Click here to Skip to main content
15,443,430 members
Home / Discussions / System Admin
   

System Admin

 
AnswerRe: Lock down Directories Pin
Michael Martin18-Jun-19 18:19
professionalMichael Martin18-Jun-19 18:19 
QuestionPIN-Protected Printing Pin
GenJerDan18-Apr-19 20:12
MemberGenJerDan18-Apr-19 20:12 
AnswerRe: PIN-Protected Printing Pin
Eddy Vluggen19-Apr-19 8:53
professionalEddy Vluggen19-Apr-19 8:53 
GeneralRe: PIN-Protected Printing Pin
GenJerDan21-Apr-19 19:37
MemberGenJerDan21-Apr-19 19:37 
AnswerRe: PIN-Protected Printing Pin
Nathan Minier9-May-19 1:13
professionalNathan Minier9-May-19 1:13 
GeneralRe: PIN-Protected Printing Pin
GenJerDan9-May-19 19:34
MemberGenJerDan9-May-19 19:34 
QuestionInstall Services and applications (Wordpress, Vtiger CRM) Pin
Member 1429250417-Apr-19 8:01
MemberMember 1429250417-Apr-19 8:01 
AnswerRe: Install Services and applications (Wordpress, Vtiger CRM) Pin
Nathan Minier9-May-19 2:02
professionalNathan Minier9-May-19 2:02 
Wow.

Member 14292504 wrote:
What are all the services needed (apache ...)?


So, for starters, basically any application that you install should provide a list of dependencies. Most distros will attempt to auto-resolve dependencies, but there might be some (such as your SQL instance or, as you mention httpd) that you want to directly manage.

Member 14292504 wrote:
I want to use MySQL , Can all applications use the same mysql server ?


Yes, that's part of the point. The concern is partially capacity, but mostly utilization.

Member 14292504 wrote:
What is the best linux server that I need (ubuntu vps , other ...) ?


I suggest CentOS for these purposes. Opinions will obviously vary.

Member 14292504 wrote:
How to secure this new server and it's applications ?


I have a one week class that I teach that covers about 1/3 of what it could/should for DoD RMF security compliance for Linux. You're not going to get an adequate summary in a forum post.

But, this being the interwebs and knowing you're unlikely to buy a book:

Assign file/folder permissions based on Least Privilege
Password complexity via PAM Cracklib
Learn to use iptables or firewalld and close everything you aren't actively using
Lock down root, utilize sudoers, and require passwords for sudo
Don't switch SELinux to permissive; learn to use semanage instead
Get a real TLS cert and enforce strong standards (TLS 1.1+, AES256, etc)
Setup an update script with a post-update notification for systemctl --failed

Extra Credit:
If at all possible, containerize all apps
Use a jump box and limit ssh access to that box (no VNC or DM, that's for plebs)
Do not let apps run as root, segment permissions
Learn to leverage AIDE
Encrypted data partitions to avoid side-channel exfiltration
Backup strategy
Logs...dear god don't forget the logs...

By no means take this list as comprehensive; it's the baseline for what I'd consider a "security attentive" system that is exposed to the public internet today.
"Never attribute to malice that which can be explained by stupidity."
- Hanlon's Razor

AnswerRe: Install Services and applications (Wordpress, Vtiger CRM) Pin
Member 1471406213-Jan-20 4:15
MemberMember 1471406213-Jan-20 4:15 
QuestionHow to verify email address automatically through mail server or smtp server Pin
teki parimala18-Mar-19 0:34
Memberteki parimala18-Mar-19 0:34 
AnswerRe: How to verify email address automatically through mail server or smtp server Pin
Richard MacCutchan18-Mar-19 0:46
mveRichard MacCutchan18-Mar-19 0:46 
AnswerRe: How to verify email address automatically through mail server or smtp server Pin
Eddy Vluggen18-Mar-19 2:55
professionalEddy Vluggen18-Mar-19 2:55 
AnswerRe: How to verify email address automatically through mail server or smtp server Pin
Rahul Khot15-Jun-19 3:51
MemberRahul Khot15-Jun-19 3:51 
GeneralWin10 Hiding Tray Icons Pin
Kyudos21-Nov-18 11:50
MemberKyudos21-Nov-18 11:50 
GeneralRe: Win10 Hiding Tray Icons Pin
Richard Deeming22-Nov-18 8:47
mveRichard Deeming22-Nov-18 8:47 
GeneralRe: Win10 Hiding Tray Icons Pin
Kyudos22-Nov-18 9:58
MemberKyudos22-Nov-18 9:58 
GeneralRe: Win10 Hiding Tray Icons Pin
Richard Andrew x6422-Nov-18 10:10
professionalRichard Andrew x6422-Nov-18 10:10 
QuestionWindows 2000 embedded boot problem... Pin
Joan M7-Nov-18 10:07
professionalJoan M7-Nov-18 10:07 
AnswerRe: Windows 2000 embedded boot problem... Pin
Nathan Minier8-Nov-18 1:26
professionalNathan Minier8-Nov-18 1:26 
GeneralRe: Windows 2000 embedded boot problem... Pin
Joan M10-Nov-18 1:45
professionalJoan M10-Nov-18 1:45 
GeneralRe: Windows 2000 embedded boot problem... Pin
Nathan Minier13-Nov-18 5:09
professionalNathan Minier13-Nov-18 5:09 
GeneralRe: Windows 2000 embedded boot problem... Pin
AAC Tech26-Jan-19 11:08
professionalAAC Tech26-Jan-19 11:08 
GeneralRe: Windows 2000 embedded boot problem... Pin
Joan M6-Feb-19 1:03
professionalJoan M6-Feb-19 1:03 
QuestionHOSTS file Pin
#realJSOP16-Sep-18 6:51
mva#realJSOP16-Sep-18 6:51 
AnswerRe: HOSTS file Pin
Eddy Vluggen16-Sep-18 8:04
professionalEddy Vluggen16-Sep-18 8:04 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.