2013-08-21 02:27:32 +00:00
|
|
|
# Base system configuration.
|
|
|
|
|
|
2013-08-21 13:37:33 +00:00
|
|
|
sudo apt-get -q update
|
|
|
|
|
sudo apt-get -q -y upgrade
|
2013-08-21 02:27:32 +00:00
|
|
|
|
|
|
|
|
# Basic packages.
|
|
|
|
|
|
2013-08-21 13:37:33 +00:00
|
|
|
sudo apt-get -q -y install sqlite3
|
2013-08-21 02:27:32 +00:00
|
|
|
|
|
|
|
|
# Turn on basic services:
|
|
|
|
|
#
|
|
|
|
|
# ntp: keeps the system time correct
|
|
|
|
|
#
|
|
|
|
|
# fail2ban: scans log files for repeated failed login attempts and blocks the remote IP at the firewall
|
|
|
|
|
#
|
|
|
|
|
# These services don't need further configuration and are started immediately after installation.
|
|
|
|
|
|
2013-08-21 13:37:33 +00:00
|
|
|
sudo apt-get install -q -y ntp fail2ban
|
2013-08-21 02:27:32 +00:00
|
|
|
|
|
|
|
|
# Turn on the firewall. First allow incoming SSH, then turn on the firewall. Additional open
|
|
|
|
|
# ports will be set up in the scripts that set up those services.
|
|
|
|
|
sudo ufw allow ssh
|
2013-08-21 13:37:33 +00:00
|
|
|
#sudo ufw allow domain
|
|
|
|
|
#sudo ufw allow http
|
|
|
|
|
#sudo ufw allow https
|
2013-08-21 02:27:32 +00:00
|
|
|
sudo ufw --force enable
|
|
|
|
|
|
2013-08-21 13:37:33 +00:00
|
|
|
# Mount the storage volume.
|
|
|
|
|
export STORAGE_ROOT=/home/ubuntu/storage
|
|
|
|
|
mkdir -p storage
|
|
|
|
|
|
|
|
|
|
|
