Drupal 10 - Content Management Framework

Drupal is an open source content management platform licensed under the GPL. Equipped with a powerful blend of features, Drupal can support a variety of websites ranging from personal blogs, corporate brochures and large community-driven websites.

This appliance includes all the standard features in TurnKey Core, and on top of that:

• Drupal 10 configurations:

  • Installed (using composer) from upstream source code to /var/www/drupal10. As of v16.1, doc root is owned by www-data (webserver user). This new default eases management (especially with tools such as the turnkey script wrappers) but also has potential security implications.

    Security note: Updates to Drupal may require supervision so they ARE NOT configured to install automatically. See below for updating Drupal. And/or see Drupal 8 documentation

  • Includes drush, drupal-console and composer for command line administration, configuration and development. Also includes relevant wrapper scripts; turnkey-drush, turnkey-drupal & turnkey-composer (run the relevant command, but as www-data user).

  • Drupal security update alerts delivered to your inbox - requires Security Alerts ('secalerts') be enabled on firstboot with a valid email address.

  • Note - For trouble free commandline usage (i.e. Composer or Drush) PHP RAM limit may need to be bumped to 2048MB. For that to work, the system requires at least 2GB+ free memory (physical &/or virtual; i.e. swap - a temporary swap file is acceptable).

• Bundled Drupal 10 modules and dependencies (installed to /var/www/drupal10/web/modules - new default for Drupal10):

  • Field group: Allows fields to be grouped together.
  • Google analytics: Adds Google Analytics js tracking code to all your site's pages.
  • Imce: Powerful image file uploader and browser, with support for on the fly resizing.
  • PathAuto: Auto-generate search engine friendly URLs (SEO).
  • Token: Provides a shared API for replacement of textual placeholders with actual data.

  Note: Only some modules are enabled by default. To enable/disable

  modules, navigate to Administer > Modules (or http://example.com/admin/modules). Some modules may require additional configuration and/or permissions settings.

• SSL support out of the box.

• Adminer administration frontend for MySQL (listening on port 12322 - uses SSL).

• Postfix MTA (bound to localhost) to allow sending of email (e.g., password recovery).

• Webmin modules for configuring Apache2, PHP, MySQL and Postfix.

Supervised Manual Drupal Update

It is possible to check for and install updates from the Drupal Admin UI:: Admin > Reports > Available Updates

Updates for Drupal10 Core often need to be done via commandline. For full details, please consult the Drupal Upgrade docs, we recommend using Composer to update from the commandline (via turnkey-composer):

cd /var/www/drupal10
# update composer - not strictly necessary
composer self-update
turnkey-composer update drupal/core --with-dependencies
turnkey-drush updatedb -y
turnkey-drush cr

Modules can be updated like this, e.g. ctools:

turnkey-composer update drupal/ctools
turnkey-drush updatedb -y
turnkey-drush cr

We also recommend that you subscribe to the drupal.org security newsletter (create a user account on drupal.org and within your drupal.org profile:: Edit > My newsletter tab).

Credentials (passwords set at first boot)

• Webmin, SSH, MySQL: username root
• Adminer: username adminer
• Drupal 10: username admin