Changes between Version 1 and Version 2 of configure_new_server


Ignore:
Timestamp:
Aug 23, 2007, 1:30:19 AM (17 years ago)
Author:
Jamie McClelland
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • configure_new_server

    v1 v2  
    1 =Purchase an ssl certificate=
     1= Purchase an ssl certificate =
    22
    33Generate a private key and certificate signing request.
     
    4040These will be used by apache
    4141
    42 =Use volatile for SA and clamav=
     42= Use volatile for SA and clamav =
    4343
    4444
     
    5252{{{
    5353Package: spamassassin
    54 Pin: release a=etch-sloppy
     54Pin: release a = etch-sloppy
    5555Pin-Priority: 991
    5656
    5757Package: spamc
    58 Pin: release a=etch-sloppy
     58Pin: release a = etch-sloppy
    5959Pin-Priority: 991
    6060}}}
    6161
    6262
    63 =Install debian packages=
     63= Install debian packages =
    6464
    6565{{{
     
    9191}}}
    9292
    93 =Configure HE routes=
     93= Configure HE routes =
    9494
    9595In order to route traffic directly from computer to computer (across different subnetworks) we need to add the different routes
     
    126126chmod it to 755
    127127
    128 =Configure suPHP=
     128= Configure suPHP =
    129129
    130130
     
    142142fi
    143143#userdel phpmyadmin
    144 phpmyadmin_files=`dpkg -L phpmyadmin | grep '\.php'`
     144phpmyadmin_files =`dpkg -L phpmyadmin | grep '\.php'`
    145145
    146146for file in $phpmyadmin_files; do
     
    171171perl -pi -e 's/www-data www-data/horde nogroup/g' /etc/logrotate.d/horde3
    172172
    173 horde_files=`dpkg -L horde3 | grep '\.php'`
    174 imp_files=`dpkg -L imp4 | grep '\.php'`
    175 turba_files=`dpkg -L turba2 | grep '\.php'`
    176 ingo_files=`dpkg -L ingo1 | grep '\.php'`
    177 all_horde_files="$horde_files $imp_files $turba_files $ingo_files"
     173horde_files =`dpkg -L horde3 | grep '\.php'`
     174imp_files =`dpkg -L imp4 | grep '\.php'`
     175turba_files =`dpkg -L turba2 | grep '\.php'`
     176ingo_files =`dpkg -L ingo1 | grep '\.php'`
     177all_horde_files ="$horde_files $imp_files $turba_files $ingo_files"
    178178
    179179for file in $all_horde_files; do
     
    186186fi
    187187#userdel squirrelmail
    188 sm_files=`dpkg -L squirrelmail | grep '\.php'`
     188sm_files =`dpkg -L squirrelmail | grep '\.php'`
    189189
    190190chown -R squirrelmail:nogroup /var/lib/squirrelmail/data
     
    202202[global]
    203203;Path to logfile
    204 logfile=/var/log/suphp/suphp.log
     204logfile =/var/log/suphp/suphp.log
    205205
    206206;Loglevel
    207 loglevel=info
     207loglevel = info
    208208
    209209;User Apache is running as
    210 webserver_user=www-data
     210webserver_user = www-data
    211211
    212212;Path all scripts have to be in
    213 docroot=/
     213docroot =/
    214214
    215215;Path to chroot() to before executing script
    216 ;chroot=/mychroot
     216;chroot =/mychroot
    217217
    218218; Security options
    219 ;allow_file_group_writeable=false
    220 allow_file_group_writeable=true
    221 ;allow_file_others_writeable=false
    222 allow_file_others_writeable=true
    223 ;allow_directory_group_writeable=false
    224 allow_directory_group_writeable=true
    225 ;allow_directory_others_writeable=false
    226 allow_directory_others_writeable=true
     219;allow_file_group_writeable = false
     220allow_file_group_writeable = true
     221;allow_file_others_writeable = false
     222allow_file_others_writeable = true
     223;allow_directory_group_writeable = false
     224allow_directory_group_writeable = true
     225;allow_directory_others_writeable = false
     226allow_directory_others_writeable = true
    227227
    228228;Check wheter script is within DOCUMENT_ROOT
    229 ;check_vhost_docroot=true
    230 check_vhost_docroot=false
     229;check_vhost_docroot = true
     230check_vhost_docroot = false
    231231
    232232;Send minor error messages to browser
    233 errors_to_browser=false
     233errors_to_browser = false
    234234
    235235;PATH environment variable
    236 env_path=/bin:/usr/bin
     236env_path =/bin:/usr/bin
    237237
    238238;Umask to set, specify in octal notation
    239 ;umask=0077
    240 umask=0022
     239;umask =0077
     240umask =0022
    241241
    242242; Minimum UID
    243 min_uid=100
     243min_uid =100
    244244
    245245; Minimum GID
    246 min_gid=100
     246min_gid =100
    247247
    248248
    249249[handlers]
    250250;Handler for php-scripts
    251 x-httpd-php=php:/usr/bin/php-cgi
     251x-httpd-php = php:/usr/bin/php-cgi
    252252
    253253;Handler for CGI-scripts
    254 x-suphp-cgi=execute:!self
    255 }}}
    256 
    257 
    258 =Configure fail2ban=
     254x-suphp-cgi = execute:!self
     255}}}
     256
     257
     258= Configure fail2ban =
    259259
    260260Create /etc/fail2ban/jail.local. Modify the following lines, by adding them to the jail.local file that you just created:
     
