Installation du raccourcisseur d'url


Installation des paquets :
<code>
apt-get install build-essential libssl-dev zlib1g-dev sudo git
sudo apt-get install libpng-dev
sudo cpan Carton
sudo apt-get install memcached
sudo apt-get install libmariadbd-dev
</code>


Ajout d'un utilisateur dédié
<code>
useradd lstu
groupadd lstu
mkdir -p /var/www/lstu
chown -R lstu:lstu /var/www/lstu
usermod -d /var/www/lstu/ lstu
</code>

Récupération du dépôt via git

<code>
git clone https://framagit.org/luc/lstu.git
</code>

mise à jour 
<code>
cd  /var/www/lstu
git pull
</code>

Installation des dépendance
<code>
su lstu -s /bin/bash
carton install
carton install --deployment  --without=test --without=sqlite --without=postgresql --without=ldap 
</code>

test du service ou mode manuel
start
<code>
carton exec hypnotoad   script/lstu
</code>

stop
<code>
carton exec hypnotoad  -s  script/lstu
</code>


Paramétrage de la configuration LDAP 

démarrage auto
<code>
cp utilities/lstu@.service /etc/systemd/system/

vérification des chemins et utilisateurs dans : 
<code>
vim /etc/systemd/system/lstu.service
</code>

utilisation du service
<code>
systemctl daemon-reload
systemctl enable lstu.service
systemctl start lstu.service
systemctl status lstu.service
</code>

vérification du pid
<code>
ls -la  /var/www/lstu/script/hypnotoad.pid
</code>

au cas ou
<code>
chown -R  lstu:www-data /var/www/lstu/script/
chmod -R 774 /var/www/lstu/script/
</code>


entrées dans le Vhost Nginx
<code>
 location / {
        error_page 404 = /oauth2/auth ;
        proxy_pass http://192.168.1.72:8080;
        proxy_set_header Host      $host;
        proxy_http_version 1.1;
        }

location /oauth2/ {
proxy_pass   http://127.0.0.1:4180;
proxy_set_header Host $host;
proxy_set_header X-Real-IP   $remote_addr;
proxy_set_header X-Scheme $scheme;
proxy_set_header X-Auth-Request-Redirect $request_uri;
# or, if you are handling multiple domains:
# proxy_set_header X-Auth-Request-Redirect $scheme://$host$request_uri;
}

location = /oauth2/auth {
proxy_pass   http://127.0.0.1:4180;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Scheme $scheme;
# nginx auth_request includes headers but not body
proxy_set_header Content-Length   "";
proxy_pass_request_body   off;
}

location  = / {
        auth_request /oauth2/auth;
        error_page 401 = /oauth2/sign_in;
# # pass information via X-User and X-Email headers to backend,
# # requires running with --set-xauthrequest flag
        auth_request_set $user   $upstream_http_x_auth_request_user;
        auth_request_set $email  $upstream_http_x_auth_request_email;
        proxy_set_header X-User  $user;
        proxy_set_header X-Email $email;
# if you enabled --pass-access-token, this will pass the token to the backend
        auth_request_set $token  $upstream_http_x_auth_request_access_token;
        proxy_set_header X-Access-Token $token;
# if you enabled --cookie-refresh, this is needed for it to work with auth_request
        auth_request_set $auth_cookie $upstream_http_set_cookie;
        add_header Set-Cookie $auth_cookie;
# When using the --set-authorization-header flag, some provider's cookies can exceed the 4kb
# limit and so the OAuth2 Proxy splits these into multiple parts.
# Nginx normally only copies the first `Set-Cookie` header from the auth_request to the response,
# so if your cookies are larger than 4kb, you will need to extract additional cookies manually.
        auth_request_set $auth_cookie_name_upstream_1 $upstream_cookie_auth_cookie_name_1;
# Extract the Cookie attributes from the first Set-Cookie header and append them
# to the second part ($upstream_cookie_* variables only contain the raw cookie content)
        if ($auth_cookie ~* "(; .*)") {
                set $auth_cookie_name_0 $auth_cookie;
        set $auth_cookie_name_1 "auth_cookie_name_1=$auth_cookie_name_upstream_1$1";
        }
# Send both Set-Cookie headers now if there was a second part
        if ($auth_cookie_name_upstream_1) {
        add_header Set-Cookie $auth_cookie_name_0;
        add_header Set-Cookie $auth_cookie_name_1;
        }
        proxy_pass http://192.168.1.72:8080;
#       proxy_pass http://127.0.0.1:3000/;
        proxy_set_header Host      $host;
        proxy_http_version 1.1;
    }
</code>