Configuring and securing FC6/Plesk server with postgres.
Securing
Configure firewall to allow SSH/Plesk admin from only trused IP addresses.
Backup [TODO]
Check plesk backup locations. If needed add postgres dump.
Add transfer script to colate, compress, rotate remote files and upload the backup to the remote FTP server.
First – update software starting with Plesk, then configure yum (repros may need adding), then update all packages. Add postgres via yum.
Yum configuration -
<bash/>
[main]
cachedir=/var/cache/yum
keepcache=0
debuglevel=2
logfile=/var/log/yum.log
pkgpolicy=newest
distroverpkg=redhat-release
tolerant=1
exactarch=1
obsoletes=1
gpgcheck=1
plugins=1
metadata_expire=1800
exclude=udev kernel* mkinitrd module-init-tools glibc* gcc* MAKEDEV*<code>[core]
name=Fedora Core $releasever - $basearch
baseurl=http://download.fedora.redhat.com/pub/fedora/linux/core/$releasever/$basearch/os/
mirrorlist=http://fedora.redhat.com/download/mirrors/fedora-core-$releasever
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora file:///etc/pki/rpm-gpg/RPM-GPG-KEY</code><code>[extras]
name=Fedora Extras $releasever - $basearch
baseurl=http://download.fedora.redhat.com/pub/fedora/linux/extras/$releasever/$basearch/
mirrorlist=http://fedora.redhat.com/download/mirrors/fedora-extras-$releasever
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-extras
gpgcheck=1
[updates]
name=Fedora Core $releasever - $basearch - Updates
baseurl=http://download.fedora.redhat.com/pub/fedora/linux/core/updates/$releasever/$basearch/
mirrorlist=http://fedora.redhat.com/download/mirrors/updates-released-fc$releasever
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora
Once yum is configured “yum update all” should get the server up-to date.
postgres installation – http://www.flmnh.ufl.edu/linux/install_postgresql.htm
PHP
Appears to be installed with error reporting in a quitet mode… time to fix that!
Found an interesting article on hardening… see