You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: admin-and-features/setting-up-your-instance/standalone-package-based-installation.md
+36-31Lines changed: 36 additions & 31 deletions
Original file line number
Diff line number
Diff line change
@@ -17,7 +17,7 @@ We will cover system requirements, additional dependencies, installation steps,
17
17
Examples will be made by using [**Debian 12**](https://www.debian.org/releases/stable/releasenotes)**and Ubuntu based system.**
18
18
19
19
{% hint style="info" %}
20
-
We also provide **RPM packages** -the procedure is similar to the one for installing DEB packages. If you need help installing RPM packages[ this guide offers help.](https://phoenixnap.com/kb/how-to-install-rpm-file-centos-linux)
20
+
We also provide **RPM packages** -the procedure is similar to the one for installing DEB packages. If you need help installing RPM packages[ this guide offers help.](https://phoenixnap.com/kb/how-to-install-rpm-file-centos-linux)
21
21
{% endhint %}
22
22
23
23
### Hardware Requirements
@@ -51,7 +51,7 @@ Defguard core uses PostgreSQL database, so if you do not have installed and conf
51
51
First of all, install postgresql:
52
52
53
53
```
54
-
# apt install postgresql
54
+
apt install postgresql
55
55
```
56
56
57
57
Now you can launch a default user and create a new superuser for your database. We create user, password and database with name `defguard`, beacuse this is by default in `/etc/defguard/core.conf`, you can change whatever you want.
After creating a user and database we can connect our new user to this database. To make it easier to connect now and then, we could try to add auth file
defguard=# exit # for now we can leave it, the purpose of this connection is to verify your user is able to communicate with database
71
+
defguard=# exit
72
72
```
73
73
74
+
- we created `.pgpass` file that consist of `<hostname>:<port>:<database>:<user>:<password>`
75
+
- we connected into the `defguard` database to verify `defguard` user can communicate with the database
76
+
74
77
#### NGINX
75
78
76
79
To expose our services in the server we need to configure a reverse proxy server. For this we will use nginx web server with ssl certificates for enabling https protocol.
77
80
78
81
To get started, we need to install:
79
82
80
83
```
81
-
# apt install nginx certbot
84
+
apt install nginx certbot
82
85
```
83
86
84
87
Enable nginx service
85
88
86
89
```
87
-
# systemctl enable nginx.service
88
-
# systemctl start nginx.service
90
+
systemctl enable nginx.service
91
+
systemctl start nginx.service
89
92
```
90
93
91
94
Disable all default domains:
92
95
93
96
```
94
-
# unlink /etc/ngins/sites-enabled/default
97
+
unlink /etc/nginx/sites-enabled/default
95
98
```
96
99
97
100
## Installing packages
@@ -101,25 +104,25 @@ Disable all default domains:
101
104
Navigate to [core repository release](https://github.com/DefGuard/defguard/releases) and choose version of core package that you want to obtain that has debian package and then swap `<version>` in the following command:
You can also download directly from the Github realse page, but please note that you should know the path where this could be storead after downloading. Once the package is downloaded, install it using dpkg:
You can also download directly from the Github realse page, but please note that you should know the path where this could be storead after downloading. Once the package is downloaded, install it using dpkg:
Navigate to [proxy repository release](https://github.com/DefGuard/proxy/releases) and choose version of core package that you want to obtain that has debian package and then swap `<version>` in the following command:
You can also download directly from the Github realse page, but please note that you should know the path where this could be storead after downloading. Once the package is downloaded, install it using dpkg:
Before we run defguard and configure the reverse proxy, first let's prepare SSL certificates that will be used by the NGINX service. We will generate a certificate for two domains we use in this example: _my-service.defguard.net_ and _enroll.defguard.net_:
0 commit comments