FC6 stock server setup 15 March 2008
Configuring and securing FC6/Plesk server with postgres.
Securing
Configure firewall to allow SSH/Plesk admin from only trused IP addresses.
Backup [TODO]
Check plesk backup locations. If needed add postgres dump.
Add transfer script to colate, compress, rotate remote files and upload the backup to the remote FTP server.
First – update software starting with Plesk, then configure yum (repros may need adding), then update all packages. Add postgres via yum.
Yum configuration -
[main] cachedir=/var/cache/yum keepcache=0 debuglevel=2 logfile=/var/log/yum.log pkgpolicy=newest distroverpkg=redhat-release tolerant=1 exactarch=1 obsoletes=1 gpgcheck=1 plugins=1 metadata_expire=1800 exclude=udev kernel* mkinitrd module-init-tools glibc* gcc* MAKEDEV*<code>[core] name=Fedora Core $releasever - $basearch baseurl=http://download.fedora.redhat.com/pub/fedora/linux/core/$releasever/$basearch/os/ mirrorlist=http://fedora.redhat.com/download/mirrors/fedora-core-$releasever enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora file:///etc/pki/rpm-gpg/RPM-GPG-KEY</code><code>[extras] name=Fedora Extras $releasever - $basearch baseurl=http://download.fedora.redhat.com/pub/fedora/linux/extras/$releasever/$basearch/ mirrorlist=http://fedora.redhat.com/download/mirrors/fedora-extras-$releasever enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-extras gpgcheck=1 [updates] name=Fedora Core $releasever - $basearch - Updates baseurl=http://download.fedora.redhat.com/pub/fedora/linux/core/updates/$releasever/$basearch/ mirrorlist=http://fedora.redhat.com/download/mirrors/updates-released-fc$releasever enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora
Once yum is configured “yum update all” should get the server up-to date.
postgres installation – http://www.flmnh.ufl.edu/linux/install_postgresql.htm
PHP
Appears to be installed with error reporting in a quitet mode… time to fix that!
Found an interesting article on hardening… see
[0] March 15, 2008 
Plesk HTTPS root 
