{"id":7516,"date":"2021-01-07T18:31:29","date_gmt":"2021-01-07T15:31:29","guid":{"rendered":"https:\/\/kifarunix.com\/?p=7516"},"modified":"2024-03-19T21:06:31","modified_gmt":"2024-03-19T18:06:31","slug":"install-passbolt-password-manager-on-debian","status":"publish","type":"post","link":"https:\/\/kifarunix.com\/install-passbolt-password-manager-on-debian\/","title":{"rendered":"Install Passbolt Password Manager on Debian 10\/Debian 11"},"content":{"rendered":"\n<p>In this tutorial, you will learn how to install Passbolt password manager on Debian 10\/Debian 11. <a aria-label=\"undefined (opens in a new tab)\" href=\"https:\/\/www.passbolt.com\/\" target=\"_blank\" rel=\"noreferrer noopener\">Passbolt<\/a> is is a free, open source, self-hosted, extensible, OpenPGP based password manager that enables teams to securely store their personal as well as share their common credentials. It is available both a subscription based and community edition. This tutorial focuses on the setup of community edition.<\/p>\n\n\n\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Table of Contents<\/h2><nav><ul><li><a href=\"#install-passbolt-on-debian-10-debian-11\">Install Passbolt on Debian 10\/Debian 11<\/a><\/li><li><a href=\"#prerequisites\">Prerequisites<\/a><ul><li><a href=\"#install-lamp-lemp-stack-on-debian-10\">Install LAMP\/LEMP Stack on Debian 10<\/a><\/li><li><a href=\"#install-apache-http-server\">Install Apache HTTP Server<\/a><ul><li><a href=\"#install-php-on-debian-10-debian-11\">Install PHP on Debian 10\/Debian 11<\/a><\/li><\/ul><\/li><li><a href=\"#install-maria-db-my-sql-on-debian-10-debian-11\">Install MariaDB\/MySQL on Debian 10\/Debian 11<\/a><\/li><li><a href=\"#create-passbolt-database-and-database-user\">Create Passbolt Database and Database User<\/a><\/li><li><a href=\"#clone-passbolt-github-repository-to-apache-web-root-directory\">Clone Passbolt Github Repository to Apache Web Root Directory<\/a><\/li><li><a href=\"#install-passbolt-on-debian\">Install Passbolt on Debian<\/a><\/li><li><a href=\"#generate-open-pgp-key-for-authenticating-json-requests\">Generate OpenPGP Key for Authenticating JSON Requests<\/a><\/li><li><a href=\"#export-and-store-passbolt-gpg-keys\">Export and Store Passbolt GPG Keys<\/a><\/li><li><a href=\"#initialize-passbolt-gpg-keyring-for-web-user\">Initialize Passbolt GPG Keyring for Web User<\/a><\/li><li><a href=\"#configuring-passbolt-on-debian-10-debian-11\">Configuring Passbolt on Debian 10\/Debian 11<\/a><ul><li><a href=\"#set-the-application-url\">Set the Application URL<\/a><\/li><li><a href=\"#define-database-connection-settings\">Define Database Connection settings<\/a><\/li><\/ul><\/li><li><a href=\"#configure-passbolt-email-settings\">Configure Passbolt Email Settings<\/a><\/li><li><a href=\"#specify-the-gpg-key-fingerprint\">Specify the GPG key fingerprint<\/a><\/li><li><a href=\"#create-apache-virtual-host-configuration-for-passbolt-and-enable-https\">Create Apache VirtualHost Configuration for Passbolt and Enable HTTPS<\/a><\/li><li><a href=\"#generate-tls-certificates\">Generate TLS certificates<\/a><\/li><li><a href=\"#enable-passbolt-apache-site-configuration\">Enable Passbolt Apache Site Configuration<\/a><\/li><li><a href=\"#run-the-passbolt-install-script\">\u00a0Run the Passbolt Install Script<\/a><\/li><li><a href=\"#create-first-passbolt-admin-user-account\">Create First Passbolt Admin User Account<\/a><ul><li><a href=\"#create-passbolt-administrative-user-account\">Create Passbolt Administrative User Account<\/a><\/li><\/ul><\/li><li><a href=\"#finalize-passbolt-setup-from-browser\">Finalize Passbolt Setup from Browser<\/a><ul><li><a href=\"#install-passbolt-browser-extension\">Install Passbolt Browser Extension<\/a><\/li><li><a href=\"#setup-passbolt-passphrase\">Setup Passbolt Passphrase<\/a><\/li><li><a href=\"#download-and-save-passbolt-passphrase-private-key\">Download and Save Passbolt Passphrase private Key<\/a><\/li><li><a href=\"#choose-a-color-to-identify-your-secret-token-with\">Choose a Color to Identify your Secret Token with<\/a><\/li><li><a href=\"#passbolt-dashboard\">Passbolt Dashboard<\/a><\/li><\/ul><\/li><li><a href=\"#configure-passbolt-to-sent-emails\">Configure Passbolt to Sent Emails<\/a><\/li><li><a href=\"#reference\">Reference<\/a><\/li><li><a href=\"#related-tutorials\">Related Tutorials<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"install-passbolt-on-debian-10-debian-11\">Install Passbolt on Debian 10\/Debian 11<\/h2>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"prerequisites\">Prerequisites<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Install a fresh Vanilla Debian 10?Debian 11 server.<\/li>\n\n\n\n<li>Allocate the server at least 2 GB RAM and 2 vCPUs<\/li>\n\n\n\n<li>A resolvable hostname or IP address of your server.<\/li>\n\n\n\n<li>Install LEMP\/LAMP stack on Debian 10\/Debian 11<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"install-lamp-lemp-stack-on-debian-10\">Install LAMP\/LEMP Stack on Debian 10<\/h3>\n\n\n\n<p>Assuming that the first three prerequisites mentioned above have been met, proceed to install LEMP\/LAMP stack on Debian 10 server. Note that Passbolt is written in PHP and hence, it requires either a LEMP or a LAMP stack to run.