1. Install Apache2 and PHP5 (as an Apache module)

apt-get install apache2 php5 libapache2-mod-php5 php5-mysql


2. Install MySql server

apt-get install mysql-server


3. At this point you may need to restart Apache

/etc/init.d/apache2 restart


3. Create a test php file

echo "<?php phpinfo(); ?>" > /var/www/info.php


The default document root for Debian is in /var/www so you can access the test file on this location: http://yourserver/info.php

3. Install phpMyAdmin (optional but preferred by most developers and administrators)

apt-get install phpmyadmin


By default, phpmyadmin will be accessible on: http://yourserver/phpmyadmin

Trac allows wiki markup in issue descriptions and commit messages, creating links and seamless references between bugs, tasks, changesets, files and wiki pages. A timeline shows all current and past project events in order, making the acquisition of an overview of the project and tracking progress very easy. The roadmap shows the road ahead, listing the upcoming milestones.

Install and configure Trac and subversion

1. Install required packages for both Trac and Subversion. We'll be using Apache to publish the Subversion repositories

apt-get install python-setuptools trac subversion libapache2-svn libapache2-mod-python
a2enmod dav_fs


2. Create a template SVN repository which we will copy later to create new repositories.

mkdir /var/svn/
mkdir /var/svn/tmpproject
mkdir /var/svn/tmpproject/branches
mkdir /var/svn/tmpproject/tags
mkdir /var/svn/tmpproject/trunk

3. Enable the Apache SVN module

a2enmod dav_fs


4. Create a password file containing users that have access to the Subversion repositories and Trac

htpasswd -c /etc/apache2/svn.passwd user1
htpasswd /etc/apache2/svn.passwd user2


5. Edit the apache configurations to enable Trac and Subversion SVN (pico /etc/apache2/sites-enabled/000-default). Add the following lines:

<Location /svn>
DAV svn
SVNParentPath /var/svn
SVNAutoversioning on
AuthType Basic
AuthName "Subversion Repository"
AuthUserFile /etc/apache2/svn.passwd
Require valid-user
</Location>
<Location "/trac">
SetHandler mod_python
PythonHandler trac.web.modpython_frontend
PythonOption TracEnvParentDir /var/trac/
PythonOption TracUriRoot /trac
AuthType Basic
AuthName "Trac"
AuthUserFile /etc/apache2/svn.passwd
Require valid-user
</Location>


6. Create a directory for Trac projects

mkdir /var/trac


Create the first project

1. Create a subversion repository and import the directory structure from the tmpproject template

svnadmin create /var/svn/myproject --fs-type fsfs
svn import /var/svn/tmpproject file:///var/svn/myproject -m "initial import"
find /var/svn/myproject -type f -exec chmod 660 {} \;
find /var/svn/myproject -type d -exec chmod 2770 {} \;
chown -R root.www-data /var/svn/myproject


2. Create the Trac project

trac-admin /var/trac/myproject initenv
find /var/trac/myproject -type f -exec chmod 660 {} \;
find /var/trac/myproject -type d -exec chmod 2770 {} \;
chown -R root.www-data /var/trac/myproject


3. Restart Apache

/etc/init.d/apache2 restart


4. Give a user administrator permissions to the project

trac-admin /var/trac/myproject
permission add user1 TRAC_ADMIN


You can now access your Trac project by browsing with your favorite browser to http://localhost/trac/myproject.

To access the Subversion reposatory you can use any Subversion client. If you're using Windows, TortoiseSVN would be a good choice. The location to the new SVN repository is something like this: http://localhost/svn/myproject

eAccelerator only works with mod_php or php in fastcgi mode. It can't be used in cgi or cli because eAccelerator needs to set up shared memory, and this can only be done when all php instances that need to access it are forks of the first process.

1. Download the eAccelerator source. The latest version is mirrored on www.debiantutorials.com as it's not available on the official site anymore.

cd /tmp
wget http://www.debiantutorials.com/static/eaccelerator-0.9.6.1.tar.bz2


2. Extract

tar -xvjf eaccelerator-0.9.6.1.tar.bz2


3. Install php5-dev

apt-get install php5-dev


3. Compile and install the eAccelerator

phpize
./configure
make
make install


4. Configure eAccelerator as PHP extension (create a new config file: pico /etc/php5/conf.d/eaccelerator.ini)

extension="eaccelerator.so"
eaccelerator.shm_size="16"
eaccelerator.cache_dir="/var/cache/eaccelerator"
eaccelerator.enable="1"
eaccelerator.optimizer="1"
eaccelerator.check_mtime="1"
eaccelerator.debug="0"
eaccelerator.filter=""
eaccelerator.shm_max="0"
eaccelerator.shm_ttl="0"
eaccelerator.shm_prune_period="0"
eaccelerator.shm_only="0"
eaccelerator.compress="1"
eaccelerator.compress_level="9"


