{"type":"doc","content":[{"type":"heading","attrs":{"level":2},"content":[{"text":"Contents","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SORMAS SERVER (LINUX)","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#SORMAS-SERVER-(LINUX)"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Server Requirements:","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Server-Requirements%3A"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Cloud server Example","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Cloud-server-Example"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Physical server Example","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Physical-server-Example"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Prerequisites:","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Prerequisites"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Step 1: Install JAVA","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Step-1%3A-Install-JAVA"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Step 2: Postgres Database","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Step-2%3A-Postgres-Database"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Step 3: Install Temporal tables","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Step-3%3A-Install-Temporal-tables"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Step 4: Download the deployment package","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Step-4%3A-Download-the-deployment-package"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Step 5: SORMAS Installation","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Step-5%3A-SORMAS-Installation"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Step 6: Web Server Setup (Apache)","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Step-6%3A-Web-Server-Setup-(Apache)"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Apache Installation","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Apache-Installation"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create configuration file","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Create-configuration-file"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Configure logging","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Configure-logging"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SSL key config","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#SSL-key-config"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add a proxy pass","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Add-a-proxy-pass"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Configure security settings","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Configure-security-settings"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Activate output compression","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Activate-output-compression"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Provide the Android apk","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Provide-the-Android-apk"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Apache 2 security","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Apache-2-security"}}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Firewall","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Firewall"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Postfix Mail Server","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Postfix-Mail-Server"}}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Install postfix and mailutils","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Install-postfix-and-mailutils"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Configure your system","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#Configure-your-system"}}]}]}]}]}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"R Software Environment","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#R-Software-Environment"}}]}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"SORMAS to SORMAS Certificate Setup","type":"text","marks":[{"type":"link","attrs":{"href":"https://sormasfoundation.atlassian.net/wiki/spaces/SORMAS/pages/22708250#SORMAS-to-SORMAS-Certificate-Setup"}}]}]}]}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"SORMAS SERVER (LINUX)","type":"text"}]},{"type":"paragraph","content":[{"text":"This guide explains how to set up a SORMAS server on Linux and Windows systems, the latter only intended for usage on development systems. Just so you know, certain parts of the setup script will not be executed on Windows.","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Server Requirements:","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Cloud server Example","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"AWS EC2 (for 150 Concurrent users)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Instance Type: t2.large(type: gp2; size:8 GiB)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Storage: 50 GiB/ 50 GB or more","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"EXTRA: we need to configure our domain name if needed and import to have an application load balancer","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Linux Server (Recommended: Ubuntu 22.04.1 LTS (GNU/Linux 5.15.0-1030-aws x86_64))","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"To access the database we can use any tools, for Example - pgAdmin4/DBeaver","type":"text"}]}]}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Physical server Example","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Operating System: Linux/UNIX (Recommended: Ubuntu 22.04.1)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"RAM: 8 GB or more","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Storage: 50 GB or more","type":"text"}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Prerequisites","type":"text"}]},{"type":"codeBlock","content":[{"text":"1. Zulu OpenJDK (JAVA 11 JDK)\n\n2. Check for “GCC” gcc --version # and install if missing apt install gcc\n\n3. Check for “make” make --version # and install if missing apt install make\n\n4. Check for “unzip” unzip --version # and install if missing apt install unzip\n\n5. Check for “zip” zip --version and install if missing apt install zip\n\n6. Check for “acl” acl --version and install if missing apt install acl\n\n7. Docker version 23.0.1 (Optional)\n\n8. Docker Compose version v2.16.0 (Optional)\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Step 1: Install JAVA","type":"text"}]},{"type":"paragraph","content":[{"text":"Download and install the Java 11 JDK (not JRE) for your operating system. We suggest using the ","type":"text"},{"text":"Zulu OpenJDK","type":"text","marks":[{"type":"underline"},{"type":"strong"},{"type":"link","attrs":{"href":"https://www.azul.com/downloads/?package=jdk#zulu"}}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"Follow the below steps for the Installation.","type":"text"}]},{"type":"codeBlock","content":[{"text":"# Receive key from Ubuntu and add that to trusted set of keys.\nsudo apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv-keys 0xB1998361219BD9C9\n\n# Add Azul repository.\nsudo apt-add-repository 'deb https://repos.azul.com/zulu/deb/ stable main'\n\n# Update the information about available package.\nsudo apt-get update\n\n# Install the required Azul Zulu package.\nsudo apt-get install zulu1","type":"text"}]},{"type":"paragraph"},{"type":"mediaSingle","attrs":{"layout":"center","width":760,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1406,"alt":"image-20240503-085753.png","id":"c7788c56-69d3-4f7b-98f5-bb80953bb532","collection":"contentId-22708250","type":"file","height":694}}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Step 2: Postgres Database","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Install PostgreSQL (currently 14 to 15) on your system (manuals for all OS can be found here: ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://www.postgresql.org/download"}},{"text":" )","type":"text"}]}]}]},{"type":"paragraph","content":[{"text":"or follow the below steps 👇","type":"text"}]},{"type":"codeBlock","content":[{"text":"# Create the file repository configuration:\nsudo sh -c 'echo \"deb https://apt.postgresql.org/pub/repos/apt $(lsb_release -cs)-pgdg main\" > /etc/apt/sources.list.d/pgdg.list'\n\n# Import the repository signing key:\nwget --quiet -O - https://www.postgresql.org/media/keys/ACCC4CF8.asc | sudo apt-key add -\n\n# Update the package lists:\nsudo apt-get update\n\n# Install the latest version of PostgreSQL.\n# If you want a specific version, use 'postgresql-12' or similar instead of 'postgresql':\nsudo apt-get -y install postgresql","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":760,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1572,"alt":"image-20240503-085833.png","id":"64ec4464-100a-4264-b324-18a7a7ef5af8","collection":"contentId-22708250","type":"file","height":456}}]},{"type":"paragraph","content":[{"text":"Once you have installed the Postgresql edit the postgresql.conf file like below, and this is the minimum value, you can make it higher based on your needs.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Set max_connections = 288 and max_prepared_transactions = 256 (at least, the sum of all connection pools) in ","type":"text"},{"text":"postgresql.conf","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"paragraph","content":[{"text":"(e.g. ","type":"text"},{"text":"/etc/postgresql/14.0/main/postgresql.conf","type":"text","marks":[{"type":"code"}]},{"text":";) - make sure the property is uncommented and restart(","type":"text"},{"text":"service postgresql restart","type":"text","marks":[{"type":"code"}]},{"text":") the service to apply the changes.","type":"text"}]},{"type":"paragraph","content":[{"text":"Note","type":"text","marks":[{"type":"underline"},{"type":"strong"}]},{"text":":","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"9fd8efc5-0960-49c0-977c-9fc93719453e"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"background":"#eaecf0","rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Action","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"background":"#eaecf0","rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Command","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Start","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service postgresql start","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Stop","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service postgresql stop","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Restart","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service postgresql restart","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Status","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service postgresql status","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Step 3: Install Temporal tables","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Install the \"temporal tables\" extension for Postgres (","type":"text"},{"type":"inlineCard","attrs":{"url":"https://github.com/arkhipov/temporal_tables"}},{"text":" )","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"sudo apt-get install libpq-dev\n\n# Preferred to mention the version ex:(sudo apt-get install postgresql-server-dev-15)\nsudo apt-get install postgresql-server-dev-all\n\nsudo apt install pgxnclient\n\n# Check for GCC:\ngcc --version # and install if missing\n\nsudo pgxn install temporal_tables\n# The packages can be removed afterward","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Step 4: Download the deployment package","type":"text"}]},{"type":"paragraph","content":[{"text":"Get the latest SORMAS build by downloading the ZIP archive from the latest release on GitHub: ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://github.com/sormas-foundation/SORMAS-Project/releases/latest"}},{"text":" ","type":"text"}]},{"type":"paragraph","content":[{"text":"Unzip the archive, copy/upload its contents to /root/deploy/sormas/$(date +%F) and make the setup script executable (as root user).","type":"text"}]},{"type":"codeBlock","content":[{"text":"# Change to root user\nsudo su\n\n# Make directory\nmkdir -p /root/deploy/sormas\n\n# Go into the directory\ncd /root/deploy/sormas\n\n# Set the version\nSORMAS_VERSION=1.y.z\n\n# Download the package\nwget https://github.com/sormas-foundation/SORMAS-Project/releases/download/v${SORMAS_VERSION}/sormas_${SORMAS_VERSION}.zip\n\n# Unzip the package\nunzip sormas_${SORMAS_VERSION}.zip\n\n# Create a folder with the date and time and move the unzipped package to it.\nmv deploy/$(date +%F)\n\n# Remove the zip file\nrm sormas_${SORMAS_VERSION}.zip\n\n# Setup script executable (give permission)\nchmod +x $(date +%F)/server-setup.sh\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Step 5: SORMAS Installation","type":"text"}]},{"type":"paragraph","content":[{"text":"Note: make sure to check for “acl” ","type":"text"},{"text":"acl --version","type":"text","marks":[{"type":"code"}]},{"text":" and install it if missing ","type":"text"},{"text":"sudo apt install acl","type":"text","marks":[{"type":"code"}]}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Optional","type":"text","marks":[{"type":"strong"}]},{"text":": Open ","type":"text"},{"text":"server-setup.sh","type":"text","marks":[{"type":"code"}]},{"text":" in a text editor to customize the install paths, database access, and ports for the server. The default ports are 6080 (HTTP), 6081 (HTTPS), and 6048 (admin). Important: Do not change the name of the database user. The predefined name is used in the statements executed in the database.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"IMPORTANT","type":"text","marks":[{"type":"strong"}]},{"text":": Make sure the script is executed successfully. If anything goes wrong you need to fix the problem (or ask for help), then delete the created domain directory and re-execute the script.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"IMPORTANT","type":"text","marks":[{"type":"strong"}]},{"text":": Adjust the SORMAS configuration for your country in /opt/domains/sormas/sormas.properties","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Adjust the logging configuration in ","type":"text"},{"text":"/opt/domains/sormas/config/logback.xml","type":"text","marks":[{"type":"code"}]},{"text":" based on your needs (e.g. configure and activate the email appender)","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Set up the database and a Payara domain for SORMAS by executing the setup script: ","type":"text"},{"text":"sudo -s ./server-setup.sh","type":"text","marks":[{"type":"code"}]},{"text":" Press enter whenever asked for it.","type":"text"}]}]}]},{"type":"mediaSingle","attrs":{"layout":"center","width":760,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1234,"alt":"image-20240503-085934.png","id":"3cef1079-622d-4796-a9af-82f66e004e36","collection":"contentId-22708250","type":"file","height":730}}]},{"type":"paragraph","content":[{"text":"Please make sure to perform the following steps after installation","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Adjust the sormas.properties file to your system.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Execute the server-update.sh file to populate the database and deploy the server.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Configure the Apache web server according to the server setup guide.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Execute the r-setup.sh file to enable disease network diagram.","type":"text"}]}]}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"To execute the server-update.sh file makes it executable using the command ","type":"text"},{"text":"chmod a+x server-update.sh","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"It is preferred to stop/kill the Payara server before executing the server-update.sh script