Difference between revisions of "Network admin"

From ProgClub
Jump to: navigation, search
 
(18 intermediate revisions by 4 users not shown)
Line 46: Line 46:
 
Things to do at the moment, in rough order of priority, are:
 
Things to do at the moment, in rough order of priority, are:
  
 +
* Install logcheck on each machine
 +
* Install and configure MTAs on [[hope]] and [[honesty]]. Use [[charity]] as smarthost
 
* Get [[charity]]'s backups operational
 
* Get [[charity]]'s backups operational
 
** databases
 
** databases
Line 52: Line 54:
 
** /home
 
** /home
 
** /etc (etckeeper bzr repo?)
 
** /etc (etckeeper bzr repo?)
* Get a webmail system (or two) in place
+
* Get DNS services installed? (Not sure if I'm going to bother with this)
* Get DNS services installed
 
 
* Get automatic user registrations working
 
* Get automatic user registrations working
 
** Create user in Kerberos
 
** Create user in Kerberos
Line 64: Line 65:
 
** Create svn user (will this be necessary?)
 
** Create svn user (will this be necessary?)
 
** Subscribe to list@, programming@ and admin@ as appropriate
 
** Subscribe to list@, programming@ and admin@ as appropriate
 
[[Category:TODO]]
 
  
 
== Done ==
 
== Done ==
Line 71: Line 70:
 
Things that have been done. Put latest stuff on the top of the list.
 
Things that have been done. Put latest stuff on the top of the list.
  
* {{done|John|JE|2011-08-21|[[News#Web_server_reconfiguration|Moved]] Member Net to [[honesty]] and Mobile Net to [[hope]]}}
+
* [[User:John|JE]] 2011-09-??: Installed SquirrelMail webmail client
* {{done|John|JE|2011-08-21|[[Charity_admin#John_2011-08-21_02:13|Installed]] spamassassin on [[charity]]}}
+
* [[User:John|JE]] 2011-09-02: Installed Roundcube webmail client
* {{done|John|JE|2011-08-19|[[Charity_admin#John_2011-08-19_21:41|Installed]] mailman on [[charity]] and got the [[mailing lists]] working}}
+
* [[User:John|JE]] 2011-08-27: [[Charity_admin#John_2011-08-27_16:37|Configured]] fail2ban to block brute force attacks against POP3, IMAP, Apache and others
* {{done|John|JE|2011-08-19|Configured [http://progclub.mobi Mobile Net] on [[hope]] and [[honesty]]}}
+
* [[User:John|JE]] 2011-08-21: [[2011 news#Web_server_reconfiguration|Moved]] Member Net to [[honesty]] and Mobile Net to [[hope]]
* {{done|John|JE|2011-08-19|Installed subversion on [[hope]] and [[honesty]]}}
+
* [[User:John|JE]] 2011-08-21: [[Charity_admin#John_2011-08-21_02:13|Installed]] spamassassin on [[charity]]
* {{done|John|JE|2011-08-19|[[Charity_admin#John_2011-08-19_18:34|Configured]] real certificate for SMTP, IMAP and POP3}}
+
* [[User:John|JE]] 2011-08-19: [[Charity_admin#John_2011-08-19_21:41|Installed]] mailman on [[charity]] and got the [[mailing lists]] working
* {{done|John|JE|2011-08-19|Installed fail2ban on [[Hope_admin#John_2011-08-19_14:41|hope]] and [[Honesty_admin#John_2011-08-19_14:43|honesty]]}}
+
* [[User:John|JE]] 2011-08-19: Configured [http://progclub.mobi Mobile Net] on [[hope]] and [[honesty]]
* {{done|John|JE|2011-08-18|Installed Postfix Admin ([[pcmail]] project) on [[charity]]}}
+
* [[User:John|JE]] 2011-08-19: Installed subversion on [[hope]] and [[honesty]]
* {{done|John|JE|2011-08-18|Created a commit hook for pcrepo on [[charity]] that:}}
+
* [[User:John|JE]] 2011-08-19: [[Charity_admin#John_2011-08-19_18:34|Configured]] real certificate for SMTP, IMAP and POP3
 +
* [[User:John|JE]] 2011-08-19: Installed fail2ban on [[Hope_admin#John_2011-08-19_14:41|hope]] and [[Honesty_admin#John_2011-08-19_14:43|honesty]]
 +
* [[User:John|JE]] 2011-08-18: Installed Postfix Admin ([[pcmail]] project) on [[charity]]
 +
* [[User:John|JE]] 2011-08-18: Created a commit hook for pcrepo on [[charity]] that:
 
