https://github.com/ilyeshammadi/linux-server-configuration
Simple steps to get up and running with a linux server that deploy a flask app using apache web server.
https://github.com/ilyeshammadi/linux-server-configuration
Last synced: 3 months ago
JSON representation
Simple steps to get up and running with a linux server that deploy a flask app using apache web server.
- Host: GitHub
- URL: https://github.com/ilyeshammadi/linux-server-configuration
- Owner: ilyeshammadi
- Created: 2016-05-10T14:09:18.000Z (about 9 years ago)
- Default Branch: master
- Last Pushed: 2016-05-11T03:03:41.000Z (about 9 years ago)
- Last Synced: 2025-01-10T02:51:31.530Z (5 months ago)
- Size: 4.88 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Linux Server Configuration
Udacity Full Stack Nanodegree project 5
[//]: # (Code Honor: i toked the https://github.com/danhayden/udacity-fswd-nanodegree_project-5 project as an example to acomplish my project)
---------------------------------------
## Objective
Take a baseline installation of a Linux distribution on a virtual machine and prepare it to host a web applications, to include installing updates, securing it from a number of attack vectors and installing/configuring web and database servers.
### Server Details
Server IP address: 52.36.165.36
SSH port: 2200
HTTP port: 80
User: grader
Password: Grader&-1994
Application URL: http://ec2-52-36-165-36.us-west-2.compute.amazonaws.com/
### Software Installed
* Apache2
* PostgreSQL
* git
* httplib2
* libapache2-mod-wsgi
* oauth2client
* python-flask
* python-pip
* python-psycopg2
* python-sqlalchemy
* requests
* glances
## Configuration
#### Update all currently installed packages
```sh
sudo apt-get update
sudo apt-get upgrade -y
```
#### Configure [Automatic Security Updates][AutomaticSecurityUpdates]
```sh
sudo apt-get install unattended-upgrades
sudo dpkg-reconfigure -plow unattended-upgrades
```
#### Create a new user named `grader`
```sh
adduser grader
```
#### Give the user `grader` permission to sudo
```sh
echo "grader ALL=(ALL) PASSWD:ALL" > /etc/sudoers.d/grader
```
#### Set up SSH Authentication
Generate SSH key pairs, then copy the contents of the generated .pub file to the clipboard
```sh
# RUN ON LOCAL MACHINE
ssh-keygen -t rsa -b 2048 -C "Just some comment"
```
Configure public key on server.
As the `grader` user paste `.pub` file contents in to `.ssh/authorized_key` file
```sh
# RUN ON SERVER
su grader
mkdir ~/.ssh
vim ~/.ssh/authorized_keys
```
Set correct permissions
```sh
chmod 700 ~/.ssh
chmod 644 ~/.ssh/authorized_keys
```
#### Change the SSH port from 22 to 2200
Open SSH config file
```sh
vim /etc/ssh/sshd_config
```
Change `Port 22` to `Port 2200`
#### Remote login of the root user has been disabled
Open SSH config file
```sh
vim /etc/ssh/sshd_config
```
Ensure `PermitRootLogin` has a value no`
#### Enforce SSH Authentication (i.e prevent password login)
Open SSH config file
```sh
vim /etc/ssh/sshd_config
```
Ensure `PasswordAuthentication` has a value no`
#### Restart SSH service
```sh
sudo service ssh restart
```
#### Configure the Uncomplicated Firewall (UFW)
Block all incoming requests
```sh
sudo ufw default deny incoming
```
Allow all outgoing requests
```sh
sudo ufw default allow outgoing
```
Allowing incoming connections for SSH (port 2200)
```sh
sudo ufw allow 2200/tcp
```
Allowing incoming connections for HTTP (port 80)
```sh
sudo ufw allow 80/tcp
```
Allowing incoming connections for NTP (port 123)
```sh
sudo ufw allow 123/udp
```
Enable `ufw`
```sh
sudo ufw enable
```
#### Configure the local timezone to UTC
Reconfiguring the tzdata package
```sh
sudo dpkg-reconfigure tzdata
# select `None of the above` then `UTC`
```
#### Install and configure Apache to serve a Python mod_wsgi application
Install required packages
```sh
sudo apt-get install apache2
sudo apt-get install libapache2-mod-wsgi
```
#### Install and configure PostgreSQL
```sh
sudo apt-get install postgresql
```
#### Create a new user named catalog that has limited permissions to your catalog application database
Change to postgres user
```sh
sudo -i -u postgres
```
Create new dastbase user `catalog`
```sh
postgres@server:~$ createuser --interactive -P
Enter name of role to add: catalog
Enter password for new role: (catalog)
Enter it again: (catalog)
Shall the new role be a superuser? (y/n) n
Shall the new role be allowed to create databases? (y/n) n
Shall the new role be allowed to create more new roles? (y/n) n
```
Create `catalog` Database
```sh
postgres:~$ psql
CREATE DATABASE catalog;
\q
```
logout of postgres user
```sh
exit
```
#### Install git, clone and setup Catalog App project
Install git
```sh
sudo apt-get install git
```
```sh
sudo git clone https://github.com/Ilyes-Hammadi/sportia.git
```
Protect `.git` directory
```sh
sudo chmod 700 /var/www/catalog/catalog/.git
```
Install application dependencies
```sh
sudo pip install -r requirements.txt
```
Create a wsgi file entry point to work with mod_wsgi
```sh
#!/usr/bin/python
import sys
import logging
logging.basicConfig(stream=sys.stderr)
sys.path.insert(0,"/var/www/catalog/catalog")
from views import app as application
```
Update last line of `/etc/apache2/sites-enabled/000-default.conf` to handle requests using the WSGI module, add the following line right before the closing line:
```sh
WSGIScriptAlias / /var/www/catalog/catalog/myapp.wsgi
```
Install the app
```sh
sudo python models.py
sudo python data.py
```
Ensure oauth tokens are correct
Restart Apache
```sh
sudo service apache2 restart
```
##Third Party Resources
https://github.com/danhayden/udacity-fswd-nanodegree_project-5
https://www.digitalocean.com/community/tutorials/how-to-configure-the-apache-web-server-on-an-ubuntu-or-debian-vps
http://flask.pocoo.org/docs/0.10/deploying/mod_wsgi/
[AutomaticSecurityUpdates]: https://help.ubuntu.com/community/AutomaticSecurityUpdates