Table of Contents

Finca LaDichium โ”€ DEBRiS Chrome

Name: DEBRiS Chrome (official) | ๋„๋ผ์—๋ชฝ (korean)

System Consideration: โ‘  Size of system partition is critically small โ‘ก Data should be stored on attached disk(s)

Specification

CPU: Intelยฎ Celeronยฎ CPU N3060 @ 1.60GHz (2 cores) โ€” Product info

Main Memory: 2G

Storages:

Live status of storages

Mounted on Type  Size  Used Avail Use%
/          ext4   20G  7.9G   11G  43%
/boot      ext4  974M  253M  655M  28%
/home      ext4  916G  292G  578G  34%

Wireless Network:

๏ผ‹Work logs

๏ผ‹Que to do

Hosting Services

Nginx Configuration Showing lively on OWL for DEBRiS Chrome

Gemini Services

Duplicate and backup for wiki.meson.in and wiki.meson.one (OWL) toward backup server.

Create /var/www/.ssh and Generate Pairwise keys on source server 

sudo mkdir /var/www/.ssh 
sudo chown -Rf www-data:www-data /var/www/.ssh 
 
sudo -u www-data ssh-keygen -t rsa -b 4096

File synchronization using rsync to remote (target) server 

sudo -u www-data rsync -azP --rsync-path="sudo rsync" /var/www/source.directory/ user@target.server:/home/to/path/target.directory/

Create executive file /usr/local/rsync_wiki and make it executable sudo chmod +x 

#!/bin/sh
sudo -u www-data rsync -azP -e 'ssh -p 2020' --progress --rsync-path="sudo rsync" /var/www/wiki.meson.in/ meson@target.com:/home/meson/webroot/wiki.meson.in/

Limit size of journal logs

edit /etc/systemd/journald.conf 

SystemMaxUse=100M

Clear journal logs with command 

journalctl --vacuum-time=2d   
journalctl --vacuum-size=500M

Usually it could free over 3.0G up on (system) disk.

Nginx Reverse proxy

Subsonic server is using port 4040. Then create virtual host in Nginx with SSL and add the following lines. 

        location / {
 
                proxy_pass http://localhost:4040/;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
  }

Edit /etc/default/subsonic with commenting out the following 

SUBSONIC_ARGS="--port=0 --https-port=4040 --context-path=/ --max-memory=200"

Optimize Global SSL setting

Edit /etc/nginx/nginx.conf to apply global settings 

http {
    # ... existing configuration ...
 
    # Global SSL session cache (add this section)
    ssl_session_cache     shared:SSL:50m;
    ssl_session_timeout   1d;
    ssl_session_tickets   off;
 
    # Optional: Global SSL protocols and ciphers
    ssl_protocols         TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers off;
 
    # ... rest of your http configuration ...
 
    # Include server blocks
    include /etc/nginx/sites-enabled/*;
}

Edit each nginx configuration file in /etc/nginx/sites-available/* and eliminated following lines 

# Remove these lines from other server blocks:
ssl_session_cache     shared:SSL:20m;  # or any size
ssl_session_timeout   1d;              # or any timeout
ssl_session_tickets   off;             # or on
ssl_protocols         TLSv1.2 TLSv1.3; # if you made it global
ssl_prefer_server_ciphers off;         # if you made it global

Solved problems

Disable restarting Nginx service

Problem: Nginx web service is not restarting after updating certificates with certbot

Symptom: Following messages are showing when it fails to restart 

nginx: [emerg] bind() to 0.0.0.0:443 failed (98: Address already in use)
nginx: [emerg] still could not bind()

Solution: Kill nginx service with command 

sudo fuser -k 443/tcp
sudo service nginx restart