Stories
Slash Boxes
Comments

SoylentNews is people

Got web server up: now I need time!

Journal by Gaaark

I've been given an old XP pc and have put (X)ubuntu on it in order to get a web-server running with the goal being to let family members sign in and download TV shows/movies/etc.

Have set it up according to a couple of sites (a mix of Ubuntu/apache etc sites) and am using ngrok to open up a tunnel (with the end goal being once it's running and accessible, i will go for the $5/mnth for the permanent address).

Have apache/mysql/php working (this is NEW territory for me, but i THINK it is working correctly) and have ngrok running, but i cannot connect from an external device (my tablet).

I THINK the problem is with firewall (ufw on ubuntu and the router firewall): have tried to get port 80 accessible through both , have allowed access through the router firewall for the web-server: my next plan is to completely stop ufw on the pc and just allow the router to run things.

Does anyone have advice/tips/help?

Gotta be at least a couple people familiar with running a web site around here :)

 

Reply to: Hardening the server

    (Score: 0) by Anonymous Coward on Monday July 30 2018, @06:49PM

    by Anonymous Coward on Monday July 30 2018, @06:49PM (#714873)

    You should read https://httpd.apache.org/docs/2.4/misc/security_tips.html [apache.org] But here are some basic steps you can take to harden your server:

    Run Apache as a dedicated non-privileged user and group (and definitely don't use nobody).
    Secure your directories
    Set your various timeout and limit values.
    Disable scripting you don't need (SSI, CGI, etc.).
    Disable HTTP methods you won't use (Probably anything not HEAD or GET).
    Disable ETags.
    Set proper security headers on your server.
    Forbid .htaccess files.
    Disable the Server header (ServerToken).
    Set ServerSignature to Off.
    Disable Global Directory Listings.
    Consider adding mod_security and mod_envasive.
    Disable mod_autoindex mod_info mod_include mod_userdir mod_imap mod_status and any other module you are not using.
    Enable unattended-upgrades or your OS's equivalent.
    Enable TLS
    READ YOUR LOGS!!!

Post Comment

Edit Comment You are not logged in. You can log in now using the convenient form below, or Create an Account, or post as Anonymous Coward.

Public Terminal

Anonymous Coward [ Create an Account ]

Use the Preview Button! Check those URLs!


Logged-in users aren't forced to preview their comments. Create an Account!

Allowed HTML
<b|i|p|br|a|ol|ul|li|dl|dt|dd|em|strong|tt|blockquote|div|ecode|quote|sup|sub|abbr|sarc|sarcasm|user|spoiler|del>

URLs
<URL:http://example.com/> will auto-link a URL

Important Stuff

  • Please try to keep posts on topic.
  • Try to reply to other people's comments instead of starting new threads.
  • Read other people's messages before posting your own to avoid simply duplicating what has already been said.
  • Use a clear subject that describes what your message is about.
  • Offtopic, Inflammatory, Inappropriate, Illegal, or Offensive comments might be moderated. (You can read everything, even moderated posts, by adjusting your threshold on the User Preferences Page)
  • If you want replies to your comments sent to you, consider logging in or creating an account.

If you are having a problem with accounts or comment posting, please yell for help.