= lvps92-51-161-129.dedicated.hosteurope.de =

== Tickets ==

[[TicketQuery(col=ticket|priority|summary|owner|created|modified,component=System administration,keywords=~lvps92-51-161-129.dedicated.hosteurope.de,order=modified,desc=true,table)]]

== Basic information ==
 
=== Updates ===
Manually, by CLARIN-ERIC sysops.

==== Update history ====
|| Date || Updater || Changes || Details ||
|| 2016-06-14 || wilelb || Upgrade  1 Package (+2 Dependent packages) || [wiki:./2016-06-14_details details] ||
|| 2015-12-08 || wilelb || Upgraded 1 package || [wiki:./2015-12-8_details details] ||
|| 2015-11-12 ||  wilelb || Installed 2 packages, upgraded 116 packages || [wiki:./2015-11-12_details details] ||

=== Backups ===
No backups, vlo data can be re-harvested.

=== Firewall ===
Firewalld, managed by by CLARIN-ERIC sysops.

=== Virtual Hosts ===
 * [wiki:vlo.clarin.eu]: production vlo website

== Detailed information ==

Hosted at Hosteurope.

Responsible: CLARIN sysops <sysops@clarin.eu>

Server/OS/configuration maintenance: CLARIN sysops <sysops@clarin.eu>

Managing users, content and other admin tasks: CLARIN sysops <sysops@clarin.eu>

=== Services ===
 * Apache2.4.6 ({{{service httpd start}}} {{{service httpd status}}})
 * Tomcat 7.0.54 ({{{service tomcat start}}} {{{service tomcat status}}})
 * java-1.8.0-openjdk
 * Collectd
 * firewalld (http://www.certdepot.net/rhel7-get-started-firewalld/)

===  Applications ===
 * Vlo
    * Solr
      * /srv/webapps/vlo/current/war/solr
    * Vlo webapp 
      * /srv/webapps/vlo/current/war/vlo/
    * Vlo importer
      *  /srv/webapps/vlo/current/bin
 * OAI Harvest manager
    * /opt/oaiharvest-vloimport.sh
    * bin: /opt/oai-harvest-manager
    * uses java 1.7 in /opt/jre1.7.0_79

Data
 * /srv/vlo-data

=== Firewalld configuration ===

http://www.certdepot.net/rhel7-get-started-firewalld/
https://www.digitalocean.com/community/tutorials/how-to-configure-firewalld-to-protect-your-centos-7-server
http://forums.fedoraforum.org/showthread.php?t=289907

By default interfaces are assigned to the public zone. This zone only allows external ssh access.

Create a new zone "webserver":

Create the new zone
{{{
sudo firewall-cmd --permanent --new-zone=webserver
}}}

Add services to the new zone
{{{
sudo firewall-cmd --permanent --zone=webserver --add-service=http
sudo firewall-cmd --permanent --zone=webserver --add-service=https
sudo firewall-cmd --permanent --zone=webserver --add-service=ssh
}}}

Assign a network interface to the zone
{{{
firewall-cmd --permanent --zone=webserver --change-interface=venet0
}}}

Activate the changes
{{{
sudo firewall-cmd --reload
}}}

Note: 
The interface assignment might not be persisted over reboots. If this is the case edit:
{{{
/etc/firewalld/firewalld.conf
}}}
and change the default zone.

See:
 * https://bugs.centos.org/view.php?id=7526
 * https://bugs.centos.org/view.php?id=7407