<\/p>\n\n\n\n<p><strong>In this tutorial, we are using LAMP stack to run Passbolt.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"install-apache-http-server\">Install Apache HTTP Server<\/h3>\n\n\n\n<pre class=\"wp-block-code\"><code>apt install apache2 libapache2-mod-php -y<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-php-on-debian-10-debian-11\">Install PHP on Debian 10\/Debian 11<\/h4>\n\n\n\n<p>Passbolt required PHP &gt;= 7.3.0. PHP is available on the default Debian repos.<\/p>\n\n\n\n<p>Thus, install PHP and other required PHP modules and other required packages;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apt install php php-gnupg php-intl php-mbstring php-fpm php-mysql php-xml php-curl php-json php-gd php-ldap composer gnupg2 git php-imagick zlib1g zlib1g-dev sudo -y<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"install-maria-db-my-sql-on-debian-10-debian-11\">Install MariaDB\/MySQL on Debian 10\/Debian 11<\/h3>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-mariadb-10-on-debian-10-buster\/\" target=\"_blank\" rel=\"noreferrer noopener\">Install MariaDB on Debian 10 Buster<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-mariadb-10-6-on-debian-11\/\" target=\"_blank\" rel=\"noreferrer noopener\">Install MariaDB on Debian 11<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"create-passbolt-database-and-database-user\">Create Passbolt Database and Database User<\/h3>\n\n\n\n<p>Login to MariaDB\/MySQL database server;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>mysql<\/code><\/pre>\n\n\n\n<p>The above command assumes that your MySQL\/MariaDB database is using <code><strong>unix_socket<\/strong><\/code> for authentication and that you are executing the command as a root user. If you are not root and have sudo rights, simply use; <code><strong>sudo mysql -u root<\/strong><\/code>. Otherwise, you can just use <code><strong>mysql -u root -p<\/strong><\/code> command.<\/p>\n\n\n\n<p><strong>Replace the name of the database, the database user username and password in the commands below as you see fit.<\/strong><\/p>\n\n\n\n<p>Create Passbolt database that supports non latin characters and emojis.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>CREATE DATABASE passbolt CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;<\/code><\/pre>\n\n\n\n<p>Create a Passbolt database user and grant all privileges on the Passbolt database.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>grant all on passbolt.* to passman@localhost identified by 'p@SSw0rd123';<\/code><\/pre>\n\n\n\n<p>Reload privileges tables and quit database;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>flush privileges;\nquit<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"clone-passbolt-github-repository-to-apache-web-root-directory\">Clone Passbolt Github Repository to Apache Web Root Directory<\/h3>\n\n\n\n<p>Since we are going to install Passbolt from the source, you need to clone its Gtihub repository to your web root directory.<\/p>\n\n\n\n<p>In this tutorial, we are using <code><strong>\/var\/www\/passbolt<\/strong><\/code> as the web root directory.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>mkdir \/var\/www\/passbolt<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>git clone https:\/\/github.com\/passbolt\/passbolt_api.git \/var\/www\/passbolt<\/code><\/pre>\n\n\n\n<p>Since we are using Apache as the web server, you need to set the ownership (user and group) of the Passbolt web root directory to Apache user and group;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chown -R www-data: \/var\/www\/<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"install-passbolt-on-debian\">Install Passbolt on Debian<\/h3>\n\n\n\n<p>Next, navigate to Passbolt web root directory and install other required dependencies using <code>composer<\/code>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/var\/www\/passbolt<\/code><\/pre>\n\n\n\n<p>Run composer as the non privileged user. In this case, we use the owner of the Passbolt directory (Apache web user, www-data).<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo -u www-data composer install --no-dev<\/code><\/pre>\n\n\n\n<p>The command begins the installation by downloading and installing the required dependencies.<\/p>\n\n\n\n<p>During the installation, you are prompted on whether to adjust directories permissions. Accept and continue.<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>...