# Prérequis et installation On installe les prérequis. ```bash apt install php-imap php-ldap php-curl php-xmlrpc php-gd php-mysql php-cas apcupsd php-apcu php-bz2 php-intl -y a2enmod rewrite ``` On crée la base de données et l'utilisateur. On modifie le mot de passe "test" par autre chose. ```SQL sudo mysql -u root -p create database glpidb; grant all privileges on glpidb.* to glpiuser@localhost identified by "test"; FLUSH PRIVILEGES; quit ``` On télécharge GLPI, on l'extrait et on le place dans le dossier /var/www. On modifie ensuite le fichier de configuration de php. ```bash cd /tmp/ wget https://github.com/glpi-project/glpi/releases/download/9.5.4/glpi-9.5.4.tgz tar -xvzf glpi-9.5.4.tgz -C /var/www/ chown -R www-data /var/www/glpi/ nano /etc/php/7.3/apache2/php.ini ``` > ``` > memory_limit = 64M ; // max memory limit > file_uploads = on ; > max_execution_time = 600 ; // not mandatory but recommended > session.auto_start = off ; > session.use_trans_sid = 0 ; // not mandatory but recommended > ``` Création du virtualhost ```bash cd /etc/apache2/sites-available/ nano glpi.littoral1.fr.conf ``` ``` ServerName glpi.littoral1.fr ServerAlias www.glpi.littoral1.fr ServerAdmin Administrateur@littoral1.fr DocumentRoot /var/www/glpi ErrorLog ${APACHE_LOG_DIR}/error.log CustomLog ${APACHE_LOG_DIR}/access.log combined Redirect permanent / https://glpi.littoral1.fr/ ServerName glpi.littoral1.fr ServerAlias www.glpi.littoral1.fr ServerAdmin Administrateur@littoral1.fr DocumentRoot /var/www/glpi Options -Indexes +FollowSymLinks AllowOverride All Require all granted # Paramètres SSL SSLEngine on SSLProtocol all -SSLv2 -SSLv3 SSLHonorCipherOrder on SSLCompression off SSLOptions +StrictRequire SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA$ Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains" # Log LogLevel warn ErrorLog ${APACHE_LOG_DIR}/*.glpi.local-error.log CustomLog ${APACHE_LOG_DIR}/*.glpi.local-access.log combined SSLCertificateFile "/etc/apache2/ssl/cert.pem" SSLCertificateKeyFile "/etc/apache2/ssl/cert.pem" ``` On active le site. ```bash cp -arp /etc/apache2/mods-available/headers.load /etc/apache2/mods-enabled/headers.load systemctl restart apache2 a2ensite glpi.littoral1.fr systemctl reload apache2 systemctl restart apache2 ``` [![image-1615716599534.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/TrhC7fEfXiCpgx71-image-1615716599534.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/TrhC7fEfXiCpgx71-image-1615716599534.png) On se rend ensuite dans un navigateur web : [https://glpi.littoral1.fr/](https://glpi.littoral1.fr/) [![image-1615716751205.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/BeVXo6dt2ZnQl04P-image-1615716751205.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/BeVXo6dt2ZnQl04P-image-1615716751205.png) [![image-1615716838684.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/YQhujWICoTSD5s1A-image-1615716838684.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/YQhujWICoTSD5s1A-image-1615716838684.png) [![image-1615716849827.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/VYD3WVTFc8wPPpAR-image-1615716849827.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/VYD3WVTFc8wPPpAR-image-1615716849827.png) L'étape suivante vérifie si tout est bon avant installation, ici non. [![image-1615720674121.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/zKmeaBbuWuGbs6ma-image-1615720674121.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/zKmeaBbuWuGbs6ma-image-1615720674121.png) Pour l'avertissement, GLPi ne peut pas vérifier si cela est autorisé ou non. On le vérifie. [![image-1615720736507.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/Mv977ZOAFbvTB9Ks-image-1615720736507.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/Mv977ZOAFbvTB9Ks-image-1615720736507.png) L'accès est bien interdit. On clique sur "Continuer". On rentre l'adresse du serveur MySQL et l'utilisateur de la base de données. [![image-1615720907856.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/3v8PefobS1RQ88Kb-image-1615720907856.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/3v8PefobS1RQ88Kb-image-1615720907856.png) [![image-1615720934723.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/MNHX7lAhvSnEZuM9-image-1615720934723.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/MNHX7lAhvSnEZuM9-image-1615720934723.png) On attend puis on continue. [![image-1615720943675.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/4CfjZKg4mjqqxs1J-image-1615720943675.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/4CfjZKg4mjqqxs1J-image-1615720943675.png) [![image-1615720954776.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/2J8E7XW8NGDGR1fd-image-1615720954776.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/2J8E7XW8NGDGR1fd-image-1615720954776.png) On a les utilisateurs par défaut. On doit ensuite les désactiver et/ou changer les mots de passe. [![image-1615720978112.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/nugwFrnROR2BwmwJ-image-1615720978112.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/nugwFrnROR2BwmwJ-image-1615720978112.png) [![image-1615720988346.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/9lAp0i7k0N8OUvZH-image-1615720988346.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/9lAp0i7k0N8OUvZH-image-1615720988346.png) [![image-1615721012906.png](https://docs.khroners.fr/uploads/images/gallery/2021-03/scaled-1680-/YoV5zCoxx8wFwKEm-image-1615721012906.png)](https://docs.khroners.fr/uploads/images/gallery/2021-03/YoV5zCoxx8wFwKEm-image-1615721012906.png)