Name: DEBRiS Chrome (official) | 도라에몽 (korean)

System Consideration: ① Size of system partition is critically small ② Data should be stored on attached disk(s)

CPU: Intel® Celeron® CPU N3060 @ 1.60GHz (2 cores) — Product info

Main Memory: 2G

Storages:

• 32G (m.2 type SSD) — / partition
• 1024G — /home partition

Mounted on Type  Size  Used Avail Use%
/          ext4   20G  7.9G   11G  43%
/boot      ext4  974M  253M  655M  28%
/home      ext4  916G  292G  578G  34%

Wireless Network:

• Intel^® Dual Band Wireless-AC 3160 (802.11ac) — Product info
• Realtek Semiconductor Corp. RTL8188EUS 802.11n Wireless Network Adapter

• System Upgrade Ubuntu 24.04 noble numbat_{— Updated on 2025/05/02 07:42}
• Attach Ubuntu Pro subscription _{— Updated on 2024/05/21 17:41}
• Upgrade php 8.2 and purge php 7.4, php 8.0 and php 8.1 _{— Updated on 2023/06/04 03:57}
• Upgrade Ubuntu 22.04.1 LTS (Jammy Jellyfish) _{— Updated on 2022/09/09 17:40}
• Fresh installation for Ubuntu Server 20.04 focal _{— Updated on 2020/10/12 20:44}
• Upgrade mariadb 10.5 _{— Updated on 2020/08/31 13:15}
• Get certificates for sayah.kr _{— Updated on 2020/06/28 19:09}
• Install WordPress for sayah _{— Updated on 2020/06/28 19:07}
• Change backup rsync to another partition _{— Updated on 2020/06/27 04:01}
• Install Nextcloud named cloud.ejestate.tk _{— Updated on 2020/03/29 22:22}

Nginx Configuration Showing lively on OWL for DEBRiS Chrome

Duplicate and backup for wiki.meson.in and wiki.meson.one (OWL) toward backup server.

Create /var/www/.ssh and Generate Pairwise keys on source server

sudo mkdir /var/www/.ssh 
sudo chown -Rf www-data:www-data /var/www/.ssh 
 
sudo -u www-data ssh-keygen -t rsa -b 4096  

File synchronization using rsync to remote (target) server

sudo -u www-data rsync -azP --rsync-path="sudo rsync" /var/www/source.directory/ user@target.server:/home/to/path/target.directory/

Create executive file /usr/local/rsync_wiki and make it executable sudo chmod +x

#!/bin/sh
sudo -u www-data rsync -azP -e 'ssh -p 2020' --progress --rsync-path="sudo rsync" /var/www/wiki.meson.in/ meson@target.com:/home/meson/webroot/wiki.meson.in/

edit /etc/systemd/journald.conf

SystemMaxUse=100M 

Clear journal logs with command

journalctl --vacuum-time=2d   
journalctl --vacuum-size=500M

Usually it could free over 3.0G up on (system) disk.

—-

Subsonic server is using port 4040. Then create virtual host in Nginx with SSL and add the following lines.

        location / {
 
                proxy_pass http://localhost:4040/;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
  }

Edit /etc/default/subsonic with commenting out the following

SUBSONIC_ARGS="--port=0 --https-port=4040 --context-path=/ --max-memory=200"

Edit /etc/nginx/nginx.conf to apply global settings

http {
    # ... existing configuration ...
 
    # Global SSL session cache (add this section)
    ssl_session_cache     shared:SSL:50m;
    ssl_session_timeout   1d;
    ssl_session_tickets   off;
 
    # Optional: Global SSL protocols and ciphers
    ssl_protocols         TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers off;
 
    # ... rest of your http configuration ...
 
    # Include server blocks
    include /etc/nginx/sites-enabled/*;
}

Edit each nginx configuration file in /etc/nginx/sites-available/* and eliminated following lines

# Remove these lines from other server blocks:
ssl_session_cache     shared:SSL:20m;  # or any size
ssl_session_timeout   1d;              # or any timeout
ssl_session_tickets   off;             # or on
ssl_protocols         TLSv1.2 TLSv1.3; # if you made it global
ssl_prefer_server_ciphers off;         # if you made it global

—-

Problem: Nginx web service is not restarting after updating certificates with certbot

Symptom: Following messages are showing when it fails to restart

nginx: [emerg] bind() to 0.0.0.0:443 failed (98: Address already in use)
nginx: [emerg] still could not bind()

Solution: Kill nginx service with command

sudo fuser -k 443/tcp
sudo service nginx restart

—-