wiki:setup_dedicated_ip

Version 3 (modified by Jamie McClelland, 12 years ago) (diff)

--

If a member wants a dedicated IP on one of our shared servers, these are the steps for setting it up.

  • Allocated the IP by editing the ip_allocation page, putting the member domain name next to the next available IP address.
  • Edit the file /etc/network/interfaces on the machine in which the account is hosted. Add a stanza like the following:
auto eth0:summup.org
iface eth0:summup.org inet static
  address 209.51.163.204
  netmask 255.255.255.240

summup.org is the domain name of hosting order. The Address and netmask should reflect the address and netmask of the record you took from the IP allocation page.

  • Bring the new IP up with:
sudo ifup eth0:summup.org

Change summup.org to the domain name that you used.

  • Modify the DNS records via red. For advanced users, you should ask them to make this change. Change the IP address of the A records to the new ip (usually this would just be, in the example above, summup.org and www.summup.org). The SSL certificate will typically only apply to these domains - so you don't want to change the IP address of, for example, summup.mayfirst.org.
  • Add an ssl record to the web config. For advanced users, you should ask them to make this change. Under web config, click add new item. Be sure to copy and paste the values from the existing web config rather than taking the default values - you want to be sure to include any extras that you might have added (like the drupal AllowOverride lines). Specify the same login as the owner, make it enabled, specify https, for IP address specify the IP address that has been allocated. Finally, add three new lines:
#SSL Stuff
SSLEngine On
SSLCertificateFile /etc/apache2/ssl/chavez.mayfirst.org.crt
SSLCertificateKeyFile /etc/apache2/ssl/chavez.mayfirst.org.key

Replace chavez with the name of the server the site is hosted on. NOTE: They will need to change these lines after they have purchased an SSL certificate so that they point to their own ssl certificate. These lines are just starters so that it works without an error.