Installation Guide

Requirements

You run MMMSG service you need the following:

  1. A reasonably recent server with Debian 9 or Debian 8 and enough disk space.
  2. Hostname for the server and TLS certificate for it.

Adding Repository

Note

These instructions are same as for our SIPIS repository.

Add our key and repository to Debian:

  1. Execute the following command to install our public key:
wget -O - https://dist.acrobits.cz/debian/acrobits.gpg.key | apt-key add -

The fingerprint for our key is 1DB8 E683 A6F4 919B BFF1 6A7C FFCC BAF7 9FF5 CF45

  1. Create a new file /etc/apt/sources.list.d/Acrobits.list with the following content:

    deb http://username:password@dist.acrobits.cz/debian stretch main
    

Note

You will get a username and password from Acrobits representative.

Note

If you have SIPIS installation, you can use the same username and password. MMMSG is also available in jessie repository.

  1. Run apt-get update

Installing mmmsg

Run

apt-get install mmmsg

Configuring MMMSG

The configuration file is /etc/acrobits/mmmsg/mmmsg.xml. You need to replace mmmsg.example.com with domain name of your server as a base url.

The other settings are set to sensible defaults and can be kept as they are.

Setting up TLS

MMMSG service by default listens on port 8920 without encryption. We recommend you use TLS proxy, either stunnel or nginx and we describe their configuration in this document.

Nginx as a TLS proxy

Install nginx (apt-get install nginx) and copy the file /usr/share/doc/mmmsg/nginx_example.conf into /etc/nginx/sites-enabled/mmmsg.conf. Edit it and change the parameters ssl_certificate and ssl_certificate_key so that they point to certificate and key pair for your hostname. Also change server_name parameter to your server’s hostname. Then reload nginx configuration (systemctl reload nginx.service).

stunnel as TLS proxy

Install stunnel (apt-get install stunnel4) and copy the file /usr/share/doc/mmmsg/stunnel_example.conf to /etc/stunnel/mmmsg.conf. Chenge options cert and key so that they point to certificate and key pair for your hostname. Edit /etc/default/stunnel4 and change ENABLED option from 0 to 1. Then restart stunnel service (systemctl restart stunnel4.service).

Running the service

To start the service run the following command:
systemctl start mmmsg.service

Note

To make the service start automatically on computer start run systemctl enable mmmsg.service

To stop the service run:
systemctl stop mmmsg.service