Guide d'installation - Axelor Open Suite 9

sudo apt update && sudo apt upgrade -y
sudo apt install -y bash-completion nano unzip
sudo adduser --system --group --home /opt/axelor axelor
sudo ufw allow OpenSSH && sudo ufw allow 443/tcp && sudo ufw enable

sudo apt install -y postgresql
sudo -u postgres createuser --no-superuser --pwprompt axelor
sudo -u postgres psql template1 -c "CREATE EXTENSION IF NOT EXISTS unaccent;"
sudo -u postgres createdb --owner=axelor axelor

sudo apt install -y openjdk-21-jdk
java --version   # doit afficher OpenJDK 21

TC=10.1.55
sudo mkdir -p /opt/axelor/{dist,tomcat,data,conf,backups}
cd /tmp
wget https://dlcdn.apache.org/tomcat/tomcat-10/v${TC}/bin/apache-tomcat-${TC}.tar.gz
sudo tar xzf apache-tomcat-${TC}.tar.gz -C /opt/axelor/tomcat --strip-components=1
sudo chown -R axelor:axelor /opt/axelor

<Connector port="8080" protocol="HTTP/1.1" address="127.0.0.1"
           proxyPort="443" scheme="https" secure="true"
           connectionTimeout="20000" redirectPort="8443"
           maxParameterCount="1000" />

sudo -u axelor mkdir -p /opt/axelor/data/{attachments,exports,templates,reports}
sudo systemctl stop axelor-tomcat
sudo -u axelor rm -rf /opt/axelor/tomcat/webapps/ROOT
sudo -u axelor unzip -q /opt/axelor/dist/axelor-erp-9.0.10.war \
  -d /opt/axelor/tomcat/webapps/ROOT
sudo systemctl start axelor-tomcat

example.axelor.com {
  tls {
    protocols tls1.2 tls1.3
  }
  header {
    Strict-Transport-Security "max-age=31536000; includeSubDomains"
    X-Content-Type-Options "nosniff"
    X-Frame-Options "SAMEORIGIN"
    Referrer-Policy "strict-origin"
  }
  request_body { max_size 20MB }
  reverse_proxy 127.0.0.1:8080 {
    transport http { read_timeout 1800s; write_timeout 1800s }
  }
}

sudo caddy validate --config /etc/caddy/Caddyfile
sudo systemctl enable --now caddy

services:
  app:
    image: axelor/aos-ce:9.0
    environment:
      - PGHOST=postgres
      - PGUSER=axelor
      - PGPASSWORD=<mot_de_passe>
      - PGDATABASE=axelor
      - APP_MODE=prod
      - JAVA_XMX=4096m
    ports:
      - "8080:8080"
    depends_on: [postgres]
    volumes:
      - app_data:/data
    healthcheck:
      test: ["CMD", "curl", "-f", "http://localhost:8080/health"]
      interval: 10s
      timeout: 5s
      retries: 3
      start_period: 1800s
  postgres:
    image: postgres:16
    environment:
      - POSTGRES_USER=axelor
      - POSTGRES_PASSWORD=<mot_de_passe>
      - POSTGRES_DB=axelor
    volumes:
      - postgres_data:/var/lib/postgresql/data
volumes:
  app_data:
  postgres_data:

# === Base de données ===
db.default.url      = jdbc:postgresql://localhost:5432/axelor
db.default.user     = axelor
db.default.password = <mot_de_passe>
db.default.ddl      = update

# === GED (système de fichiers) ===
data.upload.max-size = 20
data.upload.dir      = /opt/axelor/data/attachments
data.export.dir      = /opt/axelor/data/exports
template.search-dir  = /opt/axelor/data/templates
reports.design-dir   = /opt/axelor/data/reports

# === Application & sécurité ===
application.mode      = prod
application.base-url  = https://example.axelor.com
session.timeout       = 60
session.cookie.secure = true

sudo systemctl start postgresql
sudo systemctl start axelor-tomcat
sudo systemctl start caddy
systemctl status postgresql axelor-tomcat caddy --no-pager

curl -fs http://127.0.0.1:8080/health && echo " OK"
# via le reverse proxy :
curl -fs https://example.axelor.com/health