Proxmox

Proxmox is a server virtualization environment that allow deployment and management of virtual machines and linux containers (LXC)

URL: https://proxmox.wemake.pt:8006 User/Password: Check Bitwarden or Network Dossier

Promox Configurations

Datacenter level

Storage

Name: ovh-backup Type: NFS Server: ftpback-rbx4-64.ovh.net Export: /export/ftpbackup/ns3144231.ip-51-68-119.eu Content: Disck image, VZDump Backup Nodes: proxmox Max Backups: 2

Backup

Periodicity: Every week on Sunday at 01:30 Storage: ovh-backup VM's: demos.wemakept, opnsense Compression: LZO

Firewall > Security Group

Added 2 security groups:

1. ACCEPT HTTPS
2. ACCEPT tcp 22

Firewall > Alias

WeMake - 93.108.246.41 - IP Externo da WeMake

Node level (proxmox)

System > Network

eno1 - Default?

eno2 - Default?

vmbr0

IP: 51.68.119.88/24

Gateway: 51.68.119.254

Bridge ports: eno1

vmbr1

Used for local network

IP: 192.168.1.2/24

System > DNS

Search domain: wemake DNS Server: 213.186.33.99

Firewall

Added the 2 security groups configured on the Datacenter Level

Virtual Machines

opnsense

URL: https://51.255.23.121/ User/Password: Check Bitwarden or Network Dossrier

demos.wemake.pt

Install

sudo apt install apache2
sudo apt install mysql-server
sudo apt install php php-cli php-mysql php-ldap php-zip php-mbstring php-gd php-xml php-curl

sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install certbot python-certbot-apache

curl -sL https://deb.nodesource.com/setup_8.x | sudo -E bash -
sudo apt-get install -y nodejs

php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');"
php -r "if (hash_file('sha384', 'composer-setup.php') === 'a5c698ffe4b8e849a443b120cd5ba38043260d5c4023dbf93e1558871f1f07f58274fc6f4c93bcfd858c6bd0775cd8d1') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;"
php composer-setup.php
php -r "unlink('composer-setup.php');"
sudo mv composer.phar /usr/bin/composer

apt-get install redis-server

sudo a2enmod rewrite

Secure MySQL

root@demos:/home/jfm# mysql_secure_installation 

Securing the MySQL server deployment.

Connecting to MySQL using a blank password.

VALIDATE PASSWORD PLUGIN can be used to test passwords
and improve security. It checks the strength of password
and allows the users to set only those passwords which are
secure enough. Would you like to setup VALIDATE PASSWORD plugin?

Press y|Y for Yes, any other key for No: y

There are three levels of password validation policy:

LOW    Length >= 8
MEDIUM Length >= 8, numeric, mixed case, and special characters
STRONG Length >= 8, numeric, mixed case, special characters and dictionary                  file

Please enter 0 = LOW, 1 = MEDIUM and 2 = STRONG: 2
Please set the password for root here.

New password: 

Re-enter new password: 

Estimated strength of the password: 100 
Do you wish to continue with the password provided?(Press y|Y for Yes, any other key for No) : y
By default, a MySQL installation has an anonymous user,
allowing anyone to log into MySQL without having to have
a user account created for them. This is intended only for
testing, and to make the installation go a bit smoother.
You should remove them before moving into a production
environment.

Remove anonymous users? (Press y|Y for Yes, any other key for No) : y
Success.

Normally, root should only be allowed to connect from
'localhost'. This ensures that someone cannot guess at
the root password from the network.

Disallow root login remotely? (Press y|Y for Yes, any other key for No) : y
Success.

By default, MySQL comes with a database named 'test' that
anyone can access. This is also intended only for testing,
and should be removed before moving into a production
environment.

Remove test database and access to it? (Press y|Y for Yes, any other key for No) : y
 - Dropping test database...
Success.

 - Removing privileges on test database...
Success.

Reloading the privilege tables will ensure that all changes
made so far will take effect immediately.

Reload privilege tables now? (Press y|Y for Yes, any other key for No) : y
Success.

All done!