server/todo.md

ToDo Items

General

• Setup non root user

• UFW should be setup to keep VPS secure and only allow for:

  • https

  • http

  • ssh

  • ftp

  • 27017

  • "21115:21115/tcp"

  • "21116:21116/tcp"

  • "21116:21116/udp"

  • "21117:21117/tcp"

  • "21119:21119/tcp"

• Install SSH keys

• Setup unattended upgrades

• Install docker, docker-compose and apache utils.

Traefik + TraefikRunner + Traefik VPN

• Setup htaccess -> echo $(htpasswd -nb user password) | sed -e s/\\$/\\$\\$/g
• Ensure email address is correct

Gitea

• Ensure that ports are assigned correctly for the system

Gitea Runner

• Ensure that a registration token has been setup before continuing

Tracking

Create a .env file with the following content:

ACKEE_USERNAME=luke-else
ACKEE_PASSWORD=XXX

Websites

• Ensure website files are copied over
• Ensure that ports are assigned correctly for the system

Bitwarden

• Ensure that all data is fully encrypted during transfer.
• Ensure that ports are assigned correctly for the system

Rustdesk

• No additional setup required bar the ports

Database

• Ensure that mysql root password, user and default database are updated.
• Ensure that mongo root password, and user are updated.
• Ensure database ports are correctly assigned and do not have to pass through traefik.