Wiki StuRa HTW Dresden - Benutzerbeiträge [de]

StuRa Diskussion:Server/SRS13/2015

2013-06-05T21:51:43Z

Blotter: Neuer Abschnitt /* $wgActionLockdown */

= Diskussion:Jail/SRS13_OLD =
== etherpad-lite ressourcen ==

* etherpad-lite allein ist schön schlank
* abiword dazu ... das wird fett
[[Benutzer:JohannesSchneemann|JohannesSchneemann]]

=== config ===
* '''[https://github.com/Pita/etherpad-lite/issues/28 funzt (noch) nicht]'''
* in /etc/rc.conf:
lighttpd_enable="YES"
* generell:
mkdir -p /usr/local/www/data
chown -R www:www /usr/local/www/
* weitere Einstellungen in /usr/local/etc/lighttpd.conf
* Testen der Einstellungen: lighttpd -t -f lighttpd.conf
* als reverse proxy
* hashes zur zuweisung an korrekten server
* allgemein (minimal) lighttpd.conf:
server.modules = (
"mod_access",
"mod_proxy"
)
server.port = 80
server.bind = "141.56.50.13"
$HTTP["host"] =~ "^notizen.stura-dresden.de$" {
proxy.balance = "hash"
proxy.server = ( "" => ( (
"host" => "127.0.0.1",
"port" => 9001
) )
)
}
* '''''oder''''' FreeBSD spezifisch:
** modules.conf:
server.modules = (
"mod_access",
)
include "conf.d/proxy.conf"
** conf.d/proxy.conf:
proxy.balance = "hash"
$HTTP["host"] =~ "^notizen.stura-dresden.de$" {
proxy.server = ( "" => ( (
"host" => "141.56.50.13",
"port" => 9001
) )
)
}
** lighttpd.conf:
var.log_root = "/var/log/lighttpd"
var.server_root = "/usr/local/www/data"
var.state_dir = "/var/run"
var.home_dir = "/var/spool/lighttpd"
var.conf_dir = "/usr/local/etc/lighttpd"
var.vhosts_dir = server_root + "/vhosts"
var.cache_dir = "/var/cache/lighttpd"
var.socket_dir = home_dir + "/sockets"
include "modules.conf"
server.port = 80
server.bind = "141.56.50.13"
server.event-handler = "freebsd-kqueue"
server.username = "www"
server.groupname = "www"
server.document-root = "/usr/local/www/data/"
server.pid-file = state_dir + "/lighttpd.pid"
server.errorlog = log_root + "/error.log"
include "conf.d/access_log.conf"
include "conf.d/debug.conf"
server.network-backend = "writev"
server.max-fds = 2048
server.stat-cache-engine = "simple"
server.max-connections = 1024
index-file.names += (
"index.xhtml", "index.html", "index.htm", "default.htm", "index.php"
)
url.access-deny = ( "~", ".inc" )
$HTTP["url"] =~ "\.pdf$" {
server.range-requests = "disable"
}
static-file.exclude-extensions = ( ".php", ".pl", ".fcgi", ".scgi" )
include "conf.d/mime.conf"
include "conf.d/dirlisting.conf"
server.follow-symlink = "enable"
server.upload-dirs = ( "/var/tmp" )
$SERVER["socket"] == "141.56.50.13:80" { }
* [http://redmine.lighttpd.net/wiki/lighttpd/Docs:ModProxy Dokumenatation: mod_proxy]

== ehterpad-lite ghetto rc script ==
* und nochmal: funzt, ist aber ''nicht standard konform'' ... eher ein hässlicher hack
#!/bin/sh
start(){
echo "staring etherpad-lite ..." >2&
su -m etherpad-lite -c /home/etherpad-lite/etherpad-lite/bin/run.sh&
echo "done" >2&
}
stop(){
echo "stopping ehterpad-lite ..." >2&
kill `ps -a | grep "node server.js" | grep -v grep | awk '{print $1}'`
echo "done" >2&
}
case "$1" in
start)
start
;;
stop)
stop
;;
restart)
stop
start
;;
*)
echo "USAGE: {start|stop|restart}" >2&
exit 1
;;
esac
exit 0

== feuchte Träume ==
* dudle
* redmine
* [http://pentabarf.org/Main_Page pentabarf] (ESE)
* [https://github.com/cookieBerlin/engelsystem engelsystem] (ESE)

== $wgActionLockdown ==

http://www.mediawiki.org/wiki/Extension:Lockdown#.24wgActionLockdown [[Benutzer:Blotter|Blotter]] ([[Benutzer Diskussion:Blotter|Diskussion]])

