ServerSetupFedora22: Difference between revisions
Jump to navigation
Jump to search
No edit summary |
No edit summary |
||
Line 20: | Line 20: | ||
# Configure GRUB serial console redirection | # Configure GRUB serial console redirection | ||
# Configure kdump for system panics | # Configure kdump for system panics | ||
# Configure lm-sensors, hddtemp, and SMARTmon for temperature alerts. | |||
# Configure apcupsd for UPS alerts | # Configure apcupsd for UPS alerts | ||
# Configure Time Server for local network access | # Configure Time Server for local network access |
Revision as of 19:50, 6 August 2011
# yum install man screen wget rsync fail2ban mailx fdupes sendmail-cf strace \ logwatch etckeeper OpenIPMI ipmitool sysstat mutt clamav clamav-update nfs-utils \ lm_sensors hddtemp apcupsd apcupsd-cgi smartmontools \ mod_auth_pam mod_auth_shadow php-pecl-apc # java-1.6.0-openjdk.x86_64 nss-mdns
- Install etckeeper
- Disable root login via ssh
- Add TCP22/0 to IPTables
- Enable sudo
- Install fail2ban
- yum remove unneeded software
- yum update
- Enable SElinux
- Extend days of sysstat logging
- Configure GRUB serial console redirection
- Configure kdump for system panics
- Configure lm-sensors, hddtemp, and SMARTmon for temperature alerts.
- Configure apcupsd for UPS alerts
- Configure Time Server for local network access
- Add UDP123/24 to IPTables
- Configure rsyslog for network clients
- Add UDP514/24 to IPTables
- Setup mail relay
- Remove 127.0.0.1 /etc/mail/sendmail.mc
# echo drew > /root/.forward; echo "andrew: drew" >> /etc/aliases; newaliases; echo "root: drew" >> /etc/aliases; newaliases
- Add TCP25/0 to IPTables
- Configure smartd/hddtemp for disk monitoring
- ^ Configure thermal alerts for server
- Configure logwatch
- Setup clamav virus protection for Samba and weekly scan
- Mount raid array
- Configure md alerts
- Enable NFS
- Add TCP2049/24 to IPTables
- Disable NFSv2/3 /etc/sysconfig/nfs
- Enable samba
- Add TCP139,445/24 to IPTables
# chkconfig smb on; chkconfig nmb on;
- Enable iSCSI
- Add TCP3260/24
- ^ Configure bacula and web interface
- Setup cron jobs
- Keep anacron from waking me up at night!
# vi /etc/anacrontab // START_HOURS_RANGE
- Keep anacron from waking me up at night!
- Configure MythTV / MythWeb
- Add TCP443/0 to IPTables
- Configure mod_auth_pam / mod_auth_shadow / pecl-php-apc / phpMyAdmin
- Configure DrewaWiki / WebDAV
- Verify all log files in /var/log are not giving any errors or notifications
- Check logs for whats growing!
# ls -alR /var/log | grep ^- | awk {'print $5" "$8'} | sort -k 2| sort -n