update server manual

This commit is contained in:
2025-06-30 23:04:00 +03:00
parent 033cb3126d
commit ba7b3dd348
+9 -4
View File
@@ -56,11 +56,11 @@ or
## Tools to install
1. Let's Encrypt CertBot, for certificates issuing and renewal. The certificate is installed using the following command: `certbot certonly -d your.server.name`. Use `--nginx` or `--apache` in order to have automatic renewal
1. ffmpeg - for converting video and audio content
1. ffmpeg - for converting video and audio content `sudo apt install ffmpeg`
1. OpenSSH Server - to be able to access the server remotely
1. UFW - Firewall, configure to allow access only on 443, 80, and 22 (if possible, only for specific hosts)
1. rsync - for backup
1. fail2ban - to protect from SSH attacks
1. fail2ban - to protect from SSH attacks: `sudo apt install fail2ban`
1. postfix - in order to get CRON jobs notifications
1. mailutils - CRON jobs mail notifications
1. In order to enable web server monitoring you can install and run:
@@ -116,8 +116,9 @@ Restart the service:
> sudo apt update
> sudo apt install -y certbot
> sudo apt install -y python3-certbot-nginx
> certbot certonly --nginx -d pronature-disk.bg73.net
> certbot certonly --nginx -d pronature-v1.bg73.net
> sudo certbot certonly --nginx -d pronature-disk.bg73.net
> sudo certbot certonly --nginx -d pronature-v1.bg73.net
> sudo certbot certonly --nginx -d pronature-v2.bg73.net
## NGINX rev proxy server config
### Install NGINX
@@ -173,6 +174,10 @@ server {
}
```
### To create a passwd file:
> sudo apt install apache2-utils
> sudo htpasswd -c /etc/nginx/.htpasswd username
## Firewall, enable services
SSH Access: