|
 |
0fe0630 |
Additional installation and update information:
|
|
|
0fe0630 |
|
|
|
0fe0630 |
Upstream documentation: http://trac.roundcube.net/wiki
|
|
|
0fe0630 |
|
|
|
0fe0630 |
Notice
|
|
|
15e66d0 |
- temporary files are stored in /var/lib/roundcubemail/temp
|
|
|
0fe0630 |
- logs files are stored in /var/log/roundcubemail
|
|
|
0fe0630 |
- configuration files are stored in /etc/roundcubemail
|
|
|
15e66d0 |
- PGP keys used by enigma plugin are stored in /var/lib/roundcubemail/enigma
|
|
|
0fe0630 |
|
|
|
0fe0630 |
As those directories are not served by the web server,
|
|
|
0fe0630 |
there is no need to protect them.
|
|
|
0fe0630 |
|
|
 |
141b05b |
Databases
|
|
|
141b05b |
|
|
|
141b05b |
Roundcube supports various database providers, including SQLite, MySQL and
|
|
|
141b05b |
PostgreSQL. The package depends only on php-pdo, which provides SQLite
|
|
|
141b05b |
support. However, the default configuration is for a MySQL database, for
|
|
|
141b05b |
performance reasons. To use the MySQL database, ensure php-mysql is
|
|
|
141b05b |
installed. If you want to use another database, adjust the configuration
|
|
|
141b05b |
file, and ensure the appropriate PDO plugin is installed. If necessary.
|
|
|
0fe0630 |
|
|
|
0fe0630 |
|
|
|
0fe0630 |
The installer is available at http://localhost/roundcubemail/installer
|
|
|
91c2ee9 |
The webmail is available at http://localhost/roundcubemail
|
|
|
91c2ee9 |
|
|
|
91c2ee9 |
By default, access to Roundcube and the installer is only allowed from the
|
|
|
91c2ee9 |
server, locally, in /etc/httpd/conf.d/roundcubemail.conf . Best practice is
|
|
|
91c2ee9 |
to create a new file - e.g. /etc/httpd/conf.d/z-roundcubemail-allow.conf -
|
|
|
91c2ee9 |
to adjust the access permissions. You can also edit roundcubemail.conf directly,
|
|
|
91c2ee9 |
but then any changes to it in future package updates will cause the creation
|
|
|
91c2ee9 |
of a .rpmnew file, and you will have to merge the changes manually: creating
|
|
|
91c2ee9 |
a new config file to configure access permissions avoids that.
|
|
|
91c2ee9 |
|
|
|
91c2ee9 |
First use the installer to configure Roundcube, ideally from the server so you
|
|
|
91c2ee9 |
do not need to allow any wider access to the installer, but you can use a new
|
|
|
91c2ee9 |
config file to grant wider access to /usr/share/roundcubemail and
|
|
|
91c2ee9 |
/usr/share/roundcubemail/installer if necessary. Once you have completed
|
|
|
91c2ee9 |
deployment, you should restrict access to the /installer subdirectory again, as
|
|
|
91c2ee9 |
an attacker could use it to do anything they liked to your Roundcube
|
|
|
91c2ee9 |
installation.
|
|
|
91c2ee9 |
|
|
|
91c2ee9 |
UPGRADING: when upgrading from < 1.0 the old configuration files named
|
|
|
91c2ee9 |
main.inc.php and db.inc.php are now deprecated and should be replaced with one
|
|
|
91c2ee9 |
single config.inc.php file. Run the /usr/share/roundcube/bin/update.sh script
|
|
|
91c2ee9 |
as root to get this conversion done or manually merge the files. The update
|
|
|
e6753a7 |
script will also update the database configuration. Check the permissions of
|
|
|
e6753a7 |
the config.inc.php file and all backups the script creates! Make sure they
|
|
|
e6753a7 |
are not world-readable, as they may contain sensitive information (e.g.
|
|
|
e6753a7 |
database passwords).
|
|
|
91c2ee9 |
|
|
|
91c2ee9 |
NOTE: the new config.inc.php should only contain options that differ from the
|
|
|
91c2ee9 |
ones listed in defaults.inc.php.
|