Noer IT

Du har hentet en gammel revision af dette dokument! Hvis du gemmer dokumentet vil du overskrive den nuværende revision med denne udgave.

====== Ubuntu ======

===== Network conf =====
Using ''netplan'' this is the way to go ''/etc/netpan/01-netcfg.yaml''

Remember to change device name and IP addresses.

For pve1.noerit.gl:
<code>
network:
    ethernets:
        eth0:
            addresses:
            #- 149.202.151.151/32
            #- 5.196.241.149/32
            - 2001:41d0:8:228::241:149/64
            dhcp4: false
            dhcp6: false
            gateway4: 188.165.199.254
            gateway6: 2001:41d0:8:22ff:ff:ff:ff:ff
            nameservers:
                addresses:
                - 213.186.33.99
                - 2001:41d0:3:163::1
                search: [noerit.gl]
            routes:
              - to: 0.0.0.0/0
                via: 176.31.241.254
                on-link: true
            routes:
              - to: ::/0
                via: 2001:41d0:8:22ff:ff:ff:ff:ff
                on-link: true
    version: 2
</code>

Remember to delete other files in this directory if they conflict with the new file

We are using static addresses in this setup, so we need to disable IPv6 RA. Create a file ''/etc/sysctl.d/15-ipv6-ra.conf'' with the following content
<code>
net.ipv6.conf.default.autoconf=0
net.ipv6.conf.all.accept_ra=0
net.ipv6.conf.all.autoconf=0
</code>

===== Basic install =====

In ''/etc/fstab'' add ''noatime'' to the mount points
<code>
UUID=95d946b9-f241-11e8-9782-020000171985 / ext4 noatime,defaults 0 0
</code>

Change ''/etc/cloud/cloud.cfg''
<code>
preserve_hostname: true
</code>

Enable ''en_DK.UTF-8 UTF-8'' in ''/etc/locale.gen''

Run ''locale-gen''

Update ''/etc/apt/sources.list''
<code>
deb http://ubuntu.mirrors.ovh.net/ubuntu bionic main universe
deb http://ubuntu.mirrors.ovh.net/ubuntu bionic-updates main universe

deb http://security.ubuntu.com/ubuntu bionic-security main universe
</code>

Install packages
<code>
apt update
apt install mosh vim mc check-mk-agent xinetd fail2ban backupninja rdiff-backup
</code>

Update settings in ''/etc/xinetd.d/check_mk''
<code>
flags          = IPv6
only_from      = 127.0.0.1 149.202.151.145 2001:41d0:8:228::151:145
disable        = no
</code>

Restart xinetd service
<code>
service xinetd restart
</code>

Create ''/etc/fail2ban/jail.d/noerit.conf'' and set good defaults
<code>
[DEFAULT]
bantime  = 60m
findtime  = 60m
maxretry = 3
</code>

Resumé af ændrigner

Bemærk - ved at redigere denne side, accepterer du at dit indhold bliver frigivet under følgende licens: CC Attribution-Share Alike 4.0 International

Noer IT

Brugerværktøjer

Webstedsværktøjer

Sideværktøjer