Installing on Alpine Linux¶

Packaged (OTP) installation vs Manual (from-source) installations¶

There is multiple ways to install Pleroma.

Distro-provided packages: This is the recommended method, where you can get the strongest compatibility guarantees and the best dependency-management
Pleroma-provided OTP binaries: Intended as fallback for Alpine/Debian-compatible systems lacking a proper Pleroma package, they are heavier than proper distro packages as they also contain Erlang/Elixir and can break after system updates
Manual from-source installation: Needs build-dependencies to be installed and manual updates+rebuilds. Allows for easier source-customisations.

This guide covers a manual from-source installation. To install using OTP releases, please check for the presence of a distro package, failing that you can use Pleroma-provided OTP binaries.

Installation¶

This guide is a step-by-step installation guide for Alpine Linux. The instructions were verified against Alpine v3.10 standard image. You might miss additional dependencies if you use netboot instead.

It assumes that you have administrative rights, either as root or a user with sudo permissions. If you want to run this guide with root, ignore the sudo at the beginning of the lines, unless it calls a user like sudo -Hu pleroma; in this case, use su -l <username> -s $SHELL -c 'command' instead.

Required dependencies¶

PostgreSQL >=9.6
Elixir >=1.11.0 <1.15
Erlang OTP >=22.2.0 <26
git
file / libmagic
gcc or clang
GNU make
CMake

Optional dependencies¶

ImageMagick
FFmpeg
exiftool

Prepare the system¶

The community repository must be enabled in /etc/apk/repositories. Depending on which version and mirror you use this looks like http://alpine.42.fr/v3.10/community. If you autogenerated the mirror during installation:

awk 'NR==2' /etc/apk/repositories | sed 's/main/community/' | tee -a /etc/apk/repositories

Then update the system, if not already done:

sudo apk update
sudo apk upgrade

Install some tools, which are needed later:

sudo apk add git build-base cmake file-dev

Install Elixir and Erlang¶

Install Erlang and Elixir:

sudo apk add erlang erlang-runtime-tools erlang-xmerl elixir

Install erlang-eldap if you want to enable ldap authenticator

sudo apk add erlang-eldap

Install PostgreSQL¶

Install Postgresql server:

sudo apk add postgresql postgresql-contrib

Initialize database:

sudo /etc/init.d/postgresql start

Enable and start postgresql server:

sudo rc-update add postgresql

Install media / graphics packages (optional, see `docs/installation/optional/media_graphics_packages.md`)¶

sudo apk add ffmpeg imagemagick exiftool

Install PleromaBE¶

Add a new system user for the Pleroma service:

sudo addgroup pleroma
sudo adduser -S -s /bin/false -h /opt/pleroma -H -G pleroma pleroma

Note: To execute a single command as the Pleroma system user, use sudo -Hu pleroma command. You can also switch to a shell by using sudo -Hu pleroma $SHELL. If you don’t have and want sudo on your system, you can use su as root user (UID 0) for a single command by using su -l pleroma -s $SHELL -c 'command' and su -l pleroma -s $SHELL for starting a shell.

Git clone the PleromaBE repository and make the Pleroma user the owner of the directory:

sudo mkdir -p /opt/pleroma
sudo chown -R pleroma:pleroma /opt/pleroma
sudo -Hu pleroma git clone -b stable https://git.pleroma.social/pleroma/pleroma /opt/pleroma

Change to the new directory:

cd /opt/pleroma

Install the dependencies for Pleroma and answer with yes if it asks you to install Hex:

sudo -Hu pleroma mix deps.get

Generate the configuration: sudo -Hu pleroma MIX_ENV=prod mix pleroma.instance gen
Answer with yes if it asks you to install rebar3.
This may take some time, because parts of pleroma get compiled first.
After that it will ask you a few questions about your instance and generates a configuration file in config/generated_config.exs.
Check the configuration and if all looks right, rename it, so Pleroma will load it (prod.secret.exs for productive instance, dev.secret.exs for development instances):

sudo -Hu pleroma mv config/{generated_config.exs,prod.secret.exs}

The previous command creates also the file config/setup_db.psql, with which you can create the database:

sudo -Hu postgres psql -f config/setup_db.psql

Now run the database migration:

sudo -Hu pleroma MIX_ENV=prod mix ecto.migrate

Now you can start Pleroma already

sudo -Hu pleroma MIX_ENV=prod mix phx.server

Finalize installation¶

If you want to open your newly installed instance to the world, you should run nginx or some other webserver/proxy in front of Pleroma and you should consider to create an OpenRC service file for Pleroma.

Nginx¶

Install nginx, if not already done:

sudo apk add nginx

Setup your SSL cert, using your method of choice or certbot. If using certbot, first install it:

sudo apk add certbot

and then set it up:

sudo mkdir -p /var/lib/letsencrypt/
sudo certbot certonly --email <your@emailaddress> -d <yourdomain> --standalone

If that doesn’t work, make sure, that nginx is not already running. If it still doesn’t work, try setting up nginx first (change ssl “on” to “off” and try again).

Copy the example nginx configuration to the nginx folder

sudo cp /opt/pleroma/installation/pleroma.nginx /etc/nginx/conf.d/pleroma.conf

Before starting nginx edit the configuration and change it to your needs. You must change change server_name and the paths to the certificates. You can use nano (install with apk add nano if missing).

server {
    server_name    your.domain;
    listen         80;
    ...
}

server {
    server_name your.domain;
    listen 443 ssl http2;
    ...
    ssl_trusted_certificate   /etc/letsencrypt/live/your.domain/chain.pem;
    ssl_certificate           /etc/letsencrypt/live/your.domain/fullchain.pem;
    ssl_certificate_key       /etc/letsencrypt/live/your.domain/privkey.pem;
    ...
}

* (Strongly recommended) serve media on another domain

Refer to the Hardening your instance document on how to serve media on another domain. We STRONGLY RECOMMEND you to do this to minimize attack vectors.

Enable and start nginx:

sudo rc-update add nginx
sudo service nginx start

If you need to renew the certificate in the future, uncomment the relevant location block in the nginx config and run:

sudo certbot certonly --email <your@emailaddress> -d <yourdomain> --webroot -w /var/lib/letsencrypt/

OpenRC service¶

Copy example service file:

sudo cp /opt/pleroma/installation/init.d/pleroma /etc/init.d/pleroma

Make sure to start it during the boot

sudo rc-update add pleroma

Create your first user¶

If your instance is up and running, you can create your first user with administrative rights with the following task:

sudo -Hu pleroma MIX_ENV=prod mix pleroma.user new <username> <your@emailaddress> --admin

Questions¶

Questions about the installation or didn’t it work as it should be, ask in #pleroma:libera.chat via Matrix or #pleroma on libera.chat via IRC.