CentOS 7にPostgreSQLとNginxを使用してMattermostをインストールする

サーバーのローカルIP                 : 192.168.2.100  
サーバーのFQDN                     : mattermost.example.com  
Mattermostデータベースの名前        : mattermost  
Mattermostデータベースにアクセスするユーザー : mmuser  
データベース内のmmuserのパスワード: DBAss47slX3

[root@mattermost ~]echo -en "Subject: Testmail\n\nThis is a test\n" | sendmail [email protected]

C:\>ping mattermost.example.com  
Pinging mattermost.witron.com [192.168.2.100] with 32 bytes of data:  
Reply from 192.168.2.100: bytes=32 time<1ms TTL=64  
Reply from 192.168.2.100: bytes=32 time<1ms TTL=64  
Reply from 192.168.2.100: bytes=32 time<1ms TTL=64  
Reply from 192.168.2.100: bytes=32 time<1ms TTL=64  
  
Ping statistics for 192.168.2.100:  
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),  
Approximate round trip times in milli-seconds:  
Minimum = 0ms, Maximum = 0ms, Average = 0ms

[root@mattermost ~] yum -y install wget

[root@mattermost ~] wget http://ipinfo.io/ip -qO -  
46.101.122.124

[root@mattermost ~] systemctl status firewalld

[root@mattermost ~] systemctl stop firewalld  
[root@mattermost ~] systemctl disable firewalld

[root@mattermost ~] yum -y install postgresql-server postgresql-contrib

[root@mattermost ~] postgresql-setup initdb  
Initializing database ... OK

[root@mattermost ~]# systemctl start postgresql  
[root@mattermost ~]# systemctl enable postgresql  
Created symlink from /etc/systemd/system/multi-user.target.wants/postgresql.service to /usr/lib/systemd/system/postgresql.service.

[root@mattermost ~]# systemctl status postgresql

? postgresql.service - PostgreSQL database server  
Loaded: loaded (/usr/lib/systemd/system/postgresql.service; enabled; vendor preset: disabled)  
Active: active (running) since Fri 2016-03-04 11:37:50 CET; 44s ago  
Main PID: 17660 (postgres)  
CGroup: /system.slice/postgresql.service  
??17660 /usr/bin/postgres -D /var/lib/pgsql/data -p 5432  
??17661 postgres: logger process  
??17663 postgres: checkpointer process  
??17664 postgres: writer process  
??17665 postgres: wal writer process  
??17666 postgres: autovacuum launcher process  
??17667 postgres: stats collector process  
  
Mar 04 11:37:48 mattermost systemd[1]: Starting PostgreSQL database server...  
Mar 04 11:37:50 mattermost systemd[1]: Started PostgreSQL database server.  
Mar 04 11:37:59 mattermost systemd[1]: Started PostgreSQL database server.

[root@mattermost ~]# sudo -i -u postgres

-bash-4.2$

-bash-4.2$ psql  
psql (9.2.15)  
Type "help" for help.  
postgres=#

postgres=# CREATE DATABASE mattermost;  
CREATE DATABASE

postgres=# **CREATE USER mmuser WITH PASSWORD '*DBAss47slX3*';  
CREATE ROLE

postgres=# GRANT ALL PRIVILEGES ON DATABASE mattermost to mmuser;  
GRANT  
postgres=#

postgres=# \q  
-bash-4.2$

-bash-4.2$ exit  
logout  
[root@mattermost ~]#

vi /var/lib/pgsql/data/pg_hba.conf

host    all             all             127.0.0.1/32            ident

host    all             all             127.0.0.1/32            md5

[root@mattermost ~]# systemctl restart postgresql

[root@mattermost ~]# psql --host=127.0.0.1 --dbname=mattermost --username=mmuser --password  
Password for user mmuser:  
psql (9.2.15)  
Type "help" for help.  
  
mattermost=> \q  
[root@mattermost ~]#

[root@mattermost ~]# cd  
[root@mattermost ~]# wget -q "https://github.com/mattermost/platform/releases/download/v2.0.0/mattermost.tar.gz" -O mattermost.tar.gz

[root@mattermost ~]# tar -xvzf mattermost.tar.gz  
[root@mattermost ~]# mv mattermost /opt

[root@mattermost ~]# useradd -r mattermost -U -s /sbin/nologin

[root@mattermost ~]# mkdir -p /opt/mattermost/data

[root@mattermost ~]# chown -R mattermost:mattermost /opt/mattermost  
[root@mattermost ~]# chmod -R g+w /opt/mattermost**

