Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung | ||
content:serverbasics [2024/12/20 18:08] – Daniel | content:serverbasics [2025/03/26 10:39] (aktuell) – [Last words] Daniel | ||
---|---|---|---|
Zeile 3: | Zeile 3: | ||
Welcome to my **Advanced Server Setup- Documentation**. | Welcome to my **Advanced Server Setup- Documentation**. | ||
- | In these Chapters, i will explain how to setup and configure a full featured Active Domain- Network with Kerberos Single-Sign-On and Domain Integration of Linux Clients on a rootless containerized Docker- | + | In these chapters, i will explain how to setup and configure a full featured Active Domain- Network with Kerberos Single-Sign-On and Domain Integration of Linux Clients on a rootless containerized Docker- |
- | ===== Currents State ===== | ||
- | This Document is currently under developement and Chapters | + | ===== Current State ===== |
+ | |||
+ | This Document is currently under developement and chapters | ||
+ | |||
+ | ===== Usecase ===== | ||
+ | |||
+ | This is not a slim Setup - so if you only have old hardware or you are trying to figure out on yoru small office-pc, this may not work as well as you need it. | ||
+ | |||
+ | You should have at least | ||
+ | |||
+ | * Large Harddrives: If you have maybe 1.5 TB of Data all togehter, you will need: | ||
+ | * 3 TB of space on your working directory / raid5 = 3 Harddrives, each 1 TB at least | ||
+ | * 6 TB of space on your backup / raid5 = 3 Harddrives, each 2 TB at least | ||
+ | * about maybe 100GB for the system / raid1 = 2 Harddrives | ||
+ | * about maybe 100GB for the databases / raid1 = 2 Harddrives | ||
+ | * maybe two extra drives for external backups, each 6 TB (you can also store that in the internet, but you will need a large space there too) | ||
+ | * A Server, that has relyable, quite fast internet in Download and Upload rates - while Upload may be more Importen | ||
+ | * The Server should be reachable all the time | ||
+ | |||
+ | |||
+ | ===== How to Start ===== | ||
+ | |||
+ | First, read this Page, get the Hardware and install the system. You should understand the Hardwaresetup and the installation of Linux and Raid- Systems first (as decribend beneath). | ||
+ | |||
+ | Then, go on whith [[.: | ||
+ | |||
+ | Next, setup docker as decribed in the Chapter. When you have portainer running, you can go like this: | ||
+ | |||
+ | - Nextcloud-AIO | ||
+ | - FreeIPA | ||
+ | - Authentik | ||
+ | |||
+ | Then glue them together with SSO, SPNEGO and Nextcloud-SSO. Then you should have understood everything, you can now play around on your own. | ||
===== Subpages ===== | ===== Subpages ===== | ||
Zeile 580: | Zeile 612: | ||
And with FACLs there are powerful tools that should cover everything an administrator needs. | And with FACLs there are powerful tools that should cover everything an administrator needs. | ||
+ | |||
+ | ===== Firewall ===== | ||
+ | |||
+ | To check, which services are open, use: | ||
+ | |||
+ | PLEASE, Before opening the Ports, check the Services described at the Sub-Pages first to secure them! | ||
+ | |||
+ | < | ||
+ | servername: | ||
+ | 3478/tcp 3478/udp | ||
+ | servername: | ||
+ | 546/udp | ||
+ | 53/tcp 53/udp | ||
+ | 80/tcp | ||
+ | 443/tcp | ||
+ | 88/tcp 88/udp | ||
+ | 389/tcp | ||
+ | 636/tcp | ||
+ | 873/tcp 873/udp | ||
+ | 22/tcp | ||
+ | |||
+ | </ | ||