ServerSetupFedora22 - Revision history

Drew at 08:52, 25 January 2018

2018-01-25T08:52:34Z

← Older revision		Revision as of 02:52, 25 January 2018
Line 67:		Line 67:
	* Setup mail relay		* Setup mail relay
	** Remove 127.0.0.1 /etc/mail/sendmail.mc		** Remove 127.0.0.1 /etc/mail/sendmail.mc
	** <~~pre~~># echo drew > /root/.forward; echo "andrew: drew" >> /etc/aliases; newaliases; echo "root: drew" >> /etc/aliases; newaliases</~~pre~~>		** <syntaxhighlight lang=bash># echo drew > /root/.forward; echo "andrew: drew" >> /etc/aliases; newaliases; echo "root: drew" >> /etc/aliases; newaliases</syntaxhighlight>
	** Add TCP25/0 to IPTables		** Add TCP25/0 to IPTables
	* Configure logwatch		* Configure logwatch

Drew: /* Configure Web Services */

2018-01-25T06:19:35Z

Configure Web Services

← Older revision		Revision as of 00:19, 25 January 2018
Line 110:		Line 110:

	=Configure Web Services=		=Configure Web Services=
	# ddclient for dynamicdns updates		* ddclient for dynamicdns updates
	# Configure MythTV / MythWeb / minidlna		* Configure MythTV / MythWeb / minidlna
	## Add TCP80/24 and TCP443/0 for web services, TCP1900/0 TCP8200/0, TCP34531/0 for minidlna		** Add TCP80/24 and TCP443/0 for web services, TCP1900/0 TCP8200/0, TCP34531/0 for minidlna
	~~###~~
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	port=8200		port=8200
Line 128:		Line 128:
	root_container=B		root_container=B
	</syntaxhighlight>		</syntaxhighlight>
	# Configure pecl-php-apc / DrewWiki / WebDAV
			* Configure pecl-php-apc / DrewWiki / WebDAV

	= Completing / Wrap-up =		= Completing / Wrap-up =

Drew: /* Install rest of software */

2018-01-25T06:19:01Z

Install rest of software

← Older revision		Revision as of 00:19, 25 January 2018
Line 42:		Line 42:
	= Install rest of software =		= Install rest of software =
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	# yum install man screen wget strace rsync mailx fdupes logwatch grep lsof screen binutils tar mcelog nfs-utils \		$ sudo yum install man screen wget strace rsync mailx fdupes logwatch grep lsof screen binutils tar mcelog nfs-utils \
	OpenIPMI ipmitool sysstat clamav clamav-update iscsi-initiator-utils samba openvpn lldpad ntp \		OpenIPMI ipmitool sysstat clamav clamav-update iscsi-initiator-utils samba openvpn lldpad ntp \
	php-pecl-apc lm_sensors hddtemp smartmontools apcupsd apcupsd-cgi		php-pecl-apc lm_sensors hddtemp smartmontools apcupsd apcupsd-cgi

Drew: /* Setup cron jobs */

2018-01-25T06:18:37Z

Setup cron jobs

← Older revision		Revision as of 00:18, 25 January 2018
Line 104:		Line 104:

	=Setup cron jobs=		=Setup cron jobs=
	# Keep anacron from waking me up at night!		Keep anacron from waking me up at night!
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	# vi /etc/anacrontab // START_HOURS_RANGE		# vi /etc/anacrontab // START_HOURS_RANGE

Drew: /* Configure RAID and filesharing */

2018-01-25T06:18:23Z

Configure RAID and filesharing

← Older revision		Revision as of 00:18, 25 January 2018
Line 74:		Line 74:

