Implementation Blueprint

sudo apt update && sudo apt upgrade -y

# Install Nginx, MariaDB, and PHP
sudo apt install nginx mariadb-server php-fpm php-mysql php-curl php-gd php-intl php-mbstring php-xml php-zip php-soap php-impa unzip wget tnef -y

# Optionally install additional command-line tools GroupOffice uses to parse document text for search indexing
sudo apt install poppler-utils catdoc html2text unrtf antiword -y

sudo mysql -u root

CREATE DATABASE groupofficedb CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'gouser'@'localhost' IDENTIFIED BY 'highly_secure_go_password';
GRANT ALL PRIVILEGES ON groupofficedb.* TO 'gouser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

cd /tmp
wget https://github.com/Intermesh/groupoffice/releases/download/v6.8.54/groupoffice-6.8.54.tar.gz
tar -xzf groupoffice-6.8.54.tar.gz

# Move the core application to the web root
sudo mv groupoffice-6.8.54 /var/www/html/groupoffice

# Create the protected data directory OUTSIDE the web root
sudo mkdir /var/lib/groupoffice
sudo mkdir /etc/groupoffice

# Set correct permissions
sudo chown -R www-data:www-data /var/www/html/groupoffice
sudo chown -R www-data:www-data /var/lib/groupoffice
sudo chown -R www-data:www-data /var/etc/groupoffice

server {
    listen 80;
    server_name portal.mycompany.com;
    root /var/www/html/groupoffice;
    index index.php;

    client_max_body_size 50M;

    # Protect internal ExtJS framework configuration files
    location ~* \.(ini|log|conf|xml|sh)$ {
        deny all;
    }

    # Protect the protected folder if accidentally inside web root
    location ^~ /protected {
        deny all;
    }

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.1-fpm.sock;
        fastcgi_read_timeout 300;
        include fastcgi_params;
    }
}

sudo ln -s /etc/nginx/sites-available/groupoffice /etc/nginx/sites-enabled/
sudo systemctl reload nginx

memory_limit = 256M
upload_max_filesize = 50M
post_max_size = 50M
max_input_vars = 3000
date.timezone = "America/New_York"

sudo crontab -e -u www-data

* * * * * /usr/bin/php /var/www/html/groupoffice/cron.php > /dev/null 2>&1