*/opt/mattermost/config/config.json*

"SqlSettings": {  
 "DriverName": "mysql",  
 "DataSource": "mmuser:mostest@tcp(dockerhost:3306)/mattermost_test?charset=utf8mb4,utf8",  
 "DataSourceReplicas": [],  
 "MaxIdleConns": 10,  
 "MaxOpenConns": 10,  
 "Trace": false,  
 "AtRestEncryptKey": "7rAh6iwQCkV4cA1Gsg3fgGOXJAQ43QVg"  
},

"SqlSettings": {  
 "DriverName": "postgres",  
 "DataSource": "postgres://mmuser:[email protected]:5432/mattermost?sslmode=disable&connect_timeout=10",  
 "DataSourceReplicas": [],  
 "MaxIdleConns": 10,  
 "MaxOpenConns": 10,  
 "Trace": false,  
 "AtRestEncryptKey": "7rAh6iwQCkV4cA1Gsg3fgGOXJAQ43QVg"  
},

*/opt/mattermost/config/config.json*

 "EmailSettings": {  
 "EnableSignUpWithEmail": true,  
 "EnableSignInWithEmail": true,  
 "EnableSignInWithUsername": false,  
 "SendEmailNotifications": false,  
 "RequireEmailVerification": false,  
 "FeedbackName": "",  
 "FeedbackEmail": "",  
 "SMTPUsername": "",  
 "SMTPPassword": "",  
 "SMTPServer": "",  
 "SMTPPort": "",  
 "ConnectionSecurity": "",  
 "InviteSalt": "bjlSR4QqkXFBr7TP4oDzlfZmcNuH9YoS",  
 "PasswordResetSalt": "vZ4DcKyVVRlKHHJpexcuXzojkE5PZ5eL",  
 "SendPushNotifications": false,  
 "PushNotificationServer":  
},  

 "EmailSettings": {  
 "EnableSignUpWithEmail": true,  
 "EnableSignInWithEmail": true,  
 "EnableSignInWithUsername": false,  
 "SendEmailNotifications": false,  
 "RequireEmailVerification": false,  
 "FeedbackName": "",  
 "FeedbackEmail": "",  
 "SMTPUsername": "",  
 "SMTPPassword": "",  
 "SMTPServer": "127.0.0.1",  
 "SMTPPort": "25",  
 "ConnectionSecurity": "",  
 "InviteSalt": "bjlSR4QqkXFBr7TP4oDzlfZmcNuH9YoS",  
 "PasswordResetSalt": "vZ4DcKyVVRlKHHJpexcuXzojkE5PZ5eL",  
 "SendPushNotifications": false,  
 "PushNotificationServer": ""  
},  

        "ListenAddress": ":8065",

        "ListenAddress": "127.0.0.1:8065",

[root@mattermost ~]# su - mattermost -s /bin/bash  

Last login: Fri Mar 4 12:47:52 CET 2016 on pts/0  
su: warning: cannot change directory to /home/mattermost: No such file or directory  
-bash-4.2$

-bash-4.2$ cd /opt/mattermost/bin/

-bash-4.2$ ./platform

[2016/03/04 13:00:10 CET] [INFO] Loaded system translations for 'en' from '/opt/mattermost/i18n/en.json'  
[2016/03/04 13:00:10 CET] [INFO] Current version is 2.0.0 (5950/Sat Feb 13 15:42:01 UTC 2016/c71c5cef632c7dc68072167c6fe091a60835fa02)  
[2016/03/04 13:00:10 CET] [INFO] Enterprise Enabled: false  
[2016/03/04 13:00:10 CET] [INFO] Current working directory is /opt/mattermost/bin  
[2016/03/04 13:00:10 CET] [INFO] Loaded config file from /opt/mattermost/config/config.json  
[2016/03/04 13:00:10 CET] [INFO] Server is initializing...  
[2016/03/04 13:00:10 CET] [INFO] Pinging sql master database  
[2016/03/04 13:00:10 CET] [INFO] Pinging sql replica-0 database  
[2016/03/04 13:00:10 CET] [DEBG] Deleting any unused pre-release features  
[2016/03/04 13:00:10 CET] [INFO] The database schema has been set to version 2.0.0  
[2016/03/04 13:00:10 CET] [DEBG] Initializing user api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing team api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing channel api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing post api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing web socket api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing file api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing command api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing admin api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing oauth api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing webhook api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing preference api routes  
[2016/03/04 13:00:10 CET] [DEBG] Initializing license api routes  
[2016/03/04 13:00:10 CET] [DEBG] Parsing server templates at /opt/mattermost/api/templates/  
[2016/03/04 13:00:10 CET] [DEBG] Initializing web routes  
[2016/03/04 13:00:10 CET] [DEBG] Using static directory at /opt/mattermost/web/static/  
[2016/03/04 13:00:10 CET] [DEBG] Parsing templates at /opt/mattermost/web/templates/  
[2016/03/04 13:00:10 CET] [INFO] Starting Server...  
[2016/03/04 13:00:10 CET] [INFO] Server is listening on 127.0.0.1:8065  
[2016/03/04 13:00:10 CET] [INFO] RateLimiter is enabled  
[2016/03/04 13:00:10 CET] [DEBG] Checking for security update from Mattermost  
[2016/03/04 13:00:10 CET] [EROR] Failed to get security update information from Mattermost.

