Update Setting up a fresh install of Canopy over Debian 12 Bookworm

rainbow napkin 2025-04-24 01:45:55 +00:00
parent 5b625cfa42
commit 0f2575a2d0

@ -15,6 +15,7 @@ title: Setting up a fresh install of Canopy over Debian 12 Bookworm
## Step-by-step procedure for Setting up a fresh install of Canopy over Debian 12 Bookworm: ## Step-by-step procedure for Setting up a fresh install of Canopy over Debian 12 Bookworm:
Before installing make sure you have already prepped your [database](mongodb-debian). Before installing make sure you have already prepped your [database](mongodb-debian).
## Installation ## Installation
@ -25,7 +26,7 @@ Before installing make sure you have already prepped your [database](mongodb-deb
5. Fill out the newly copied config with a text editor, don't forget to set your DB password or make up a sessionSecret! 5. Fill out the newly copied config with a text editor, don't forget to set your DB password or make up a sessionSecret!
## Canopy as a System Service Setup ## Canopy as a System Service Setup
1. Create a user named 'canopy' and move the production canopy folder to it's home dir 1. Create a user named 'canopy' and move the production canopy folder to it's home dir, making sure to give it ownership and exclusive permissions
2. Create a new file at `/etc/systemd/system/canopy.service`, and add: 2. Create a new file at `/etc/systemd/system/canopy.service`, and add:
``` ```
[Unit] [Unit]
@ -43,10 +44,10 @@ WantedBy=multi-user.target
``` ```
3. Run `sudo systemctl start canopy` to run canopy in the background as a system service 3. Run `sudo systemctl start canopy` to run canopy in the background as a system service
## Reverse-Proxy Setup ## SSL Setup
###This will be documented once we start public testing, for now development boxes don't need this.
###At some point we will document using ngnix as a reverse proxy for canopy. ## Reverse-Proxy Setup
1. Install NGINX `sudo apt install nginx`
## Server-Hardening ## Server-Hardening
###This will be documented once we start public testing, for now development boxes don't need this. ###This will be documented once we start public testing, for now development boxes don't need this.