imi-bas/pronature-platform
1
0
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases 1 Wiki Activity

update server manual

Browse Source
This commit is contained in:
goynov
2025-06-30 23:04:00 +03:00
parent 033cb3126d
commit ba7b3dd348
1 changed files with 9 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.docs/server-installation.md
+9 -4
View File
@@ -56,11 +56,11 @@ or
## Tools to install ## Tools to install
1. Let's Encrypt CertBot, for certificates issuing and renewal. The certificate is installed using the following command: `certbot certonly -d your.server.name`. Use `--nginx` or `--apache` in order to have automatic renewal 1. Let's Encrypt CertBot, for certificates issuing and renewal. The certificate is installed using the following command: `certbot certonly -d your.server.name`. Use `--nginx` or `--apache` in order to have automatic renewal
1. ffmpeg - for converting video and audio content 1. ffmpeg - for converting video and audio content `sudo apt install ffmpeg`
1. OpenSSH Server - to be able to access the server remotely 1. OpenSSH Server - to be able to access the server remotely
1. UFW - Firewall, configure to allow access only on 443, 80, and 22 (if possible, only for specific hosts) 1. UFW - Firewall, configure to allow access only on 443, 80, and 22 (if possible, only for specific hosts)
1. rsync - for backup 1. rsync - for backup
1. fail2ban - to protect from SSH attacks 1. fail2ban - to protect from SSH attacks: `sudo apt install fail2ban`
1. postfix - in order to get CRON jobs notifications 1. postfix - in order to get CRON jobs notifications
1. mailutils - CRON jobs mail notifications 1. mailutils - CRON jobs mail notifications
1. In order to enable web server monitoring you can install and run: 1. In order to enable web server monitoring you can install and run:
@@ -116,8 +116,9 @@ Restart the service:
> sudo apt update > sudo apt update
> sudo apt install -y certbot > sudo apt install -y certbot
> sudo apt install -y python3-certbot-nginx > sudo apt install -y python3-certbot-nginx
> certbot certonly --nginx -d pronature-disk.bg73.net > sudo certbot certonly --nginx -d pronature-disk.bg73.net
> certbot certonly --nginx -d pronature-v1.bg73.net > sudo certbot certonly --nginx -d pronature-v1.bg73.net
> sudo certbot certonly --nginx -d pronature-v2.bg73.net
## NGINX rev proxy server config ## NGINX rev proxy server config
### Install NGINX ### Install NGINX
@@ -173,6 +174,10 @@ server {
} }
``` ```
### To create a passwd file:
> sudo apt install apache2-utils
> sudo htpasswd -c /etc/nginx/.htpasswd username
## Firewall, enable services ## Firewall, enable services
SSH Access: SSH Access: