Skip to content

Digitalocean Ubuntu configuration

Solved Linux
33 3 14.2k 1
  • @gotwf I’m looking at this now. The WWW record is there, but the cert doesn’t cover it as you’ve pointed out. I guess we could just place a redirect at Apache or NGINX level to get around this.

    wrote on last edited by gotwf
    #9

    @phenomlab I could remedy this in moments via Dehydrated and Let’s Encrypt so am presuming the GUI’zed offering at ZeroSSL sports some clickery to achieve same. That would be the preferred solution.

  • @phenomlab I could remedy this in moments via Dehydrated and Let’s Encrypt so am presuming the GUI’zed offering at ZeroSSL sports some clickery to achieve same. That would be the preferred solution.

    wrote on last edited by
    #10

    @gotwf The real issue here is that @justoverclock isn’t an expert with Linux, so we’re going to rebuilt this droplet using Webmin and Virtualmin. This will give him a way of managing the entire server using a GUI (us old crusties prefer the command line of course), and using Virtualmin will allow him to use Let’s Encrypt.

    He’ll just need nodejs installed (MySQL, PHP, and NGINX are installed as part of the build), so it’s a simple case of installing Ghost after that, then recovering his site and DB from backup.

  • wrote on last edited by
    #11

    @justoverclock I’ve rebuilt this droplet with Virtualmin, and have completed the below

    • Setup domain justoverlock.it so that it points to the new server
    • Secured the site with HTTPS using let’s encrypt
    • Installed PHPMyAdmin
    • Installed NodeJS version 14.x (supported by Ghost and recommended)
    • Installed and base configured GHOST.
    • Configured nginx.conf to use reverse proxy as below
    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_pass http://127.0.0.1:2368;
    }
    
    client_max_body_size 50m;
    

    Now ready at https://justoverclock.it 🙂

    We should discuss the following

    • Backup plans
    • Additional memory for server, as 1Gb RAM is leaving things a little “short”
    • Maintenance (all latest updates have been installed) - handover back to you when you are comfortable.
  • phenomlab phenomlab has marked this topic as solved on
  • @justoverclock I’ve rebuilt this droplet with Virtualmin, and have completed the below

    • Setup domain justoverlock.it so that it points to the new server
    • Secured the site with HTTPS using let’s encrypt
    • Installed PHPMyAdmin
    • Installed NodeJS version 14.x (supported by Ghost and recommended)
    • Installed and base configured GHOST.
    • Configured nginx.conf to use reverse proxy as below
    location / {
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $http_host;
        proxy_pass http://127.0.0.1:2368;
    }
    
    client_max_body_size 50m;
    

    Now ready at https://justoverclock.it 🙂

    We should discuss the following

    • Backup plans
    • Additional memory for server, as 1Gb RAM is leaving things a little “short”
    • Maintenance (all latest updates have been installed) - handover back to you when you are comfortable.
    wrote on last edited by
    #12

    @phenomlab great work as always, now i’ve noticed a terrible problem…

    all my email @justoverclock.it that previously works…are now stopped…there’s a way to have it again?

  • @phenomlab great work as always, now i’ve noticed a terrible problem…

    all my email @justoverclock.it that previously works…are now stopped…there’s a way to have it again?

    wrote on last edited by
    #13

    @justoverclock said in Digitalocean Ubuntu configuration:

    all my email @justoverclock.it that previously works…are now stopped…there’s a way to have it again?

    As discussed over PM, this is now resolved and confirmed working.

  • @justoverclock said in Digitalocean Ubuntu configuration:

    all my email @justoverclock.it that previously works…are now stopped…there’s a way to have it again?

    As discussed over PM, this is now resolved and confirmed working.

    wrote on last edited by
    #14

    @phenomlab yes, it a confirmation that sudonix (phenomlab) is a great resource for everyone like me is at first attempt to manage a server…

    i do not have words to say thanks

  • @phenomlab yes, it a confirmation that sudonix (phenomlab) is a great resource for everyone like me is at first attempt to manage a server…

    i do not have words to say thanks

    wrote on last edited by
    #15

    @justoverclock From what I see now, you just need to setup your forum. I think you’re good to go at this point, so (as per PM) I’m handing this server back to you. At some point (very soon - let’s not forget), we need to discuss backup policies etc.

    Create a snapshot once you’re done, so if the worst comes to it, you can get everything back.

  • @justoverclock From what I see now, you just need to setup your forum. I think you’re good to go at this point, so (as per PM) I’m handing this server back to you. At some point (very soon - let’s not forget), we need to discuss backup policies etc.

    Create a snapshot once you’re done, so if the worst comes to it, you can get everything back.

    wrote on last edited by
    #16

    @phenomlab said in Digitalocean Ubuntu configuration:

    Create a snapshot once you’re done, so if the worst comes to it, you can get everything back.

    👍

  • @justoverclock From what I see now, you just need to setup your forum. I think you’re good to go at this point, so (as per PM) I’m handing this server back to you. At some point (very soon - let’s not forget), we need to discuss backup policies etc.

    Create a snapshot once you’re done, so if the worst comes to it, you can get everything back.

    wrote on last edited by
    #17

    @phenomlab yep sure, now i’ve just noticed that forum.justoverclock.it is not reacheable on my phone but works on my pc…

  • @phenomlab yep sure, now i’ve just noticed that forum.justoverclock.it is not reacheable on my phone but works on my pc…

    wrote on last edited by
    #18

    @justoverclock works fine on my phone.

    Screenshot_20211011-222924.jpg

  • @justoverclock works fine on my phone.

    Screenshot_20211011-222924.jpg

    wrote on last edited by
    #19

    @phenomlab is a mystery…on my iphone does not work…and i’m on the same wifi of my house

  • @phenomlab is a mystery…on my iphone does not work…and i’m on the same wifi of my house

    wrote on last edited by
    #20

    @justoverclock does it work on 4g ?

  • @justoverclock does it work on 4g ?

    wrote on last edited by
    #21

    @phenomlab not work

  • wrote on last edited by
    #22

    @justoverclock Very odd indeed. Do you get any specific error message and does it work from a laptop on the same WiFi network ?

  • @justoverclock Very odd indeed. Do you get any specific error message and does it work from a laptop on the same WiFi network ?

    wrote on last edited by
    #23

    @phenomlab tomorrow i will try from work pc. here i have only my pc (and works) ant phone (not)

  • @phenomlab tomorrow i will try from work pc. here i have only my pc (and works) ant phone (not)

    wrote on last edited by
    #24

    @justoverclock this is a real mistery, it works on all computer except my iphone :)…i can’t see the website only on my phone, with 4g, with wifi…odd

  • @justoverclock this is a real mistery, it works on all computer except my iphone :)…i can’t see the website only on my phone, with 4g, with wifi…odd

    wrote on last edited by
    #25

    @justoverclock said in Digitalocean Ubuntu configuration:

    i can’t see the website only on my phone, with 4g, with wifi…odd

    Odd indeed. Do you get the same issue if you try with another browser on the iPhone ?

  • @justoverclock said in Digitalocean Ubuntu configuration:

    i can’t see the website only on my phone, with 4g, with wifi…odd

    Odd indeed. Do you get the same issue if you try with another browser on the iPhone ?

    wrote on last edited by
    #26

    @phenomlab on an android tablet i get CERT AUTHORITY INVALID, but if i click “proceed” i can see the forum

  • @phenomlab on an android tablet i get CERT AUTHORITY INVALID, but if i click “proceed” i can see the forum

    wrote on last edited by
    #27

    @justoverclock Hmm - you only get that message if the cert is invalid. According to this, it’s broken

    a22c806e-a450-4658-90d6-c9843c73a5ad-image.png

    Let me have a look

  • wrote on last edited by
    #28

    @justoverclock looks better now

    9c515b16-f426-41c3-ac15-39b1042d5675-image.png

    Try again ?


Did this solution help you?
Did you find the suggested solution useful? Support 💗 Sudonix with a coffee ☕
If your organisation needs deeper expertise around infrastructure, security, or technology leadership, learn more about Phenomlab Ltd. Many of the deeper technical guides behind Sudonix are published there.

Related Topics
  • Arch Linux | Reflector

    Linux arch linux pacman reflector updates
    4
    4 Votes
    4 Posts
    6k Views
    Madchatthew
    I have another update for reflector that I just figured out. You will want to edit the following file and add details to make sure that every time it updates the mirror list, it is grabbing them from your country and I grab 10 and sort them by rate. This will ensure that your mirrorlist isn’t getting populated with links from other countries which can slow down you downloads. sudo nano /etc/xdg/reflector/reflector.conf This is what the file looks like. # Reflector configuration file for the systemd service. # # Empty lines and lines beginning with "#" are ignored. All other lines should # contain valid reflector command-line arguments. The lines are parsed with # Python's shlex modules so standard shell syntax should work. All arguments are # collected into a single argument list. # # See "reflector --help" for details. # Recommended Options # Set the output path where the mirrorlist will be saved (--save). --save /etc/pacman.d/mirrorlist # Select the transfer protocol (--protocol). --protocol https # Select the country (--country). # Consult the list of available countries with "reflector --list-countries" and # select the countries nearest to you or the ones that you trust. For example: --country US # Use only the most recently synchronized mirrors (--latest). --latest 10 # Sort the mirrors by synchronization time (--sort). --sort rate Here are the different flag options that you can change or add to this file. I found this on google by searching arch linux reflector flags. Filtering Options (What to find) --country <CODE/Name>: Selects mirrors from specific countries (e.g., US, France,Germany). Use {Link: reflector --list-countries https://archlinux.org/mirrors/status/}, for a full list. --protocol <http|https>: Filters for HTTP or HTTPS mirrors. --age <hours>: Only includes mirrors synced within the last X hours (e.g., --age 12). --delay <hours>: Limits to mirrors with a reported sync delay of X hours or less (e.g., --delay 0.25 for 15 mins). --latest <N>: Limits results to the top N newest mirrors. Sorting Options (How to order) --sort rate: Sorts by download speed (requires testing, can be slow). --sort age: Sorts by most recently synced. --sort score: Sorts by overall score. --sort country: Sorts by country, useful with multiple countries. Output Options (Where to put it) --save <path>: Writes the filtered/sorted list to a file (e.g., /etc/pacman.d/mirrorlist). --verbose or -v: Shows detailed progress and mirror info.
  • Linux Certification

    Linux linux certs
    4
    2 Votes
    4 Posts
    2k Views
    phenomlab
    @Madchatthew You might be sorry you asked This is the mentoring category below. Presently, it’s unused, but we have a dedicated area for it. https://sudonix.org/category/8/mentoring Other services https://sudonix.org/services
  • Arch Linux + Me = Crazy

    Linux arch linux web server vps
    10
    0 Votes
    10 Posts
    3k Views
    phenomlab
    @Madchatthew hmm, yes, that might be problematic.
  • Error certification on virtualmin/Nginx

    Solved Linux cert virtualmin nginx
    17
    2
    0 Votes
    17 Posts
    7k Views
    phenomlab
    @DownPW anytime
  • Avoid network traffic jam with BBR

    Linux ftp speed
    2
    1 Votes
    2 Posts
    1k Views
    phenomlab
    @DownPW interesting. Does this have any effect on data transfers over SCP
  • how to configure DNS records virtualmin?

    Solved Linux digitalocean dns
    26
    1
    11 Votes
    26 Posts
    10k Views
    Hari
    i think we can mark this discussion as solved learned how to install virtualmin with NGINX We can easily point the DNS by mentioning server IP at CF a name record learned how to install SSL
  • Blomstra Realtime issues on ubuntu server

    Solved Linux
    26
    1 Votes
    26 Posts
    11k Views
    phenomlab
    Just checked this thread on Discuss. It’s effectively not stable yet. My suggestion would be to use kyrne/websocket
  • Advantages and disadvantages of changing to Ubuntu?

    Linux linux windows discussion
    28
    2 Votes
    28 Posts
    12k Views
    JAC
    @phenomlab said in Advantages and disadvantages of changing to Ubuntu?: @jac Yeah, I wouldn’t just leap into it unless you have a valid reason (such as the laptop no longer working and needing to be reinstalled). Probably better the devil you know currently. Absolutely mate, and generally as discussed that is the only time I have changed over to Ubuntu once the laptop has got slower. For now I will carry on with Windows, purchase the VPN & BitDefender in later October / early November and then see how all that runs for a few more months .