Setup First make all checks fail once way or another by running the following in the terminal # If using MDK: mdk run undev mkdir -p vendor mkdir -p node_modules mkdir -p moodledata chmod 777 config.php php admin/cli/cfg.php --name=cookiesecure --set=0 php admin/cli/cfg.php --name=allowobjectembed --set=1 php admin/cli/cfg.php --name=forcelogin --set=0 php admin/cli/cfg.php --name=forceloginforprofiles --set=0 php admin/cli/cfg.php --name=opentowebcrawlers --set=1 php admin/cli/cfg.php --name=passwordpolicy --set=0 php admin/cli/cfg.php --name=emailchangeconfirmation --set=0 php admin/cli/cfg.php --name=cronclionly --set=0 php admin/cli/cfg.php --name=guestroleid --set=0 php admin/cli/cfg.php --name=defaultfrontpageroleid --set=1 php admin/cli/cfg.php --name=preventexecpath --set=0 Edit your config.php Add the following at the top, just underneath the opening php tag: @ini_set('display_errors', '1'); Find where $CFG->dataroot is set, and add the following line aftereward: $CFG->dataroot = __DIR__ . '/moodledata'; Log in as admin Navigate to Site administraiton -> Plugins -> Manage media players Ensure that "Flash animation" is enabled Navigate to Site administraiton -> Plugins -> Manage authentication Ensure that the "No authentication" plugin is enabled Navigate to Site administraiton -> Users -> Permissions -> Define roles Edit the "Authenticated user" role Grant the " moodle/course:create " capability Test Login as admin Navigate to Site administration -> Reports -> Security checks Confirm that all items are shown as either error, warning, or info Now drill into each error and follow it's help in order fix it Note: Some of them are non-trivial to fix, and some are just warnings and/or information and cannot be fixed Note: You will need to access the site via HTTPS, e.g. via ngrok, in order to solve the "Secure cookies" line item Note: Some of the following will give a few ideas on how to fix many of these issues. rm -rf vendor node_modules moodledata php admin/cli/cfg.php --name=cookiesecure --set=1 php admin/cli/cfg.php --name=allowobjectembed --set=0 php admin/cli/cfg.php --name=forcelogin --set=1 php admin/cli/cfg.php --name=forceloginforprofiles --set=1 php admin/cli/cfg.php --name=opentowebcrawlers --set=0 php admin/cli/cfg.php --name=passwordpolicy --set=1 php admin/cli/cfg.php --name=emailchangeconfirmation --set=1 php admin/cli/cfg.php --name=cronclionly --set=1 php admin/cli/cfg.php --name=guestroleid --set=1 php admin/cli/cfg.php --name=preventexecpath --set=1 php admin/cli/cfg.php --name=defaultfrontpageroleid --set=0