.conf` in `/etc/nginx/sites-enabled/`
227
- Check the syntax via `nginx -t`
228
- Restart nginx via `systemctl restart nginx`
229
- Open <http://wiki.domain.tld> in your browser
230
- Check `journalctl -xeu nginx` and `/var/log/nginx/error.log` for errors.
231
232
### NGINX on RHEL, CentOS, Rocky and derivates
233
234
- Install nginx via `dnf install nginx`
235
- Start NGINX and enable at boot: `sudo systemctl enable --now nginx`
236
- With SELinux enabled, make sure httpd can connect using `setsebool -P httpd_can_network_connect on`
237
- Create the `otterwiki.conf` in `/etc/nginx/conf.d/`
238
- Check the syntax via `nginx -t`
239
- Restart nginx via `systemctl restart nginx`
240
- Open <http://wiki.domain.tld> in your browser
241
- Check `journalctl -xeu nginx` and `/var/log/nginx/error.log` for errors.
242
243
See <https://www.redhat.com/sysadmin/setting-reverse-proxies-nginx> for a complete guide.
244
245
## Apache
246
247
This is a minimal example how to configure Apache as reverse proxy. Please see the [Apache documentation](https://httpd.apache.org/docs/2.4/howto/reverse_proxy.html) for complete details.
248
249
It's assumed that An Otter Wiki is running either in a docker container or as a uwsgi process and listening on port 8080.
250
251
```
252
<VirtualHost *:*>
253
ServerName wiki.domain.tld
254
ProxyPreserveHost On
255
ProxyPass / http://0.0.0.0:8080/
256
ProxyPassReverse / http://0.0.0.0:8080/
257
</VirtualHost>
258
```
259
260
### Apache on Debian, Ubuntu and derivates
261
262
- Install apache2 via `apt install -y apache2`
263
- Enable proxy modules via `a2enmod proxy proxy_http`
264
- Create the `otterwiki.conf` config file in `/etc/apache2/site-available/`
265
- Enable the site via `a2ensite otterwiki`
266
- Restart apache2 `systemctl restart apache2`
267
- Open <http://wiki.domain.tld> in your browser
268
- Check `journalctl -xeu apache2.service` and `/var/log/apache2/error.log` for error messages.
269
270
### Apache on RHEL, CentOS, Rocky and derivates
271
272
- Install apache2 via `dnf install httpd`
679b7f Ralph Thesen 2024-05-05 09:04:15 273
- Start apache2 and enable at boot: `sudo systemctl enable --now httpd`
f1509e Ralph Thesen 2023-11-18 14:39:06 274
- Create the `otterwiki.conf` config file in `/etc/httpd/conf.d/`
275
- With SELinux enabled, make sure httpd can connect using `setsebool -P httpd_can_network_connect on`
276
- Restart apache2 via `systemctl restart httpd`
277
- Open <http://wiki.domain.tld> in your browser
278
- Check `journalctl -xeu httpd.service` and `/var/log/httpd/error_log` for error messages.
279
280
## Caddy
281
282
[Caddy](https://caddyserver.com/) is an open source webserver with a very light configuration that makes a fine reverse proxy.
283
284
After [installing](https://caddyserver.com/docs/install) caddy, configure `/etc/caddy/Caddyfile` with e.g.
285
286
```
287
domain.tld {
679b7f Ralph Thesen 2024-05-05 09:04:15 288
reverse_proxy localhost:8080
f1509e Ralph Thesen 2023-11-18 14:39:06 289
}
290
```
291
292
With a server accessible from the internet, `domain.tld` beeing a proper domain name with A/AAAA DNS records pointing to the server, caddy will [automatically](https://caddyserver.com/docs/automatic-https) serve HTTPS.