** automatically checks out tags/latest and trunk into appropriate web directories
 
** automatically checks out tags/latest and trunk into appropriate web directories
 
** emails commit notifications
 
** emails commit notifications
* {{done|John|JE|2011-08-18|[[Charity_admin#John_2011-08-18_16:24|Configured]] postfix and courier on [[charity]]}}
+
* [[User:John|JE]] 2011-08-18: [[Charity_admin#John_2011-08-18_16:24|Configured]] postfix and courier on [[charity]].
* {{done|John|JE|2011-08-18|[[Charity_admin#John_2011-08-18_06:11|Installed]] and configured awstats on [[charity]]}}
+
* [[User:John|JE]] 2011-08-18: [[Charity_admin#John_2011-08-18_06:11|Installed]] and configured awstats on [[charity]]
* {{done|John|JE|2011-08-14|Got user directories' public_html working for [http://www.progclub.net/ Member Net]}}
+
* [[User:John|JE]] 2011-08-14: Got user directories' public_html working for [http://www.progclub.net/ Member Net]
* {{done|John|JE|2011-08-14|Installed Apache, MySQL and PHP on the [[Machines#User_machines|user machines]]}}
+
* [[User:John|JE]] 2011-08-14: Installed Apache, MySQL and PHP on the [[Machines#User_machines|user machines]]
* {{done|John|JE|2011-08-14|Got NFS for users' home directories working. See [[Single sign-on]]}}
+
* [[User:John|JE]] 2011-08-14: Got NFS for users' home directories working. See [[Single sign-on]]
* {{done|John|JE|2011-08-14|Got the Kerberos and LDAP servers set up and have [[hope]] and [[honesty]] authenticating against [[charity]]. See [[Single sign-on]]}}
+
* [[User:John|JE]] 2011-08-14: Got the Kerberos and LDAP servers set up and have [[hope]] and [[honesty]] authenticating against [[charity]]. See [[Single sign-on]]
* {{done|John|JE|2011-08-13|[[Charity_admin#John_2011-08-13_15:09|Installed]] [[pcview]] on [[charity]]}}
+
* [[User:John|JE]] 2011-08-13: [[Charity_admin#John_2011-08-13_15:09|Installed]] [[pcview]] on [[charity]]
* {{done|John|JE|2011-08-12|Arranged for purchase and integration of [[News#progclub.com_live|progclub.com]]}}
+
* [[User:John|JE]] 2011-08-12: Arranged for purchase and integration of [[2011 news#progclub.com_live|progclub.com]]
* {{done|John|JE|2011-08-09|Got system backups operational via slicehost for [[charity]]}}
+
* [[User:John|JE]] 2011-08-09: Got system backups operational via slicehost for [[charity]]
 
