Differences

This shows you the differences between two versions of the page.

--- distros:ubuntu_server [2019/10/18 12:57] – Sean Rhone
+++ distros:ubuntu_server [2020/06/12 02:50] – Sean Rhone
@@ Line 3: / Line 3: @@
   * Ubuntu Server ((http://www.ubuntu.com/server))
   * 18.04.3 LTS
+====== Known Issues ======
+  * None
 ====== Download ======
@@ Line 14: / Line 18: @@
   * During installation, allow network autoconfig to occur, and then go back once prompted for a hostname; this will allow setting a static IPv4 address and custom DNS settings
-====== Software ======
+====== Repositories ======
-===== Repositories =====
+===== Additional Ubuntu =====
-=== Additional Ubuntu ===
   * https://help.ubuntu.com/community/Repositories/Ubuntu
@@ Line 29: / Line 31: @@
   sudo add-apt-repository 'restricted'
+====== Software ======
 ===== Update =====
+==== System ====
 ****
   sudo apt update && sudo apt full-upgrade -y && sudo apt autoremove -y && sudo apt clean && sync
+==== Snaps ====
+****
+  sudo snap refresh
+===== General =====
+****
+  sudo apt install lm-sensors
+===== Keybase =====
+  * https://keybase.io
+  * TODO: Figure out backup script
+  wget -O '/tmp/keybase_amd64.deb' 'https://prerelease.keybase.io/keybase_amd64.deb' && sudo dpkg --install '/tmp/keybase_amd64.deb' && sudo apt install -f && rm '/tmp/keybase_amd64.deb' && sync && run_keybase
 ====== Settings ======
@@ Line 42: / Line 67: @@
   * See [[Clients:Secure Shell]]
-===== TRIM =====
+==== Force Public Key Authentication ====
-==== Swap ====
+  * :!: Be sure to generate/restore keys and to copy to server before disabling passwords
+  * :!: See [[clients:secure_shell|Secure Shell]] notes
+  * :!: Check ''/etc/ssh/sshd_config'' to see what directory is used for ''.conf'' files if this doesn't work
-  * Add ''discard'' after ''defaults'' for the ''swap'' mountpoint ((defaults,discard))
+  echo 'PasswordAuthentication no' | sudo tee '/etc/ssh/sshd_config.d/custom-pubkey-only.conf' > '/dev/null' && cat '/etc/ssh/sshd_config.d/custom-pubkey-only.conf'
-  sudo -e '/etc/fstab'
+  sudo -e '/etc/ssh/sshd_config.d/custom-pubkey-only.conf'
-  ,discard
+===== Sensors =====
-==== Service ====
+==== Detect ====
-  * ''fstrim.timer'' is already enabled out-the-box, but this is useful for historical purposes
+****
-  * TODO: Verify
+  sudo sensors-detect --auto
+==== Watch ====
+****
-  sudo systemctl enable 'fstrim.timer' --now && sudo systemctl start 'fstrim' && sync && sudo systemctl status 'fstrim' -l
+  sudo watch -n0.1 sensors
 ===== Uncomplicated Firewall =====
   * Allows SSH
+  * :!: Does not limit SSH ((this caused issues; better to just secure SSH))
+  * See [[notes:ufw|ufw]] for more notes
   sudo ufw reset && sudo ufw default deny && sudo ufw logging off && sudo ufw allow 'ssh' && sudo ufw enable && sudo systemctl enable 'ufw'