You are not logged in.
AFAIK, Devuan's infrastructure runs on nginx.
Cool ... so they play nicely together. That's a bonus. :-)
I'm now learning about setting up the web-server configuration here ...
https://docs.nginx.com/nginx/admin-guid … ion-files/
Thanks
Cool. OK, thanks.
OK, done, with no errors.
Just one outstanding question then I probably should close this as Solved ...
As I understand it, our ISP https://bulloch.solutions/home/ doesn't support ip6v - should those references be commented-out or deleted or is there no harm in leaving them there?
I have nginx installed plus nftables.
Is there any reason to not use nginx as the web-server with Devuan?
https://docs.nginx.com/nginx/admin-guid … eb-server/
Thanks
Should I disable iptables? https://linux-audit.com/nftables-beginn … filtering/
"It is possible to mix iptables and nftables. However, this increases complexity and also the chance to introduce errors. So keep it simple and flush out all iptables rules, and make sure it is not loaded."
iptables -F
Do the same for IPv6:
ip6tables -F
"Ensure that during system reboots the iptables configuration or modules are no longer loaded." (I'm not sure how to do this.)
It is my understanding that ICMP echo requests should be allowed but I'm no expert.
Reference: http://shouldiblockicmp.com/
OK, I'll leave it be.
I believe that the ASUS router I'm using has some firewall controls - I could look at preventing a ping flood there first.
If that's as it should be - should I make a mod re. the potential for "ping flood" as mentioned?
Also, as I understand it, our ISP https://bulloch.solutions/home/ doesn't support ip6v - should those references be commented-out or deleted or is there no harm in leaving them there?
root@devuan1:/etc# nft list ruleset
table inet firewall {
chain inbound_ipv4 {
}
chain inbound_ipv6 {
icmpv6 type { nd-router-advert, nd-neighbor-solicit, nd-neighbor-advert } accept
}
chain inbound {
type filter hook input priority filter; policy drop;
ct state vmap { invalid : drop, established : accept, related : accept }
iifname "lo" accept
meta protocol vmap { ip : jump inbound_ipv4, ip6 : jump inbound_ipv6 }
tcp dport { 22, 80, 443 } accept
}
chain forward {
type filter hook forward priority filter; policy drop;
}
}
root@devuan1:/etc#
In nftables.conf - when I copy in from https://wiki.nftables.org/wiki-nftables … r_a_server do I replace all but the 'shebang' line at the top?
Cool.
Aptitude isn't installed - is it worth adding?
I returned to Synaptic and selected Status then Uninstalled then gufw and ufw to completely remove.
It left those two folders in place and deleted all but applications.p from ufw and left gufw.cfg, Home.profile, Office.profile, and Public.profile behind in gufw (it only deleted app.profile).
I'll remove the rest manually.
OK. I'm going to go minimalist, one step at a time.
I've uninstalled grav.
I used Synaptic to uninstall ufw and gufw - but whereis finds ufw still in /etc/ufw (multiple .rules, .init, .conf and one .init file in there)
/etc/gufw still contains app.profiles, gufw.cfg, Home.profile, Office.profile, and Public.profile.
I can just delete these directories/folders and files but do you know why Synaptic uninstall left these behind?
OK, so I just read that GUFW is a UI for UFW and UFW is a wrapper for iptables or nftables.
I dislike bloat but am mostly not tinkering with tech and often forget detail - which is where a wrapper and a UI saves me.
Given my application to serve text files (many with embedded images), a blog, a small news aggregator, some links pages, a basic learning-certificate program, and a Docker-based scanner feed (the only thing that will use Docker) - using grav on top of nginx - might I find nftables getting very complicated?
OK, I followed Steps 2 & 3 here https://www.codingforentrepreneurs.com/ … -firewall/
I wasn't sure about Step 4 so I skipped it and went to Step 5 - which appeared to work fine and returned the expected URL.
Now I'll try to get back to grav ...
Synaptic Package Manager (File -> History) shows no deletion of ufw or gufw
It also doesn't show either being installed.
