I'm trying to use Ansible for automating the setup process of new server instances. One of the setup tasks changes the default SSH port, therefore requiring me to update the hosts list.
Is it possible to automate this by having Ansible fallback to a specified port if the connection could not be established to the default SSH port?
We're a small company with only a handful of employees. Our non-technical COO has asked that we setup a copy of the production database for him to use with a service like Chartio, because our (admittingly poor) admin dashboard doesn't meet his needs.
The COO wants to use a friend (a contractor) to help integrate the Chartio service with our database.
All our passwords are encrypted, but emails and names are stored in clear text. We handle payment processing through a 3rd party provider so we don't store any sensitive financial information except transaction totals.
Is this a bad idea, or am I being overly cautious?
PS: We'd be setting up the database server ourselves, so we'd have control over the firewall and such.
While researching Unicorn configuration options I came across this snippet..
GC.respond_to?(:copy_on_write_friendly=) and
GC.copy_on_write_friendly = true
If I undertand correctly, it optimizes how Unicorn handles memory allocation and resource sharing between workers?
I use Unicorn to power my Sinatra application on server with Ruby 1.9.3. Are there any downsides to including the copy_on_write_friendly setting in my unicorn config?
Does the "forever" daemon know if I updated my Node.js script?
Is it safe for me to change my Node.js script if the forever daemon is actively running in the background?
I want to redirect IE users to a static file, regardless of what page they were trying to reach.
My code is inside a server block:
if ($http_user_agent ~* msie ) { rewrite ^.+$ /msie.html last; }
No matter what I try, I either get a 404 or a 500 Internal Server Error. Am I doing this correctly?
I have to add redirect rules for several thousand IP ranges but I am complete newbie when it comes to IP tables and want to make sure I got this right..
iptables
-t nat
-A PREROUTING
-p tcp
-m iprange --src-range 111.222.333.64-111.222.333.140
--dport 25 -j REDIRECT --to 1025
If I understand correctly, that will forward any IP between 111.222.333.64 and 111.222.333.140 that was destined for port 25 to redirect instead to port 1025, is this correct?
This might sound very rudimentary to some but I am having trouble understanding the limitations of IPv6
My server has been assigned a block of IPv6 addresses by my hosting provider. According to my webhost, there is no need for IPv4 tunneling and ifconfig shows that eth0 has been successfully binded to an IPv6 address.
Assuming all my server software is properly configured, and my domain's AAAA record points to my IPv6 address, will all clients on all ISPs be able to open my domain? Or is IPv6 limited to only those ISPs/DNS servers that support the new protocol?
My database server is using 191MB of swap space - but also shows 182MB of free RAM
The box is a dedicated MySQL server, running Debian Lenny.
How can I determine who and why is filling the swap space instead of using the free RAM?
My intention is to parse incoming emails with PHP. What would be the simplest way to set this up?
Would it suffice to rely on Postfix for this, or is there a better alternative?
The purpose of the parsing is to extract links from incoming emails and store them in the database.
My question is - how can I go about pulling the incoming emails and reading them with another application or script?
*Running Debian
Because Nginx requires the geoip_ directives to go into the main http{ } block of the nginx.conf file, does that mean the geoip data is being pulled for every single request?
In other words, does NginX look up the geoip data for ALL of the requests coming in, even for those not needing the data?
What is the most efficient way to block access to 8-10k IP addresses?
My server runs EngineX on Debian.
If possible, I would like to show all of the addresses an Internal Server Error (500).
The IP's are scattered and not under any particular subsets.
How would I go about displaying Ruby-generated dynamic pages without relying on a framework, such as Rails?
My intention is to serve Ruby .erb pages just as I would with .php files.
My server uses EngineX, which seems to play well together with Passenger.
Is it safe to run apt-get update -y through cron on a production server?
How can I create a new user then SSH into the box under that user?
I ran:
useradd marco -d /home/marco -p WuUfhRdt4B
Then I added to /etc/ssh/sshd_config:
AllowUsers root marco
Then restarted ssh:
/etc/init.d/ssh restart
I can't login. What did I miss?
** Running Debian.
Is it safe to run this command on a brand new Debian server?
aptitude -y full-upgrade
The command is from http://www.linode.com/stackscripts/view/?StackScriptID=1
On a related note, how is aptitude update different from apt-get update?
Are there significant differences between versions 5.1 and 5.5?
The server in question is used to host a medium-sized vBulletin forum.
The main benefit of 5.1 is it's available through apt-get.
I find myself spending a lot of time setting up new servers. I always have the same exact software stack:
nginx mysql php + php-fpm + xcache memcached munin
I pull all the configuration and init.d scripts from my github repo.
All my servers run Debian. My first step is usually apt-get update and apt-get install vim (and other basic packages).
Would Capistrano or Puppet be capable of automating this process? If they both are, which one would be more suited for the job?
PS: I would prefer Capistrano because I am comfortable with Ruby.
I would like to monitor NGinx stats through Munin but the Nginx plugins show no data. Is it possible to diagnose why only one of the munin nginx plugins seems to be working?
The server runs on CentOS 5.3
If I was running a command before the SSH connection was dropped, will the command continue executing?
My servers run CentOS: Nginx + PHP-FPM (PHP via Fast-CGI). Every site is on its own VirtualHost.
Currently both Nginx and PHP-FPM run under root. I know this is bad practice, and there is no reason for any of the sites to have access to files outside of their own directory.
How would I go about creating jailed users and instructing nginx && php-fpm to play along accordingly?