file.","type":"text"}]},{"type":"mediaSingle","attrs":{"layout":"center","width":760,"widthType":"pixel"},"content":[{"type":"media","attrs":{"width":1481,"alt":"image-20240503-090121.png","id":"e2f4ded1-2b2f-4b0b-964e-258b29dc3fc6","collection":"contentId-22708250","type":"file","height":427}}]},{"type":"paragraph"},{"type":"paragraph","content":[{"text":"Note:","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":760.0,"localId":"e7ba0e0c-0333-4486-9519-6536c3a9c9a2"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"background":"#eaecf0","rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Action","type":"text"}]}]},{"type":"tableHeader","attrs":{"colspan":1,"background":"#eaecf0","rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Command","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Start","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service payara-sormas start","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Stop","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service payara-sormas stop","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Restart","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service payara-sormas restart","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Status","type":"text"}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"service payara-sormas status","type":"text"}]},{"type":"paragraph","content":[{"text":"(or) ps -ef | grep payara","type":"text"}]}]}]}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"Step 6: Web Server Setup (Apache)","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Apache Installation","type":"text"}]},{"type":"paragraph","content":[{"text":"Reference: ","type":"text"},{"text":"Apache2 for Ubuntu","type":"text","marks":[{"type":"link","attrs":{"href":"https://ubuntu.com/tutorials/install-and-configure-apache#2-installing-apache"}}]}]},{"type":"paragraph","content":[{"text":"sudo apt update","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"sudo apt install apache2","type":"text","marks":[{"type":"code"}]}]},{"type":"paragraph","content":[{"text":"Note","type":"text","marks":[{"type":"underline"},{"type":"strong"}]},{"text":": This is not necessary for development systems. When you are using SORMAS in a production environment you should use a http server like Apache 2 instead of putting the Payara server in the first line. Here are some things that you should do to configure the Apache server as a proxy:","type":"text"}]},{"type":"codeBlock","content":[{"text":"# Enabling the Module\na2enmod ssl\n\n# Enabling module rewrite\na2enmod rewrite\n\n# Enabling module proxy\na2enmod proxy\n\n# Enabling module proxy_http\na2enmod proxy_http\n\n# Enabling module headers\na2enmod headers\n\n# To activate the new configuration, Restart the apache2\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Create configuration file","type":"text"}]},{"type":"paragraph","content":[{"text":"Create a new site ","type":"text"},{"text":"/etc/apache2/sites-available/your.sormas.server.url.conf","type":"text","marks":[{"type":"code"}]},{"text":" (e.g. sormas.org.conf).","type":"text"}]},{"type":"paragraph","content":[{"text":"Force SSL-secured connections: redirect from HTTP to HTTPS:","type":"text"}]},{"type":"codeBlock","content":[{"text":"\n ServerName your.sormas.server.url\n RewriteEngine On\n RewriteCond %{HTTPS} !=on\n RewriteRule ^/(.*) https://your.sormas.server.url/$1 [R,L]\n\n\n\n ServerName your.sormas.server.url\n ...\n\n\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Configure logging","type":"text"}]},{"type":"paragraph","content":[{"text":"Add the below line inside the ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" tag","type":"text"}]},{"type":"codeBlock","content":[{"text":"ErrorLog /var/log/apache2/error.log\nLogLevel warn\nLogFormat \"%h %l %u %t \\\"%r\\\" %>s %b _%D_ \\\"%{User}i\\\" \\\"%{Connection}i\\\" \\\"%{Referer}i\\\" \\\"%{User-agent}i\\\"\" combined_ext\nCustomLog /var/log/apache2/access.log combined_ext\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"SSL key config","type":"text"}]},{"type":"codeBlock","content":[{"text":"SSLEngine on\nSSLCertificateFile /etc/ssl/certs/your.sormas.server.url.crt\nSSLCertificateKeyFile /etc/ssl/private/your.sormas.server.url.key\nSSLCertificateChainFile /etc/ssl/certs/your.sormas.server.url.ca-bundle\n\n# disable weak ciphers and old TLS/SSL\nSSLProtocol all -SSLv3 -TLSv1 -TLSv1.1\nSSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE$\nSSLHonorCipherOrder off\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Add a proxy pass","type":"text"}]},{"type":"codeBlock","content":[{"text":"ProxyRequests Off\nProxyPass /sormas-ui http://localhost:6080/sormas-ui\nProxyPassReverse /sormas-ui http://localhost:6080/sormas-ui\nProxyPass /sormas-rest http://localhost:6080/sormas-rest\nProxyPassReverse /sormas-rest http://localhost:6080/sormas-rest\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Configure security settings","type":"text"}]},{"type":"codeBlock","content":[{"text":"Header always set X-Content-Type-Options \"nosniff\"\nHeader always set X-Xss-Protection \"1; mode=block\"\n# Disable Caching\nHeader always set Cache-Control \"no-cache, no-store, must-revalidate, private\"\nHeader always set Pragma \"no-cache\"\n\nHeader always set Content-Security-Policy \\\n \"default-src 'none'; \\\n object-src 'self'; \\\n script-src 'self' 'unsafe-inline' 'unsafe-eval'; \\\n connect-src https://fonts.googleapis.com https://fonts.gstatic.com 'self'; \\\n img-src *; \\\n style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; \\\n font-src https://fonts.gstatic.com 'self'; \\\n frame-src 'self'; \\\n worker-src 'self'; \\\n manifest-src 'self'; \\\n frame-ancestors 'self'\n\n# The Content-Type header was either missing or empty.\n# Ensure each page is setting the specific and appropriate content-type value for the content being delivered.