-bash-4.2$ exit  
logout  
[root@mattermost ~]#

[root@mattermost ~]# chown -R mattermost:mattermost /opt/mattermost

*/etc/systemd/system/mattermost.service*

[Unit]  
Description=Mattermost  
After=syslog.target network.target  
  
[Service]  
Type=simple  
WorkingDirectory=/opt/mattermost/bin  
User=mattermost  
ExecStart=/opt/mattermost/bin/platform  
PIDFile=/var/spool/mattermost/pid/master.pid  
  
[Install]  
WantedBy=multi-user.target

[root@mattermost ~]# systemctl daemon-reload

[root@mattermost ~]# systemctl start mattermost.service

[root@mattermost ~]# systemctl status mattermost.service  
? mattermost.service - Mattermost  
Loaded: loaded (/etc/systemd/system/mattermost.service; disabled; vendor preset: disabled)  
 Active: active (running) since Fri 2016-03-04 14:03:40 CET; 4s ago  
Main PID: 18573 (platform)  
CGroup: /system.slice/mattermost.service  
??18573 /opt/mattermost/bin/platform  
...
...

[root@mattermost ~]# systemctl enable mattermost.service  
Created symlink from /etc/systemd/system/multi-user.target.wants/mattermost.service to /etc/systemd/system/mattermost.service.

[root@mattermost config]# curl -s "http://127.0.0.1:8065" | grep -b "2015 Mattermost"

11343:        © 2015 Mattermost, Inc.

[root@mattermost config]# chcon -Rt httpd_sys_content_t /opt/mattermost/  
[root@mattermost config]# setsebool -P httpd_can_network_connect 1

[root@mattermost config]# yum -y install epel-release && yum update

[root@mattermost config]# yum -y install nginx

[root@mattermost config]# cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak

# For more information on configuration, see:  
# * Official English Documentation: http://nginx.org/en/docs/  
# * Official Russian Documentation: http://nginx.org/ru/docs/  
  
user nginx;  
worker_processes auto;  
error_log /var/log/nginx/error.log;  
pid /run/nginx.pid;  
  
events {  
 worker_connections 1024;  
}  
  
http {  
 log_format main '$remote_addr - $remote_user [$time_local] "$request" '  
 '$status $body_bytes_sent "$http_referer" '  
 "$http_user_agent" "$http_x_forwarded_for"';  
  
 access_log /var/log/nginx/access.log main;  
  
 sendfile on;  
 tcp_nopush on;  
 tcp_nodelay on;  
 keepalive_timeout 65;  
 types_hash_max_size 2048;  
  
 include /etc/nginx/mime.types;  
 default_type application/octet-stream;  
  
 # Load modular configuration files from the /etc/nginx/conf.d directory.  
 # See http://nginx.org/en/docs/ngx_core_module.html#include  
 # for more information.  
 include /etc/nginx/conf.d/*.conf;  
  
 server {  
 server_name mattermost.example.com;  
 location / {  
 client_max_body_size 50M;  
 proxy_set_header Upgrade $http_upgrade;  
 proxy_set_header Connection "upgrade";  
 proxy_set_header Host $http_host;  
 proxy_set_header X-Real-IP $remote_addr;  
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;  
 proxy_set_header X-Forwarded-Proto $scheme;  
 proxy_set_header X-Frame-Options SAMEORIGIN;  
 proxy_pass http://127.0.0.1:8065;  
 }  
 }  
}

[root@mattermost config]# nginx -t  
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok  
ginx: configuration file /etc/nginx/nginx.conf test is successful

[root@mattermost config]# systemctl start nginx

[root@mattermost config]# systemctl status nginx

...  
Active: active (running)...  
...

[root@mattermost config]# systemctl enable nginx  
Created symlink from /etc/systemd/system/multi-user.target.wants/nginx.service to /usr/lib/systemd/system/nginx.service.

[root@mattermost config]# systemctl start firewalld  
[root@mattermost config]# systemctl enable firewalld  
Created symlink from /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service to /usr/lib/systemd/system/firewalld.service.  
Created symlink from /etc/systemd/system/basic.target.wants/firewalld.service to /usr/lib/systemd/system/firewalld.service.

[root@mattermost config]# firewall-cmd --zone=public --add-port=80/tcp --permanent  
success  
[root@mattermost config]# firewall-cmd --reload  
success