Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision |
rpi_nimbus [2019/08/01 09:56] – [Let's Encrypt] Júne Park | rpi_nimbus [2020/06/28 10:50] – [Specification] Júne Park |
---|
<nav> | <nav> |
* {{fa>server?color=#8B0000}} Linux | * {{fa>server?color=#8B0000}} Linux |
* [[:rpi_common|General Things on Raspbian]] | * [[:rpi_common|■ General Things on Raspbian]] |
* [[:rpi_autism|Media Ditorium ─ AUTiSM Rainbow]] | * [[:rpi_autism|Media Ditorium ─ AUTiSM Rainbow]] |
* [[:rpi_epigen|Private Cellarium ─ EPiGEN Crystal]] | * [[:rpi_epigen|Private Cellarium ─ EPiGEN Crystal]] |
* [[:rpi_nimbus|Webius Officium ─ NiMBUS deBlanc]] | * [[:rpi_nimbus|Webius Officium ─ NiMBUS deBlanc]] |
* [[:debian_common|General info on Debian Linux]] | * [[:debian_common|■ General info on Debian Linux]] |
* [[:deb_mutism|Opus Imperium ─ MUTiSM Magnum]] | * [[:deb_mutism|Opus Imperium ─ MUTiSM Magnum]] |
| * [[:deb_gilead|Actu Periculum ─ GiLEAD Argenta]] |
| * [[:deb_debris|Finca LaDichium ─ DEBRiS Chrome]] |
* {{fa>windows?color=#0000A0}} Windows | * {{fa>windows?color=#0000A0}} Windows |
* [[:pc_common|Common Works on Windows]] | * [[:pc_common|■ Common Works on Windows]] |
* [[:pc_mesonism|Primus Workstation ─ MESONiSM]] | * [[:pc_mesonism|Primus Workstation ─ MESONiSM]] |
* [[:pc_mesonium|Manibus Tablet ─ MESONiUM]] | * [[:pc_mesonium|Manibus Tablet ─ MESONiUM]] |
* [[:pc_mesonity|Praevus Station ─ MESONiTY]] | * [[:pc_mesonity|Praevus Station ─ MESONiTY]] |
* {{fa>android?color=#006400}} Android | * {{fa>android?color=#006400}} Android |
* [[:cell_common|Common Stuffs on Androids]] | * [[:cell_common|■ Common Stuffs on Androids]] |
* [[:cell_epiaux|Júne's Primus ─ EPiAUX 5X]] | * [[:cell_epiaux|Júne's Primus ─ EPiAUX 5X]] |
* [[:cell_epihex|Júne's Extentus ─ EPiHEX 6]] | * [[:cell_epihex|Júne's Extentus ─ EPiHEX 6]] |
{{:rpi_nimbus.jpg?nolink&250|}} | {{:rpi_nimbus.jpg?nolink&250|}} |
| |
Name: {{material>assignment_turned_in}} NiMBUS deBlanc (official) | {{material>create}} ''구운몽'' (korean) | Name: {{mdi>cards?24&color=#9000B3}} NiMBUS deBlanc (official) | {{mdi>creation?24&color=#9000B3}} ''구운몽'' (korean) |
| |
---- | ---- |
==== Specification ==== | ==== Specification ==== |
| |
{{material>developer_board?32&color=#14281D}} Model: [[https://www.raspberrypi.org/products/raspberry-pi-3-model-b/|Raspberry Pi 3 Model B]] [[wp>Raspberry_Pi#Model_B|Raspbierry Pi Model B]] | {{mdi>raspberry-pi?32&color=#9000B3}} Model: [[https://www.raspberrypi.org/products/raspberry-pi-3-model-b/|Raspberry Pi 3 Model B]] [[wp>Raspberry_Pi#Model_B|Raspbierry Pi Model B]] |
| |
{{material>sd_storage?32&color=#355834}} {{fa>database}} 240G on ''/var/www'' & {{fa>database}} 500G on ''~/storage'' --- {{fa>plug}} [[SECURED:JUNE_HARDWARE#data_storage|Storage in details]] {{fa>lock}} | {{mdi>database-plus?32&color=#9000B3}} Storages --- {{fa>plug}} [[SECURED:JUNE_HARDWARE#data_storage|Storage in details]] {{fa>lock}} |
| * 240G {{fa>database}} on ''/var/www'' |
| * 500G {{fa>database}} on ''~/storage'' |
| |
=== Live status of storages === | === Live status of storages === |
| |
<code ini> | <code ini> |
Mounted on Type Size Used Avail Use% | Mounted on Type Size Used Avail Use% |
/home/meson/storage ext4 458G 44G 391G 11% | ~/storage ext4 458G 280G 155G 65% |
/var/www ext4 220G 18G 191G 9% | /var/www ext4 220G 18G 191G 9% |
</code> | </code> |
| |
{{material>network_wifi?32&color=#6E633D}} Wired (''eth0''), {{fa>wifi}} Wireless (''wlan0'') & Wired {{fa>usb?color=#000000}} (''eth1'') --- {{fa>wifi}} [[SECURED:HOME_NETWORK#dhcp_assigned_ip|Júne's home network]] {{fa>lock}} | {{mdi>lan?32&color=#9000B3}} Wired (''eth0''), {{fa>wifi}} Wireless (''wlan0'') & Wired {{fa>usb?color=#000000}} (''eth1'') --- {{fa>wifi}} [[SECURED:HOME_NETWORK#dhcp_assigned_ip|Júne's home network]] {{fa>lock}} |
| |
{{material>https?32&color=#C2A878}} Web service and web resources including [[wp>WebDAV]] | {{mdi>web?32&color=#9000B3}} Web service and web resources including [[wp>WebDAV]] |
| |
---- | ---- |
==== Hosting Services ==== | ==== Hosting Services ==== |
| |
