Ubuntu/Setup Server - Revision history

R00t: /* Install Apache2 */

2015-08-15T07:12:59Z

‎Install Apache2

2015-08-15T07:11:41Z

‎Install Apache2

2015-08-15T07:09:10Z

2015-08-15T06:59:39Z

‎iptables

2015-08-15T06:56:43Z

‎iptables

2015-08-15T06:55:52Z

‎iptables

2015-08-15T06:50:57Z

2015-08-15T06:40:17Z

2015-08-15T06:37:28Z

2015-08-15T06:34:51Z

‎iptables

← Older revision		Revision as of 07:12, 15 August 2015
Line 125:		Line 125:
	=====enable mod rewrite=====		=====enable mod rewrite=====
	<nowiki>~$ sudo a2enmod rewrite </nowiki>		<nowiki>~$ sudo a2enmod rewrite </nowiki>
		+	=====disable indexing=====
		+	<nowiki>~$ sudo a2dismod autoindex </nowiki>

← Older revision		Revision as of 07:11, 15 August 2015
Line 123:		Line 123:
	ErrorLog /var/log/apache2/yoursite.com-error_log		ErrorLog /var/log/apache2/yoursite.com-error_log
	</VirtualHost></nowiki>		</VirtualHost></nowiki>
		+	=====enable mod rewrite=====
		+	<nowiki>~$ sudo a2enmod rewrite </nowiki>

← Older revision		Revision as of 07:09, 15 August 2015
Line 111:		Line 111:
	====Install Apache2====		====Install Apache2====
	<nowiki>~$ sudo apt-get install apache2</nowiki>		<nowiki>~$ sudo apt-get install apache2</nowiki>
		+	=====create directory and add site content=====
		+	<nowiki>~$ sudo mkdir /var/www/yoursite.com
		+	~$ sudo chown newuser:newuser /var/www/yoursite.com</nowiki>
		+	=====create apache conf file=====
		+	<nowiki> ~$ sudo vi /etc/apache2/sites-available/yoursite.com.conf
		+	<VirtualHost *:80>
		+	ServerName yoursite.com
		+	ServerAdmin admin@yoursite.com
		+	DocumentRoot /var/www/yoursite.com
		+	TransferLog /var/log/apache2/yoursite.com-access_log
		+	ErrorLog /var/log/apache2/yoursite.com-error_log
		+	</VirtualHost></nowiki>

@@ Line 67: / Line 67: @@
 *add permitted IP address(es)
   <nowiki>~$ sudo iptables -A INPUT -s 8.8.8.8 -p tcp --dport 22 -j ACCEPT -m comment --comment "SSH Access"</nowiki>
-*add port 2222 open to the world since we'll be blocking 22 by omission.  Also add 80 and 443 so people can get to the site.
+*add port 2222 open to the world since we'll be blocking 22 by omission.
-  <nowiki>~$ sudo iptables -A INPUT -s 0.0.0.0/0 -p tcp --dport 2222 -j ACCEPT
+  <nowiki>~$ sudo iptables -A INPUT -s 0.0.0.0/0 -p tcp --dport 2222 -j ACCEPT</nowiki>
-~$ sudo iptables -A INPUT -s 0.0.0.0/0 -p tcp --dport 80 -j ACCEPT
+*add ports 80 and 443 so you can get to them while you work on the site
-~$ sudo iptables -A INPUT -s 0.0.0.0/0 -p tcp --dport 443 -j ACCEPT
+ <nowiki>~$ sudo iptables -A INPUT -s 8.8.8.8 -p tcp --dport 80 -j ACCEPT
 </nowiki>
 *prevent packets from fowarding (like a router) and specify INPUT policy default

@@ Line 67: / Line 67: @@
 *add permitted IP address(es)
   <nowiki>~$ sudo iptables -A INPUT -s 8.8.8.8 -p tcp --dport 22 -j ACCEPT -m comment --comment "SSH Access"</nowiki>
-*add port 2222 open to the world since we'll be blocking 22 by omission.
+*add port 2222 open to the world since we'll be blocking 22 by omission.  Also add 80 and 443 so people can get to the site.
-  <nowiki>~$ sudo iptables -A INPUT -s 0.0.0.0/0 -p tcp --dport 2222 -j ACCEPT</nowiki>
+  <nowiki>~$ sudo iptables -A INPUT -s 0.0.0.0/0 -p tcp --dport 2222 -j ACCEPT
 *prevent packets from fowarding (like a router) and specify INPUT policy default
   <nowiki> ~$ sudo iptables -P FORWARD DROP

@@ Line 82: / Line 82: @@
      0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:2222
      0 ACCEPT     tcp  --  *      *       9.9.9.9          0.0.0.0/0            tcp dpt:22 /* SSH home */
 Chain FORWARD (policy DROP 0 packets, 0 bytes)

← Older revision		Revision as of 06:50, 15 August 2015
Line 103:		Line 103:
	==Update OS, libraries, and installed packages==		==Update OS, libraries, and installed packages==
	<nowiki>~$ sudo apt-get update && sudo apt-get upgrade -y</nowiki>		<nowiki>~$ sudo apt-get update && sudo apt-get upgrade -y</nowiki>
		+	====Install Apache2====
		+	<nowiki>~$ sudo apt-get install apache2</nowiki>

← Older revision		Revision as of 06:40, 15 August 2015
Line 100:		Line 100:
	exit 0		exit 0
	</nowiki>		</nowiki>
		+
		+	==Update OS, libraries, and installed packages==
		+	<nowiki>~$ sudo apt-get update && sudo apt-get upgrade -y</nowiki>

@@ Line 93: / Line 93: @@
   138K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0     </nowiki>
-*save iptables config
+*save iptables config and add to rc.local for restoration on reboot
-  <nowiki>~$ sudo sh -c "iptables-save > /etc/iptables.rules"</nowiki>
+  <nowiki>~$ sudo sh -c "iptables-save > /etc/iptables.rules"

← Older revision		Revision as of 06:34, 15 August 2015
Line 92:		Line 92:
	pkts bytes target prot opt in out source destination		pkts bytes target prot opt in out source destination
	1752 138K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 </nowiki>		1752 138K RETURN all -- * * 0.0.0.0/0 0.0.0.0/0 </nowiki>
		+
		+	*save iptables config
		+	<nowiki>~$ sudo sh -c "iptables-save > /etc/iptables.rules"</nowiki>