Manual Installation
===================

If you do not want to use packages, here is how you setup ownCloud from
scratch using a classic :abbr:`LAMP (Linux, Apache, MySQL, PHP)` setup:

This document provides a complete walk-through for installing ownCloud on Ubuntu 
14.04 LTS Server with Apache and MySQL.

Prerequisites
-------------

.. note:: This tutorial assumes you have terminal access to the machine you want
          to install ownCloud on. Although this is not an absolute requirement,
          installation without it is highly likely to require contacting your
          hoster (e.g. for installing required modules).

To run ownCloud, your web server must have the following installed:

* php5 (>= 5.3.8, minimum recommended 5.4)
* PHP module ctype
* PHP module dom
* PHP module GD
* PHP module iconv
* PHP module JSON
* PHP module libxml
* PHP module mb multibyte
* PHP module SimpleXML
* PHP module zip
* PHP module zlib

Database connectors (pick at least one):

* PHP module sqlite (>= 3, usually not recommended for performance reasons)
* PHP module mysql
* PHP module pgsql (requires PostgreSQL >= 9.0)

*Recommended* packages:

* PHP module curl (highly recommended, some functionality, e.g. http user
  authentication, depends on this)
* PHP module fileinfo (highly recommended, enhances file analysis performance)
* PHP module bz2 (recommended, required for extraction of apps)
* PHP module intl (increases language translation performance and fixes sorting 
  of non-ASCII characters)
* PHP module mcrypt (increases file encryption performance)
* PHP module openssl (required for accessing HTTPS resources)

Required for specific apps (if you use the mentioned app, you must install that
package):

* PHP module ldap (for ldap integration)
* smbclient (for SMB storage)
* PHP module ftp (for FTP storage)

Recommended for specific apps (*optional*):

* PHP module exif (for image rotation in pictures app)
* PHP module gmp (for SFTP storage)

For enhanced performance (*optional* / select only one of the following):

* PHP module apc
* PHP module apcu
* PHP module xcache

For preview generation (*optional*):

* PHP module imagick
* avconv or ffmpeg
* OpenOffice or libreOffice

**Remarks:**

* Please check your distribution, operating system or hosting partner 
  documentation on how to install/enable these modules.

* Make sure your distribution's php version fulfils the version requirements
  specified above. If it doesn't, there might be custom repositories you can
  use. If you are e.g. running Ubuntu 10.04 LTS, you can update your PHP using
  a custom `PHP PPA <https://launchpad.net/~ondrej/+archive/php5>`_::

	sudo add-apt-repository ppa:ondrej/php5
	sudo apt-get update
	sudo apt-get install php5

* You don’t need any WebDAV support module for your web server (i.e. Apache’s
  mod_webdav) to access your ownCloud data via WebDAV. ownCloud has a built-in
  WebDAV server of its own.

Example installation on Ubuntu 14.04 LTS Server
-----------------------------------------------
On a machine running a pristine Ubuntu 14.04 LTS server, you would install the
required and recommended modules for a typical ownCloud installation, using
Apache and MySQL by issuing the following commands in a terminal::

    apt-get install apache2 mysql-server libapache2-mod-php5
    apt-get install php5-gd php5-json php5-mysql php5-curl
    apt-get install php5-intl php5-mcrypt php5-imagick

**Remarks:**

* This installs the packages for the ownCloud core system. If you are planning 
  on running additional apps, keep in mind that they might require additional 
  packages.  See the Prerequisites section (above) for details.

* At the execution of each of the above commands you might be prompted whether 
  you want to continue; press "Y" for Yes (that is if your system language is 
  English. You might have to press a different key if you have a different 
  system language).

* At the installation of the MySQL server, you will be prompted for a root 
  password. Be sure to remember the password you enter there for later use 
  as you will need it during ownCloud database setup.

Now download the archive of the latest ownCloud version:

* Navigate to the `ownCloud Installation Page <http://owncloud.org/install>`_.
* Click the **Archive file for server owners** button.
* Click **Download Unix**.
* This downloads a file named owncloud-x.y.z.tar.bz2 (where
  x.y.z is the version number of the current latest version).
* Save this file on the machine you want to install ownCloud on.
* Verify the MD5 or SHA256 sum::
   
    md5sum  owncloud-x.y.z.tar.bz2
    sha256sum owncloud-x.y.z.tar.bz2
   
* You may also verify the PGP signature::
    
    wget https://download.owncloud.org/community/owncloud-x.y.z.tar.bz2.asc
    wget https://owncloud.org/owncloud.asc
    gpg --import owncloud.asc
    gpg owncloud-x.y.z.tar.bz2
  
* Now you can extract the archive contents. Open a terminal, navigate to your 
  download directory, and run::

    tar -xjf owncloud-x.y.z.tar.bz2

* Copy the ownCloud files to their final destination in the document root of 
  your web server::

    cp -r owncloud /path/to/webserver/document-root

  where ``/path/to/webserver/document-root`` is replaced by the 
  document root of your Web server. Typically, on Ubuntu systems this 
  ``/var/www/owncloud``, so your copying command is::
    
    cp -r owncloud /var/www/

Setting Secure Directory Permissions
------------------------------------

Your HTTP user must own at least the ``config/``, ``data/`` 
and ``apps/`` directories in your ownCloud directory so that you can 
configure ownCloud, create, modify and delete your data files, and install apps 
via the ownCloud Web interface. We recommend setting the directory 
permissions as strictly as possible for stronger security.

You can find your HTTP user in your HTTP server configuration files. Or you can 
create a PHP page to find it for you. To do this, create a plain text file with 
a single line in it:

      ``<?php echo exec('whoami'); ?>``
   
Name it ``whoami.php`` and place it in your ``/var/www/html`` directory, and 
then open it in a Web browser, for example ``http://localhost/whoami.php``. You 
should see a single line in your browser page with the HTTP user name.

.. note:: When using an NFS mount for the data directory, do not change 
   ownership as above. The simple act of mounting the drive will set 
   proper permissions for ownCloud to write to the directory. Changing 
   ownership as above could result in some issues if the NFS mount is 
   lost.

The generic command to change ownership of all files and subdirectories in a 
directory is::

    chown -R <http-user>:<http-user> /path/to/owncloud/
    
For hardened security we  highly recommend setting the permissions on your ownCloud directory as strictly 
as possible. These commands should be executed immediately after the initial installation::
  
    chown -R root:root /path/to/owncloud/
    chown <http-user>:<http-user> /path/to/owncloud/config/config.php
    chown -R <http-user>:<http-user> /path/to/owncloud/data/
    chown root:root /path/to/owncloud/data/.htaccess
    chown <http-user>:<http-user> /path/to/owncloud/apps/
    
These strict permissions will prevent the Updater app from working. If you use the Updater app, it needs your whole
ownCloud directory to be owned by the http-user, like these examples:

* This example is for Ubuntu 14.04 LTS server::
   
    chown -R www-data:www-data /var/www/owncloud

* Arch Linux::

    chown -R http:http /path/to/owncloud/

* Fedora::

    chown -R apache:apache /path/to/owncloud/
	
* openSUSE::

    chown -R wwwrun:www /path/to/owncloud/
    
After the Update app has run, you should re-apply the strict permissions.    

Apache is the recommended Web server.

Apache Web Server Configuration
-------------------------------

.. note:: You can use ownCloud over plain http, but we strongly encourage you to
          use SSL/TLS to encrypt all of your server traffic, and to protect 
          user's logins and data in transit.

Enabling SSL
------------

An Apache installed under Ubuntu comes already set-up with a simple
self-signed certificate. All you have to do is to enable the ssl module and
the according site. Open a terminal and run::

     a2enmod ssl
     a2ensite default-ssl
     service apache2 reload

If you are using a different distribution, check your documentation on how to
enable SSL.

.. note:: Self-signed certificates have their drawbacks - especially when you
          plan to make your ownCloud server publicly accessible. You might want
          to consider getting a certificate signed by commercial signing
          authority. Check with your domain name registrar or hosting service,
          if you're using one, for good deals on commercial certificates.

Configuring ownCloud
--------------------

Since there was a change in the way versions 2.2 and 2.4 are configured,
you'll have to find out which Apache version you are using.

Usually you can do this by running one of the following commands::

     apachectl -v
     apache2 -v

Example output::

    Server version: Apache/2.4.7 (Ubuntu)
    Server built:   Jul 22 2014 14:36:38

Example config for Apache 2.2:

.. code-block:: xml

    <Directory /path/to/owncloud>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride All
        Order allow,deny
        allow from all
    </Directory>


Example config for Apache 2.4:

.. code-block:: xml

    <Directory /path/to/owncloud>
        Options Indexes FollowSymLinks MultiViews
        AllowOverride All
        Require all granted
    </Directory>

* This configuration entry needs to go into the configuration file of the 
  "site" you want to use.
* On a Ubuntu system, this typically is the "default-ssl" site (to be found in
  the :file:`/etc/apache2/sites-available/default-ssl.conf`).
* Add the entry shown above immediately before the line containing::

	</VirtualHost>

  (this should be one of the last lines in the file).

