How to Start 2FAuth

[ameralzarouni]

Hi,
I followed all the installation steps on the github page and they all went smoothly.
My question is, how do I start 2FAuth? If it helps, I use Apache2 as my main web server.
Thank You

[Bubka]

Hi,

Here is the step I follow when I want to run a new app on my local apache2 server.

• Create a new vhost conf file:

cd /etc/apache2/sites-available
sudo cp 000-default.conf myNewVHost.conf

(replace myNewVHost.conf with the name of your choice, i.e 2fauth.conf)

• Edit the new .conf file and update DocumentRoot and the Directory node with the path of your 2FAuth/public folder:

	DocumentRoot /path/to/2FAuth/public

	<Directory "/path/to/2FAuth/public">
		Allowoverride All
	</Directory>

• Enable the new vhost

// enable the vhost
sudo a2ensite 2fauth.conf

 // reload apache2 conf if the server is already running
systemctl reload apache2 

• Add a host to my hosts file:

127.0.0.1             localhost
127.0.0.1             2fauth   // the new host

• Open a browser on the url http://2fauth/ to run the app.

[ameralzarouni]

Thank You :)
I'll try that now.

[cosmicle0]

Hi, does this support nginx? If so, would this be the right configuration?

server {

        root /var/www/2FAuth/public;
        index index.php;

        server_name 2FAuth.example.com;

        location / {
                try_files $uri $uri/ =404;
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
        }

        location ~ /\.ht {
                deny all;
        }
}

I get HTTP Error 500, I think the issue is with my config

Thanks,
cosmicice

[qdm12]

Probably too late, but I wrote a document on how to set it up on Debian with Nginx+PHP-FPM: https://github.com/qdm12/2FAuth/blob/debian-setup/docs/debian-setup.md

[Bubka]

Hi,

I'm not familiar with nginx but I think your server name is wrong:
server_name 2FAuth.example.com;

If you appended the line 127.0.0.1 2fauth to your hosts file I think you should set your nginx conf to
server_name 2fauth;

Otherwise it should be something like server_name localhost; or server_name 127.0.0.1;

[cosmicle0]

I'm sorry, but where exactly is the hosts file?

[Bubka]

• Windows 10: C:\Windows\System32\drivers\etc\hosts
• Linux: /etc/hosts
• Mac OS X: /private/etc/hosts

[cosmicle0]

Usually, I don't have to modify the hosts file to host anything with nginx, and I don't really think I have to with 2FAuth Either, the server name is perfect, you can check example nginx config's, and that is how you do it. But I'm not sure why I get an HTTP 500 Error, perhaps something to do with my nginx config for PHP?

[Bubka]

Indeed adding a dedicated host in your hosts file is not mandatory.
As said I'm not familiar with nginx so I may be wrong.

But as described here the server name has to point to your domain or your ip address.

Did you try to set your conf like:

server {

        root /var/www/2FAuth/public;
        index index.php;

        server_name 127.0.0.1;

        location / {
                try_files $uri $uri/ =404;
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
        }

        location ~ /\.ht {
                deny all;
        }
}

or

server {

        root /var/www/2FAuth/public;
        index index.php;

        server_name localhost;

        location / {
                try_files $uri $uri/ =404;
        }

        location ~ \.php$ {
                include snippets/fastcgi-php.conf;
                fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
        }

        location ~ /\.ht {
                deny all;
        }
}

Also did you enabled your new site and restarted nginx? (see those steps in my link)

[cosmicle0]

I've put the domain as my server_name, and that is the way I've done for all of my nginx configuration's, and they've worked. So I don't think the server_name is the issue either. I've also enabled (symlink'd) the site from /etc/nginx/sites-available to /etc/nginx/sites-enabled, and restarted nginx's service.

[Bubka]

😞

As 2FAuth is Laravel based maybe you should have a look to the Laravel deployment doc : https://laravel.com/docs/7.x/deployment#nginx

[cosmicle0]

Alright, I'll see and let you know, thanks!

[cosmicle0]

Nope, that didn't work :( This is my configuration now:

server {
      listen 80;
      listen[::]:80;

        root /home1/www/2fa.example.com/public;
        index index.php;

        server_name 2fa.example.com;

 add_header X-Frame-Options "SAMEORIGIN";
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Content-Type-Options "nosniff";

charset utf-8;

location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }

    error_page 404 /index.php;

       location ~ \.php$ {
        fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }

    location ~ /\.(?!well-known).* {
        deny all;
    }

}

[cosmicle0]

Should I, perhaps, install Laravel? 🤔

[Bubka]

Did you run php composer install right after you cloned the repo?
If so laravel is installed.

You should have followed all steps of the installation process to get a ready to run app.

Anyway, 50x errors are server errors so the issue come from your nginx setup.

Have you tried to run another app with the same nginx setup? Does it works?

[cosmicle0]

Yes, I followed the guide.
You were right, it was a server error, so I checked nginx logs, and I found out that the directory was not owned by www-data, so that was the issue the whole time 😂. I think it works fine now, I'll test it out.
Thank you so much for your help!
~cosmicice

[Bubka]

My pleasure, glad it works 👍🏻

[kooplaah]

@Bubka Hi! I just wanted to say I saw this on the UnRaid CA store and I LOVE the idea! I just set it up for myself. Looks like right now it only has 1 account possible, but in the future I'd love to get my family members off of Google Auth and onto this! Is there any way I can support your development efforts?