\n&gt; App\\Console\\Installer::postInstall\nCreated `config\/app.php` file\nCreated `\/var\/www\/passbolt\/logs` directory\nCreated `\/var\/www\/passbolt\/tmp\/cache\/models` directory\nCreated `\/var\/www\/passbolt\/tmp\/cache\/persistent` directory\nCreated `\/var\/www\/passbolt\/tmp\/cache\/views` directory\nCreated `\/var\/www\/passbolt\/tmp\/sessions` directory\nCreated `\/var\/www\/passbolt\/tmp\/tests` directory\n<strong>Set Folder Permissions ? (Default to Y) [Y,n]? y<\/strong>\nPermissions set on \/var\/www\/passbolt\/tmp\/avatars\nPermissions set on \/var\/www\/passbolt\/tmp\/cache\nPermissions set on \/var\/www\/passbolt\/tmp\/cache\/database\nPermissions set on \/var\/www\/passbolt\/tmp\/cache\/models\nPermissions set on \/var\/www\/passbolt\/tmp\/cache\/persistent\nPermissions set on \/var\/www\/passbolt\/tmp\/cache\/views\nPermissions set on \/var\/www\/passbolt\/tmp\/selenium\nPermissions set on \/var\/www\/passbolt\/tmp\/sessions\nPermissions set on \/var\/www\/passbolt\/tmp\/tests\nPermissions set on \/var\/www\/passbolt\/tmp\nPermissions set on \/var\/www\/passbolt\/logs\nUpdated Security.salt value in config\/app.php\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"generate-open-pgp-key-for-authenticating-json-requests\">Generate OpenPGP Key for Authenticating JSON Requests<\/h3>\n\n\n\n<p>In order to authenticate and sign outgoing JSON requests, Passbolt API uses PGP keys. Therefore, run the command below to generate the keys;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>gpg --full-generate-key<\/code><\/pre>\n\n\n\n<p>When prompted for the passphrase, <strong>DO NOT<\/strong> set it. Just press ENTER and confirm that you don&#8217;t want to set it.<\/p>\n\n\n\n<p>Also, <strong>do not set the expiration date.<\/strong><\/p>\n\n\n\n<p>Replace <strong>YOUR_NAME<\/strong> and <strong>YOUR_EMAIL_ID<\/strong> with your name and email id.<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>Please select what kind of key you want:\n   (1) RSA and RSA (default)\n   (2) DSA and Elgamal\n   (3) DSA (sign only)\n   (4) RSA (sign only)\n  (14) Existing key from card\nYour selection? 1\nRSA keys may be between 1024 and 4096 bits long.\nWhat keysize do you want? (3072) 4096\nRequested keysize is 4096 bits\nPlease specify how long the key should be valid.\n         0 = key does not expire\n      &lt;n&gt;  = key expires in n days\n      &lt;n&gt;w = key expires in n weeks\n      &lt;n&gt;m = key expires in n months\n      &lt;n&gt;y = key expires in n years\nKey is valid for? (0) 0\nKey does not expire at all\nIs this correct? (y\/N) y\n\nGnuPG needs to construct a user ID to identify your key.\n\nReal name: YOUR_NAME\nEmail address: ENTER_YOUR_EMAIL_ID\nComment: \nYou selected this USER-ID:\n    \"YOUR_NAME &lt;YOUR_EMAIL_ID&gt;\"\n\nChange (N)ame, (C)omment, (E)mail or (O)kay\/(Q)uit? O\n...\ngpg: \/root\/.gnupg\/trustdb.gpg: trustdb created\ngpg: key 849963488F973B44 marked as ultimately trusted\ngpg: directory '\/root\/.gnupg\/openpgp-revocs.d' created\ngpg: key 85EB40BA1D5DE890 marked as ultimately trusted\ngpg: revocation certificate stored as '\/root\/.gnupg\/openpgp-revocs.d\/C503E615618B34331BA1D26D85EB40BA1D5DE890.rev'\npublic and secret key created and signed.\n\npub   rsa4096 2020-07-15 [SC]\n      C503E615618B34331BA1D26D85EB40BA1D5DE890\nuid                      YOUR_NAME &lt;YOUR_EMAIL_ID&gt;\nsub   rsa4096 2020-07-15 [E]\n<\/code><\/pre>\n\n\n\n<p><strong>Note the Key fingerprint and save it somewhere as it will be needed later in the setup.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"export-and-store-passbolt-gpg-keys\">Export and Store Passbolt GPG Keys<\/h3>\n\n\n\n<p>Export and store both public and private keys on Passbolt configuration directory.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>gpg --armor --export-secret-keys <strong>YOUR_EMAIL_ID<\/strong> &gt; \/var\/www\/passbolt\/config\/gpg\/serverkey_private.asc<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>gpg --armor --export <strong>YOUR_EMAIL_ID<\/strong> &gt; \/var\/www\/passbolt\/config\/gpg\/serverkey.asc<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"initialize-passbolt-gpg-keyring-for-web-user\">Initialize Passbolt GPG Keyring for Web User<\/h3>\n\n\n\n<p>Next, initialize the gpg keyring for the Apache web server user so that Passbolt authentication can work.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo su -s \/bin\/bash -c \"gpg --list-keys\" www-data<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"configuring-passbolt-on-debian-10-debian-11\">Configuring Passbolt on Debian 10\/Debian 11<\/h3>\n\n\n\n<p>Copy the sample Passbolt configuration file renaming it as follows;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cp \/var\/www\/passbolt\/config\/passbolt{.default,}.php<\/code><\/pre>\n\n\n\n<p>Next, open the configuration file for modification;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vim \/var\/www\/passbolt\/config\/passbolt.php<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"set-the-application-url\">Set the Application URL<\/h4>\n\n\n\n<p>Set the application url to the web address for your Passbolt app by replacing the value of the <code><strong>fullBaseUrl<\/strong><\/code> parameter appropriately.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>        \/\/ 'fullBaseUrl' =&gt; 'https:\/\/www.passbolt.test',\n<strong>        'fullBaseUrl' =&gt; 'https:\/\/passbolt.kifarunix-demo.com',<\/strong><\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"define-database-connection-settings\">Define Database Connection settings<\/h4>\n\n\n\n<p>Configure Passbolt database connection settings;<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>    \/\/ Database configuration.