SYSTEM =========== apt install php-gd php-mbstring php-xml php-curl composer a2enmod rewrite SITE ==== #TODO make the vhost #TODO in apache2.conf set Override All on the directory DRUPAL ====== composer create-project drupal/recommended-project drupal #TODO place composer.json in the drupal directory that should have appeared composer install mysql -uroot -p drop database ...; create database ...; cd drupal mkdir -p config/sync mkdir private # if web server user =/= deployment user: sudo chgrp www-data config/sync cd web sudo chgrp www-data . -R sudo chmod g+w sites/default/files -R sudo find -type d -exec chmod g+s {} \; # TODO run the installer drush pm-uninstall search drush en superfish admin_toolbar smtp superfish security_review opencase -y # if web server user =/= deployment user: sudo chmod g-w sites/default/ sudo chmod a-w sites/default/settings.php sudo chmod g-w sites sudo chmod g-w sites ./sites/example.settings.local.php ./sites/development.services.yml ./sites/example.sites.php ./sites/default/default.services.yml ./sites/default/default.settings.php ./autoload.php sudo chmod g-w -R modules/ sudo chmod g-w -R core sudo chmod g-w profiles index.php update.php sudo chmod g-w themes -R sudo chmod g-w web.config robots.txt cd ../ sudo chmod g-w -R web/modules sudo chgrp www-data private sudo chmod g+w,o-r,o-x private # TODO set $trusted_host_patterns (in settings.php) # TODO private files (/home/foo/drupal/private) (in settings.php) # TODO Set all the HTML roles to admin only - /admin/config/content/formats # TODO run security review (make eveything untrusted except CRM Admin and Admin) - /admin/config/security-review # TODO homepage -> /opencase/all-cases, 403 - /user/login - /admin/config/system/site-information # TODO disable blocks: tools, main navigation, footer menu - /admin/structure/block # TODO logo & colours - admin/appearance/settings/bartik # TODO disallow registering an account & turn off personal contact forms - /admin/config/people/accounts # TODO add linked actor field to form display and display display - top of both # TODO change which contact form is the default - /admin/structure/contact # TODO change "short" date formate to d/m/Y - /admin/config/regional/date-time