From 384eb7a315c0895b94ba8986016b0b43360f5533 Mon Sep 17 00:00:00 2001 From: Bachir Soussi Chiadmi Date: Fri, 1 May 2020 12:10:27 +0200 Subject: [PATCH] improved phpmyadmin install --- assets/lemp/default.nginxconf | 2 +- bin/lemp.sh | 16 +++++++++++++++- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/assets/lemp/default.nginxconf b/assets/lemp/default.nginxconf index c1cb224..93741e8 100644 --- a/assets/lemp/default.nginxconf +++ b/assets/lemp/default.nginxconf @@ -62,7 +62,7 @@ server { fastcgi_param PATH_INFO $fastcgi_path_info; fastcgi_param HTTP_PROXY ""; - fastcgi_param HTTPS on; + fastcgi_param HTTPS off; fastcgi_request_buffering off; } diff --git a/bin/lemp.sh b/bin/lemp.sh index dca538b..79c93ab 100755 --- a/bin/lemp.sh +++ b/bin/lemp.sh @@ -76,11 +76,15 @@ echo -e "Installing PHP 7.0" sleep 3 apk add php7 php7-fpm php7-pdo_mysql php7-opcache php7-curl php7-mbstring php7-zip php7-xml php7-gd php7-mcrypt php7-imagick php7-phar php7-json php7-dom php7-tokenizer php7-iconv php7-xmlwriter +# to make php5 availabe +# echo "http://dl-cdn.alpinelinux.org/alpine/v3.7/main" >> /etc/apk/repositories +# apk add php5-fpm php5-pdo_mysql php5-opcache php5-curl php5-zip php5-xml php5-gd php5-mcrypt php5-phar php5-json php5-dom php5-iconv + echo -e "Configuring PHP" sed -i "s/memory_limit\ =\ 128M/memory_limit = 512M/g" /etc/php7/php.ini -TIMEZONE="Europe/Helsinki" +TIMEZONE="Europe/Paris" sed -i "s|;*date.timezone =.*|date.timezone = ${TIMEZONE}|i" /etc/php7/php.ini sed -i "s|user = nobody|user = www|i" /etc/php7/php-fpm.d/www.conf @@ -106,6 +110,16 @@ service php-fpm7 restart chmod +r /etc/phpmyadmin/config.inc.php +# /** +# * This is needed for cookie based authentication to encrypt password in +# * cookie. Needs to be 32 chars long. +# */ +_blowfish="$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32)" +sed -i "s|$cfg['blowfish_secret'] = ''|$cfg['blowfish_secret'] = '${_blowfish}'|i" /etc/phpmyadmin/config.inc.php + +mkdir /usr/share/webapps/phpmyadmin/tmp +chmod 777 /usr/share/webapps/phpmyadmin/tmp + echo -e "securing phpMyAdmin" _pass="$(< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c8)" _encrypted=$(openssl passwd -apr1 $_pass)