Prérequis et installation

On installe les prérequis.

apt install php-imap php-ldap php-curl php-xmlrpc php-gd php-mysql php-cas apcupsd php-apcu php-bz2 php-intl -y
a2enmod rewrite

On crée la base de données et l'utilisateur. On modifie le mot de passe "test" par autre chose.

sudo mysql -u root -p
create database glpidb;
grant all privileges on glpidb.* to glpiuser@localhost identified by "test";
FLUSH PRIVILEGES;
quit

On télécharge GLPI, on l'extrait et on le place dans le dossier /var/www. On modifie ensuite le fichier de configuration de php.

cd /tmp/
wget https://github.com/glpi-project/glpi/releases/download/9.5.4/glpi-9.5.4.tgz
tar -xvzf glpi-9.5.4.tgz -C /var/www/
chown -R www-data /var/www/glpi/
nano /etc/php/7.3/apache2/php.ini

memory_limit = 64M ;        // max memory limit
file_uploads = on ;
max_execution_time = 600 ;  // not mandatory but recommended
session.auto_start = off ;
session.use_trans_sid = 0 ; // not mandatory but recommended

Création du virtualhost

cd /etc/apache2/sites-available/
nano glpi.littoral1.fr.conf

<VirtualHost *:80>
	ServerName glpi.littoral1.fr
	ServerAlias www.glpi.littoral1.fr
	ServerAdmin Administrateur@littoral1.fr
	DocumentRoot /var/www/glpi
	ErrorLog ${APACHE_LOG_DIR}/error.log
	CustomLog ${APACHE_LOG_DIR}/access.log combined
    Redirect permanent / https://glpi.littoral1.fr/
</VirtualHost>

<VirtualHost *:443>
	ServerName glpi.littoral1.fr
	ServerAlias www.glpi.littoral1.fr
	ServerAdmin Administrateur@littoral1.fr
	DocumentRoot /var/www/glpi
         <Directory /var/www/glpi> 
              Options -Indexes +FollowSymLinks 
              AllowOverride All 
              Require all granted 
         </Directory> 
    # Paramètres SSL 
    SSLEngine on 
    SSLProtocol all -SSLv2 -SSLv3 
    SSLHonorCipherOrder on 
    SSLCompression off 
    SSLOptions +StrictRequire 
    SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA$
    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" 
 
	# Log
    LogLevel warn 
    ErrorLog ${APACHE_LOG_DIR}/*.glpi.local-error.log 
    CustomLog ${APACHE_LOG_DIR}/*.glpi.local-access.log combined 
	SSLCertificateFile "/etc/apache2/ssl/cert.pem"
	SSLCertificateKeyFile "/etc/apache2/ssl/cert.pem"
</VirtualHost>

On active le site.

cp -arp /etc/apache2/mods-available/headers.load  /etc/apache2/mods-enabled/headers.load
systemctl restart apache2
a2ensite glpi.littoral1.fr
systemctl reload apache2
systemctl restart apache2