5. Create a cache directory

mkdir -p /var/cache/eaccelerator
chmod 0777 /var/cache/eaccelerator


5. Restart apache

/etc/init.d/apache2 restart


1. Install the apache2-mpm-itk package

apt-get install apache2-mpm-itk


2. Configure user and group for each virtual host by adding the following line somewhere between <VirtualHost *:80>...</VirtualHost>

AssignUserId [user] [group]


Replace [user] and [group] with a username and group name that already exists on the system.

3. Change the owner of the web root

chown [user].[group] [location]


Replace [user] and [group] with the username and group name configured on the virtual host. Replace [location] with the location specified as DocumentRoot for the virtual host, eg. /var/www

4. Make sure the location isn't accessible by other users (optional)

chmod o= [location]


Replace [location] with the location specified as DocumentRoot for the virtual host, eg. /var/www

5. Restart apache

/etc/init.d/apache restart


After a user authenticates themselves, the user's identity will be available in the REMOTE_USER variable. A cookie named open_id_session_id is saved to maintain each user's session.

1. Install the module

apt-get install libapache2-mod-auth-openid


2. Enable the module

a2enmod authopenid


3. You can now add the line below to any Directory, Location or File directive in the virtual host configuration or a .htaccess file .

AuthOpenIDEnabled On


Click here for more configuration options, including only allowing logins from specific OpenID providers and using a custom login page

4. Restart Apache

/etc/init.d/apache2 restart


It queries sbl-xbl.spamhaus.org, taking advantage of the Spamhaus Block List (SBL) and the Exploits Block List (XBL).

1. Download the latest mod_spamhaus deb package from sid package repository (mod_spamhaus is not available for lenny but we can use the sid package)

wget http://ftp.us.debian.org/debian/pool/main/m/mod-spamhaus/libapache2-mod-spamhaus_0.7-1_i386.deb


This package is for i386. If you are using other architecture, you can find a suitable package on the bottom of this page: http://packages.debian.org/sid/libapache2-mod-spamhaus

2. Install the package

dpkg -i libapache2-mod-spamhaus_0.7-1_i386.deb


Apache is automatically restarted and the module is enabled. If you would like to test the module you can add a line to your hosts file to make it think that your IP address is blocked (pico /etc/hosts)

127.0.0.4 1.0.168.192.sbl-xbl.spamhaus.org


Replace 1.0.168.192 with your IP address and reverse it. The IP address 192.168.0.1 should read 1.0.168.192.

By default, only POST, PUT, OPTIONS, CONNECT methods are blocked. You can add GET to the list of methods blocked in /etc/apache2/mods-enabled/mod-spamhaus.conf to block the spammers from seeing your website.

The install script handles the installation and configuration of the required services. I recommend starting with a clean Debian system to avoid conflicts.

1. Download required EHCP files

wget http://www.ehcp.net/download


2. Uncompress the files

tar zxvf ehcp_latest.tgz


3. Move into the install directory and run the install script

cd ehcp
./install.sh


Read the instructions carefully, your server will send statistical information to the EHCP developers. If you choose to move on, the install script will install all required packages including Apache, MySql and Postfix. You will need to provide some information to configure the services and set the admin passwords.

4. When the installer is finished, enter the control panel using: http://yourserver.

1. Install the module

apt-get install libapache2-mod-geoip


2. Restart Apache

/etc/init.d/apache2 restart


3. Create a new PHP file to test the module (pico /var/www/test.php or any file you can access on your server)

<?php
print_r($_SERVER);
?>


4. Navigate to the new file in a web browser (http://yourserver/test.php)

The response will be something like this:

Array
(
[GEOIP_COUNTRY_CODE] => GB
[GEOIP_COUNTRY_NAME] => United Kingdom
...
)


1. Installing the XCache package

apt-get install php5-xcache


2. Restart Apache

/etc/init.d/apache2 restart


That's it. XCache is now installed.

1. Install suPHP

apt-get install libapache2-mod-suphp


2. Disable the php5 apache module

a2dismod php5


3. Restart Apache

/etc/init.d/apache2 restart


4. You can test if suPHP is working correctly by creating a php file containing the following lines:

<?php
system('id');
?>


The script will return user/group id and name. Make sure you set the file owner to a user/group with id greater than 99.