Name: DEBRiS Chrome (official) | 도라에몽 (korean)

System Consideration: ① Size of system partition is critically small ② Data should be stored on attached disk(s)

CPU: Intel® Celeron® CPU N3060 @ 1.60GHz (2 cores) — Product info

Main Memory: 2G

Storages:

• 32G (m.2 type SSD) — / partition
• 1024G — /home partition

Mounted on Type  Size  Used Avail Use%
/          ext4   20G  7.9G   11G  43%
/boot      ext4  974M  253M  655M  28%
/home      ext4  916G  292G  578G  34%

Wireless Network:

• Intel^® Dual Band Wireless-AC 3160 (802.11ac) — Product info
• Realtek Semiconductor Corp. RTL8188EUS 802.11n Wireless Network Adapter

• System Upgrade Ubuntu 24.04 noble numbat _{— Updated on 2025/05/02 07:42}
• Attach Ubuntu Pro subscription _{— Updated on 2024/05/21 17:41}
• Upgrade php 8.2 and purge php 7.4, php 8.0 and php 8.1 _{— Updated on 2023/06/04 03:57}
• Upgrade Ubuntu 22.04.1 LTS (Jammy Jellyfish) _{— Updated on 2022/09/09 17:40}
• Fresh installation for Ubuntu Server 20.04 focal _{— Updated on 2020/10/12 20:44}
• Upgrade mariadb 10.5 _{— Updated on 2020/08/31 13:15}
• Get certificates for sayah.kr _{— Updated on 2020/06/28 19:09}
• Install WordPress for sayah _{— Updated on 2020/06/28 19:07}
• Change backup rsync to another partition _{— Updated on 2020/06/27 04:01}
• Install Nextcloud named cloud.ejestate.tk _{— Updated on 2020/03/29 22:22}

Nginx Configuration Showing lively on OWL for DEBRiS Chrome

Duplicate and backup for wiki.meson.in and wiki.meson.one (OWL) toward backup server.

Create /var/www/.ssh and Generate Pairwise keys on source server

sudo mkdir /var/www/.ssh 
sudo chown -Rf www-data:www-data /var/www/.ssh 
 
sudo -u www-data ssh-keygen -t rsa -b 4096  

File synchronization using rsync to remote (target) server

sudo -u www-data rsync -azP --rsync-path="sudo rsync" /var/www/source.directory/ user@target.server:/home/to/path/target.directory/

Create executive file /usr/local/rsync_wiki and make it executable sudo chmod +x

#!/bin/sh
sudo -u www-data rsync -azP -e 'ssh -p 2020' --progress --rsync-path="sudo rsync" /var/www/wiki.meson.in/ meson@target.com:/home/meson/webroot/wiki.meson.in/

edit /etc/systemd/journald.conf

SystemMaxUse=100M 

Clear journal logs with command

journalctl --vacuum-time=2d   
journalctl --vacuum-size=500M

Usually it could free over 3.0G up on (system) disk.

Subsonic server is using port 4040. Then create virtual host in Nginx with SSL and add the following lines.

        location / {
 
                proxy_pass http://localhost:4040/;
                proxy_set_header Host $host;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 
  }

Edit /etc/default/subsonic with commenting out the following

SUBSONIC_ARGS="--port=0 --https-port=4040 --context-path=/ --max-memory=200"

Edit /etc/nginx/nginx.conf to apply global settings

http {
    # ... existing configuration ...
 
    # Global SSL session cache (add this section)
    ssl_session_cache     shared:SSL:50m;
    ssl_session_timeout   1d;
    ssl_session_tickets   off;
 
    # Optional: Global SSL protocols and ciphers
    ssl_protocols         TLSv1.2 TLSv1.3;
    ssl_prefer_server_ciphers off;
 
    # ... rest of your http configuration ...
 
    # Include server blocks
    include /etc/nginx/sites-enabled/*;
}

Edit each nginx configuration file in /etc/nginx/sites-available/* and eliminated following lines

# Remove these lines from other server blocks:
ssl_session_cache     shared:SSL:20m;  # or any size
ssl_session_timeout   1d;              # or any timeout
ssl_session_tickets   off;             # or on
ssl_protocols         TLSv1.2 TLSv1.3; # if you made it global
ssl_prefer_server_ciphers off;         # if you made it global

Problem: Nginx web service is not restarting after updating certificates with certbot

Symptom: Following messages are showing when it fails to restart

nginx: [emerg] bind() to 0.0.0.0:443 failed (98: Address already in use)
nginx: [emerg] still could not bind()

Solution: Kill nginx service with command

sudo fuser -k 443/tcp
sudo service nginx restart