\n    'Datasources' =&gt; [\n        'default' =&gt; [\n            'host' =&gt; '<strong>localhost<\/strong>',\n            \/\/'port' =&gt; 'non_standard_port_number',\n            'username' =&gt; '<strong>passman<\/strong>',\n            'password' =&gt; '<strong>p@SSw0rd123<\/strong>',\n            'database' =&gt; '<strong>passbolt<\/strong>',\n        ],\n    ],\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"configure-passbolt-email-settings\">Configure Passbolt Email Settings<\/h3>\n\n\n\n<p>Configure Passbolt Email Server settings. We are using <strong>Gmail SMTP<\/strong> as our relay server.<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>    \/\/ Email configuration.\n    'EmailTransport' =&gt; [\n        'default' =&gt; [\n<strong>            'host' =&gt; 'smtp.gmail.com',\n            'port' =&gt; 587,\n            'username' =&gt; 'username@gmail.com',\n            'password' =&gt; 'secretpassword',<\/strong>\n            \/\/ Is this a secure connection? true if yes, null if no.\n<strong>            'tls' =&gt; true,\n<\/strong>            \/\/'timeout' =&gt; 30,\n            \/\/'client' =&gt; null,\n            \/\/'url' =&gt; null,\n        ],\n    ],\n    'Email' =&gt; [\n        'default' =&gt; [\n            \/\/ Defines the default name and email of the sender of the emails.\n<strong>            'from' =&gt; ['passbolt@kifarunix-demo.com' =&gt; 'Kifarunix-demo Passbolt'],\n<\/strong>            \/\/'charset' =&gt; 'utf-8',\n            \/\/'headerCharset' =&gt; 'utf-8',\n        ],\n    ],\n<\/code><\/pre>\n\n\n\n<p><em>Ensure that your Gmail account has less secure app enabled.<\/em><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"specify-the-gpg-key-fingerprint\">Specify the GPG key fingerprint<\/h3>\n\n\n\n<p>Extract the GPG key fingerprint and set it as the value of the <code>fingerprint<\/code> parameter.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>gpg --list-keys --fingerprint | grep -i -B 2 <strong>YOUR_EMAIL_ID<\/strong> <\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>pub   rsa4096 2020-07-15 &#91;SC]\n<strong>      C503 E615 618B 3433 1BA1  D26D 85EB 40BA 1D5D E890\n<\/strong>uid           &#91;ultimate] &lt;YOUR_NAME&gt; &lt;YOUR_EMAIL_ID&gt;\nsub   rsa4096 2020-07-15 &#91;E]<\/code><\/pre>\n\n\n\n<p>Copy the highlighted string and remove spaces and paste it as the value of the <code>fingerprint<\/code> parameter. Also, uncomment the public and private lines below the fingerprint by removing the two forward slashes at the beginning of those lines;<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>...\n            'serverKey' =&gt; [\n                \/\/ Server private key fingerprint.\n                'fingerprint' =&gt; '<strong>C503E615618B34331BA1D26D85EB40BA1D5DE890<\/strong>',\n                <strong>'public' =&gt; CONFIG . 'gpg' . DS . 'serverkey.asc',\n                'private' =&gt; CONFIG . 'gpg' . DS . 'serverkey_private.asc',\n            ],<\/strong>\n<\/code><\/pre>\n\n\n\n<p>Save and exit the configuration file.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"create-apache-virtual-host-configuration-for-passbolt-and-enable-https\">Create Apache VirtualHost Configuration for Passbolt and Enable HTTPS<\/h3>\n\n\n\n<p>Next, create a dedicated Apache virtual host configuration file for Passbolt.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>vim \/etc\/apache2\/sites-available\/passbolt.conf <\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>&lt;VirtualHost *:80&gt;\n\n        ServerAdmin passbolt.kifarunix-demo.com\n        DocumentRoot \/var\/www\/passbolt\n\n\tRedirect \/ https:\/\/passbolt.kifarunix-demo.com\n&lt;\/VirtualHost&gt;\n#SSLStaplingCache \"shmcb:logs\/stapling-cache(150000)\"\nServerSignature Off\nServerTokens Prod\n&lt;VirtualHost _default_:443&gt;\n        ServerAdmin passbolt.kifarunix-demo.com\n        DocumentRoot \/var\/www\/passbolt\n\n\n        ErrorLog ${APACHE_LOG_DIR}\/passbolt_error.log\n        CustomLog ${APACHE_LOG_DIR}\/passbolt_access.log combined\n\n\n        SSLEngine on\n        SSLCertificateFile      \/etc\/ssl\/certs\/ssl-cert-passbolt.pem\n        SSLCertificateKeyFile \/etc\/ssl\/private\/ssl-cert-passbolt.key\n        SSLCACertificateFile \/etc\/ssl\/private\/ssl-cacert-passbolt.pem\n\n        SSLCipherSuite EECDH+AESGCM:EDH+AESGCM\n        SSLProtocol -all +TLSv1.3 +TLSv1.2\n        SSLOpenSSLConfCmd Curves X25519:secp521r1:secp384r1:prime256v1\n        SSLHonorCipherOrder On\n        Header always set Strict-Transport-Security \"max-age=63072000; includeSubDomains; preload\"\n        Header always set X-Frame-Options DENY\n        Header always set X-Content-Type-Options nosniff\n        SSLCompression off\n        #SSLUseStapling on\n        SSLSessionTickets Off\n\n\t&lt;Directory \/var\/www\/passbolt\/&gt;\n  \t\tOptions FollowSymLinks MultiViews\n  \t\tAllowOverride All\n\t\tRequire all granted\n\t&lt;\/Directory&gt;\n\n\n        &lt;FilesMatch \"\\.