Changes between Initial Version and Version 1 of AwStatsInstall

Timestamp:

06/22/13 15:39:57 (3 years ago)

Author:

chris

Comment:

--

AwStatsInstall

@@ +1 @@
+= AWStats =
+
+== Copying the logs to penguin ==
+
+The nginx logs on wiki:PuffinServer are copied to wiki:PenguinServer using scp, in {{{/etc/logrotate.d/nginx}}} the {{{nginx-logs}}} script is run just before the logs are rotated:
+
+{{{
+        prerotate
+                /usr/local/bin/nginx-logs
+                /usr/local/bin/50x-errors chris@webarchitects.co.uk
+                if [ -d /etc/logrotate.d/httpd-prerotate ]; then \
+                        run-parts /etc/logrotate.d/httpd-prerotate; \
+                fi \
+        endscript
+}}}
+
+This script contains:
+
+{{{
+#!/bin/bash
+
+DATE=$(date "+%Y-%m-%d")
+LOG_FILE=/var/log/nginx/access.log
+REMOTE_FILE=puffin-nginx-$DATE.log
+
+scp $LOG_FILE penguin:nginx/$REMOTE_FILE
+}}}
+
+It depends on the {{{/root/.ssh/config}}} file on puffin containing:
+
+{{{
+Host penguin
+  Hostname penguin.webarch.net
+  User puffin
+}}}
+
+And the puffin root users public key being on penguin.
+
+On penguin the {{{/etc/ssh/sshd_config}}} file contains:
+
+{{{
+AllowGroups sudo sshaccess
+}}}
+
+And the puffin user on penguin was created with no password and in the sshaccess group:
+
+{{{
+adduser --disabled-password --ingroup sshaccess puffin
+}}}
+
+Then the ssh public key was copied to {{{/home/puffin/.ssh/authorized_keys}}} on penguin and this was added at the start so it can only be used from puffin's IP address:
+
+{{{
+from="puffin.webarch.net" ssh-rsa AAAA...
+}}}
+
+The log files that are created on penguin are in {{{/home/puffin/nginx/}}} and have a file name based on the date they are created, eg:
+
+{{{
+-rw-r----- 1 puffin puffin  11M Jun 22 06:25 puffin-nginx-2013-06-22.log
+}}}
+