Editing 2014 Server Migration
Warning: You are not logged in.
Your IP address will be recorded in this page's edit history.The edit can be undone.
Please check the comparison below to verify that this is what you want to do, and then save the changes below to finish undoing the edit.
Latest revision | Your text | ||
Line 29: | Line 29: | ||
* Greylisting daemon (Postgrey) | * Greylisting daemon (Postgrey) | ||
* Fail2ban - could maybe use denyhosts instead | * Fail2ban - could maybe use denyhosts instead | ||
− | |||
=== Support lifetime === | === Support lifetime === | ||
Line 76: | Line 75: | ||
|mediawiki | |mediawiki | ||
|T 1.19<sup>EPEL</sup> | |T 1.19<sup>EPEL</sup> | ||
− | | | + | |? |
|B 1.19 | |B 1.19 | ||
|A 1.19 | |A 1.19 | ||
Line 87: | Line 86: | ||
|- | |- | ||
|infobot | |infobot | ||
− | |||
|~ | |~ | ||
+ | |? (not B or A) | ||
|? (not B or A) | |? (not B or A) | ||
|~ | |~ | ||
Line 94: | Line 93: | ||
|tt-rss | |tt-rss | ||
|~ | |~ | ||
− | | | + | |? (not B or A) |
|? (not B or A) | |? (not B or A) | ||
|A 1.11 | |A 1.11 | ||
Line 148: | Line 147: | ||
|fail2ban | |fail2ban | ||
|T 0.8.7<sup>rf</sup>, 0.8.11<sup>EPEL</sup> | |T 0.8.7<sup>rf</sup>, 0.8.11<sup>EPEL</sup> | ||
− | |T | + | |T 0.8.7<sup>rf</sup> |
|B 0.8.6 | |B 0.8.6 | ||
|A 0.8.11 | |A 0.8.11 | ||
Line 157: | Line 156: | ||
|B 2.6 | |B 2.6 | ||
|[https://launchpad.net/ubuntu/trusty/amd64/denyhosts ~] | |[https://launchpad.net/ubuntu/trusty/amd64/denyhosts ~] | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
|} | |} | ||
Line 172: | Line 165: | ||
== Migration steps == | == Migration steps == | ||
− | * | + | * Obtain [https://library.linode.com/networking/ipv6#sph_ipv6-address-pools IPv6 address pool] from Linode (support ticket needed) |
− | + | * Explore what software to use to help harden up the installation (fail2ban, etc.) | |
− | * | + | * Deploy new CentOS 7 instance |
− | * | + | |
* (optional) Set up [https://library.linode.com/remote-access#sph_adding-private-ip-addresses private IPv4 addresses] for transfer between old and new VPS (avoids bandwidth charges) | * (optional) Set up [https://library.linode.com/remote-access#sph_adding-private-ip-addresses private IPv4 addresses] for transfer between old and new VPS (avoids bandwidth charges) | ||
− | * | + | * Set up SSH (edit sshd_config to tighten up security) |
− | * | + | * Migrate current users to new server |
− | + | * Set up the firewall (either using firewalld, or else installing iptables and using the old rules) | |
− | * | + | * Install Apache, and edit httpd.conf appropriately |
− | * | + | * Install PHP, edit php.ini appropriately, and make sure all needed modules are installed |
− | * | + | * Install MariaDB, add appropriate user(s)/permissions, and edit my.cnf appropriately |
− | * | + | * Install/configure Postfix |
− | * | + | * Install/configure Mailman |
− | + | * Install/configure monkeybot | |
− | * | + | * Migrate any other files that must be moved |
− | * | + | * Export current MySQL and import into new MariaDB |
− | + | * Set up repeating jobs (log rotation, etc.) via systemd/cron | |
− | + | * Cut over DNS (or [https://library.linode.com/remote-access#sph_swapping-ip-addresses swap IPv4 addresses]) | |
− | * | + | |
− | * | + | |
− | + | ||
− | * | + | |
− | + | ||
− | + | ||
− | + | ||
− | * | + | |
* Other steps not mentioned above | * Other steps not mentioned above | ||
Line 203: | Line 187: | ||
We have an archive of static web pages from the pre-2007 server "penguin" - it would be nice to make this history available somehow. | We have an archive of static web pages from the pre-2007 server "penguin" - it would be nice to make this history available somehow. | ||
− | |||
− | |||
− | |||
[[Category:Migration]] | [[Category:Migration]] |