I read this "... you won't see any packages installed, updated or removed from the command line (using apt, apt-get, dpkg), using the Software Updater, or the Software application. Similarly, the /var/log/apt/history.log APT log file only lists actions performed using apt/apt-get."
That doesn't return an error - just back to the prompt.
Odd stuff happening ...
Response is "gzip: /var/log/dpkg.log.*gz: No such file or directory"
Some weirdness ... I have Devuan Linux plus nginx plus grav-admin installed on my Dell OptiPlex 7050 configured in Raid 1.
ufw and gufw, previously installed and configured, have disappeared from the install as if never there.
What I mean is that neither responds and when I go to Synaptic Package Manager they aren't greyed - which I take to mean that Devuan doesn't see them as installed.
How would that happen, please?
Thanks
Wow, OK, cool.
I guess I'll exercise nginx some then see what I need to add - I just installed the Extended package.
Thanks!
I see that Cockpit is in the Repository but it doesn't show up in a Search of this Forum.
From what I'm reading Cockpit seems pretty closely tied to RedHat and systemd.
Will it actually work with Devuan?
I've also looked at Technitium.
Note 1: I have Devuan installed in Raid 1 configuration plus nginx.
Note 2: The application is a Web server (blog, email, file host - no video streaming but some scanner audio streaming, Web page, etc.)
Thanks
I just found it in the repository and it has been installed, thanks!
OK, so it appears that it's Apache2:
https://pkginfo.devuan.org/cgi-bin/pack … .70devuan1
Description-en: web server
This task selects packages useful for a general purpose web server
system.
Depends: tasksel (= 3.70devuan1), apache2
Recommends: apache2-doc, analog
Edit1: I would prefer to install NGINX rather than Apache - I'm looking at this https://dev1galaxy.org/viewtopic.php?id=3768 and this http://www.troubleshooters.com/linux/nginx/
Edit2: Also, page 5 here ... https://dev1galaxy.org/viewtopic.php?id=3331&p=5
Thanks
When I get to the Software selection step of Install one of the choices is "web server".
I Searched and could not find a reference to "web server" that lists what is installed.
Anyone have a link or list, please?
Thanks
I'm fussing with a Dell OptiPlex 7050 SFF to set it up with Raid1 & as a web server (It has 2x 400GB SSD's)
In another thread @DutchMaster wrote ...
Partition sda as follows:
sda1: 512MB for /boot
sda2: 48GB for /
sda3: 8GB for swap
sda4: remainder for /homePartitions sda1, sda2 and sda4 need a file system, choose one from the list: ext4, jfs or btrfs. You can mix different file systems, just ensure the appropriate tool package is installed (ie.e jfsutils, btrfs has a similar package). This allows the kernel to control and check the file system.
I think I've made a mess of things such that at the "Step 11 Partition disks" of Setup the SSD shows up as:
RAIDmd126 device #:RAIDactive device #(auto-read-only)RAIDraid1 device #sda(1)RAIDsdb #1 400.1DB
Does this indicate a hardware Raid or a software Raid or a mess of both?
When I choose Guided Partitioning then Guided Use Entire Disk then press Enter on that long device descriptor then Partitioning Scheme" All files in one partition (recommended for new users) it will allow me to make some changes but not any to the size of the sub partitions.
The current partitions are:
#1 538.0 MB B f ESP
#2 398.5 GB f ext4 /
#3 1.0 GB f swap swap
WDYT, please?
I don't know why it's so limited but Timeshift is not the solution to avoiding Raid1 ...
Timeshift is designed to protect only system files and settings. User files such as documents, pictures and music are excluded
I need something like Snapshot that mirrors everything.
Why would, then, anyone bother with the extra step of EFI?
So, back to this ...
sda1: 512MB for /boot
sda2: 48GB for /
sda3: 8GB for swap
And, rather than Raid1, just use Timeshift to mirror the main ssd to the second ssd?
sda4: remainder for /home