** [[hope]] and [[honesty]] aren't going to be backed up at that level, there's no need
 
** [[hope]] and [[honesty]] aren't going to be backed up at that level, there's no need
* {{done|John|JE|2011-08-09|[[Charity_admin#John_2011-08-09_20:05|Configured]] [[pcldap]] on [[charity]]}}
+
* [[User:John|JE]] 2011-08-09: [[Charity_admin#John_2011-08-09_20:05|Configured]] [[pcldap]] on [[charity]]
* {{done|John|JE|2011-08-08|[[Charity_admin#John_2011-08-08_16:43|Updated]] robots.txt file for [[pcwiki]]}}
+
* [[USer:John|JE]] 2011-08-08: [[Charity_admin#John_2011-08-08_16:43|Updated]] robots.txt file for [[pcwiki]]
* {{done|John|JE|2011-08-06|[[Charity_admin#John_2011-08-06_15:30|Installed]] OpenLDAP on [[charity]]}}
+
* [[USer:John|JE]] 2011-08-06: [[Charity_admin#John_2011-08-06_15:30|Installed]] OpenLDAP on [[charity]]
* {{done|John|JE|2011-08-06|[[Charity_admin#John_2011-08-06_05:35|Enabled]] mod_rewrite in Apache on [[charity]]}}
+
* [[User:John|JE]] 2011-08-06: [[Charity_admin#John_2011-08-06_05:35|Enabled]] mod_rewrite in Apache on [[charity]]
* {{done|John|JE|2011-08-05|[[Charity_admin#John_2011-08-05_23:15|Installed]] php5-mcrypt on [[charity]]}}
+
* [[User:John|JE]] 2011-08-05: [[Charity_admin#John_2011-08-05_23:15|Installed]] php5-mcrypt on [[charity]]
* {{done|John|JE|2011-08-05|[[Charity_admin#John_2011-08-05_22:24|Created]] pcblog database and user on [[charity]]}}
+
* [[User:John|JE]] 2011-08-05: [[Charity_admin#John_2011-08-05_22:24|Created]] pcblog database and user on [[charity]]
* {{done|John|JE|2011-08-05|Disabled [[IPSec]] on [[Hope_admin#John_2011-08-05_16:59|hope]], [[Honesty_admin#John_2011-08-05_16:59|honesty]] and [[Charity_admin#John_2011-08-05_16:59|charity]]}}
+
* [[User:John|JE]] 2011-08-05: Disabled [[IPSec]] on [[Hope_admin#John_2011-08-05_16:59|hope]], [[Honesty_admin#John_2011-08-05_16:59|honesty]] and [[Charity_admin#John_2011-08-05_16:59|charity]]
* {{done|John|JE|2011-08-05|[[Charity_admin#John_2011-08-05_00:26|Kerberized]] Apache on [[charity]]}}
+
* [[User:John|JE]] 2011-08-05: [[Charity_admin#John_2011-08-05_00:26|Kerberized]] Apache on [[charity]]
* {{done|John|JE|2011-08-04|Configured [[Kerberos#DNS_configuration|Kerberos DNS]] for ProgClub domains}}
+
* [[User:John|JE]] 2011-08-04: Configured [[Kerberos#DNS_configuration|Kerberos DNS]] for ProgClub domains
* {{done|John|JE|2011-08-04|[[Charity_admin#John_2011-08-04_21:21|Installed]] [[Kerberos]] on [[charity]]}}
+
* [[User:John|JE]] 2011-08-04: [[Charity_admin#John_2011-08-04_21:21|Installed]] [[Kerberos]] on [[charity]]
* {{done|John|JE|2011-08-01|[[Charity_admin#John_2011-08-01_00:12|Configured]] /wiki URLs on [[charity]]}}
+
* [[User:John|JE]] 2011-08-01: [[Charity_admin#John_2011-08-01_00:12|Configured]] /wiki URLs on [[charity]]
* {{done|John|JE|2011-07-30|Configured [[IPSec]] on [[Charity_admin#John_2011-07-30_17:15|charity]], [[Hope_admin#John_2011-07-30_18:05|hope]] and [[Honesty_admin#John_2011-07-30_19:30|honesty]]}}
+
* [[User:John|JE]] 2011-07-30: Configured [[IPSec]] on [[Charity_admin#John_2011-07-30_17:15|charity]], [[Hope_admin#John_2011-07-30_18:05|hope]] and [[Honesty_admin#John_2011-07-30_19:30|honesty]]
* {{done|John|JE|2011-07-27|[[Charity_admin#John_2011-07-27_12:01|Configured]] public read-only svn access via [https://www.progclub.org/svnro/pcrepo/ HTTPS] and [http://www.progclub.org/svnro/pcrepo/ HTTP]}}
+
* [[User:John|JE]] 2011-07-27: [[Charity_admin#John_2011-07-27_12:01|Configured]] public read-only svn access via [https://www.progclub.org/svnro/pcrepo/ HTTPS] and [http://www.progclub.org/svnro/pcrepo/ HTTP]
* {{done|John|JE|2011-07-27|[[Charity_admin#John_2011-07-27_04:09|Installed]] Fail2ban on [[charity]]}}
+
* [[User:John|JE]] 2011-07-27: [[Charity_admin#John_2011-07-27_04:09|Installed]] Fail2ban on [[charity]]
