Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/bsclifton/cloud-config
Build configuration used for my cloud server
https://github.com/bsclifton/cloud-config
configuration digitalocean nginx ruby ssh ubuntu
Last synced: about 1 month ago
JSON representation
Build configuration used for my cloud server
- Host: GitHub
- URL: https://github.com/bsclifton/cloud-config
- Owner: bsclifton
- Created: 2016-03-19T04:41:39.000Z (almost 9 years ago)
- Default Branch: master
- Last Pushed: 2021-07-22T08:24:45.000Z (over 3 years ago)
- Last Synced: 2024-12-12T07:40:22.744Z (about 1 month ago)
- Topics: configuration, digitalocean, nginx, ruby, ssh, ubuntu
- Language: Shell
- Homepage:
- Size: 58.6 KB
- Stars: 1
- Watchers: 2
- Forks: 0
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
## cloud-config
Build configuration used for my Digital Ocean Droplet (migration in progress from the now EOLed [GoDaddy Cloud Server](https://cloud.godaddy.com/) product).
This server hosts a few of my websites:
- [blog.clifton.io](https://github.com/bsclifton/blog.clifton.io)
- [clifton.io](https://github.com/bsclifton/clifton.io)
- [mb.clifton.io](https://github.com/bsclifton/mb.clifton.io)
And two websites for the [Morgopolis](https://github.com/morgopolis) organization:
- [mal-game.com](https://github.com/morgopolis/mal-game.com)
- [morgopolis.com](https://github.com/morgopolis/morgopolis.com)
Configuration is installed on top of [Ubuntu 16.04.3 LTS](http://releases.ubuntu.com/16.04/) (Xenial Xerus).
This repo does not cover mail setup. For that, you [can follow this article](https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-postfix-as-a-send-only-smtp-server-on-ubuntu-16-04).
### Installing
1. Create a new droplet on Digital Ocean. Choose the Ubuntu 16.04.3 image.
2. SSH to the host.
3. [Create a new user with sudo access](https://www.digitalocean.com/community/tutorials/how-to-create-a-sudo-user-on-ubuntu-quickstart) and switch to this new user.
```
adduser brian
usermod -aG sudo brian
su - brian
```
4. Run the following commands:
```sh
sudo apt update && sudo apt upgrade -y && sudo apt install -y git
git clone https://github.com/bsclifton/cloud-config.git
cd cloud-config/ && ./install.sh
```
After the install, the script will print an SSH key to stdout (add this public key to your GitHub profile).
The MySQL root password is also printed; if you miss it, you can reset the root password [using this procedure](https://help.ubuntu.com/community/MysqlPasswordReset).
### About this configuration
This config uses nginx with:
- [PHP using FastCGI Process Manager](https://www.howtoforge.com/installing-nginx-with-php5-fpm-and-mysql-on-ubuntu-14.04-lts-lemp)
- [Ruby using Passenger](https://www.phusionpassenger.com/library/install/nginx/install/oss/xenial/)
Ruby is setup using [rbenv](https://github.com/rbenv/rbenv) and (as of 2017/09/03) is set to 2.4.1.
sshd_config is updated to remove root login and to disallow login w/ password. To obtain SSH access, you can put your public key under ./keys and it will be installed to the authorized_keys.
This install will also pull down [my personal dotfiles](https://github.com/bsclifton/dotfiles/) in the user's home directory.
Configuration files (nginx, etc) are now installed for [clifton.io](https://github.com/bsclifton/clifton.io), [blog.clifton.io](https://github.com/bsclifton/blog.clifton.io).
- nginx config created using [Mozilla SSL Configuration Generator](https://mozilla.github.io/server-side-tls/ssl-config-generator/)
- SSL config tested using [Qualys SSL Labs](https://www.ssllabs.com/ssltest/analyze.html) (both sites score an A)
- SSL certificate/key must be manually installed to `/srv/`
### Staying up to date
Once everything is in place and the server is up and running, the next step is to consider maintenance.
There are two scripts which can be ran:
- `~/scripts/maintenance.sh`: this script will run `apt update` and `apt upgrade`. This should be ran regularly.
- `~/scripts/upgrade.sh`: this script will run `apt dist-upgrade`. This should only be ran manually.