Debian DirectAdmin installation – AppArmor

This is a great followup on the previous firewall post: getting AppArmor to play nice with DirectAdmin and secure it some more. AppArmor has been subject of one or more posts before but since this some while ago, I’ll start with the basics how to set it up. It’s like SELinux, which I like a…

Continue Reading

Debian DirectAdmin installation – Firewall

After a couple of easy ones, now a bit more work. To secure our DirectAdmin enabled server, we’re installing the CSF/LFD Firewall by Configserver which has DirectAdmin special software. I must say, I’m using CSF/LFD now for a couple of months, and have a love / hate relationship with it. On the one hand it…

Continue Reading

Debian DirectAdmin installation – Software

After a short intro and getting the quotas ready, we can install the DirectAdmin software. Installing the DA software is also pretty straightforward. You need a lot of dependencies and a lot of time though, because installation, and every DA update, takes a long time in comparison with many other Linux software. DA needs a…

Continue Reading

Debian DirectAdmin installation – Quotas

Quotas are not enabled by default on Debian nor on DirectAdmin, but the latter needs it or else errors are flying all over the place. Fortunately it is not hard to setup. First we’ll take a closer look at your fstab file, I’ll do a quick rerun of an earlier post in this regards. Then…

Continue Reading

Debian DirectAdmin installation – Intro

Although a VPS or an AWS instance doesn’t cost shit nowadays, some people still want to share a webserver. In comes DirectAdmin and this intro. There are more alternatives to DirectAdmin (DA), like ISPManager and Virtualmin, but DA seems to be the most used piece of software and most widely accepted. I absolutely hate it,…

Continue Reading

Linux security system scans

Roaming around the internet you’ll discover A LOT of systems and services that can check your systems for security holes and improvements. These scans can help you a lot by giving you more insight in your security. I’ve already mentioned some before, but always keep searching for alternatives. In the last couple of months I’ve…

Continue Reading

Sysstat and atop usage / metrics

Our previous post was the simple explanation how to get sysstat and atop running on your Linux servers. But it would be nice to know how to read your logs as well and keep and eye on performance metrics. Both tools keep extensive logs to keep an eye on what your server was doing at…

Continue Reading

Sysstat and atop installation

I’ve written before about how to keep an eye on your Debian servers performance, and this also can use a quick update. Today we’re installing and configuring sysstat and atop. Both tools are a great and a simple way to monitor and, maybe even more important, record your systems performance at any given time. It…

Continue Reading

Automatic updates third party repos

The last post was about keeping your Debian servers up to date with the latest software, dependencies and security patches. We’re using apt with the unattended -upgrades mechanism to do so. But in practice I’ve discovered a couple of third party repos I’m using were not included in the updates. In retrospect it makes sense…

Continue Reading

Debian apt automatic updates

An update on automatic updates. Not too long ago I wrote a short piece on automatic updates with apt in Debian. After some more experience with it, an update to the post is needed. A lot stays the same, but I’ve got some syntax difference and removed a not-too-stable update source. As said in the…

Continue Reading

Update and changes

Finally an update. After a break, I’m back, with probably some structural changes. February 2017 this blog started. Working in Apple related IT for 20 years, nearly dying in 2016 and recuperating in 2017, I decided to start a new adventure: Linux. Beginning with some basics in the form of CompTIA certifications, I signed up…

Continue Reading