Installation

Please Note

While it is possible to use your operating system or webserver of choice, this installation guide uses Debian and nginx.

Requirements

nginx

sudo apt install nginx

Docker Compose

sudo apt install docker-compose

Docker

Let's Encrypt

It's totally possible to use your own certificates. If so, please skip the next part.

Let's Encrypt

sudo apt install certbot

Setting up your certificate

First shutdown nginx with
```
sudo systemctl stop nginx
```

Now execute this command and fill in your own domain

sudo certbot certonly --standalone --preferred-challenges http -d <YOUR_DATEPOLL_DOMAIN> --pre-hook="systemctl stop nginx" --post-hook="systemctl start nginx"

Setting up the nginx reverse proxy

First go into your sites-enabled folder.

cd /etc/nginx/sites-enabled/ && sudo nano datepoll

Next paste this config into your editor.

Replace the following variables:

<YOUR_DATEPOLL_DOMAIN> with for example demo.datepoll.org
<YOUR_LOCAL_DATEPOLL_INSTALLATION_PATH> with for example /home/user/DatePoll

server {
  listen 80;
  # Change domain
  server_name <YOUR_DATEPOLL_DOMAIN>
  # Change domain
  return 301 https://<YOUR_DATEPOLL_DOMAIN>$request_uri;
}

# Enable SSL session caching for improved performance
# http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_session_cache
# When a client connects it first establishes or resumes a session, which is what the ssl_session_cache is used for, thats the 
# reason it has to be outside of the server scope!
ssl_session_timeout 24h;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;

server {
  listen 443 ssl http2;
  # Change domain
  server_name <YOUR_DATEPOLL_DOMAIN>;

  # Change domain
  ssl_certificate /etc/letsencrypt/live/<YOUR_DATEPOLL_DOMAIN>/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/<YOUR_DATEPOLL_DOMAIN>/privkey.pem;
  ssl_protocols TLSv1.2 TLSv1.3;

  # Using the recommended cipher suite from: https://wiki.mozilla.org/Security/Server_Side_TLS
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';

  # Specifies a curve for ECDHE ciphers.
  ssl_ecdh_curve prime256v1;
  # Server should determine the ciphers, not the client
  ssl_prefer_server_ciphers on;

  # OCSP Stapling
  ssl_stapling on;
  ssl_stapling_verify on;
  # Change domain
  ssl_trusted_certificate /etc/letsencrypt/live/<YOUR_DATEPOLL_DOMAIN>/fullchain.pem;
  resolver 9.9.9.9;

  # Gzip compression
  gzip on;
  gzip_vary on;
  gzip_comp_level 4;
  gzip_min_length 256;
  gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
  gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

  location / {
      proxy_pass http://127.0.0.1:9110/;
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
  }

  error_page 502 = @maintenance;

  location @maintenance {
    # Change the path to match your local DatePoll-Dockerized installation
    root /<YOUR_LOCAL_DATEPOLL_INSTALLATION_PATH>/maintance;

    try_files $uri /index.html =502;
  }
}

server {
  listen 9230 ssl http2;
  # Change domain
  server_name <YOUR_DATEPOLL_DOMAIN>;

  # Change domain
  ssl_certificate /etc/letsencrypt/live/<YOUR_DATEPOLL_DOMAIN>/fullchain.pem;
  ssl_certificate_key /etc/letsencrypt/live/<YOUR_DATEPOLL_DOMAIN>/privkey.pem;
  ssl_protocols TLSv1.2 TLSv1.3;
  
  # Using the recommended cipher suite from: https://wiki.mozilla.org/Security/Server_Side_TLS
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK';

  # Specifies a curve for ECDHE ciphers.
  ssl_ecdh_curve prime256v1;
  # Server should determine the ciphers, not the client
  ssl_prefer_server_ciphers on;
 
  # OCSP Stapling
  ssl_stapling on;
  ssl_stapling_verify on;
  # Change domain
  ssl_trusted_certificate /etc/letsencrypt/live/<YOUR_DATEPOLL_DOMAIN>/fullchain.pem;
  resolver 9.9.9.9;
 
  add_header X-Frame-Options "SAMEORIGIN";
  add_header X-XSS-Protection "1; mode=block";
  add_header X-Content-Type-Options "nosniff";

  # Gzip compression
  gzip on;
  gzip_vary on;
  gzip_comp_level 4;
  gzip_min_length 256;
  gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
  gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

  location / {
      proxy_pass http://127.0.0.1:9130/;
      proxy_set_header Host $http_host;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      proxy_set_header X-Forwarded-Proto $scheme;
  }
}

Now reload your nginx server. sudo nginx -s reload

Setting up the application

Go into a directory of your choise and execute the following line

git clone https://gitlab.com/DatePoll/DatePoll/datepoll-dockerized.git DatePoll && sudo chmod -R 777 DatePoll/ && cd ./DatePoll && chmod +x ./scripts/*

Install the frontend (Please make sure you stay in the root directory of the project)
```
./scripts/frontend.sh
```
Install the backend
```
./scripts/installBackend.sh
```

Good to know

During the backend installation you should choose to add an admin user (for the first login and to configure DatePoll further).

The username and password will be printed to the terminal.

Docker container control

Normally the application is automatic restarted on an update. However it is possible to manually restart, start and stop the application.

Starting
```
docker-compose up -d
```
Stopping
```
docker-compose down
```

Restarting

docker-compose down && docker-compose up -d

Verification

Visit your domain https://datepoll.server.com and you should see the login page!

success

Congratulations! You have a fully working DatePoll setup.

First steps

After logging in with your newly created admin user head to the DatePoll configuration, there you can configure features, welcome messages, the imprint and many more settings.

Take a look here for an imprint and a privacy policy example text.

Extras

Systemd service setup

First go into your systemd folder and create a new service file.
```
cd /etc/systemd/system/ && nano datepoll.service
```

Next paste this config into your editor and fill in your own path to your DatePoll docker installation

Replace the following variables:

<YOUR_LOCAL_DATEPOLL_INSTALLATION_PATH> with for example /home/user/DatePoll

[Unit]
Description=DatePoll Application Service
Requires=docker.service
After=docker.service

[Service]
Type=oneshot
RemainAfterExit=yes
WorkingDirectory=<YOUR_LOCAL_DATEPOLL_INSTALLATION_PATH>
ExecStart=docker-compose up -d
ExecStop=docker-compose down
TimeoutStartSec=0
 
[Install]
WantedBy=multi-user.target

Requirements​

Setting up your certificate​

Setting up the nginx reverse proxy​

Setting up the application​

Docker container control​

Verification​

Extras​

Systemd service setup​