CRIN Trac: Ticket Query

#2: Set up firewall and fail2ban to stop brute force ssh attacks

chris — Tue, 28 Apr 2015 13:26:20 GMT

The servers need only listen for HTTP, HTTPS and SSH traffic and brute force attacks on ssh accounts should be blocked using https://packages.debian.org/jessie/fail2ban

#8: Install phpMyAdmin on crin1 and enable encrypted connections from crin2

chris — Wed, 29 Apr 2015 11:34:03 GMT

The plan is to have Drupal on crin2 connecting to the MySQL server on crin1 using SSL/TLS and also have phpMyAdmin running on crin1 with HTTP Authentication.

See:

https://www.howtoforge.com/managing-multiple-mysql-servers-from-one-phpmyadmin-installation-using-ssl-encryption

#10: Install Munin server and clients

chris — Thu, 07 May 2015 11:35:37 GMT

In order to monitor and adjust memory allocations, process numbers etc for MySQL, Memcache, Nginx and MySQL (see ticket:9) we will need a Munin server and clients set up so we have some data to use as a basis for making decisions.