Installation de GLPI sur Ubuntu 25.04

apt update && apt upgrade
apt install -y apache2 php php-{apcu,cli,common,curl,gd,imap,ldap,mysql,xmlrpc,xml,mbstring,bcmath,intl,zip,redis,bz2} libapache2-mod-php php-soap php-cas
apt install -y mariadb-server

mysql_secure_installation
mysql_tzinfo_to_sql /usr/share/zoneinfo | mysql mysql
mysql -uroot -pmysql

CREATE DATABASE glpi;
CREATE USER 'glpi'@'localhost' IDENTIFIED BY 'yourstrongpassword';
GRANT ALL PRIVILEGES ON glpi.* TO 'glpi'@'localhost';
GRANT SELECT ON `mysql`.`time_zone_name` TO 'glpi'@'localhost';
FLUSH PRIVILEGES;

cd /var/www/html
wget https://github.com/glpi-project/glpi/releases/download/11.0.6/glpi-11.0.6.tgz
tar -xvzf glpi-11.0.6.tgz
vim /var/www/html/glpi/inc/downstream.php

<?php
define('GLPI_CONFIG_DIR', '/etc/glpi/');
if (file_exists(GLPI_CONFIG_DIR . '/local_define.php')) {
require_once GLPI_CONFIG_DIR . '/local_define.php';
}

mv /var/www/html/glpi/config /etc/glpi
mv /var/www/html/glpi/files /var/lib/glpi
mv /var/lib/glpi/_log /var/log/glpi
vim /etc/glpi/local_define.php

<?php
define('GLPI_VAR_DIR', '/var/lib/glpi');
define('GLPI_DOC_DIR', GLPI_VAR_DIR);
define('GLPI_CACHE_DIR', GLPI_VAR_DIR . '/_cache');
define('GLPI_CRON_DIR', GLPI_VAR_DIR . '/_cron');
define('GLPI_GRAPH_DIR', GLPI_VAR_DIR . '/_graphs');
define('GLPI_LOCAL_I18N_DIR', GLPI_VAR_DIR . '/_locales');
define('GLPI_LOCK_DIR', GLPI_VAR_DIR . '/_lock');
define('GLPI_PICTURE_DIR', GLPI_VAR_DIR . '/_pictures');
define('GLPI_PLUGIN_DOC_DIR', GLPI_VAR_DIR . '/_plugins');
define('GLPI_RSS_DIR', GLPI_VAR_DIR . '/_rss');
define('GLPI_SESSION_DIR', GLPI_VAR_DIR . '/_sessions');
define('GLPI_TMP_DIR', GLPI_VAR_DIR . '/_tmp');
define('GLPI_UPLOAD_DIR', GLPI_VAR_DIR . '/_uploads');
define('GLPI_INVENTORY_DIR', GLPI_VAR_DIR . '/_inventories');
define('GLPI_THEMES_DIR', GLPI_VAR_DIR . '/_themes');
define('GLPI_LOG_DIR', '/var/log/glpi');

chown root:root /var/www/html/glpi/ -R
chown www-data:www-data /etc/glpi -R
chown www-data:www-data /var/lib/glpi -R
chown www-data:www-data /var/log/glpi -R
chown www-data:www-data /var/www/html/glpi/marketplace -Rf
find /var/www/html/glpi/ -type f -exec chmod 0644 {} \;
find /var/www/html/glpi/ -type d -exec chmod 0755 {} \;
find /etc/glpi -type f -exec chmod 0644 {} \;
find /etc/glpi -type d -exec chmod 0755 {} \;
find /var/lib/glpi -type f -exec chmod 0644 {} \;
find /var/lib/glpi -type d -exec chmod 0755 {} \;
find /var/log/glpi -type f -exec chmod 0644 {} \;
find /var/log/glpi -type d -exec chmod 0755 {} \;

vim /etc/apache2/sites-available/glpi.conf

# Start of the VirtualHost configuration for port 80

<VirtualHost *:80>
  ServerName yourglpi.yourdomain.com
  # Specify the server's hostname
  DocumentRoot /var/www/html/glpi/public
  # The directory where the website's files are located
  # Start of a Directory directive for the website's directory
  <Directory /var/www/html/glpi/public>
    Require all granted
    # Allow all access to this directory
    RewriteEngine On
    # Enable the Apache rewrite engine
    # Ensure authorization headers are passed to PHP.
    # Some Apache configurations may filter them and break usage of API, CalDAV, ...
    RewriteCond %{HTTP:Authorization} ^(.+)$
    RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
    # Redirect all requests to GLPI router, unless the file exists.
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteRule ^(.*)$ index.php [QSA,L]
  </Directory>
  # End of the Directory directive for /var/www/glpi/public
</VirtualHost>

# End of the VirtualHost configuration for port 80

a2dissite 000-default.conf
a2enmod rewrite
a2ensite glpi.conf
systemctl restart apache2
vim /etc/php/8.1/apache2/php.ini

upload_max_filesize = 20M
post_max_size = 20M
max_execution_time = 60
max_input_vars = 5000
memory_limit = 256M
session.cookie_httponly = On
date.timezone = Europe/Paris

php -v

php -m | grep -E "(mysql|curl|gd|ldap|intl|zip|bz2|soap)"

rm /var/www/html/glpi/install/install.php

# Via MariaDB (conseil alternative)
mysql -u root -p glpi
UPDATE glpi_users SET is_active = 0 WHERE name = 'glpi';
EXIT;

# Générer certificat auto-signé (test)
openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
  -keyout /etc/ssl/private/glpi-key.pem \
  -out /etc/ssl/certs/glpi-cert.pem

# Ou utiliser Let's Encrypt
certbot certonly --standalone -d yourglpi.yourdomain.com

<VirtualHost *:443>
  ServerName yourglpi.yourdomain.com
  SSLEngine on
  SSLCertificateFile /etc/ssl/certs/glpi-cert.pem
  SSLCertificateKeyFile /etc/ssl/private/glpi-key.pem
  # ... reste de config
</VirtualHost>

# Interdire accès direct aux répertoires sensibles
chmod 700 /etc/glpi
chmod 700 /var/lib/glpi
chmod 700 /var/log/glpi

# Vérifier ownership
ls -la /var/www/html/glpi/ | grep -E "(^d|www-data)"

# Statut Apache
systemctl status apache2

# Logs GLPI
tail -50 /var/log/glpi/php-errors.log
tail -50 /var/log/apache2/error.log

# Vérifier permissions
ls -lR /var/www/html/glpi/public | head -20