Firewall & SELinux RunoseAI

Firewall & SELinux

Some parts of these steps may not apply to you, feel free to skip them!

SELinux

The commands below only work on Ubuntu, Debian and CentOS. If you use a different distribution, please have a look at their documentation.

$ # Allow nginx or apache to access public files of Zammad and communicate $ sudo chcon -Rv --type=httpd_sys_content_t /opt/zammad/public/ $ sudo setsebool httpd_can_network_connect on -P $ sudo semanage fcontext -a -t httpd_sys_content_t /opt/zammad/public/ $ sudo restorecon -Rv /opt/zammad/public/ $ sudo chmod -R a+r /opt/zammad/public/

Firewall

Ensure to open ports 80 and 443 (TCP & UDP) beside of the ports you need. Below you can find a few examples for different distributions. If you are using a different distribution, please have a look at their documentation.

Please note that the examples below only cover the distribution’s default firewall. It may not cover your case.

UbuntuDebianCentOS, RHEL, openSUSE, SLES

$ # Open Port 80 and 443 on your Firewall $ sudo ufw allow 80 $ sudo ufw allow 443 $ sudo ufw reload

Manage Services of Zammad

In general Zammad uses three services - these can be (re)started & stopped with the parent zammad.

$ # Zammad service to start all services at once $ systemctl (status|start|stop|restart) zammad $ # Zammads internal puma server (relevant for displaying the web app) $ systemctl (status|start|stop|restart) zammad-web $ # Zammads background worker - relevant for all delayed- and background jobs $ systemctl (status|start|stop|restart) zammad-worker $ # Zammads websocket server for session related information $ systemctl (status|start|stop|restart) zammad-websocket