	= Configure RAID and filesharing =		= Configure RAID and filesharing =
	# Mount raid array		* Mount raid array
	# Configure md alerts		* Configure md alerts
	# Enable samba		* Enable samba
	## Add TCP139,445/24 to IPTables		** Add TCP139,445/24 to IPTables
	## <~~pre~~># systemctl enable smb; systemctl start smb</~~pre~~>		** <syntaxhighlight lang=bash># systemctl enable smb; systemctl start smb</syntaxhighlight>
	~~###~~
	<syntaxhighlight lang=bash>		<syntaxhighlight lang=bash>
	[global]		[global]
Line 99:		Line 99:
	directory mode = 0775		directory mode = 0775
	</syntaxhighlight>		</syntaxhighlight>
	# Enable iSCSI		* Enable iSCSI
	## Add TCP3260/24		** Add TCP3260/24
	# ^ Configure bacula and web interface		* ^ Configure bacula and web interface

	=Setup cron jobs=		=Setup cron jobs=

Drew: /* Configure system, monitoring, mail, AV, and VPN */

2018-01-25T06:17:07Z

Configure system, monitoring, mail, AV, and VPN

← Older revision		Revision as of 00:17, 25 January 2018
Line 48:		Line 48:

	= Configure system, monitoring, mail, AV, and VPN =		= Configure system, monitoring, mail, AV, and VPN =
	# Configure GRUB serial console redirection		* Configure GRUB serial console redirection
	# Configure kdump for system panics		* Configure kdump for system panics
	# Configure lm-sensors, smartd/hddtemp+thermal alerts, lldpad, mcelog, and SMARTmon for temperature alerts.		* Configure lm-sensors, smartd/hddtemp+thermal alerts, lldpad, mcelog, and SMARTmon for temperature alerts.
	~~###~~
	<syntaxhighlight lang=bash> DEVICESCAN -H -m root -M exec /usr/libexec/smartmontools/smartdnotify -n standby,10,q		<syntaxhighlight lang=bash> DEVICESCAN -H -m root -M exec /usr/libexec/smartmontools/smartdnotify -n standby,10,q
	/dev/sda -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat		/dev/sda -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat
Line 59:		Line 59:
	/dev/sde -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,47 -d sat		/dev/sde -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,47 -d sat
	</syntaxhighlight>		</syntaxhighlight>
	# Configure apcupsd for UPS alerts
	# Configure Time Server for local network access		* Configure apcupsd for UPS alerts
	## Add UDP123/24 to IPTables		* Configure Time Server for local network access
	# Configure rsyslog for network clients		** Add UDP123/24 to IPTables
	## Add UDP514/24 to IPTables		* Configure rsyslog for network clients
	# Setup mail relay		** Add UDP514/24 to IPTables
	## Remove 127.0.0.1 /etc/mail/sendmail.mc		* Setup mail relay
	## <pre># echo drew > /root/.forward; echo "andrew: drew" >> /etc/aliases; newaliases; echo "root: drew" >> /etc/aliases; newaliases</pre>		** Remove 127.0.0.1 /etc/mail/sendmail.mc
	## Add TCP25/0 to IPTables		** <pre># echo drew > /root/.forward; echo "andrew: drew" >> /etc/aliases; newaliases; echo "root: drew" >> /etc/aliases; newaliases</pre>
	# Configure logwatch		** Add TCP25/0 to IPTables
	# Setup clamav virus protection for Samba and weekly scan		* Configure logwatch
	# Configure OpenVPN		* Setup clamav virus protection for Samba and weekly scan
			* Configure OpenVPN

	= Configure RAID and filesharing =		= Configure RAID and filesharing =

Drew at 06:16, 25 January 2018

2018-01-25T06:16:05Z

← Older revision		Revision as of 00:16, 25 January 2018
Line 5:		Line 5:
	==Install etckepper and fail2ban==		==Install etckepper and fail2ban==
	Initalize and ensure service is running		Initalize and ensure service is running
	<syntaxhighlight>		<syntaxhighlight lang=bash>
	sudo yum install etckeeper fail2ban		sudo yum install etckeeper fail2ban
	sudo etckeepeer init		sudo etckeepeer init
Line 13:		Line 13:

	==Disable root login via password ssh==		==Disable root login via password ssh==
	<syntaxhighlight>		<syntaxhighlight lang=bash>
	$ grep Root /etc/ssh/sshd_config		$ grep Root /etc/ssh/sshd_config
	PermitRootLogin prohibit-password		PermitRootLogin prohibit-password
Line 21:		Line 21:

	==Enable sudo==		==Enable sudo==
	<syntaxhighlight>		<syntaxhighlight lang=bash>
	$ sudo grep drew /etc/sudoers		$ sudo grep drew /etc/sudoers
	drew ALL=(ALL) NOPASSWD:ALL		drew ALL=(ALL) NOPASSWD:ALL
Line 33:		Line 33:

	==Extend days of sysstat logging==		==Extend days of sysstat logging==
	<syntaxhighlight>		<syntaxhighlight lang=bash>
	$ grep -vE '^($\|#)' /etc/sysconfig/sysstat		$ grep -vE '^($\|#)' /etc/sysconfig/sysstat
	HISTORY=365		HISTORY=365
Line 41:		Line 41:

	= Install rest of software =		= Install rest of software =
	<~~pre~~>		<syntaxhighlight lang=bash>
	# yum install man screen wget strace rsync mailx fdupes logwatch grep lsof screen binutils tar mcelog nfs-utils \		# yum install man screen wget strace rsync mailx fdupes logwatch grep lsof screen binutils tar mcelog nfs-utils \
	OpenIPMI ipmitool sysstat clamav clamav-update iscsi-initiator-utils samba openvpn lldpad ntp \		OpenIPMI ipmitool sysstat clamav clamav-update iscsi-initiator-utils samba openvpn lldpad ntp \
	php-pecl-apc lm_sensors hddtemp smartmontools apcupsd apcupsd-cgi		php-pecl-apc lm_sensors hddtemp smartmontools apcupsd apcupsd-cgi
	</~~pre~~>		</syntaxhighlight>

	= Configure system, monitoring, mail, AV, and VPN =		= Configure system, monitoring, mail, AV, and VPN =
Line 52:		Line 52:
	# Configure lm-sensors, smartd/hddtemp+thermal alerts, lldpad, mcelog, and SMARTmon for temperature alerts.		# Configure lm-sensors, smartd/hddtemp+thermal alerts, lldpad, mcelog, and SMARTmon for temperature alerts.
	###		###
	<~~pre~~> DEVICESCAN -H -m root -M exec /usr/libexec/smartmontools/smartdnotify -n standby,10,q		<syntaxhighlight lang=bash> DEVICESCAN -H -m root -M exec /usr/libexec/smartmontools/smartdnotify -n standby,10,q
	/dev/sda -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat		/dev/sda -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat
	/dev/sdb -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat		/dev/sdb -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat
Line 58:		Line 58:
	/dev/sdd -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat		/dev/sdd -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,45 -d sat
	/dev/sde -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,47 -d sat		/dev/sde -H -m root -M daily -M exec /home/drew/cron/smartmon.sh -M daily -f -l error -o on -S on -s (S/../.././02\|L/../../6/03) -W 0,0,47 -d sat
	</~~pre~~>		</syntaxhighlight>
	# Configure apcupsd for UPS alerts		# Configure apcupsd for UPS alerts
	# Configure Time Server for local network access		# Configure Time Server for local network access
Line 79:		Line 79:
	## <pre># systemctl enable smb; systemctl start smb</pre>		## <pre># systemctl enable smb; systemctl start smb</pre>
	###		###
	<~~pre~~>		<syntaxhighlight lang=bash>
	[global]		[global]
	workgroup = WORKGROUP		workgroup = WORKGROUP
Line 97:		Line 97:
	create mode = 0665		create mode = 0665
	directory mode = 0775		directory mode = 0775
	</~~pre~~>		</syntaxhighlight>
	# Enable iSCSI		# Enable iSCSI
	## Add TCP3260/24		## Add TCP3260/24
	# ^ Configure bacula and web interface		# ^ Configure bacula and web interface

	= Setup cron jobs =		=Setup cron jobs=
	# Keep anacron from waking me up at night!		# Keep anacron from waking me up at night!
	<~~pre~~># vi /etc/anacrontab // START_HOURS_RANGE</~~pre~~>		<syntaxhighlight lang=bash>
			# vi /etc/anacrontab // START_HOURS_RANGE
			</syntaxhighlight>

