After a few days of work in the server backend, finally I believe almost everything is up right now.
There are quite a lot of things that cause me issues in the backend.
DNS and Domain Issues
Firstly, I got my domain name and proceeded to register my DNS nameservers.
I waited for 3 days and thinking why the nameservers would not propagate to the world.
It turns out that I didn’t create the DNS zone in my hosting provider and assumed that I can only create the zone after the nameservers propagated.
I kept on getting an invalid hostname when trying to create a DNS zone on my hosting provider, and after I logged a ticket with them, they said I left an empty space after my domain name and causing the field being not validated correctly.
It seems like stupid stuff happens everywhere when I assumed empty spaces in strings should be already trimmed before being sent to server.
It is not as if I have not seen that before though so I reminded myself not be complacent anymore.
HTTPS Issues
HTTPS was pretty straight forward. After all the DNS records getting validated, getting Let’s Encrypt to obtain my cert was pretty easy.
Then it is all about getting Apache to use the certs and redirect all http requests to https.
The certs are having a validity of 90 days and can only be renewed after 60 days, so I just set a cronjob to run weekly to attempt to renew the cert.
Hopefully there are no issues with this, but I need to check 2 months later.
Security Issues
Within a few hours of bring up the server, I am already seeing frequent attempts to login to my server.
That means I have to do anything I can think of to make it secure, enabling SELinux, firewall, disable password login, disable root ssh login etc.
Hopefully it will remain secure, but I would need to check my logs often.
Email Issues
The website is not able to send out emails, and after some investigation, SELinux blocked Apache from sending emails.
After opening up the rule httpd_can_sendmail, everything was fine.
Contents
Not yet decided on what to post in this site yet.
I suppose it will mostly be about my personal interest.
Finally, welcome to my website, and don’t expect this to be updated.
