wiki:Crin1

Version 7 (modified by chris, 2 years ago) (diff)

wiki:Crin1#tmpreaper section added

crin1.crin.org

The crin1.crin.org server, at 93.95.228.179 is a 8G RAM, 10 CPU core, virtual server running 64 bit Debian 8.0, Jessie, which was configured in April/May 2015.

This server is running these sites:

tmpreaper

PHP session files are deleted when older than a day via tmpreaper which was setup on ticket:44#comment:2 and is configured via /etc/tmpreaper.conf which contains:

TMPREAPER_PROTECT_EXTRA=''
TMPREAPER_TIME=1d
TMPREAPER_DIRS='/tmp/. /var/www/piwik/tmp/. /var/www/mediawiki/tmp/. /var/www/mediawiki/w/tmp/. /var/www/owncloud/tmp/.'
TMPREAPER_DELAY='256'
TMPREAPER_ADDITIONALOPTIONS=''

And is run via cron:

crontab -l -u piwik | grep -v ^#
05 23 * * * tmpreaper /var/www/piwik/tmp
crontab -l -u owncloud | grep -v ^#
15 23 * * * tmpreaper /var/www/owncloud/tmp
crontab -l -u mediawiki | grep -v ^#
10 23 * * * tmpreaper /var/www/mediawiki/w/tmp /var/www/mediawiki/tmp

iptables

fail2ban

sshd

mysqld

Current crin1 tickets

Ticket Summary Owner Reporter
#127 1984.is Server Rebuild chris chris
#119 MySQL Downtime chris chris
#116 Limit the number of MySQL connections from Crin4 to Crin1 chris chris
#114 Update TLS certs for MySQL chris chris
#113 MySQL Performance chris chris
#106 MySQL Error chris chris
#82 Attempted DDOS? chris chris
#76 Google Apps setup for crin.com chris chris
#65 Custom 502 and 503 pages for crin.org chris chris
#64 Let's Encrypt HTTPS Certs chris chris
#17 Debian System Updates chris chris

Closed crin1 tickets

Ticket Summary Owner Reporter
#78 HTTP_PROXY possible security risk chris chris
#74 Visit to CRIN office chris chris
#44 PHP temp session files need deleting chris chris
#28 Crin1 server email problem chris chris
#26 Create ssh and Trac account(s) for Code Positive chris chris
#10 Install Munin server and clients chris chris
#9 Monitor and adjust server settings after Crin1 and Crin2 server go live chris chris
#8 Install phpMyAdmin on crin1 and enable encrypted connections from crin2 chris chris
#2 Set up firewall and fail2ban to stop brute force ssh attacks chris chris