(cgi|shtml|phtml|php)$\"&gt;\n                        SSLOptions +StdEnvVars\n        &lt;\/FilesMatch&gt;\n        &lt;Directory \/usr\/lib\/cgi-bin&gt;\n                        SSLOptions +StdEnvVars\n        &lt;\/Directory&gt;\n\n&lt;\/VirtualHost&gt;\n<\/code><\/pre>\n\n\n\n<p>Save and exit the configuration file.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"generate-tls-certificates\">Generate TLS certificates<\/h3>\n\n\n\n<p>If you noticed, we enabled HTTP &gt; HTTPS redirection in our configuration. <\/p>\n\n\n\n<p>Obtain your commercially trusted CA certificates and install them on the directories specified on the Apache configuration.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"enable-passbolt-apache-site-configuration\">Enable Passbolt Apache Site Configuration<\/h3>\n\n\n\n<p>Disable Apache default site;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>a2dissite 000-default.conf<\/code><\/pre>\n\n\n\n<p>Enable Passbolt site;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>a2ensite passbolt.conf<\/code><\/pre>\n\n\n\n<p>Enable Apache <strong><code>rewrite<\/code><\/strong>, <strong><code>ssl<\/code><\/strong>, <code><strong>headers<\/strong><\/code> module;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>a2enmod rewrite ssl headers<\/code><\/pre>\n\n\n\n<p>Run Apache configuration syntax check.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>apachectl -t<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>Syntax OK<\/code><\/pre>\n\n\n\n<p>If there is no issue, proceed to restart Apache;<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\"><code>systemctl restart apache2<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"run-the-passbolt-install-script\">&nbsp;Run the Passbolt Install Script<\/h3>\n\n\n\n<p>Next, execute the Passbolt install script.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/var\/www\/passbolt<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo su -s \/bin\/bash -c \".\/bin\/cake passbolt install --no-admin\" www-data<\/code><\/pre>\n\n\n\n<p>By default, when script is run, it prompts you to create an administrative user. We disabled that by adding the <code>--no-admin<\/code> option. We will create the admin account later.<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>\n     ____                  __          ____  \n    \/ __ \\____  _____ ____\/ \/_  ____  \/ \/ \/_ \n   \/ \/_\/ \/ __ `\/ ___\/ ___\/ __ \\\/ __ \\\/ \/ __\/ \n  \/ ____\/ \/_\/ (__  |__  ) \/_\/ \/ \/_\/ \/ \/ \/    \n \/_\/    \\__,_\/____\/____\/_.___\/\\____\/_\/\\__\/   \n\n Open source password manager for teams\n---------------------------------------------------------------\n\nRunning baseline checks, please wait...\nCritical healthchecks are OK\n\nCleaning up existing tables if any.\n---------------------------------------------------------------\n0 tables dropped\n\nInstall the schema and default data.\n---------------------------------------------------------------\nusing migration paths \n - \/var\/www\/passbolt\/config\/Migrations\nusing seed paths \n - \/var\/www\/passbolt\/config\/Seeds\nusing environment default\nusing adapter mysql\nusing database passbolt\nordering by creation time\n...\n...\n...\nAll Done. Took 111.3186s\n\nImport the server private key in the keyring\n---------------------------------------------------------------\nImporting \/var\/www\/passbolt\/config\/gpg\/serverkey_private.asc\nKeyring init OK\n\nPassbolt installation success! Enjoy! \u262e\n<\/code><\/pre>\n\n\n\n<p>Run health check to verify that all is Okay.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/var\/www\/passbolt<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo su -s \/bin\/bash -c \".\/bin\/cake passbolt healthcheck\" www-data<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>\n     ____                  __          ____  \n    \/ __ \\____  _____ ____\/ \/_  ____  \/ \/ \/_ \n   \/ \/_\/ \/ __ `\/ ___\/ ___\/ __ \\\/ __ \\\/ \/ __\/ \n  \/ ____\/ \/_\/ (__  |__  ) \/_\/ \/ \/_\/ \/ \/ \/    \n \/_\/    \\__,_\/____\/____\/_.___\/\\____\/_\/\\__\/   \n\n Open source password manager for teams\n-------------------------------------------------------------------------------\n Healthcheck shell        \n-------------------------------------------------------------------------------\n\n Environment\n\n [PASS] PHP version 7.4.25.\n [PASS] PCRE compiled with unicode support.\n [PASS] The temporary directory and its content are writable and not executable.\n [PASS] The logs directory and its content are writable.\n [PASS] GD or Imagick extension is installed.\n [PASS] Intl extension is installed.\n [PASS] Mbstring extension is installed.\n\n Config files\n\n [PASS] The application config file is present\n [PASS] The passbolt config file is present\n\n Core config\n\n [PASS] Debug mode is off.\n [PASS] Cache is working.\n [PASS] Unique value set for security.salt\n [PASS] Full base url is set to https:\/\/passbolt.kifarunix-demo.com\n [PASS] App.fullBaseUrl validation OK.\n [PASS] \/healthcheck\/status is reachable.