Debian 10 64 Bits – Installation Zammad

Pré-requis

apt-get -y install apt-transport-https sudo wget gnupg2
locale-gen fr_FR.UTF-8
echo "LANG=fr_FR.UTF-8" > /etc/default/locale

Installation Elasticsearch et Java

echo "deb https://artifacts.elastic.co/packages/7.x/apt stable main" > /etc/apt/sources.list.d/elastic-7.x.list
wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | apt-key add -
apt-get update
apt-get install openjdk-11-jre-headless elasticsearch
/usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment
systemctl restart elasticsearch
systemctl enable elasticsearch

Installation Zammad

wget -qO- https://dl.packager.io/srv/zammad/zammad/key | apt-key add -
wget -O /etc/apt/sources.list.d/zammad.list https://dl.packager.io/srv/zammad/zammad/stable/installer/debian/10.repo
apt-get update
apt-get install zammad

Mise en place du reverse proxy distant

Côté Zammad

zammad config:set ZAMMAD_BIND_IP=0.0.0.0
systemctl restart zammad

Côté Nginx Reverse Proxy

server {
 listen 443 ssl;
 server_name support.domain.com;
 server_tokens off;

 access_log /var/log/nginx/support.domain.com/access.log;
 error_log /var/log/nginx/support.domain.com/error.log;

 client_max_body_size 50M;

 location ~ ^/(assets/|robots.txt|humans.txt|favicon.ico) {
 expires max;
 }

 location /ws {
 proxy_http_version 1.1;
 proxy_set_header Upgrade $http_upgrade;
 proxy_set_header Connection "Upgrade";
 proxy_set_header CLIENT_IP $remote_addr;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_set_header X-Forwarded-Proto $scheme;
 proxy_read_timeout 86400;
 proxy_pass http://10.10.10.30:6042;
 }

 location / {
 proxy_set_header Host $http_host;
 proxy_set_header CLIENT_IP $remote_addr;
 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 proxy_set_header X-Forwarded-Proto $scheme;
 proxy_read_timeout 300;
 proxy_pass http://10.10.10.30:3000;

 }
 ssl_certificate /etc/letsencrypt/live/support.domain.com/fullchain.pem;
 ssl_certificate_key /etc/letsencrypt/live/support.domain.com/privkey.pem;
}