Rodeo Five Staging Server

Rodeo Five staging server is a Digital Ocean droplet running Ubuntu 20.04 x64 with 4 vCPUs, 8GB memory, and 160GB storage. It is located in region NYC1, and its IP address is 161.35.4.236.

Users

• peterstevens
• mikemckenna
• drewmckenna

Configurations

Apache

• /etc/apache2/apache2.conf includes /etc/phpmyadmin/apache.conf
• /etc/apache2/sites-available/000-default.conf redirects to "https://161.35.4.236"
• Added /etc/apache2/conf-available/ssl-params.conf
• Set ServerName to IP address in /etc/apache2/apache2.conf
• /etc/apache2/sites-available/default-ssl.conf sets up *:443 virtual host.
• Set AllowOverride to All in /etc/apache2/apache2.conf

ssh

• Password authentication temporarily enabled on June 2, 2020.
• Empty passwords disabled
• Public key authentication enabled
• Root login disabled

MySQL

• Created database rodeofive
• Created user admin
• Granted all privileges on rodeofive.* to admin
• Updated 'root'@'localhost' password

UFW

• Apache Full allowed
• OpenSSH allowed
• UFW disabled temporarily

Securetty

• /etc/securetty was missing, preventing apache2 from restarting. It was replaced with a copy of the 19.04 default.

phpmyadmin

• /etc/phpmyadmin/config.inc.php AllowRoot was set to false and login type set to 'cookie'
• Set alias in /etc/phpmyadmin/apache.conf to /r5pma

fail2ban

• sshd jail enabled

Installed software

• Apache2
• fail2ban
• PHP v7.4
• MySQL
• libapache2-mod-php7.4
• php7.4-mbstring
• php7.4-pdo
• php7.4-mysql
• phpmyadmin
• software-properties-common
• certbot
• fail2ban
• update
• logrotate

Repositories:

Universe

ppa:certbot/certbot is not required on 20.04

Issues

• Cannot connect to SFTP using key authentication. Workaround: temporarily enable SSH password authentication
• MySQL is using sha256_password which will be deprecated. Prefer caching_sha2_password.