SYSTEM
===========
apt install php-gd php-mbstring php-xml php-curl composer
a2enmod rewrite



SITE
====
#TODO make the vhost
#TODO in apache2.conf set Override All on the directory


DRUPAL
======

composer create-project drupal/recommended-project drupal

#TODO place composer.json in the drupal directory that should have appeared

composer install

mysql -uroot -p
	drop database ...;
	create database ...;

cd drupal
mkdir -p config/sync
mkdir private

# if web server user =/= deployment user:

    sudo chgrp www-data config/sync
    cd web
    sudo chgrp www-data . -R
    sudo chmod g+w sites/default/files -R
    sudo find -type d -exec chmod g+s {} \;


# TODO run the installer

drush pm-uninstall search
drush en superfish  admin_toolbar smtp superfish security_review opencase -y

# if web server user =/= deployment user:

    sudo chmod g-w sites/default/
    sudo chmod a-w sites/default/settings.php
    sudo chmod g-w sites
    sudo chmod g-w sites ./sites/example.settings.local.php ./sites/development.services.yml ./sites/example.sites.php ./sites/default/default.services.yml ./sites/default/default.settings.php ./autoload.php 
    sudo chmod g-w -R modules/
    sudo chmod g-w -R core
    sudo chmod g-w profiles index.php update.php 
    sudo chmod g-w themes -R
    sudo chmod g-w web.config robots.txt 
    cd ../
    sudo chmod g-w -R web/modules
    sudo chgrp www-data private
    sudo chmod g+w,o-r,o-x private


# TODO set $trusted_host_patterns (in settings.php)
# TODO private files (/home/foo/drupal/private) (in settings.php)
# TODO Set all the HTML roles to admin only - /admin/config/content/formats
# TODO run security review (make eveything untrusted except CRM Admin and Admin) - /admin/config/security-review
# TODO homepage -> /opencase/all-cases, 403 - /user/login - /admin/config/system/site-information
# TODO disable blocks: tools, main navigation, footer menu - /admin/structure/block
# TODO logo & colours - admin/appearance/settings/bartik
# TODO disallow registering an account & turn off personal contact forms - /admin/config/people/accounts 
# TODO add linked actor field to form display and display display - top of both
# TODO change which contact form is the default - /admin/structure/contact
# TODO change "short" date formate to d/m/Y - /admin/config/regional/date-time