\n\n SSL Certificate\n\n [PASS] SSL peer certificate validates\n [PASS] Hostname is matching in SSL certificate.\n [PASS] Not using a self-signed certificate\n\n Database\n\n [PASS] The application is able to connect to the database\n [PASS] 26 tables found\n [PASS] Some default content is present\n [PASS] The database schema up to date.\n\n GPG Configuration\n\n [PASS] PHP GPG Module is installed and loaded.\n [PASS] The environment variable GNUPGHOME is set to \/var\/www\/.gnupg.\n [PASS] The directory \/var\/www\/.gnupg containing the keyring is writable by the webserver user.\n [PASS] The server OpenPGP key is not the default one\n [PASS] The public key file is defined in config\/passbolt.php and readable.\n [PASS] The private key file is defined in config\/passbolt.php and readable.\n [PASS] The server key fingerprint matches the one defined in config\/passbolt.php.\n [PASS] The server public key defined in the config\/passbolt.php (or environment variables) is in the keyring.\n [PASS] There is a valid email id defined for the server key.\n [PASS] The public key can be used to encrypt a message.\n [PASS] The private key can be used to sign a message.\n [PASS] The public and private keys can be used to encrypt and sign a message.\n [PASS] The private key can be used to decrypt a message.\n [PASS] The private key can be used to decrypt and verify a message.\n [PASS] The public key can be used to verify a signature.\n [PASS] The server public key format is Gopengpg compatible.\n [PASS] The server private key format is Gopengpg compatible.\n\n Application configuration\n\n [PASS] Using latest passbolt version (3.5.0).\n [PASS] Passbolt is configured to force SSL use.\n [PASS] App.fullBaseUrl is set to HTTPS.\n [PASS] Selenium API endpoints are disabled.\n [PASS] Search engine robots are told not to index content.\n [PASS] Registration is closed, only administrators can add users.\n [PASS] Serving the compiled version of the javascript app\n [PASS] All email notifications will be sent.\n\n JWT Authentication\n\n [PASS] The JWT Authentication plugin is enabled\n [PASS] The \/var\/www\/passbolt\/config\/jwt\/ directory is not writable.\n [PASS] A valid JWT key pair was found\n\n [PASS] No error found. Nice one sparky!\n\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"create-first-passbolt-admin-user-account\">Create First Passbolt Admin User Account<\/h3>\n\n\n\n<p>Run the command below to create the Passbolt admin user account.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>su -s \/bin\/bash -c \"\/var\/www\/passbolt\/bin\/cake passbolt register_user -u admin@kifarunix-demo.com -f Kifaru -l Nix -r admin\" www-data<\/code><\/pre>\n\n\n\n<p>Sample output;<\/p>\n\n\n\n<pre class=\"scroll-box\"><code>\n     ____                  __          ____  \n    \/ __ \\____  _____ ____\/ \/_  ____  \/ \/ \/_ \n   \/ \/_\/ \/ __ `\/ ___\/ ___\/ __ \\\/ __ \\\/ \/ __\/ \n  \/ ____\/ \/_\/ (__  |__  ) \/_\/ \/ \/_\/ \/ \/ \/    \n \/_\/    \\__,_\/____\/____\/_.___\/\\____\/_\/\\__\/   \n\n Open source password manager for teams\n-------------------------------------------------------------------------------\nUser saved successfully.\nTo start registration follow the link provided in your mailbox or here: \nhttps:\/\/passbolt.kifarunix-demo.com\/setup\/install\/341fd45f-c497-4d1e-9bcf-98188cadc6bf\/0156cf81-5b88-4879-a0ae-7d1f58f44d26\n<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"create-passbolt-administrative-user-account\">Create Passbolt Administrative User Account<\/h4>\n\n\n\n<p>You can now create Passbolt admin user using the <code>.\/bin\/cake passbolt register_user<\/code> command. Below is the command line options for this command;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/var\/www\/passbolt<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>.\/bin\/cake passbolt register_user --help<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>     ____                  __          ____  \n    \/ __ \\____  _____ ____\/ \/_  ____  \/ \/ \/_ \n   \/ \/_\/ \/ __ `\/ ___\/ ___\/ __ \\\/ __ \\\/ \/ __\/ \n  \/ ____\/ \/_\/ (__  |__  ) \/_\/ \/ \/_\/ \/ \/ \/    \n \/_\/    \\__,_\/____\/____\/_.___\/\\____\/_\/\\__\/   \n\n Open source password manager for teams\n---------------------------------------------------------------\nRegister a new user.\n\nUsage:\ncake passbolt register_user [options]\n\nOptions:\n\n--first-name, -f        The user first name\n--help, -h              Display this help.\n--interactive, -i       Enable interactive mode\n--interactive-loop      Enable interactive mode (default:\n                        3)\n--last-name, -l         The user last name\n--quiet, -q             Enable quiet output.\n--role, -r              The User role, such as \"admin\" or \"user\"\n--username, -u          The user email aka username\n--verbose, -v           Enable verbose output.