    263263bantime  = 200
    264264
    265 action = iptables[name=%(__name__)s, port=%(port)s]
    266 mail-whois[name=%(__name__)s, dest=%(destemail)s]
    267 
    268 }}}
    269 
    270 =Install Red=
     265action = iptables[name =%(__name__)s, port =%(port)s]
     266mail-whois[name =%(__name__)s, dest =%(destemail)s]
     267
     268}}}
     269
     270= Install Red =
    271271
    272272
     
    314314
    315315
    316 =Postfix setup=
     316= Postfix setup =
    317317
    318318
     
    368368
    369369# Added for amavisd-new
    370 content_filter=smtp-amavis:[127.0.0.1]:10024
     370content_filter = smtp-amavis:[127.0.0.1]:10024
    371371}}}
    372372
     
    386386}}}
    387387
    388 Uncomment START=yes
     388Uncomment START = yes
    389389Change MECHANISMS to read:
    390 MECHANISMS="shadow"
     390MECHANISMS ="shadow"
    391391
    392392 * Add postfix to the sasl group
     
    435435
    436436
    437 =Setup Postgrey=
     437= Setup Postgrey =
    438438
    439439Postgrey defers all mail for 5 minutes the first time it receives a message with a never before seen sender and recipient. This results in a lot of spam not being delivered.
     
    445445 * Edit /etc/default/postgrey adding the following line:
    446446{{{
    447 POSTGREY_TEXT="Greylisted, see http://mayfirst.org/greylist"
     447POSTGREY_TEXT ="Greylisted, see http://mayfirst.org/greylist"
    448448}}}
    449449 * Restart postgrey
     
    459459check_policy_service inet:127.0.0.1:60000
    460460
    461 =Setup Courier=
     461= Setup Courier =
    462462
    463463
     
    473473}}}
    474474
    475 =Setup amavis=
     475= Setup amavis =
    476476
    477477
     
    498498
    499499
    500 =Configure Spamassassin=
     500= Configure Spamassassin =
    501501
    502502
     
    558558
    559559
    560 =Maildrop=
     560= Maildrop =
    561561
    562562Edit /etc/maildroprc and add the following lines:
    563563
    564564{{{
    565 DEFAULT="$HOME/Maildir"
     565DEFAULT ="$HOME/Maildir"
    566566# spamassassin
    567567xfilter "/usr/bin/spamc -u $LOGNAME"
    568568}}}
    569569
    570 =Webmail setup=
     570= Webmail setup =
    571571
    572572
     
    602602
    603603
    604 =Install Drupal=
     604= Install Drupal =
    605605
    606606
     
    616616
    617617
    618 =Configure Apache=
     618= Configure Apache =
    619619
    620620
     
    628628
    629629
    630 =Configure logrotate=
     630= Configure logrotate =
    631631
    632632Create a file called apache2-red in the /etc/logrotate.d directory with:
     
    650650}}}
    651651
    652 =Configure logcheck=
     652= Configure logcheck =
    653653
    654654Copy from Wiwa to the server:
     
    656656/etc/logcheck/ignore.d.server/local-*
    657657
    658 =Configure cron-apt=
     658= Configure cron-apt =
    659659
    660660Edit /etc/cron-apt
    661 Change line MAILON to MAILON="upgrade"
    662 
    663 =Configure Awstats=
     661Change line MAILON to MAILON ="upgrade"
     662
     663= Configure Awstats =
    664664
    665665
     
    671671
    672672
    673 =Configure Mutt=
     673= Configure Mutt =
    674674
    675675Create /etc/Muttrc.d and put a file named maildir.rc with
    676676
    677677{{{
    678 set mbox_type=Maildir
    679 set mbox=~/Maildir
    680 set spoolfile=~/Maildir
    681 set folder=~/Maildir
    682 }}}
    683 
    684 =Change ssh=
     678set mbox_type = Maildir
     679set mbox =~/Maildir
     680set spoolfile =~/Maildir
     681set folder =~/Maildir
     682}}}
     683
     684= Change ssh =
    685685
    686686Make sure the following settings are set:
     
    692692}}}
    693693
    694 =Congifure phpmyadmin=
     694= Congifure phpmyadmin =
    695695
    696696Copy the apache conf file from /etc/phpmyadmin to /etc/apach2/conf.d
     
    706706}}}
    707707
    708 =Setup Backup=
     708= Setup Backup =
    709709
    710710 * Copy the /usr/local/sbin/mf-backup and /etc/mf-backup.xml files from another server