\nAddType application/vnd.ms-fontobject .eot\nAddType application/x-font-opentype .otf\nAddType image/svg+xml .svg\nAddType application/x-font-ttf .ttf\nAddType application/font-woff .woff\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Activate output compression","type":"text"}]},{"type":"paragraph","content":[{"text":"(!very important)","type":"text"}]},{"type":"codeBlock","content":[{"text":"\n AddOutputFilterByType DEFLATE text/plain text/html text/xml\n AddOutputFilterByType DEFLATE text/css text/javascript\n AddOutputFilterByType DEFLATE application/json\n AddOutputFilterByType DEFLATE application/xml application/xhtml+xml\n AddOutputFilterByType DEFLATE application/javascript application/x-javascript\n DeflateCompressionLevel 1\n\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Provide the Android apk","type":"text"}]},{"type":"codeBlock","content":[{"text":"Options -Indexes\nAliasMatch \"/downloads/sormas-(.*)\" \"/var/www/sormas/downloads/sormas-$1\"\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Apache 2 security","type":"text"}]},{"type":"paragraph","content":[{"text":"For the Apache 2 security configuration we suggest the following settings (/etc/apache2/conf-available/security.conf):","type":"text"}]},{"type":"codeBlock","content":[{"text":"ServerTokens Prod\nServerSignature Off\nTraceEnable Off\n\nHeader always set Strict-Transport-Security \"max-age=15768000; includeSubDomains; preload\"\nHeader unset X-Frame-Options\nHeader always set X-Frame-Options SAMEORIGIN\nHeader unset Referrer-Policy\nHeader always set Referrer-Policy \"same-origin\"\nHeader edit Set-Cookie \"(?i)^((?:(?!;\\s?HttpOnly).)+)$\" \"$1;HttpOnly\"\nHeader edit Set-Cookie \"(?i)^((?:(?!;\\s?Secure).)+)$\" \"$1;Secure\"\n\nHeader unset X-Powered-By\nHeader unset Server\n","type":"text"}]},{"type":"paragraph","content":[{"text":"In case you need to update the site config while the server is running, use the following command to publish the changes without the need for a reload:","type":"text"}]},{"type":"codeBlock","content":[{"text":"apache2ctl graceful\n","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Firewall","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"The server should only publish the ports that are needed. For SORMAS this is port 80 (HTTP) and 443 (HTTPS). In addition, you will need the SSH port to access the server for admin purposes.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"We suggest using UFW (Uncomplicated Firewall) which provides a simple interface to iptables:","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"# Install ufw\nsudo apt-get install ufw\n\n# Set the defaults used by UFW\nsudo ufw default deny incoming\n\nsudo ufw default allow outgoing\n\n# Configure your server to allow incoming SSH connections\nsudo ufw allow ssh\n\n# Configure your server to allow incoming http connections\nsudo ufw allow http\n\n# Configure your server to allow incoming https connections\nsudo ufw allow https\n\n# Enable UFW\nsudo ufw enable \n","type":"text"}]},{"type":"heading","attrs":{"level":3},"content":[{"text":"Postfix Mail Server","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Install postfix and mailutils","type":"text"}]},{"type":"codeBlock","content":[{"text":"apt install aptitude\naptitude install postfix\n-> choose \"satellite system\"\napt install mailutils\n","type":"text"}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Configure your system","type":"text"}]},{"type":"codeBlock","content":[{"text":"nano /etc/aliases\n-> add \"root: enter-your@support-email-here.com\"\nnano /opt/domains/sormas/config/logback.xml\n-> make sure \"EMAIL_ERROR\" appender is active and sends out to your email address\n","type":"text"}]},{"type":"paragraph","content":[{"text":"Testing the Server Setup","type":"text"}]},{"type":"paragraph","content":[{"text":"Use SSL Labs to test your server security config: ","type":"text"},{"type":"inlineCard","attrs":{"url":"https://www.ssllabs.com/ssltest"}},{"text":" ","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"R Software Environment","type":"text"}]},{"type":"paragraph","content":[{"text":"To enable disease network diagrams in the contact dashboard, R and several extension packages are required. Then the Rscript executable has to be configured in the ","type":"text"},{"text":"sormas.properties","type":"text","marks":[{"type":"code"}]},{"text":" file. This can be conveniently accomplished by executing the R setup script from the SORMAS ZIP archive (see SORMAS Server):","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"If the SORMAS installation has been customized, ","type":"text"},{"text":"r-setup.sh","type":"text","marks":[{"type":"code"}]},{"text":" the install paths may have to be adjusted accordingly with a text editor.","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Execute R setup script and follow its instructions.","type":"text"}]}]}]},{"type":"codeBlock","content":[{"text":"chmod +x r-setup.sh\n./r-setup.sh\n","type":"text"}]},{"type":"heading","attrs":{"level":2},"content":[{"text":"SORMAS to SORMAS Certificate Setup","type":"text"}]},{"type":"paragraph","content":[{"text":"To be able to communicate with other SORMAS instances, there are some additional steps which need to be taken, in order to set up the certificate and the truststore. Please see the related guide for detailed instructions regarding SORMAS to SORMAS setup.","type":"text"}]}],"version":1}