* {{done|John|JE|2011-07-27|[[Charity_admin#John_2011-07-27_03:41|Configured]] IPTables on [[charity]]}}
+
* [[User:John|JE]] 2011-07-27: [[Charity_admin#John_2011-07-27_03:41|Configured]] IPTables on [[charity]]
* {{done|John|JE|2011-07-27|[[Charity_admin#John_2011-07-27_01:20|Configured]] [http://www.google.com/search?qfavicon.ico favicon.ico] file on [[charity]]}}
+
* [[User:John|JE]] 2011-07-27: [[Charity_admin#John_2011-07-27_01:20|Configured]] [http://www.google.com/search?q=favicon.ico favicon.ico] file on [[charity]]
* {{done|John|JE|2011-07-27|[[Charity_admin#John_2011-07-27_01:01|Configured]] [http://www.google.com/search?q=robots.txt robots.txt] file on [[charity]]}}
+
* [[User:John|JE]] 2011-07-27: [[Charity_admin#John_2011-07-27_01:01|Configured]] [http://www.google.com/search?q=robots.txt robots.txt] file on [[charity]]
* {{done|John|JE|2011-07-26|[[Charity_admin#Tasaio_2011-07-26_21:39|Installed]] [http://kitenet.net/~joey/code/etckeeper/ etckeeper] on [[charity]]}}
+
* [[User:John|JE]] 2011-07-26: [[Charity_admin#Tasaio_2011-07-26_21:39|Installed]] [http://kitenet.net/~joey/code/etckeeper/ etckeeper] on [[charity]]
* {{done|John|JE|2011-07-26|[[Charity_admin#John_2011-07-26_06:20|Configured]] HTTPS on [[charity]]}}
+
* [[User:John|JE]] 2011-07-26: [[Charity_admin#John_2011-07-26_06:20|Configured]] HTTPS on [[charity]]
* {{done|John|JE|2011-07-25|[[Charity_admin#John_2011-07-25_17:53|Installed]] MediaWiki on [[charity]]}}
+
* [[User:John|JE]] 2011-07-25: [[Charity_admin#John_2011-07-25_17:53|Installed]] MediaWiki on [[charity]]
* {{done|John|JE|2011-07-25|[[Charity_admin#John_2011-07-25_17:12|Configured]] web-hosting for [http://www.progclub.org/ www.progclub.org] on [[charity]]}}
+
* [[User:John|JE]] 2011-07-25: [[Charity_admin#John_2011-07-25_17:12|Configured]] web-hosting for [http://www.progclub.org/ www.progclub.org] on [[charity]]
* {{done|John|JE|2011-07-25|[[Charity_admin#John_2011-07-25_17:11|Installed]] PHP on [[charity]]}}
+
* [[User:John|JE]] 2011-07-25: [[Charity_admin#John_2011-07-25_17:11|Installed]] PHP on [[charity]]
* {{done|John|JE|2011-07-25|[[Charity_admin#John_2011-07-25_16:40|Installed]] MySQL and Apache on [[charity]]}}
+
* [[User:John|JE]] 2011-07-25: [[Charity_admin#John_2011-07-25_16:40|Installed]] MySQL and Apache on [[charity]]

Latest revision as of 16:15, 11 December 2017

This is an ongoing project to provide members with network services. See the Administrative reference for information about administering the network. See Projects for other projects.

Project status

This is an on-going project. System administration never ends!

Contributors

Members who have contributed to this project. Newest on top.

All contributors have agreed to the terms of the Contributor License Agreement. This excludes any upstream contributors who tend to have different administrative frameworks.

Copyright

Copyright 2011, Contributors. Licensed under the New BSD license.

Links

TODO

Things to do at the moment, in rough order of priority, are:

  • Install logcheck on each machine
  • Install and configure MTAs on hope and honesty. Use charity as smarthost
  • Get charity's backups operational
    • databases
    • web content in /var/www
    • svn repo in /var/svn
    • /home
    • /etc (etckeeper bzr repo?)
  • Get DNS services installed? (Not sure if I'm going to bother with this)
  • Get automatic user registrations working
    • Create user in Kerberos
    • Create user in LDAP
    • Create home directory
    • Create email account
    • Create wiki user
    • Create blog user
    • Create MySQL database and user
    • Create svn user (will this be necessary?)
    • Subscribe to list@, programming@ and admin@ as appropriate

Done

Things that have been done. Put latest stuff on the top of the list.