Page MenuHomePhabricator

New VPS for Web Service [PHP/MariaDB] with Virtualmin (morfema)
Closed, ResolvedPublic

Description

  • New account on HTZ (with Chiara)
    • Authorize NanoH (email) to manage HTZ
    • Authorize Bozz (email) to manage HTZ
    • Authorize Eme/Cannillo (email) to manage HTZ
  • New Cloud Project (Area Web)
  • New VPS named morfema with CPX31 specs
    • Authorize user fabio-moriondo and SSH key in server wmit-morfema (website)
      • Create password of linux user for access in Virtualmin panel
    • Authorize user valerio-bozzolan and SSH key in server wmit-morfema (website)
      • Create password of linux user for access in Virtualmin panel
    • Authorize user emerald-stefano and SSH key in server wmit-morfema (website)
      • Create password of linux user for access in Virtualmin panel
  • Install software
    • Update
    • Install Virtualmin
      • Post-Installation setup
        • Enable email domain lookup: yes
        • Run SpamAssassin server filter: no (for now this server not manage emails account)
        • Enable virus scanning with ClamAV: no (for now this server not manage emails account)
        • Run MariaDB database server: yes
        • Run PostgreSQL database server: no (not required for now)
        • Change MariaDB root password: yes (tech and staff have this information)
        • Primary nameserver: morfema.wikimedia.it [default] (not used for now, domain DNS use external service provider)
        • Master administrator's email address: webmin-noreply@morfema.wikimedia.it
        • Password storage mode: Only store hashed passwords
        • MariaDB configuration size: Huge system with 8G of RAM or more on which MariaDB is heavily used
        • Location for SSL certificates: Per-domain directory under etc
    • Edit Default Plan for Virtualhost
      • Quota for entire server: Unlimited (this web server is used only by WMIT)
      • Quota for server administrator user: Unlimited (this web server is used only by WMIT)
      • Limit on number of virtual servers: Unlimited (this web server is used only by WMIT)
    • Virtualmin Configuration
      • User interface settings
        • Columns to show: [add] PHP version [remove] Last login time
        • Show mailbox size in users list: Yes
        • Show last login in users list: Yes
        • Link destination for additional documentation: https://wiki.wikimedia.it
        • Link title for additional documentation: Wiki Wikimedia
      • Defaults for new domains
        • Password field type: Enter password twice
        • Characters for random passwords: abcdefghjkmnpqrstuvwxyzABCDEFGHJKLMNPQRSTUVWXYZ23456789 (to avoid "i", "I", "l", 0", "O", "o")
        • Include alias servers in limits: No
        • Address format for Apache virtual hosts: Always use *
      • SSL settings
        • Show SSL provider error at domain creation time: Yes
      • Actions upon server and user creation
        • Check Apache configuration before applying: Yes
      • Status collection
        • Restart services that are detected as down: Yes
      • Backup and restore
        • Compression command for bzip2: pbzip2
          • [VPS] Install pbzip2
        • Compression command for gzip
          • [VPS] Install gzip
        • Included old rotated logs in backups: Yes
        • Users' backup directory under home: manual-backup
    • Edit Server Template
      • Adminitration user
        • Disk quotas type: Soft (avoid website go down for hypothetical virtualhost limit)
      • Mail for domain
        • Email message to send upon server creation: Message below ...
The following virtual server has been set up successfully :

Domain name:                ${DOM}
Hosting server:             ${HOSTNAME}
${IF-VIRT}
Virtual IP address:         ${IP}
${ENDIF-VIRT}
Administration login:       ${USER}
Administration password:    ${PASS}
${IF-WEBMIN}
Administration URL:         ${WEBMIN_PROTO}://www.${DOM}:${WEBMIN_PORT}/
${ENDIF-WEBMIN}

${IF-WEB}
Website:                    http://www.${DOM}/
${IF-WEBALIZER}
Webalizer log reporting:    Enabled
${ELSE-WEBALIZER}
Webalizer log reporting:    Disabled
${ENDIF-WEBALIZER}
${IF-VIRTUALMIN-AWSTATS}
AWStats log reporting:      Enabled
${ELSE-VIRTUALMIN-AWSTATS}
AWStats log reporting:      Disabled
${ENDIF-VIRTUALMIN-AWSTATS}

${ENDIF-WEB}
${IF-MYSQL}
${MYSQL_TYPE} database:     ${DB}
${MYSQL_TYPE} login:        ${MYSQL_USER}
${IF-MYSQL_PASS}
${MYSQL_TYPE} password:     ${MYSQL_PASS}
${ELSE-MYSQL_PASS}
${MYSQL_TYPE} password:     ${PASS}
${ENDIF-MYSQL_PASS}

${ENDIF-MYSQL}
${IF-POSTGRES}
PostgreSQL database:        ${DB}
PostgreSQL login:           ${USER}
PostgreSQL password:        ${PASS}

${ENDIF-POSTGRES}
      • Subject line: Virtual server created - Wikimedia Italia
      • Also Cc email to: segreteria WMIT
      • Also Bcc email to: NanoH (for now... for testing... for happy life)
      • Default quota for mail users: Unlimited
    • Website for domain
      • Create alias websites by: Adding ServerAlias to parent (for now this is the simple config)
      • Redirect webmail.${DOM}: no (WMIT have external email service provider)
    • MariaDB database
      • Prefix for additional databases: ${PREFIX}_
      • Default database character set: utf8mb4
      • Default database collation order: utf8mb4_unicode_ci
    • Virtual server creation
      • Automatically create alias domain: wikialias.it
        • TODO: request to board new domain for alias
      • Prefix for alias domain: First part of domain
      • Set up a disable schedule: 30 days
    • PHP options
      • Default PHP execution mode: FPM
      • Default PHP version: Hightest available
  • Update Reverse DNS
  • SSL certificate for morfema.wikimedia.it
  • Backup and Snapshot of VPS (initial-setup)

TODO:

  • Setup scheduled backups (temporary on NanoH)
  • Create new virtualhost moodle.wikimedia.it
  • Migrate virtualhost moodle.wikimedia.it from service provider rgnt