Daniel dcalixto

Deploy Ruby On Rails on Ubuntu 14.04

Server: Nginx with Phusion Passenger

Ruby Version: 2.1.3

User System: deploy

User System

Setting up a SSL Cert from Comodo

I use Namecheap.com as a registrar, and they resale SSL Certs from a number of other companies, including Comodo.

These are the steps I went through to set up an SSL cert.

Purchase the cert

Backend Architectures

Twitter

ror, scala, jetty, erlang, thrift, mongrel, comet server, my-sql, memchached, varnish, kestrel(mq), starling, gizzard, cassandra, hadoop, vertica, munin, nagios, awstats

New Server Setup (Reasonably Secure Ubuntu Box)

Basic setup for a new box:

blocks password logins - need to use public key blocks bruteforcing w/ fail2ban ufw/iptables to allow only SSH/HTTP/HTTPS from public weekly auto security updates vi unattended-upgrades basic setup

private_pub / faye on nginx

1 install nginx_tcp_proxy_module

I followed this tutorial by Johnathan Leppert and the instructions from nginx_tcp_proxy_module but changed nginx to use passenger and thin.

2 add the tcp part to nginx.conf:

tcp {

Install Some Dependencies

apt-get install build-essential bzip2 libpcre3-dev libssl-dev mysql-server daemon libgeoip-dev

Installing Nginx with Naxsi Core

Download Nginx, Naxsi Core dan Naxsi UI. Saya berasumsi tempat download berada di /home/compile

	#download source nginx
	wget http://nginx.org/download/nginx-1.8.1.tar.gz
	tar -xvzf nginx-1.8.1.tar.gz

	#mkdir nginxmodule

	#cd nginxmodule

	#pagespeed
	NPS_VERSION=1.11.33.0

	INTRO
	I get asked regularly for good resources on AWS security. This gist collects some of these resources (docs, blogs, talks, open source tools, etc.). Feel free to suggest and contribute.

	Short Link: http://tiny.cc/awssecurity

	Official AWS Security Resources
	* Security Blog - http://blogs.aws.amazon.com/security/
	* Security Advisories - http://aws.amazon.com/security/security-bulletins/
	* Security Whitepaper (AWS Security Processes/Practices) - http://media.amazonwebservices.com/pdf/AWS_Security_Whitepaper.pdf
	* Security Best Practices Whitepaper - http://media.amazonwebservices.com/AWS_Security_Best_Practices.pdf

	<ul class="organiser__group organiser__group--sort">
	<%= content_tag(:li, class: ("active" if params[:sort] == "park" \|\| params[:sort] == nil)) do %>
	<%= link_to "By Park", coasters_path(sort_parameters(:park, page: 1)), remote: true %>
	<% end %>

	<%= content_tag(:li, class: ("active" if params[:sort] == "alphabetically")) do %>
	<%= link_to "Alphabetically", coasters_path(sort_parameters(:alphabetically, page: 1)), remote: true %></li>
	<% end %>

	<%= content_tag(:li, class: ("active" if params[:sort] == "order")) do %>

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048