Alma/Rocky/CentOS

Passwork is not resource-heavy. How much disk space, RAM and CPU power you will need depends on the number of active users, the amount of stored data, and your requirements for fault-tolerance.

See the full system requirements

First, gain root access and update the local packages:

Then, install web-server Apache2 and curl data transfer tool:

Run httpd.service:

And enable autostart:

Install the dynamically managed firewall Firewalld:

Run firewalld.service:

Enable autostart:

Allow HTTP services in firewalld:

Allow HTTPS services in firewalld:

And apply the changes to firewalld:

Edit the /etc/selinux/config configuration file:

Change theSELINUX parameter from enforcing to disabled:

Save the changes (Ctrl+O) and exit the terminal (Ctrl+X). Then, restart your system to apply the changes to SELinux:

Install the EPEL package and YUM package management tool:

Download and install the latest EPEL repository:

Download and install the repository for access to PHP versions:

Enable the PHP 8.3 modile from REMI repository:

Install PHP and its extensions:

Install a PHP MongoDB driver:

Create configuration files for PHP MongoDB startup and activation:

Get the location of the opcache configuration file:

Edit the configuration file:

Add the following lines to the configuration file:

Create a file to add MongoDB into YUM package manager

Add the following lines into the file:

Install MongoDB:

Run mongod.service:

And enable autostart:

Go to the Passwork customer portal and copy the certificate number for the Release Candidate:

Verify the available release candidate version of Passwork from the customer portal using the copied certificate number by query:

Get Passwork using a query:

Unzip the release candidate version of Passwork to a physical location:

Give apache owner privileges for the files and directories:

Open the virtual host configuration file for HTTP:

Edit the file so it looks as follows:

Restart the web server (httpd.service):

When you connect to Passwork for the first time, you will need to go over the checklist that includes:

After finishing the checklist, you will be offered to create the first Passwork user and set their login, password and email address for notifications.

Install a SSL module for Apache2:

Create a new directory to store the private key and the certificate in:

Use OpenSSL to generate a self-signed X.509 certificate for Apache2:

Generate Diffie-Hellman parameters with the key length of 2048:

Add Diffie-Hellman parameters to the self-signed certificate:

Give root access to the user to secure the private key and the certificate:

Open the virtual host configuration file for HTTPS connection:

Find the section that starts with <VirtualHost _default_:443> and edit it as follows:

Restart the web server (httpd.service):

When using a secure SSL connection (HTTPS), client browsers require certain flags to process Passwork data.

If the session.cookie_secure flag is not set, browsers will not be able to establish a connection, which may result in authorization errors.

Enable the ;session.cookie_secure parameter in /etc/php.ini:

Background tasks are tasks that are executed by the scheduler in the background. For example, LDAP synchronisation, loading favicons, and other tasks that are time-consuming, persistent, or resource-allocating.

See a guide on setting up background tasks.