Servers

1. Video Site
2. Book Issues
3. Introduction

Accidental Sysadmin Syndrome

1. Assumptions

Linux Distributions

1. Popularity is Relative

The Sandbox

1. Install Virtualbox and Vagrant
2. Configure Vagrant
3. Vagrant Up!
4. Basic Commands
5. Basic Software
6. Review
7. Security

Users and Access

1. IP Addresses
2. Creating a New User
3. Making Our User a Super User

Setting Up the Firewall: Iptables

1. Adding these rules
2. Inserting Rules
3. Deleting Rules
4. Saving Firewall Rules
5. Defaulting to DROP Over ACCEPT
6. Logging Dropped Packets
7. Firewalls with UFW

Fail2Ban

1. Iptables Integration
2. Installation
3. Configuration

Automatic Security Updates

1. Package Managers

Apt

1. New (as of 16.04 Xenial, continuing into 18.04 Bionic)
2. Installing
3. Repositories
4. Examples
5. Searching Packages
6. Permissions and User Management

Permissions

1. Checking Permissions
2. Changing Permissions

User Management

1. Creating Users
2. Umask & Group ID Bit
3. ACL’s
4. Running Processes
5. Webservers

HTTP, Web Servers and Web Sites

1. A Quick Note on DNS

DNS & Hosts File

1. Xip.io
2. Virtual Hosts

Hosting Web Applications

1. Three Actors

Apache

1. Installing
2. Configuration
3. Why the numbers in the filenames?
4. Apache2 Tools
5. Virtual Hosts
6. Apache and Web Applications
7. MPM Configuration
8. Security Configuration
9. Envvars

Nginx

1. Features
2. Installation
3. Web Server Configuration
4. Servers (virtual hosts)
5. Integration with Web Applications

PHP

1. Installation
2. Configuration
3. PHP-FPM
4. PHP in Nginx: Subdirectories

Server Setup for Multi-Tenancy Apps

1. DNS
2. Multi-Tenancy in Apache
3. Multi-Tenancy in Nginx
4. SSL Certificates

SSL Overview

1. Using SSL in Your Application

Creating Self-Signed Certificates

1. Heartbleed & Friends
2. Creating a Wildcard Self-Signed Certificate
3. Apache Setup
4. “Server’s certificate does not match the URL.”
5. Nginx Setup
6. One Server Block

Extra SSL Tricks

LetsEncrypt

1. Web Server Security
2. Install Letsencrypt
3. Install a Certificate
4. Nginx Configuration
5. Renewal
6. Multi-Server Environments

Implications of Multi-Server Environments

1. Asset Management
2. Sessions
3. Lost Client Information
4. SSL Traffic
5. Logs

Load Balancing with Nginx

1. Balancing Algorithms
2. Configuration
3. Mapping Headers

SSL with Nginx

1. SSL-Termination
2. SSL-Passthru Support
3. When to use Pass-Thru
4. Load Balancer (Server A, at 52.90.130.140):
5. Web Server (Server B, at 52.23.215.245):

Load Balancing with HAProxy

1. Common Setups
2. Installation
3. HAProxy Configuration
4. Monitoring HAProxy
5. Sample NodeJS Web Server

SSL with HAProxy

1. HAProxy with SSL Termination
2. HAProxy with SSL Pass-Through
3. Sample NodeJS Web Server
4. Web Cache

Nuts and Bolts of HTTP Caching

1. Object Caches
2. Web Caches
3. Types of HTTP Caches

An Origin Server

1. Testing Caching Mechanisms

Nginx Web Caching

1. Use Cases
2. How It Will Work
3. Origin Server
4. Cache Server
5. Proxy Caching
6. Example: Caching Specific URIs

Varnish

1. Origin Server
2. Install Varnish
3. Basic Configuration
4. Increasing Cache Hit Rate
5. Varnish Tools
6. Extra Resources
7. Logs

Logrotate

1. What does Logrotate do?
2. Configuring Logrotate
3. Going Further

Rsyslog

1. Configuration
2. Usage
3. Should I Use Rsyslog?
4. Sending To Rsyslog From An Application
5. File Management, Deployment & Configuration Management

Managing Files

1. Copying Files Locally
2. SCP: Secure Copy
3. Rsync: Sync Files Across Hosts
4. Deployment

Auto-deploy with GitHub

1. How it Works
2. Node Listener
3. Shell Script
4. Putting it together
5. Firewall

Configuration Management with Ansible

1. Install
2. Managing Servers
3. Basic: Running Commands
4. Basic Playbook
5. Roles
6. Facts
7. Vault
8. SSH

Logging in

SSH Config

SSH Tunneling

1. Local Port Forwarding
2. Remote Port Forwarding

One-Off Commands & Multiple Servers

1. Basic Ansible
2. Monitoring Processes

A Sample Script

System Services

1. System V Init (SysVinit, SysV)
2. Systemd
3. Upstart
4. The Service Command
5. Using These Systems

Supervisord

1. A Chain of Process Monitors
2. Installation
3. Configuration
4. Controlling Processes
5. Web Interface

Forever

1. Installation
2. Usage

Circus

1. Installation
2. Configuration
3. Controlling Processes
4. Web Interface
5. Starting on Boot
6. Development and Servers

Serving Static Content

1. Built-In
2. NodeJS
3. Dynamic Content