Versions Compared

Old Version 5

changes.mady.by.user Tilmann

Saved on

compared with

New Version 6

changes.mady.by.user Tilmann

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: added wordpress

Hardware

AMD Phenom(tm) II X4 965 Processor

16 GB DDR3

2x 1TB SATA HDD, Raid 1 (~850 GB usable)

 

Usage

The yuca server is sponsored by manitu for yunity development and foodsharing purposes.

  • project.yunity.org: Project description webpage (Currently on OctoberCMS with migration plans)
  • yuca.yunity.org: Wordpress test setup for project page
  • piwik.yunity.org: Analytics server
  • different smaller PHP/mysql projects from an older server 
  • (todo) development preview of yunity software
  • (todo) build server of yunity software
  • (todo) beta launch of yunity software
  • (todo) foodsharing.de 2.0 launch server, at that time, all other purposes are moved to banana

 

Software setup

Operating system

Debian Jessie is used.

Must-have packages

  • tmux for persistent terminals (type tmux attach after SSH connection to attach, ctrl+b+n or p for next/previous pane, ctrl+b +c for new pane
  • imagemagick as it will be used by some web projects for graphics manipulation

Network configuration

  • 100 MBps connection (...)
  • 89.238.64.138/24
  • 2a00:1828:2000:873::2/64

Webserver

Nginx, php5-fpm 5.6

SSL

All web traffic is per default forwarded to the same URL on HTTPS. Define a server block for the domain if that should not happen.

SSL certificates from letsencrypt.org are used. For that, the simp_le client comes into action: The .well-known/ path is served from the common webroot /var/www/html on a wildcard server block (_). That enables a very simple default configuration. Just add all domains (including subdomains) in the script in /opt/letsencrypt/update_keys.sh and rerun that. The webserver is automatically reloaded if certificates change.

HTTP Strict Transport Security is enabled in nginx.conf. Domain yunity.org was applied for Chrome certificate preloading (http://hstspreload.appspot.com/).

Monitoring

https://yuca-admin.yunity.org/ provides links to

  • munin (please activate reasonable plugins when you add services or sites, especially PHP status)
  • PHP OPCache statistics (please increase SHM when neccessary)

Please add yourself to the mailinglist serveradmin@yunity.org (in manitu interface) to receive munin/postmaster/root/etc. emails from yuca.

Websites