Server/Jails/SRS17

2013-04-20T22:24:26Z

Blotter: /* /etc/rc.conf */

== Ports ==

=== installierte Ports ===
* autoconf
* autoconf-wrapper
* automake
* automake-wrapper
* db42
* expat
* [[#gdbm | gdbm]]
* gettext
* gmake
* [[Server/Jails#help2man | help2man]]
* [[Server/Jails#libiconv | libiconv]]
* libtool
* [[Server/Jails#m4| m4]]
* p5-Locale-gettext
* [[Server/Jails#pcre | pcre]]
* [[Server/Jails#perl | perl-threaded]]
* pkgconf
* [[Server/Jails#portupgrade | portupgrade]]
* [[#python27 | python27]]
* [[Server/Jails#ruby | ruby]]
* ruby18-bdb
* [[Server/Jails#zsh | zsh]]

=== konfigurierte Ports ===

==== [[Server/Jails#help2man | help2man]] ====

==== [[Server/Jails#libiconv | libiconv]] ====

==== [[Server/Jails#m4| m4]] ====

==== [[Server/Jails#pcre | pcre]] ====

==== [[Server/Jails#perl | perl-threaded]] ====

==== [[Server/Jails#portupgrade | portupgrade]] ====

==== [[Server/Jails#ruby | ruby]] ====

==== [[Server/Jails#zsh | zsh]] ====

=== zusätzliche Konfigurationsdateien ===

==== Jail ====

===== /etc/rc.conf =====

<code>
sshd_enable="YES"
ejabberd_enable="YES"
</code>

===== /etc/ssh/sshd_config =====

<code>
…
ListenAddress 141.56.50.17
…
PasswordAuthentication no
…
UsePAM no
…
</code>

===== /usr/local/etc/ejabberd/ejabberd.cfg =====

<code>
...
{loglevel, 3}.
...
{watchdog_admins, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]}.
...
{hosts, ["srs17.stura.htw-dresden.de"]}.
...
starttls, {certfile, "/root/ejabberd.pem"},
starttls_required,
...
%%captcha,
%%http_bind,
%%http_poll,
...
{s2s_use_starttls, required}.
...
{s2s_certfile, "/root/ejabberd.pem"}.
...
{acl, admin, {user, "blotter", "srs17.stura.htw-dresden.de"}}.
{acl, admin, {user, "pwnytail", "srs17.stura.htw-dresden.de"}}.
...
{acl, blocked, {user, "test"}}.
{acl, blocked, {user, "root"}}.
{acl, blocked, {user, "r00t"}}.
{acl, blocked, {user, "r0ot"}}.
{acl, blocked, {user, "ro0t"}}.
{acl, blocked, {user, "adm1n"}}.
{acl, blocked, {user, "admin"}}.
{acl, blocked, {user, "kss"}}.
{acl, blocked, {user, "administrator"}}.
{acl, blocked, {user, "administrat0r"}}.
{acl, blocked, {user, "adm1n1strat0r"}}.
{acl, blocked, {user, "adm1nistrat0r"}}.
{acl, blocked, {user, "admin1strat0r"}}.
{acl, blocked, {user, "adm1nistrator"}}.
{acl, blocked, {user, "admin1strator"}}.
...
{access, max_user_sessions, [{2, all}]}.
...
{language, "de"}.
...
%%{mod_irc, []},
...
%%{mod_pubsub, [
%%{access_createnode, pubsub_createnode},
%%{ignore_pep_from_offline, true}, % reduces resource comsumption, but XEP incompliant
...
%%{last_item_cache, false},
%%{plugins, ["flat", "hometree", "pep"]} % pep requires mod_caps
%%]},
...
{registration_watchers, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]},
...
{ip_access, [
{allow, "0.0.0.0/8"}
%%{allow, "127.0.0.0/8"},
%%{deny, "0.0.0.0/0"}
]},
...
</code>

== Siehe auch ==
* [[Server/Jabber]]

[[Kategorie:Rechentechnik]]
[[Kategorie:Software]]
[[Kategorie:Jail]]

