Server

Security

SSH

http://blog.hypergeometric.com/2012/02/22/ssh-dos-and-donts/

SSH keys

http://www.cmdln.org/2008/02/11/restricting-ssh-commands/
- http://www.hackinglinuxexposed.com/articles/20030115.html
- https://github.com/gabor-udvari/authprogs
  - https://raw.github.com/gabor-udvari/authprogs/master/authprogs

Basic key setup:

ssh-keygen -t rsa
ssh-copy-id [-i [identity_file]] [user@]remote
  default identity_file is ~/.ssh/id_rsa.pub

http://en.wikipedia.org/wiki/Ssh-agent

SCP

scp -P [port] file.txt user@remotehose:~/file.txt

When scp on remote is initiated, it done so with -t flag, which is undocumented but might be required for precise command persmission configuration.

https://blogs.oracle.com/janp/entry/how_the_scp_protocol_works

SSHFS

Notes on SSHFS

Rsync

Rsync over alt SSH port: --rsh='ssh -p8023'

Monitoring

Logging and stats

logrotate

HowTo: The Ultimate Logrotate Command Tutorial with 10 Examples - Jul 14, 2010
20 Linux Log Files that are Located under /var/log Directory - Aug 1, 2011

Web server logs

Combined Log Format

LogFormat "%h %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-agent}i\"" combined

old skool;

Apache

http://httpd.apache.org/docs/1.3/logs.html

Nginx

http://wiki.nginx.org/HttpLogModule

error_log  /var/log/nginx/error.log;
access_log  /var/log/nginx/access.log;

GoAccess

GoAccess is an open source real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems. It provides fast and valuable HTTP statistics for system administrators that require a visual server report on the fly.
- man goaccess

Analytics

Piwik is downloadable, Free/Libre (GPLv3 licensed) real time web analytics software. It provides you with detailed reports on your website visitors; the search engines and keywords they used, the language they speak, your popular pages, and much more.
- Installation & Optimization
- User Guide
- Log Analytics - combined format logs (apache, nginx)
- Plugins

Google

Google Analytics

Backup

Backup - Scripts and apps

rsync - Wikipedia:rsync
- rdiff-backup

http://backup2l.sourceforge.net/

https://github.com/apenwarr/bup

https://github.com/chmduquesne/sharebox-fs

Provision

Puppet Labs
- Puppet Master - Central management daemon.
- Puppet Agent - Runs on each managed node.
- Puppet Apply - For local use.
- http://docs.puppetlabs.com/guides/tools.html etc.
- Puppet Wiki: Core Types Cheat Sheet
- Puppet Wiki: Simple Text edits
- Ubuntu puppet info
- AUR: puppet
- AUR: puppet dashboard

Chef visual [2]

Fabric - Python SSH library

Virtualisation

VirtualBox config;

Enable host Linux modules: vboxnetflt and vboxnetadp
Enable host-only adapter 'virtualbox0' in VB Preferences > Network if not previously enabled, then select in guest preferences
https://github.com/milkmiruku/boxbootstrap
Keep VM names lowercase and no spaces for easier command-line stuff

Provisioning VirtualBoxes for local dev work;

Vagrant - VirtualBox provisioning with Puppet, etc.

vagrant package --vagrantfile Vagrantfile.pkg --include README.txt
  stored in ~/.vagrant.d/boxes
vagrant box add lucid32 http://files.vagrantup.com/lucid32.box
vagrant box remove lucid32
vagrant box list