| 68 | == MySQL == |
| 69 | |
| 70 | There is a copy of the root passwd for MySQL in /root/. |
| 71 | |
| 72 | The MySQL settings have been tweaked to increase memory usage, see /etc/mysql/my.cnf |
| 73 | |
| 74 | MySQL users and databases were set up using the phpMyAdmin interface. |
| 75 | |
| 76 | == Postfix == |
| 77 | |
| 78 | Postfix has been installed for outgoing SMPT email, the only changes from the default configuration are related to enabling TLS and these changes are in /etc/postfix/main.cf. |
| 79 | |
| 80 | Email to root is forwarded to chris@webarchitects.co.uk via /root/.forward -- if anyone else needs to get a copy of the root emails then please add yourself to this file. |
| 81 | |
| 82 | == Backupninja == |
| 83 | |
| 84 | [https://labs.riseup.net/code/projects/show/backupninja/ Backupninja] has been installed and set up -- it's set to backup files to another server in the same rack. The main configuration file is /etc/backupninja.conf and the files containing the list of things to be backed up are in /etc/backup.d/. 60 days worth of backups are saved. It is set to backup MySQL and the following directories: |
| 85 | {{{ |
| 86 | include = /etc |
| 87 | include = /home |
| 88 | include = /var |
| 89 | include = /home |
| 90 | include = /usr |
| 91 | include = /srv |
| 92 | include = /web |
| 93 | |
| 94 | exclude = /var/run |
| 95 | }}} |
| 96 | |
| 97 | == !DenyHosts == |
| 98 | |
| 99 | To prevent SSH brute force attacks [http://denyhosts.sourceforge.net/ DenyHosts] has been installed -- if you make too many mistakes with your password you will be locked out! To whitelist IP addresses add them to /etc/hosts.allow -- blacklisted IP's are written to /etc/hosts.deny. |