|
|
|
|
48
|
* Intrusion prevention via "fail2ban":http://www.fail2ban.org/ and rootkit detection via "rkhunter":http://rkhunter.sourceforge.net.
|
48
|
* Intrusion prevention via "fail2ban":http://www.fail2ban.org/ and rootkit detection via "rkhunter":http://rkhunter.sourceforge.net.
|
49
|
* SSH configuration preventing root login and insecure password authentication
|
49
|
* SSH configuration preventing root login and insecure password authentication
|
50
|
* Nightly backups to "Tarsnap":https://www.tarsnap.com/.
|
50
|
* Nightly backups to "Tarsnap":https://www.tarsnap.com/.
|
|
|
51
|
+* Git hosting via "cgit":http://git.zx2c4.com/cgit/about/ and "gitolite":https://github.com/sitaramc/gitolite.
|
51
|
* A bunch of nice-to-have tools like "mosh":http://mosh.mit.edu and "htop":http://htop.sourceforge.net that make life with a server a little easier.
|
52
|
* A bunch of nice-to-have tools like "mosh":http://mosh.mit.edu and "htop":http://htop.sourceforge.net that make life with a server a little easier.
|
52
|
|
53
|
|
53
|
No setup is perfect, but the general idea is to provide a bunch of useful services while being reasonably secure and low-maintenance. Set it up, SSH in every couple weeks, but mostly forget about it.
|
54
|
No setup is perfect, but the general idea is to provide a bunch of useful services while being reasonably secure and low-maintenance. Set it up, SSH in every couple weeks, but mostly forget about it.
|
|
|
|
|
145
|
|
146
|
|
146
|
Take the string beginning with @sha256#@ and insert it as the value for @irc_password_hash@.
|
147
|
Take the string beginning with @sha256#@ and insert it as the value for @irc_password_hash@.
|
147
|
|
148
|
|
|
|
149
|
+For git hosting, copy your public key into place. @cp ~/.ssh/id_rsa.pub roles/git/files/gitolite.pub@ or similar.
|
|
|
150
|
+
|
148
|
h3. 5. Run the Ansible Playbooks
|
151
|
h3. 5. Run the Ansible Playbooks
|
149
|
|
152
|
|
150
|
First, make sure you've "got Ansible installed":http://ansibleworks.com/docs/gettingstarted.html#getting-ansible.
|
153
|
First, make sure you've "got Ansible installed":http://ansibleworks.com/docs/gettingstarted.html#getting-ansible.
|