roundcubemail/contribs10/roundcubemail-README.rpm

Additional installation and update information:

Upstream documentation: http://trac.roundcube.net/wiki

Notice
- temporary files are stored in /var/lib/roundcubemail
- logs files are stored in /var/log/roundcubemail
- configuration files are stored in /etc/roundcubemail

As those directories are not served by the web server,
there is no need to protect them.

Databases

Roundcube supports various database providers, including SQLite, MySQL and
PostgreSQL. The package depends only on php-pdo, which provides SQLite
support. However, the default configuration is for a MySQL database, for
performance reasons. To use the MySQL database, ensure php-mysql is
installed. If you want to use another database, adjust the configuration
file, and ensure the appropriate PDO plugin is installed. If necessary.


The installer is available at http://localhost/roundcubemail/installer
The webmail is available at http://localhost/roundcubemail

By default, access to Roundcube and the installer is only allowed from the
server, locally, in /etc/httpd/conf.d/roundcubemail.conf . Best practice is
to create a new file - e.g. /etc/httpd/conf.d/z-roundcubemail-allow.conf -
to adjust the access permissions. You can also edit roundcubemail.conf directly,
but then any changes to it in future package updates will cause the creation
of a .rpmnew file, and you will have to merge the changes manually: creating
a new config file to configure access permissions avoids that.

First use the installer to configure Roundcube, ideally from the server so you
do not need to allow any wider access to the installer, but you can use a new
config file to grant wider access to /usr/share/roundcubemail and
/usr/share/roundcubemail/installer if necessary. Once you have completed
deployment, you should restrict access to the /installer subdirectory again, as
an attacker could use it to do anything they liked to your Roundcube
installation.

UPGRADING: when upgrading from < 1.0 the old configuration files named
main.inc.php and db.inc.php are now deprecated and should be replaced with one
single config.inc.php file. Run the /usr/share/roundcube/bin/update.sh script
as root to get this conversion done or manually merge the files. The update
script will also update the database configuration. Check the permissions of
the config.inc.php file and all backups the script creates! Make sure they
are not world-readable, as they may contain sensitive information (e.g.
database passwords).

NOTE: the new config.inc.php should only contain options that differ from the
ones listed in defaults.inc.php.
1	Additional installation and update information:
2
3	Upstream documentation: http://trac.roundcube.net/wiki
4
5	Notice
6	- temporary files are stored in /var/lib/roundcubemail
7	- logs files are stored in /var/log/roundcubemail
8	- configuration files are stored in /etc/roundcubemail
9
10	As those directories are not served by the web server,
11	there is no need to protect them.
12
13	Databases
14
15	Roundcube supports various database providers, including SQLite, MySQL and
16	PostgreSQL. The package depends only on php-pdo, which provides SQLite
17	support. However, the default configuration is for a MySQL database, for
18	performance reasons. To use the MySQL database, ensure php-mysql is
19	installed. If you want to use another database, adjust the configuration
20	file, and ensure the appropriate PDO plugin is installed. If necessary.
21
22
23	The installer is available at http://localhost/roundcubemail/installer
24	The webmail is available at http://localhost/roundcubemail
25
26	By default, access to Roundcube and the installer is only allowed from the
27	server, locally, in /etc/httpd/conf.d/roundcubemail.conf . Best practice is
28	to create a new file - e.g. /etc/httpd/conf.d/z-roundcubemail-allow.conf -
29	to adjust the access permissions. You can also edit roundcubemail.conf directly,
30	but then any changes to it in future package updates will cause the creation
31	of a .rpmnew file, and you will have to merge the changes manually: creating
32	a new config file to configure access permissions avoids that.
33
34	First use the installer to configure Roundcube, ideally from the server so you
35	do not need to allow any wider access to the installer, but you can use a new
36	config file to grant wider access to /usr/share/roundcubemail and
37	/usr/share/roundcubemail/installer if necessary. Once you have completed
38	deployment, you should restrict access to the /installer subdirectory again, as
39	an attacker could use it to do anything they liked to your Roundcube
40	installation.
41
42	UPGRADING: when upgrading from < 1.0 the old configuration files named
43	main.inc.php and db.inc.php are now deprecated and should be replaced with one
44	single config.inc.php file. Run the /usr/share/roundcube/bin/update.sh script
45	as root to get this conversion done or manually merge the files. The update
46	script will also update the database configuration. Check the permissions of
47	the config.inc.php file and all backups the script creates! Make sure they
48	are not world-readable, as they may contain sensitive information (e.g.
49	database passwords).
50
51	NOTE: the new config.inc.php should only contain options that differ from the
52	ones listed in defaults.inc.php.