* A minimal site configuration file on Ubuntu 14.04 might look like this:

.. code-block:: xml

	<IfModule mod_ssl.c>
	<VirtualHost _default_:443>
		ServerName YourServerName
		ServerAdmin webmaster@localhost
		DocumentRoot /var/www
		<Directory />
			Options FollowSymLinks
			AllowOverride None
		</Directory>
		<Directory /var/www/>
			Options Indexes FollowSymLinks MultiViews
			AllowOverride None
			Order allow,deny
			allow from all
		</Directory>
		ErrorLog ${APACHE_LOG_DIR}/error.log
		LogLevel warn
		CustomLog ${APACHE_LOG_DIR}/ssl_access.log combined
		SSLEngine on
		SSLCertificateFile    /etc/ssl/certs/ssl-cert-snakeoil.pem
		SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
		<FilesMatch "\.(cgi|shtml|phtml|php)$">
			SSLOptions +StdEnvVars
		</FilesMatch>
		<Directory /usr/lib/cgi-bin>
			SSLOptions +StdEnvVars
		</Directory>
		BrowserMatch "MSIE [2-6]" \
			nokeepalive ssl-unclean-shutdown \
			downgrade-1.0 force-response-1.0
		BrowserMatch "MSIE [17-9]" ssl-unclean-shutdown
		<Directory /var/www/owncloud>
			Options Indexes FollowSymLinks MultiViews
			AllowOverride All
			Allow from all
			Require all granted
			Dav Off
			Satisfy Any        
		</Directory>
	</VirtualHost>
	</IfModule>

* For ownCloud to work correctly, we need the module ``mod_rewrite``. Enable it 
  by running::

    a2enmod rewrite

* In distributions that do not come with ``a2enmod``, the module needs to be
  enabled manually by editing the Apache config files, usually 
  :file:`/etc/httpd/httpd.conf`. Consult the Apache documentation or your Linux
  distribution's documentation.

* In order for the maximum upload size to be configurable, the
  :file:`.htaccess` in the ownCloud folder needs to be made writable by the
  server (this should already be done, see section `Set the Directory 
  Permissions`_).

* You should make sure that any built-in WebDAV module of your web server is 
  disabled (at least for the ownCloud directory), as it will interfere with 
  ownCloud's built-in WebDAV support.

  If you need the WebDAV support in the rest of your configuration, you can turn 
  it off specifically for the ownCloud entry by adding the following line in 
  the ``<Directory`` section for your ownCloud server. Add the following line 
  directly after the ``allow from all`` / ``Require all granted`` line::

    Dav Off

* You must disable any server-configured authentication for ownCloud, as it 
  uses Basic authentication internally for DAV services. If you have turned on 
  authentication on a parent folder (via e.g. an ``AuthType Basic``
  directive), you can turn off the authentication specifically for the ownCloud 
  entry. Following the above example configuration file, add the following line 
  directly after the ``allow from all`` / ``Require all granted`` line in the 
  ``<Directory`` section::

    Satisfy Any

* When using ssl, take special note on the ServerName. You should specify one in 
  the  server configuration, as well as in the CommonName field of the 
  certificate. If you want your ownCloud to be reachable via the internet, then 
  set both of these to the domain you want to reach your ownCloud server.

.. note:: By default, the certificates' CommonName will be set to the host name 
   at the time the ssl-cert package was installed.

* Finally, restart Apache.

  * On Ubuntu systems run::
  
     service apache2 restart

  * On systemd systems (Fedora, Arch Linux, OpenSUSE), run::

     systemctl restart httpd.service
     

Install Wizard
--------------

Finish setting up your ownCloud server by following 
the :doc:`installation_wizard`.  

Other Web Servers
-----------------
     
**Microsoft Internet Information Server (IIS)**

See :doc:`installation_windows` for further instructions.

**Nginx Configuration**

See :doc:`configuration_nginx`

**Lighttpd Configuration**

See :doc:`configuration_lighttpd`

**Yaws Configuration**

See :doc:`configuration_yaws`

**Hiawatha Configuration**

See :doc:`configuration_hiawatha`