\n<\/code><\/pre>\n\n\n\n<p>So let us create an admin user;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo su -s \/bin\/bash -c \"\/var\/www\/passbolt\/bin\/cake passbolt register_user -u admin@kifarunix-demo.com -f Kifarunix -l Demo -r admin\" www-data<\/code><\/pre>\n\n\n\n<pre class=\"scroll-box\"><code>     ____                  __          ____  \n    \/ __ \\____  _____ ____\/ \/_  ____  \/ \/ \/_ \n   \/ \/_\/ \/ __ `\/ ___\/ ___\/ __ \\\/ __ \\\/ \/ __\/ \n  \/ ____\/ \/_\/ (__  |__  ) \/_\/ \/ \/_\/ \/ \/ \/    \n \/_\/    \\__,_\/____\/____\/_.___\/\\____\/_\/\\__\/   \n\n Open source password manager for teams\n---------------------------------------------------------------\nUser saved successfully.\nTo start registration follow the link provided in your mailbox or here: \nhttps:\/\/passbolt.kifarunix-demo.com\/setup\/install\/4dbe1c54-79bc-48b5-9ab3-705afd5af097\/e34ea69b-0954-401b-8232-946ce721eda9\n<\/code><\/pre>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"finalize-passbolt-setup-from-browser\">Finalize Passbolt Setup from Browser<\/h3>\n\n\n\n<p>Copy the link provided upon user registration above and paste it on the browser address bar so you can use it to finalize the setup of Passbolt.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>https:&#47;&#47;passbolt.kifarunix-demo.com\/setup\/install\/4dbe1c54-79bc-48b5-9ab3-705afd5af097\/e34ea69b-0954-401b-8232-946ce721eda9<\/code><\/pre>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"install-passbolt-browser-extension\">Install Passbolt Browser Extension<\/h4>\n\n\n\n<p>When the page loads, you are required to download and install plugin for your specific browser, in this demo, we using Firefox.<\/p>\n\n\n\n<p>Therefore, click on <strong>Download extension<\/strong> to download to install the Firefox Passbolt add-on extension.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"981\" height=\"629\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/install-firefox-passbolt-extension.png\" alt=\"\" class=\"wp-image-11535\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/install-firefox-passbolt-extension.png?v=1644520652 981w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/install-firefox-passbolt-extension-768x492.png?v=1644520652 768w\" sizes=\"(max-width: 981px) 100vw, 981px\" \/><\/figure><\/div>\n\n\n<p>You can also allow the plugin to run on incognito.<\/p>\n\n\n\n<p>Next, click <strong>Refresh to detect the extension<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"setup-passbolt-passphrase\">Setup Passbolt Passphrase<\/h4>\n\n\n\n<p>Next, create Passbolt passphrase. Note that <strong><em>this passphrase is the only passphrase you will need to remember from now on, choose wisely!<\/em><\/strong>. Set a complex passphrase that you can easily remember for protecting you secret key.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"917\" height=\"709\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-passphrase.png\" alt=\"\" class=\"wp-image-11536\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-passphrase.png?v=1644520714 917w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-passphrase-768x594.png?v=1644520714 768w\" sizes=\"(max-width: 917px) 100vw, 917px\" \/><\/figure><\/div>\n\n\n<p>If you had an account before, you can re-use existing private key.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"download-and-save-passbolt-passphrase-private-key\">Download and Save Passbolt Passphrase private Key<\/h4>\n\n\n\n<p>Your secret key is now generated and encrypted with your passphrase and it is stored in your Passbolt add-on. Ensure that you make a copy of this key by downloading it and storing it in a different location.<\/p>\n\n\n\n<p>Thus download and save it securely.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"choose-a-color-to-identify-your-secret-token-with\">Choose a Color to Identify your Secret Token with<\/h4>\n\n\n\n<p>Next, choose a color to associate your security token with. <em>Security token will be displayed when your passphrase is requested, so you can quickly verify the form is coming from passbolt.&nbsp;This will help protect you from <a href=\"https:\/\/en.wikipedia.org\/wiki\/Phishing\" target=\"_blank\" rel=\"noreferrer noopener\">phishing attacks<\/a>.<\/em><\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"907\" height=\"672\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/secret-token-color.png\" alt=\"\" class=\"wp-image-11537\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/secret-token-color.png?v=1644520750 907w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/secret-token-color-768x569.png?v=1644520750 768w\" sizes=\"(max-width: 907px) 100vw, 907px\" \/><\/figure><\/div>\n\n\n<h4 class=\"wp-block-heading\" id=\"passbolt-dashboard\">Passbolt Dashboard<\/h4>\n\n\n\n<p>Click Next to go to Passbolt dashboard.<\/p>\n\n\n\n<p>And there you go.<\/p>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"1275\" height=\"790\" src=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-dashboard.png\" alt=\"\" class=\"wp-image-11538\" title=\"\" srcset=\"https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-dashboard.png?v=1644520815 1275w, https:\/\/kifarunix.com\/wp-content\/uploads\/2022\/02\/passbolt-dashboard-768x476.png?v=1644520815 768w\" sizes=\"(max-width: 1275px) 100vw, 1275px\" \/><\/figure><\/div>\n\n\n<p>You can now start using Passbolt to store passwords\/share them as you wish.