Phabricator Ubuntu Installation Guide
-------------------------------------

This is a supplement to the [official Phabricator Installation Guide](https://secure.phabricator.com/book/phabricator/article/installation_guide/), because their guide will leave you with all kinds of permission and config errors and ~15,000 setup issues on startup.

#### Install bonus packages:

    # apt-get install mercurial subversion zsh python-pygments sendmail imagemagick

#### Create necessary users and add phd-user to sudoers:

    # useradd phd --shell=/usr/bin/zsh
    # adduser phd sudo
    # useradd git

And create repo directory if phabricator will be hosting repos:

    # mkdir /var/repo
    # chown -R phd /var/repo
    # chgrp -R phd /var/repo

#### Install phabricator:

    su phd
    cd /home/phd
    wget http://www.phabricator.com/rsrc/install/install_ubuntu.sh
    bash install_ubuntu.sh

#### Recommended Phabricator Configurations to set:

```bash
cd /home/phd/phabricator

# Generally acceptable settings:
./bin/config set mysql.pass <MYSQL_ROOT_PASSWD>
./bin/config set phabricator.base-uri 'http://phabricator.eng.mydomain.net/'
./bin/config set phd.user phd
./bin/config set environment.append-paths '["/usr/lib/git-core"]'
./bin/config set diffusion.ssh-user git
./bin/config set pygments.enabled true

# for local-disk file storage only:
mkdir /home/phd/phabricator-files
chmod -R 755 /home/phd/phabricator-files
./bin/config set storage.local-disk.path /home/phd/phabricator-files

# Set true if you want to allow public http cloning:
./bin/config set policy.allow-public true
# Set to true if you want to allow http pushes
./bin/config set diffusion.allow-http-auth false
# You most likely want prototype apps, they are very useful:
./bin/config set phabricator.show-prototypes true
# You may want this true, depending on your workflow:
./bin/config set differential.require-test-plan-field false

# recommended silliness-enabling settings:
./bin/config set files.enable-imagemagick true
./bin/config set remarkup.enable-embedded-youtube true
```

#### This needs to be appended to `/etc/sudoers` (NOTE: verify your binary locations):

    git ALL=(phd) SETENV: NOPASSWD: /usr/bin/git-upload-pack, /usr/bin/git-receive-pack, /usr/bin/hg, /usr/bin/svnserve
    www-data ALL=(phd) SETENV: NOPASSWD: /usr/bin/git-upload-pack, /usr/lib/git-core/git-http-backend, /usr/bin/hg

#### Apache Configuration:

First verify that apache is displaying a default page on port 80,
then setup apache configuration file (see examples below) and enable phabricator site:

    # cat /etc/apache2/sites-available/phabricator.conf
    <VirtualHost *:80>
            # The ServerName directive sets the request scheme, hostname and port that
            # the server uses to identify itself. This is used when creating
            # redirection URLs. In the context of virtual hosts, the ServerName
            # specifies what hostname must appear in the request's Host: header to
            # match this virtual host. For the default virtual host (this file) this
            # value is not decisive as it is used as a last resort host regardless.
            # However, you must set it for any further virtual host explicitly.
            ServerName phabricator.eng.mydomain.net
            ServerAlias phabricator.eng.mydomain.net
            ServerAdmin webmaster@example.com

            DocumentRoot /home/phd/phabricator/webroot

            RewriteEngine on
            RewriteRule ^/rsrc/(.*)     -                       [L,QSA]
            RewriteRule ^/favicon.ico   -                       [L,QSA]
            RewriteRule ^(.*)$          /index.php?__path__=$1  [B,L,QSA]

            # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
            # error, crit, alert, emerg.
            # It is also possible to configure the loglevel for particular
            # modules, e.g.
            #LogLevel info ssl:warn

            ErrorLog ${APACHE_LOG_DIR}/error.log
            CustomLog ${APACHE_LOG_DIR}/access.log combined

            # For most configuration files from conf-available/, which are
            # enabled or disabled at a global level, it is possible to
            # include a line for only one particular virtual host. For example the
            # following line enables the CGI configuration for this host only
            # after it has been globally disabled with "a2disconf".
            #Include conf-available/serve-cgi-bin.conf
            <Directory "/home/phd/phabricator/webroot">
                    Require all granted
            </Directory>
    </VirtualHost>

And here is an example of an HTTPS-enabled phabricator conf:

    <IfModule mod_ssl.c>
            <VirtualHost *:80>
                    ServerName phabricator.mydomain.net
                    Redirect permanent / https://phabricator.mydomain.net
            </VirtualHost>
            <VirtualHost *:443>

                    # Change this to the domain which points to your host.
                    ServerName phabricator.mydomain.net
                    SSLEngine on
                    SSLCertificateKeyFile /etc/ssl/private/phabricator.key
                    SSLCertificateFile /etc/ssl/certs/phabricator_mydomain.net.crt
                    SSLCertificateChainFile /etc/ssl/certs/phabricator_mydomain.net.ca-bundle
                    SSLProtocol All -SSLv2 -SSLv3

                    # Change this to the path where you put 'phabricator' when you checked it
                    # out from GitHub when following the Installation Guide.
                    #
                    # Make sure you include "/webroot" at the end!
                    DocumentRoot /etc/phabricator/webroot

                    RewriteEngine on
                    RewriteRule ^/rsrc/(.*)     -                       [L,QSA]
                    RewriteRule ^/favicon.ico   -                       [L,QSA]
                    RewriteRule ^(.*)$          /index.php?__path__=$1  [B,L,QSA]
                    <Directory "/etc/phabricator/webroot">
                            Require all granted
                    </Directory>
            </VirtualHost>
    </IfModule>

    # a2dissite 000-default
    # a2ensite phabricator
    # service apache2 restart

#### Add these lines to /etc/mysql/my.cnf under the [mysqld] heading:

    sql_mode=STRICT_ALL_TABLES
    ft_boolean_syntax=' |-><()~*:""&^'
    ft_stopword_file=/home/phd/phabricator/resources/sql/stopwords.txt
    ft_min_word_len=3

#### All phabricator directories should be owned by the phd user:

    root@bdr-gerrit-01:/home/phd# ls -l /home/phd
    total 20
    drwxr-xr-x  8 phd phd 4096 Jun 19 19:19 arcanist
    -rw-r--r--  1 phd phd 2052 Jun 19 19:18 install_ubuntu.sh
    drwxr-xr-x  8 phd phd 4096 Jun 19 19:19 libphutil
    drwxr-xr-x 12 phd phd 4096 Jun 23 20:10 phabricator
    drwxrwxrwx 69 phd phd 4096 Jun 24 18:58 phabricator-files

#### Configure MySQL

    ./bin/storage upgrade

#### Restart phd daemons (This must work for phd user):

    ./bin/phd restart

#### Get the phabricator update script:

    wget http://www.phabricator.com/rsrc/install/update_phabricator.sh

#### Refer to the phabricator configuration guide for next steps:

General configuration:
<https://secure.phabricator.com/book/phabricator/article/configuration_guide/>

Repository hosting configuration:
<https://secure.phabricator.com/book/phabricator/article/diffusion_hosting/>