Linux Server Configuration Project

Description

The server configured in this project serves my Items Catalog project called Repertor • io. In order to make Google and Facebook Login to work, I have registered a free subdomain for the server's IP address and set up an SSL certificate for the site.

Difference from project rubric

I had to allow Port 443, because Facebook Login now enforces HTTPS.

This project is currently offline

Software installed

• git
• apache2
• libapache2-mod-wsgi-py3
• postgresql
• python3-pip
• sudo -H pip3 install psycopg2-binary python-slugify
• sudo -H pip3 install flask oauth2client markdown
• Recreate Google and FB client secret files
• Clone Repertorio repository
• certbot python-certbot-apache

Configurations

• Update system packages
• Set timezone to UTC
• Create new user
• Add permission to sudo
• Set up key-based SSH
• Set up firewall
• Disable remote root login
• Create catalog role for PostgreSQL
• Prevent Apache from serving .git directory
• Configure Apache to serve app using WSGI
• Set up DNS at freedns.afraid.org
• Change ServerName in Apache
• Enable HTTPS for FB Login to work:
  • Install and configure Certbot
  • Enable port 443 in firewalls
• Add new domain, redirect URLs and JavaScript origin to Facebook and Google OAuth apps

Third-party resources

• https://freedns.afraid.org/ - to set up a DNS record for the IP address
• https://certbot.eff.org/lets-encrypt/ubuntuxenial-apache to get SSL certificate
• https://stackoverflow.com/ - to research errors and find solutions