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"configure-passbolt-to-sent-emails\">Configure Passbolt to Sent Emails<\/h3>\n\n\n\n<p>Last but not least, you can now configure Passbolt to be able to sent email notifications on new password creation, sharing, modification etc.<\/p>\n\n\n\n<p>Before this, ensure that you have configured Passbolt email settings.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cd \/var\/www\/passbolt<\/code><\/pre>\n\n\n\n<pre class=\"wp-block-code\"><code>.\/bin\/cake EmailQueue.sender<\/code><\/pre>\n\n\n\n<p>When you run the above, you should be able to receive emails on activating your account as well as welcoming you to Passbolt.<\/p>\n\n\n\n<p>Create a cron job to execute this script to have the emails sent automatically.<\/p>\n\n\n\n<p>Install the cron jobs as Apache Web server user, &nbsp;<code><strong>www-data<\/strong><\/code>.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>crontab -u www-data -e<\/code><\/pre>\n\n\n\n<p>Create a cron job that runs all the time.<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code><strong>*<\/strong> <strong>*<\/strong> <strong>*<\/strong> <strong>*<\/strong> <strong>*<\/strong> \/var\/www\/passbolt\/bin\/cake EmailQueue.sender <strong>&gt;&gt;<\/strong> \/var\/log\/passbolt-mails.log<\/code><\/pre>\n\n\n\n<p>Save and exit the cron jobs file.<\/p>\n\n\n\n<p>You can list installed cronjobs;<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>crontab -u www-data -l<\/code><\/pre>\n\n\n\n<p>Your Passbolt password manager is now ready.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"reference\">Reference<\/h3>\n\n\n\n<p><a aria-label=\"undefined (opens in a new tab)\" href=\"https:\/\/help.passbolt.com\/hosting\/install\/ce\/from-source.html\" target=\"_blank\" rel=\"noreferrer noopener\">Install Passbolt from source<\/a><\/p>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"related-tutorials\">Related Tutorials<\/h3>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-and-setup-passbolt-password-manager-on-ubuntu\/\" target=\"_blank\" aria-label=\"Install and Setup Passbolt Password Manager on Ubuntu 20.04 (opens in a new tab)\" rel=\"noreferrer noopener\" class=\"rank-math-link\">Install and Setup Passbolt Password Manager on Ubuntu 20.04<\/a><\/p>\n\n\n\n<p><a aria-label=\"undefined (opens in a new tab)\" rel=\"noreferrer noopener\" class=\"rank-math-link\" href=\"https:\/\/kifarunix.com\/install-syspass-password-manager-on-ubuntu-18-04\/\" target=\"_blank\">Install sysPass Password Manager on Ubuntu 18.04<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/install-teampass-password-manager-on-ubuntu-18-04\/\" target=\"_blank\" aria-label=\"undefined (opens in a new tab)\" rel=\"noreferrer noopener\">Install TeamPass Password Manager on Ubuntu 18.04<\/a><\/p>\n\n\n\n<p><a aria-label=\"undefined (opens in a new tab)\" href=\"https:\/\/kifarunix.com\/enforce-password-complexity-policy-on-ubuntu-18-04\/\" target=\"_blank\" rel=\"noreferrer noopener\">Enforce Password Complexity Policy On Ubuntu 18.04<\/a><\/p>\n\n\n\n<p><a href=\"https:\/\/kifarunix.com\/setup-ldap-self-service-password-tool-on-centos-8\/\" target=\"_blank\" aria-label=\"undefined (opens in a new tab)\" rel=\"noreferrer noopener\">Setup LDAP Self Service Password Tool on CentOS 8<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>In this tutorial, you will learn how to install Passbolt password manager on Debian 10\/Debian 11. Passbolt is is a free, open source, self-hosted, extensible,<\/p>\n","protected":false},"author":3,"featured_media":11542,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"rank_math_lock_modified_date":false,"footnotes":""},"categories":[339,121],"tags":[4573,3958,2988,2986,2984,2987,4572,2985,1819,341],"class_list":["post-7516","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-password-managers","category-howtos","tag-create-passbolt-admin-account-on-cli","tag-debian-11","tag-debian-password-managers","tag-hosted-passbolt","tag-install-passbolt-debian","tag-install-passbolt-debian-10","tag-install-passbolt-on-debian-11","tag-passbolt-debian-10","tag-passbolt-password-manager","tag-password-manager","generate-columns","tablet-grid-50","mobile-grid-100","grid-parent","grid-50","resize-featured-image"],"_links":{"self":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/7516"}],"collection":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/comments?post=7516"}],"version-history":[{"count":9,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/7516\/revisions"}],"predecessor-version":[{"id":21983,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/posts\/7516\/revisions\/21983"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media\/11542"}],"wp:attachment":[{"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/media?parent=7516"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/categories?post=7516"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kifarunix.com\/wp-json\/wp\/v2\/tags?post=7516"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}