Install

Requirements

QuartzMap requires only a LAPP stack.

Installation on Ubuntu 22

Follow below to customize your installation.

Install PostgreSQL with PostGIS

QuartzMap requires PostgreSQL with PostGIS.

If you do not already have it installed, install it now.

apt -y install postgresql postgresql-contrib postgis

Install Prerequisties

apt-get -y install apache2 libapache2-mod-php php-{pgsql,zip,gd,simplexml} proftpd libapache2-mod-fcgid postfix python3-certbot-apache

Create the PostGIS Database

CREATE USER quartz with password 'SuperSecret';

CREATE DATABASE quartz with OWNER quartz;

Create the Database Objects

CREATE TYPE public.userlevel AS ENUM ('Admin', 'User');

CREATE TABLE public.user (   id SERIAL PRIMARY KEY,
name character varying(250),
email character varying(250),
password character varying(255),
ftp_user character varying(250),
accesslevel public.userlevel,
owner_id integer NOT NULL    REFERENCES public.user(id),
UNIQUE(email)
);

CREATE TABLE public.access_groups (  id SERIAL PRIMARY KEY,
name character varying(255) NOT NULL,
owner_id integer NOT NULL    REFERENCES public.user(id)
);

CREATE TABLE public.user_access (    id SERIAL PRIMARY KEY,
user_id integer NOT NULL REFERENCES public.user(id),
access_group_id integer NOT NULL     REFERENCES public.access_groups(id),
UNIQUE(user_id, access_group_id)
);

CREATE TABLE public.map ( id SERIAL PRIMARY KEY,
name character varying(50) NOT NULL,
description character varying(50) NOT NULL,
is_public BOOLEAN DEFAULT false,
owner_id integer NOT NULL REFERENCES public.user(id)
);

CREATE TABLE public.map_access ( id SERIAL PRIMARY KEY,
map_id integer NOT NULL REFERENCES public.map(id),
access_group_id integer NOT NULL REFERENCES public.access_groups(id),
UNIQUE(map_id, access_group_id)
);

CREATE TABLE public.permalink (      id SERIAL PRIMARY KEY,
description character varying(255),
query character varying(255),
map_id integer NOT NULL      REFERENCES public.map(id),
created TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP,
expires TIMESTAMP NOT NULL DEFAULT CURRENT_TIMESTAMP + interval '1 hour',
visits  integer NOT NULL DEFAULT 0,
visits_limit integer NOT NULL DEFAULT 1,
hash character varying(36) NOT NULL,
owner_id integer NOT NULL    REFERENCES public.user(id)
);

CREATE TABLE public.signup ( id SERIAL PRIMARY KEY,
name character varying(250),
email character varying(250),
password character varying(250),
verify character varying(250),
UNIQUE(email)
);

Install QGIS Server

To advertise WMS, WFS, and WTMS, install QGIS server.

RELEASE=$(lsb_release -cs)
wget --no-check-certificate --quiet -O /etc/apt/keyrings/qgis-archive-keyring.gpg https://download.qgis.org/downloads/qgis-archive-keyring.gpg

cat >>/etc/apt/sources.list.d/qgis.sources <<CAT_EOF
Types: deb deb-src
URIs: https://qgis.org/ubuntu
Suites: ${RELEASE}
Architectures: amd64
Components: main
Signed-By: /etc/apt/keyrings/qgis-archive-keyring.gpg
CAT_EOF

apt-get update -y || true
apt-get install -y qgis-server

if [ -d /etc/logrotate.d ]; then
cat >/etc/logrotate.d/qgisserver <<CAT_EOF
/var/log/qgisserver.log {
     su www-data www-data
     size 100M
     notifempty
     missingok
     rotate 3
     daily
     compress
     create 660 www-data www-data
}
CAT_EOF
     fi

     touch /var/log/qgisserver.log
     chown www-data:www-data /var/log/qgisserver.log

Configure ProFTPD

Configure ProFTPD to jail users to FTP directories

sed -i.save '
   s/#DefaultRoot~/DefaultRoot ~/
   s/# RequireValidShelloff/RequireValidShell off/' /etc/proftpd/proftpd.conf

Restart ProFTPD for changes to take effect.

Configure Apache

a2enmod ssl headers expires fcgid cgi

Copy the apache2.conf file to sites-available/default-ssl.conf (or use own config)

cp installer/apache2.conf /etc/apache2/sites-available/default-ssl.conf

Below is required for Certbot to provision SSL

Enable confs and reload Apache

a2ensite 000-default default-ssl
systemctl reload apache2

Request certificate from Let’s Encrypt

certbot --apache --agree-tos --email hostmaster@${HNAME} --no-eff-email -d ${HNAME}

Create Data and Cache Directories

Set the DATA_DIR and CACHE_DIR should be outside of public directories

For example /var/www

mkdir -p /var/www/cache
mkdir -p /var/www/data

Create the apps directory

mkdir -p /var/www/html/apps

Grant Apache permissions

chown -R www-data:www-data "${APPS_DIR}"
chown -R www-data:www-data "${CACHE_DIR}"
chown -R www-data:www-data "${DATA_DIR}"


cp -r . /var/www/html/
chown -R www-data:www-data /var/www/html
rm -rf /var/www/html/installer

Restart Apache for changes to take effect

systemctl restart apache2

Create Groups and Permissions

# create group for all FTP users
groupadd qatusers

create_ftp_user

# install ftp user creation script
for f in update; do
        cp installer/${f}_ftp_user.sh /usr/local/bin/
        chown www-data:www-data /usr/local/bin/${f}_ftp_user.sh
        chmod 0550 /usr/local/bin/${f}_ftp_user.sh
done

cat >/etc/sudoers.d/q2w <<CAT_EOF
www-data ALL = NOPASSWD: /usr/local/bin/update_ftp_user.sh
CAT_EOF
echo -e "postgres and other passwords are saved in /root/auth.txt file"

Create incl/const.php file

Copy the incl/const.php.dist file

cp const.php.dist const.php

Populate using values from above.

<?php
define("DB_HOST", "localhost");
define("DB_NAME", "quartz");
define("DB_USER", "quartz");
define("DB_PASS", "SuperSecretPassword");
define("DB_PORT", 5432);
define("DB_SCMA", 'public');
define("APPS_DIR", "/var/www/html/apps");
define("CACHE_DIR", "/var/www/cache");
define("DATA_DIR", "/var/www/data");
define("SUPER_ADMIN_ID", 1);
define("SESS_USR_KEY", 'q2w_user');
const ACCESS_LEVELS = array('User', 'Admin');
?>