Server/Jails/SRS17

2013-04-20T22:17:08Z

Blotter: /* /usr/local/etc/ejabberd/ejabberd.cfg */

== Ports ==

=== installierte Ports ===
* autoconf
* autoconf-wrapper
* automake
* automake-wrapper
* db42
* expat
* [[#gdbm | gdbm]]
* gettext
* gmake
* [[Server/Jails#help2man | help2man]]
* [[Server/Jails#libiconv | libiconv]]
* libtool
* [[Server/Jails#m4| m4]]
* p5-Locale-gettext
* [[Server/Jails#pcre | pcre]]
* [[Server/Jails#perl | perl-threaded]]
* pkgconf
* [[Server/Jails#portupgrade | portupgrade]]
* [[#python27 | python27]]
* [[Server/Jails#ruby | ruby]]
* ruby18-bdb
* [[Server/Jails#zsh | zsh]]

=== konfigurierte Ports ===

==== [[Server/Jails#help2man | help2man]] ====

==== [[Server/Jails#libiconv | libiconv]] ====

==== [[Server/Jails#m4| m4]] ====

==== [[Server/Jails#pcre | pcre]] ====

==== [[Server/Jails#perl | perl-threaded]] ====

==== [[Server/Jails#portupgrade | portupgrade]] ====

==== [[Server/Jails#ruby | ruby]] ====

==== [[Server/Jails#zsh | zsh]] ====

=== zusätzliche Konfigurationsdateien ===

==== Jail ====

===== /etc/rc.conf =====

<code>
sshd_enable="YES"
</code>

===== /etc/ssh/sshd_config =====

<code>
…
ListenAddress 141.56.50.17
…
PasswordAuthentication no
…
UsePAM no
…
</code>

===== /usr/local/etc/ejabberd/ejabberd.cfg =====

<code>
...
{loglevel, 3}.
...
{watchdog_admins, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]}.
...
{hosts, ["srs17.stura.htw-dresden.de"]}.
...
starttls, {certfile, "/root/ejabberd.pem"},
starttls_required,
...
%%captcha,
%%http_bind,
%%http_poll,
...
{s2s_use_starttls, required}.
...
{s2s_certfile, "/root/ejabberd.pem"}.
...
{acl, admin, {user, "blotter", "srs17.stura.htw-dresden.de"}}.
{acl, admin, {user, "pwnytail", "srs17.stura.htw-dresden.de"}}.
...
{acl, blocked, {user, "test"}}.
{acl, blocked, {user, "root"}}.
{acl, blocked, {user, "r00t"}}.
{acl, blocked, {user, "r0ot"}}.
{acl, blocked, {user, "ro0t"}}.
{acl, blocked, {user, "adm1n"}}.
{acl, blocked, {user, "admin"}}.
{acl, blocked, {user, "kss"}}.
{acl, blocked, {user, "administrator"}}.
{acl, blocked, {user, "administrat0r"}}.
{acl, blocked, {user, "adm1n1strat0r"}}.
{acl, blocked, {user, "adm1nistrat0r"}}.
{acl, blocked, {user, "admin1strat0r"}}.
{acl, blocked, {user, "adm1nistrator"}}.
{acl, blocked, {user, "admin1strator"}}.
...
{access, max_user_sessions, [{2, all}]}.
...
{language, "de"}.
...
%%{mod_irc, []},
...
%%{mod_pubsub, [
%%{access_createnode, pubsub_createnode},
%%{ignore_pep_from_offline, true}, % reduces resource comsumption, but XEP incompliant
...
%%{last_item_cache, false},
%%{plugins, ["flat", "hometree", "pep"]} % pep requires mod_caps
%%]},
...
{registration_watchers, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]},
...
{ip_access, [
{allow, "0.0.0.0/8"}
%%{allow, "127.0.0.0/8"},
%%{deny, "0.0.0.0/0"}
]},
...
</code>

== Siehe auch ==
* [[Server/Jabber]]

[[Kategorie:Rechentechnik]]
[[Kategorie:Software]]
[[Kategorie:Jail]]

Server/Jails/SRS17

2013-04-20T22:16:45Z

Blotter: /* /usr/local/etc/ejabberd/ejabberd.cfg */

== Ports ==

=== installierte Ports ===
* autoconf
* autoconf-wrapper
* automake
* automake-wrapper
* db42
* expat
* [[#gdbm | gdbm]]
* gettext
* gmake
* [[Server/Jails#help2man | help2man]]
* [[Server/Jails#libiconv | libiconv]]
* libtool
* [[Server/Jails#m4| m4]]
* p5-Locale-gettext
* [[Server/Jails#pcre | pcre]]
* [[Server/Jails#perl | perl-threaded]]
* pkgconf
* [[Server/Jails#portupgrade | portupgrade]]
* [[#python27 | python27]]
* [[Server/Jails#ruby | ruby]]
* ruby18-bdb
* [[Server/Jails#zsh | zsh]]

