To set up a Rocky Linux VM on my Pxvirt server and install an open project server on it.

---

1. Upload ISO to storage -> ISOs
2. Right Click Node -> Create VM
3. Click through configurations

My Configurations

• 2 GB Memory
• 25 GB Disk
• 2 Core CPU
• Rocky Linux 10.0 minimal ISO

4. In VM interface -> Start -> Console
5. GUI configuration.

• Add a root user
• Add an admin user
• Check IP/network configuration

**

• Docs: Installation and Operation Guide

1. Install git: sudo dnf install git
2. Clone the open project-docker-compose repo: git clone https://github.com/opf/openproject-docker-compose.git --depth=1 --branch=stable/16 openproject
3. cd openproject -> cp .env.example .env -> vi .env

• Change open project_https=true

4. We used the default OPDATA location that is used in the .env.example so we need to make sure that the folder exists, and that we have the right permissions:

• sudo mkdir -p /var/openproject/assets - Note: -p means to make the parent directories as needed
• sudo chown 1000:1000 -R /var/openproject/assets - Note: -R means that it changes the owner for the directory and everything inside it recursively. 1000 is also the first non-root user.

1. sudo dnf -y install dnf-plugins-core -> Up to Date
2. sudo dnf config-manager --add-repo https://download.docker.com/linux/rhel/docker-ce.repo
3. Install Docker Engine -> sudo dnf install docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin
4. Start Docker Engine -> sudo systemctl enable --now docker
5. Verify Installation -> sudo docker run hello-world

***

5. OPENPROJECT_HTTPS=false docker compose up -d --build --pull always

6. Navigate to http://localhost:8080

---

1. sudo firewall-cmd --zone=public --permanent --add-service=http
2. sudo firewall-cmd --zone=public --permanent --add-port=8080/tcp
3. sudo firewall-cmd --reload

• I can ping the Rocky Linux box IP from local machine
• I CANNOT curl http://:8080
• sudo ss -tuln | grep 8080 -> tcp LISTEN 127.0.0.1:8080 0.0.0.0:* (Only listening on local host)

• Add ports: - "<LAN IP>8080:80" to docker-compose.yml -> I bound it to my LAN IP so anyone on our local network can access it but no one else.
• sudo docker compose down
• sudo docker compose up -d
• sudo ss -tuln | grep 8080

1. sudo vi .env
2. Change hostname config to :8080
3. sudo docker compose down
4. sudo docker compose up -d
5. Success -> almost...

• docker compose logs -n 100
• My reverse proxy can't connect -> maybe changing my port binding to only my LAN affected the ability to communicate out to the proxy
• Trusted Proxies Doc

• docker down then up

• docker down then up

• docker down then up
• After checking web logs -> its the proxy having a hard time -> I added 6000/tcp to my firewall

• sudo firewall-cmd --zone=public --permanent --add-port=6000/tcp

• docker down then up -> Not working
• sudo docker ps -> added ports 443/tcp 443/udp 2019/tcp and 80/tcp to firewall
• down-up
• Fixed: There was a mismatch where in my Caddyfile.Template web was listening at port 80 instead of 8080

---

---

TO DO