<button type="info" icon="fa fa-lock">[[[[secured:web_admin#june_s_pion_gateway|admin]]</button> **''[[https://pi.meson.one/|Júne's PiON Gateway]]''** --- WebDAV and Documents Archives | <button type="primary" size="sm" icon="fa fa-lock">[[[[secured:web_admin#june_s_pion_gateway|admin]]</button> **''[[https://pi.meson.one/|Júne's PiON Gateway]]''** --- WebDAV and Documents Archives |
| |
| |
<button type="info" icon="fa fa-lock">[[[[secured:web_admin#june_s_cloud_platform|admin]]</button> **''[[https://cloud.meson.in|Júne's Cloud Platform]]''** --- Gateway for all cloud services | <button type="primary" size="sm" icon="fa fa-lock">[[[[secured:web_admin#june_s_cloud_platform|admin]]</button> **''[[https://cloud.meson.in|Júne's Cloud Platform]]''** --- Gateway for all cloud services |
| |
<button type="info" icon="fa fa-lock">[[[[secured:web_admin#june_s_wiki|admin]]</button> **''[[https://wiki.meson.in|Júne's Wiki]]''** --- What I Know Is ... Here | |
| |
| |
{{fa>sliders?color=#d20962&2x}} Live [[:secured:nginx_config#nimbus_debalanc|Nginx Configuration]] for ''**NiMBUS**'' {{fa>lock?color=#808080}} | |
| |
| <button type="primary" size="sm" icon="fa fa-lock">[[[[secured:web_admin#june_s_wiki|admin]]</button> **''[[https://wiki.meson.in|Júne's Wiki]]''** --- What I Know Is ... Here |
| |
| <button type="danger" size="sm" icon="fa fa-sliders">[[https://wiki.meson.one/doku.php?id=secured:nginx_config#nimbus_debalanc|Nginx Configuration]]</button> Showing lively on OWL {{fa>opera?14&color=#cc0f16}} for ''**NiMBUS** deBlanc'' {{fa>lock?color=#808080}} |
| |
---- | ---- |
==== +Work logs ==== | ==== +Work logs ==== |
| |
| * Change ''backup rsync'' to another partition <sub> --- Updated on //2020/06/27 04:01// </sub> |
| * Change ''web root'' of ''eigen.ml'', ''dav.meson.in'' & ''pdf.meson.in'' <sub> --- Updated on //2020/06/27 04:00// </sub> |
| * Plugin Wireless LAN {{fa>usb}} & Wired Giga LAN {{fa>usb}} <sub> --- Updated on //2020/02/22 03:32// </sub> |
| * **Fresh installation** <sub> --- Updated on //2020/02/11 02:16// </sub> |
* {{fa>certificate}} ''Renew SSL certificates'' (Let's Encrypt) done <sub> --- Updated on //2019/08/01 18:48// </sub> | * {{fa>certificate}} ''Renew SSL certificates'' (Let's Encrypt) done <sub> --- Updated on //2019/08/01 18:48// </sub> |
* ''configure'' access.log and error.log separately <sub> --- Updated on //2018/09/20 11:12//</sub> | * ''configure'' access.log and error.log separately <sub> --- Updated on //2018/09/20 11:12//</sub> |
| |
---- | ---- |
| ==== Disable Build-in Radios ==== |
| |
| Edit ''/boot/config.txt'' |
| |
| <code ini> |
| dtoverlay=disable-wifi |
| dtoverlay=disable-bt |
| </code> |
| |
| ---- |
==== Enable your Server Blocks ==== | ==== Enable your Server Blocks ==== |
| |
</code> | </code> |
| |
---- | |
| === Renew certificate(s) using systemd === |
| |
| Check renewal executes without error, |
| |
| <code bash> |
| sudo certbot renew --dry-run |
| </code> |
| |
| == Service unit file == |
| |
| If no error, edit **service unit file** typically stored in ''/etc/systemd/system/''. Edit ''/etc/systemd/system/certbot-renewal.service'' |
| |
| <code ini> |
| [Unit] |
| Description=Certbot Renewal |
| |
| [Service] |
| ExecStart=/usr/bin/certbot renew --post-hook "systemctl restart nginx.service" |
| </code> |
| |
| Which restarts web service after renewing certificate(s). |
| |
| == Timer unit file == |
| |
| Modify ''/etc/systemd/system/certbot-renewal.timer'' to adjust timer for certbot renewal. |
| |
| <code ini> |
| [Unit] |
| Description=Timer for Certbot Renewal |
| |
| [Timer] |
| OnBootSec=300 |
| OnUnitActiveSec=2w |
| |
| [Install] |
| WantedBy=multi-user.target |
| </code> |
| |
| The configuration below will activate the service biweekly, and 300 seconds after boot-up. |
| |
| == Using systemctl and journalctl == |
| |
| To start the timer |
| <code bash> |
| sudo systemctl start certbot-renewal.timer |
| </code> |
| |
| To enable the timer to be started on boot-up |
| <code bash> |
| sudo systemctl enable certbot-renewal.timer |
| </code> |
| |
| To show status information for the timer |
| <code bash> |
| systemctl status certbot-renewal.timer |
| </code> |
| |
| To show journal entries for the timer |
| <code bash> |
| journalctl -u certbot-renewal.service |
| </code> |
| |
| ---- |
==== SSL Configuration on Nginx ==== | ==== SSL Configuration on Nginx ==== |
| |