Hosting: Difference between revisions

From LOAF
Jump to navigation Jump to search
(started the page at least… i have a headache today)
 
(reasons for each piece of software)
Line 5: Line 5:


* Debian 12 "bookworm" with "bookworm-backports" enabled
* Debian 12 "bookworm" with "bookworm-backports" enabled
* [https://manpages.debian.org/bookworm/systemd-container/systemd-nspawn.1.en.html systemd-nspawn(1)] from the [https://packages.debian.org/bookworm/systemd-container systemd-container] package
* [https://manpages.debian.org/bookworm/systemd-container/systemd-nspawn.1.en.html systemd-nspawn(1)] and [https://manpages.debian.org/bookworm/systemd-container/machinectl.1.en.html machinectl(1)] from the [https://packages.debian.org/bookworm/systemd-container systemd-container] package
** for managing containers.
* [https://manpages.debian.org/bookworm/debootstrap/debootstrap.8.en.html debootstrap(8)] from the [https://packages.debian.org/bookworm/debootstrap debootstrap] package
* [https://manpages.debian.org/bookworm/debootstrap/debootstrap.8.en.html debootstrap(8)] from the [https://packages.debian.org/bookworm/debootstrap debootstrap] package
** for building containers or templates for containers.
* [https://packages.debian.org/bookworm/fail2ban fail2ban]
* [https://packages.debian.org/bookworm/fail2ban fail2ban]
** for turning one kind of log spam into another kind of log spam.
* PostgreSQL
** Our web applications need an RDBMS.
* Apache httpd
** To act as reverse proxy and do TLS termination.
* certbot (letsencrypt)
** For TLS certificates.
* OpenSSH
** For remote login sessions.
* nftables
** For a basic firewall.
* Postfix
** To act as an MTA for system services that require on, and for containers.

Revision as of 22:58, 5 January 2025

Notes on setting up a server for hosting multiple web applications

This page has notes and information about setting up a server to host multiple web applications but is not meant to be a linear tutorial. It's a work in progress…

Overview of software used

  • Debian 12 "bookworm" with "bookworm-backports" enabled
  • systemd-nspawn(1) and machinectl(1) from the systemd-container package
    • for managing containers.
  • debootstrap(8) from the debootstrap package
    • for building containers or templates for containers.
  • fail2ban
    • for turning one kind of log spam into another kind of log spam.
  • PostgreSQL
    • Our web applications need an RDBMS.
  • Apache httpd
    • To act as reverse proxy and do TLS termination.
  • certbot (letsencrypt)
    • For TLS certificates.
  • OpenSSH
    • For remote login sessions.
  • nftables
    • For a basic firewall.
  • Postfix
    • To act as an MTA for system services that require on, and for containers.