Fedora configuration ed

Fedora 26...

Fedora configuration
upgrade from Fedora 25
ssh
additional software
mail
squirrel
firewall
fileserver
mpd
database
users
http
ssl
rewrite
xsendfile
apache
git
flash plugin

upgrade from Fedora 25 ed

sudo dnf upgrade --refresh
sudo dnf install dnf-plugin-system-upgrade
sudo dnf system-upgrade download --refresh --releasever=26
sudo dnf system-upgrade reboot

ssh ed

https://docs.fedoraproject.org/en-US/Fedora/14/html/Deployment_Guide/s2-ssh-configuration-sshd.html

sudo service sshd start

start on boot:

sudo chkconfig sshd on

additional software ed

sudo dnf install https://download1.rpmfusion.org/free/fedora/rpmfusion-free-release-$(rpm -E %fedora).noarch.rpm https://download1.rpmfusion.org/nonfree/fedora/rpmfusion-nonfree-release-$(rpm -E %fedora).noarch.rpm

mail ed

server: dovecot

https://wiki2.dovecot.org/QuickConfiguration

edit /etc/dovecot/deconf.d/10-mail.conf:

mail_location = maildir:~/.maildir

sudo service dovecot stop
sudo service dovecot start
sudo chkconfig dovecot on

(StartTLS in client)

squirrel ed

just install

sudo dnf install squirrelmail

firewall ed

in gui "firewall configuration" tool, public zone, enable http, https, imap, imaps

fileserver ed

samba....nope, nfs...

/etc/exports

/dir/to/export       HOST2(ro)  HOST2(rw)
/dir/to/export2      192.168.1.0/255.255.255.0(ro)

/etc/hosts.allow

portmap:ALL

/etc/hosts.deny

#lockd:ALL
#mountd:ALL
#rquotad:ALL
#statd:ALL

sudo service nfs start

sudo firewall-cmd --add-service nfs --permanent
sudo firewall-cmd --reload

mpd ed

needs rpmfusion...

sudo ausearch -c 'mpd' --raw | audit2allow -M my-mpd
sudo semodule -X 300 -i my-mpd.pp

nope, still selinux

database ed

mariadb

http://fedoraproject.org/wiki/MariaDB

start

sudo service mariadb start
sudo chkconfig mariadb on

basic config (root password etc)

mysql_secure_installation

import old databases

mysql -u root --password=... < mysql_all_20170704.sql

users ed

drop user alexandria@localhost;
create user alexandria@localhost IDENTIFIED BY '*A5DB2D927D6DF94DA5E1CE4B293AEAAB4D8304EA';
set password for alexandria@localhost = PASSWORD('real password');
grant all on alexandria.* to alexandria@localhost;

http ed

apache

ssl ed

sudo dnf install mod_ssl

create a certificate

openssl genrsa -out michi.is-a-geek.org.key 2048
openssl req -new -key michi.is-a-geek.org.key -out michi.is-a-geek.org.csr -sha512
openssl x509 -req -days 3650 -in michi.is-a-geek.org.csr -signkey michi.is-a-geek.org.key -out michi.is-a-geek.org.crt -sha512
sudo cp michi.is-a-geek.org.crt /etc/pki/tls/certs/
sudo cp michi.is-a-geek.org.key /etc/pki/tls/private/
sudo cp michi.is-a-geek.org.csr /etc/pki/tls/private/
sudo restorecon -Rvf /etc/pki

sudo cp /etc/httpd/conf.d/ssl.conf /etc/httpd/conf.d/z-ssl-michi.conf

edit /etc/httpd/conf.d/z-ssl-michi.conf:

SSLCertificateFile /etc/pki/tls/certs/michi.is-a-geek.org.crt
SSLCertificateKeyFile /etc/pki/tls/private/michi.is-a-geek.org.key

rewrite ed

edit /etc/httpd/conf/httpd.conf:


    ...
    AllowOverride All

create/edit /var/www/html/.htaccess

Options +FollowSymLinks
RewriteEngine on
RewriteRule ^wiki$ /w/index.php

xsendfile ed

sudo dnf install mod_xsendfile