	= Configure Web Services =		=Configure Web Services=
	# ddclient for dynamicdns updates		# ddclient for dynamicdns updates
	# Configure MythTV / MythWeb / minidlna		# Configure MythTV / MythWeb / minidlna
	## Add TCP80/24 and TCP443/0 for web services, TCP1900/0 TCP8200/0, TCP34531/0 for minidlna		## Add TCP80/24 and TCP443/0 for web services, TCP1900/0 TCP8200/0, TCP34531/0 for minidlna
	###		###
	<~~pre~~>		<syntaxhighlight lang=bash>
	port=8200		port=8200
	media_dir=/mnt/raid5/media		media_dir=/mnt/raid5/media
Line 124:		Line 126:
	model_number=1		model_number=1
	root_container=B		root_container=B
	</~~pre~~>		</syntaxhighlight>
	# Configure pecl-php-apc / DrewWiki / WebDAV		# Configure pecl-php-apc / DrewWiki / WebDAV

	= Completing / Wrap-up =		= Completing / Wrap-up =
	# Verify all log files in /var/log are not giving any errors or notifications		* Verify all log files in /var/log are not giving any errors or notifications
	# Check logs for whats growing! <~~pre~~># ls -alR /var/log \| grep ^- \| awk {'print $5" "$8'} \| sort -k 2\| sort -n</~~pre~~>		* Check logs for whats growing!
	# Create MondoRescue restore image		<syntaxhighlight lang=bash>
			# ls -alR /var/log \| grep ^- \| awk {'print $5" "$8'} \| sort -k 2\| sort -n
			</syntaxhighlight>
			* Create MondoRescue restore image

Drew: /* Enable sudo */

2018-01-25T01:15:25Z

Enable sudo

← Older revision		Revision as of 19:15, 24 January 2018
Line 21:		Line 21:

	==Enable sudo==		==Enable sudo==
			<syntaxhighlight>
			$ sudo grep drew /etc/sudoers
			drew ALL=(ALL) NOPASSWD:ALL
			</syntaxhighlight>

	==yum remove unneeded software==		==yum remove unneeded software==

Drew at 00:36, 25 January 2018

2018-01-25T00:36:04Z

← Older revision		Revision as of 18:36, 24 January 2018
Line 1:		Line 1:
			'''To-do:''' This page is outdated and needs better formatting.

	= Immediate post install steps =		= Immediate post install steps =

Drew: /* Immediate post install steps */

2018-01-25T00:34:52Z

Immediate post install steps

← Older revision		Revision as of 18:34, 24 January 2018
Line 1:		Line 1:
	= Immediate post install steps =		= Immediate post install steps =
	# <~~pre~~>sudo yum install etckeeper fail2ban</~~pre~~>
	# Disable root login via ssh		==Install etckepper and fail2ban==
	## Add TCP22/0 to IPTables		Initalize and ensure service is running
	# Enable sudo		<syntaxhighlight>
	# yum remove unneeded software		sudo yum install etckeeper fail2ban
	# yum update		sudo etckeepeer init
	# Enable SElinux		sudo systemctl enable fail2ban
	# Extend days of sysstat logging		sudo systemctl start fail2ban
	##		</syntaxhighlight>
	<~~pre~~>grep -vE '^($\|#)' /etc/sysconfig/sysstat
			==Disable root login via password ssh==
			<syntaxhighlight>
			$ grep Root /etc/ssh/sshd_config
			PermitRootLogin prohibit-password
			</syntaxhighlight>

			==Add TCP22/0 to IPTables==

			==Enable sudo==

			==yum remove unneeded software==

			==yum update==

			==Enable SElinux==

			==Extend days of sysstat logging==
			<syntaxhighlight>
			$ grep -vE '^($\|#)' /etc/sysconfig/sysstat
	HISTORY=365		HISTORY=365
	COMPRESSAFTER=10		COMPRESSAFTER=10
	SADC_OPTIONS=""		SADC_OPTIONS=""
	</~~pre~~>		</syntaxhighlight>

	= Install rest of software =		= Install rest of software =