=== konfigurierte Ports ===

==== [[Server/Jails#help2man | help2man]] ====

==== [[Server/Jails#libiconv | libiconv]] ====

==== [[Server/Jails#m4| m4]] ====

==== [[Server/Jails#pcre | pcre]] ====

==== [[Server/Jails#perl | perl-threaded]] ====

==== [[Server/Jails#portupgrade | portupgrade]] ====

==== [[Server/Jails#ruby | ruby]] ====

==== [[Server/Jails#zsh | zsh]] ====

=== zusätzliche Konfigurationsdateien ===

==== Jail ====

===== /etc/rc.conf =====

<code>
sshd_enable="YES"
</code>

===== /etc/ssh/sshd_config =====

<code>
…
ListenAddress 141.56.50.17
…
PasswordAuthentication no
…
UsePAM no
…
</code>

===== /usr/local/etc/ejabberd/ejabberd.cfg =====

<code>

...
{loglevel, 3}.
...
{watchdog_admins, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]}.
...
{hosts, ["srs17.stura.htw-dresden.de"]}.
...
starttls, {certfile, "/root/ejabberd.pem"},
starttls_required,
...
%%captcha,
%%http_bind,
%%http_poll,
...
{s2s_use_starttls, required}.
...
{s2s_certfile, "/root/ejabberd.pem"}.
...
{acl, admin, {user, "blotter", "srs17.stura.htw-dresden.de"}}.
{acl, admin, {user, "pwnytail", "srs17.stura.htw-dresden.de"}}.
...
{acl, blocked, {user, "test"}}.
{acl, blocked, {user, "root"}}.
{acl, blocked, {user, "r00t"}}.
{acl, blocked, {user, "r0ot"}}.
{acl, blocked, {user, "ro0t"}}.
{acl, blocked, {user, "adm1n"}}.
{acl, blocked, {user, "admin"}}.
{acl, blocked, {user, "kss"}}.
{acl, blocked, {user, "administrator"}}.
{acl, blocked, {user, "administrat0r"}}.
{acl, blocked, {user, "adm1n1strat0r"}}.
{acl, blocked, {user, "adm1nistrat0r"}}.
{acl, blocked, {user, "admin1strat0r"}}.
{acl, blocked, {user, "adm1nistrator"}}.
{acl, blocked, {user, "admin1strator"}}.
...
{access, max_user_sessions, [{2, all}]}.
...
{language, "de"}.
...
%%{mod_irc, []},
...
%%{mod_pubsub, [
%%{access_createnode, pubsub_createnode},
%%{ignore_pep_from_offline, true}, % reduces resource comsumption, but XEP incompliant
...
%%{last_item_cache, false},
%%{plugins, ["flat", "hometree", "pep"]} % pep requires mod_caps
%%]},
...
{registration_watchers, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]},
...
{ip_access, [
{allow, "0.0.0.0/8"}
%%{allow, "127.0.0.0/8"},
%%{deny, "0.0.0.0/0"}
]},
...

</code>

== Siehe auch ==
* [[Server/Jabber]]

[[Kategorie:Rechentechnik]]
[[Kategorie:Software]]
[[Kategorie:Jail]]

Server/Jails/SRS17

2013-04-20T22:15:18Z

Blotter: /* Siehe auch */

== Ports ==

=== installierte Ports ===
* autoconf
* autoconf-wrapper
* automake
* automake-wrapper
* db42
* expat
* [[#gdbm | gdbm]]
* gettext
* gmake
* [[Server/Jails#help2man | help2man]]
* [[Server/Jails#libiconv | libiconv]]
* libtool
* [[Server/Jails#m4| m4]]
* p5-Locale-gettext
* [[Server/Jails#pcre | pcre]]
* [[Server/Jails#perl | perl-threaded]]
* pkgconf
* [[Server/Jails#portupgrade | portupgrade]]
* [[#python27 | python27]]
* [[Server/Jails#ruby | ruby]]
* ruby18-bdb
* [[Server/Jails#zsh | zsh]]

=== konfigurierte Ports ===

==== [[Server/Jails#help2man | help2man]] ====

==== [[Server/Jails#libiconv | libiconv]] ====

==== [[Server/Jails#m4| m4]] ====

==== [[Server/Jails#pcre | pcre]] ====

==== [[Server/Jails#perl | perl-threaded]] ====

==== [[Server/Jails#portupgrade | portupgrade]] ====

==== [[Server/Jails#ruby | ruby]] ====

==== [[Server/Jails#zsh | zsh]] ====

=== zusätzliche Konfigurationsdateien ===

==== Jail ====

===== /etc/rc.conf =====

<code>
sshd_enable="YES"
</code>

===== /etc/ssh/sshd_config =====

<code>
…
ListenAddress 141.56.50.17
…
PasswordAuthentication no
…
UsePAM no
…
</code>

===== /usr/local/etc/ejabberd/ejabberd.cfg =====

<code>

...
{loglevel, 3}.
...
{watchdog_admins, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]}.
...
{hosts, ["srs17.stura.htw-dresden.de"]}.
...
starttls, {certfile, "/root/ejabberd.pem"},
starttls_required,
...
%%captcha,
%%http_bind,
%%http_poll,
...
{s2s_use_starttls, required}.
...
{s2s_certfile, "/root/ejabberd.pem"}.
...
{acl, admin, {user, "blotter", "srs17.stura.htw-dresden.de"}}.
{acl, admin, {user, "pwnytail", "srs17.stura.htw-dresden.de"}}.
...
{acl, blocked, {user, "test"}}.
{acl, blocked, {user, "root"}}.
{acl, blocked, {user, "r00t"}}.
{acl, blocked, {user, "r0ot"}}.
{acl, blocked, {user, "ro0t"}}.
{acl, blocked, {user, "adm1n"}}.
{acl, blocked, {user, "admin"}}.
{acl, blocked, {user, "kss"}}.
{acl, blocked, {user, "administrator"}}.
{acl, blocked, {user, "administrat0r"}}.
{acl, blocked, {user, "adm1n1strat0r"}}.
{acl, blocked, {user, "adm1nistrat0r"}}.
{acl, blocked, {user, "admin1strat0r"}}.
{acl, blocked, {user, "adm1nistrator"}}.
{acl, blocked, {user, "admin1strator"}}.
...
{access, max_user_sessions, [{2, all}]}.
...
{language, "de"}.
...
%%{mod_irc, []},
...
%%{mod_pubsub, [
%%{access_createnode, pubsub_createnode},
%%{ignore_pep_from_offline, true}, % reduces resource comsumption, but XEP incompliant
...
%%{last_item_cache, false},
%%{plugins, ["flat", "hometree", "pep"]} % pep requires mod_caps
%%]},
...
{registration_watchers, ["blotter@srs17.stura.htw-dresden.de", "pwnytail@srs17.stura.htw-dresden.de"]},
...
{ip_access, [
{allow, "0.0.0.0/8"}
%%{allow, "127.0.0.0/8"},
%%{deny, "0.0.0.0/0"}
]},
...

</code>

== Siehe auch ==
* [[Server/Jabber]]

[[Kategorie:Rechentechnik]]
[[Kategorie:Software]]
[[Kategorie:Jail]]

Server/Jails/SRS17

2013-04-20T22:09:03Z

Blotter:

Server/Jabber

2013-04-13T15:11:22Z

Blotter: /* Siehe auch */

== Siehe auch ==
* [[Server/Jails/SRS17]]
* [[Jabber]]

[[Kategorie:Rechentechnik]]
[[Kategorie:Software]]

Diskussion:Server/Jails/SRS17

2013-04-06T01:39:36Z

Blotter: Neuer Abschnitt /* pf open ports */

== pf open ports ==

5222 for XMPP client connections (c2s = client to server)<br />
5269 for XMPP server connections (s2s = server to server). If you want that users in your server NOT be able to chat with users of other servers, you can close the port 5269.<br />
5280 for HTTP client connections, including HTTP-Bind and WebAdmin. Needed for http_bind in Strophe.js

Server/Jails/SRS17

2013-04-06T01:02:12Z

Blotter: /* zusätzliche Konfigurationsdateien */

Benutzer:Blotter

2013-04-06T00:17:57Z

Blotter: Die Seite wurde neu angelegt: „Nick: blotter ==Kontakt== * E-Mail: blotter [diät] c3d2 [donut] de * Jabber: blotter@jhor.de * Phone: whois 89.238.79.216 ... ==Fingerprints und Keys== * Op…“

Nick: blotter

==Kontakt==
* E-Mail: blotter [diät] c3d2 [donut] de
* Jabber: blotter@jhor.de
* Phone: whois 89.238.79.216 ...

==Fingerprints und Keys==
* OpenPGP-Key: 0x9F647CC6
* Fingerprint: 9AA9 58C9 AA63 20CD 10F1 9D4D 128B 928D 9F64 7CC6