398
edits
Changes
→Current Setup
== Physical Infrastructure ==
=== NFS Hosts ===* [[Infrastructure:Dirtycow|dirtycow]] - Primary NFS server, 8x2TB raidz2 array* [[Infrastructure:Cyberdelia|Cyberdeliacyberdelia]] is the only connected physical machine right now. It contains 48 GB of memory with 4 ethernet interfaces; only eth4 is connected and is attached to br0. All hosts are on the ECE network behind router.ece.vt.edu- OFF, a gateway featuring ARP proxying but no IPv6. For global DNS changes under ece.vt.edu7x1TB raidz2 array, server room access, and getting hosts added to the ARP proxy, contact Branden McKagen.sitting on shelf instead of shelf
== On the Network Architecture ==
''Further Information: [[Infrastructure:Networking]] and [[Infrastructure:Network]]''
== Services ==
''Further information: [[:Category:Services]]''
** Shell server
** [[Email]]
** [[Wadsworth]]
* [[Infrastructure:RazorChimera|Razorchimera]]** LdapFreeIPA* [[Infrastructure:Milton|Milton]]/[[Infrastructure:Sczi|Sczi]]
** Website
*** Wiki
*** Main Page
*** linx
*** public file shares** git[https://bash.vtluug.org vtbash]* [[Infrastructure:CyberdeliaDirtycow|Cyberdeliadirtycow]]** VMs Storage for projects** other all primary services** TankNFS - ZFS pool name is cistern*** NFS[[Infrastructure:Meltdown|meltdown]]*** milton_srv (website files)VM host for above services
== Website details ==
=== Current Setup ===
All vtluug websites are run on nginx on milton[[Infrastructure:Sczi|sczi]]. These sites are currently functional:
* gobblerpedia.org
* hokieprivacy.org
* vtluug.org
* wiki.vtluug.org (this redirects to vtluug.org/wiki/)* bash.vtluug.org* vtluug.org/users/~$user
All of these sites exclusively allow for the use of tls TLS connections. Hokie Privacy has a cert from letsencrypt,while all other All services are verified by StartCom.use automatically updated Currently, milton has '''no startup script''' for the website. If things go down, someone has to run<pre>root@milton:/srv/http/vtluug.org# sudo -u www-data uwsgi --yaml uwsgi.yml</pre>in a tmux session, to restart [https://uwsgi-docs.readthedocs.org/en/latest/ uWSGI]. It is alsounlikely that nginx will start properly because of weird dependenciesletsencrypt certs.
==== Main Page ====
==== Wiki ====
The wiki currently runs fully on MediaWiki hosted on nginx (as opposed to the default include using a [https://github.com/vtluug/mediawiki-docker modified version of apache2, demanded by the Debian package)official mediawiki docker image].Postgres is used for You can auth with the database managementadmin account, AFAIK, and authentication is through [[User:wiki-admin|wiki-admin]] or a Google account. See note on [[Main_page]] about why LDAPisn't working yet. MediaWiki is a dated git version from the stablerepository, as of March 2016, however updating is more complicated than a git pull
===== Gobblerpedia =====
Runs on the same Mediawiki instance as this wiki. Similarly to LUUGWiki, only Google accounts or the admin user are supported logins.
These are VTLUUG services that haven't yet been properly restored:
* [https://github.com/mutantmonkey/foodforus foodfor.vtluug.org ] - For [[Wadsworth]]'s .pickfood and .foodvote commands. This is [[User:Timelord|jpo's]] fault.* tahoe.vtluug.org - [[user:mjh|mhazinsk's ]] Tahoe-LAFS grid
* git.vtluug.org - git hosting; previously a redirect to gitweb with gitosis as the SSH backend
* gitweb.vtluug.org - git hosting; previously gitweb
* [https://github.com/vtluug/campusmap map.vtluug.org ] - [[Openstreetmap|OSM]]* vtbash.org - based map of VT QDB* users.vtluug.org - member hosting of acidburn home directories
===Historically = Deprecated ====These are no longer needed but we should preserve the data/config:* ccdc.vtluug.org - website used for the [[Collegiate Cyber Defense Competition]] in the spring of 2011.* nagios.vtluug.org - was used for monitoring for a period but not kept up-to-date; the primary issue was that infrastructure, being hosted on the same server, tended to fail all at once* uniluug.org - deprecated project* security.ece.vt.edu - REDACTED* wargame.vtluug.org - vtluug's wargame pre-vtcsec* munin.vtluug.org - former attempt at monitoring* webchat.vtluug.org - channel webchat; version of the service still runs on the vtluug website as an embeded frame from freenode's website* cdn.vtluug.org - member website* randynance.info - member website* jessicaandchristopher.net - member website* vtcybersecurity.org - member website from pre-csec days Prior to the current site, which was written in Python using Django starting in 2010 and deployed in 2011, the VTLUUG website was a WordPress instance. The files for this still exist. Additional files and configuration data exist for multiple versions of dokuwiki and mediawiki. There are also files for a NewsBlur installation which was never functional, and "bitcoin," the purpose of which is unknown. For a time, a static version of vtbash.org was hosted at bash.vtluug.org. Until recently, VTLUUG ran a Gopher server on Milton, with a small welcome page and access to /files. Git hosting was also provided; authenticated access was over SSH with [https://github.com/tv42/gitosis gitosis] and public access was via Gitweb and the insecure Git protocol. vtluug.org/public/$user/ was previously a source directory of files placed in a user's $HOME/public directory on NFS. <nowiki>[When? I thought it was always users.vtluug.org?]</nowiki>
=== Considerations for the future Goals === It would be preferable to keep all existing sites functional. See [[userVTLUUG:andreim|AamStrategic_plan#Web_Services]] suggested the use of [https://caddyserver.com/ caddy]to replace nginx, especially on static sites, because it provides automatic letsencrypt. It is also important to ensure there are '''startup scripts''' for sczi, so that a reboot of it doesn't result in a 10-hour website outage. ==== Encryption ====All sites should move to automatic letsencrypt certificates within the next few months. letsencrypt is still in beta, but it provides fully functionaland low-hassle 3-month certificates. They will have integration for nginx soon, which will decrease the complexity of getting certs. It may also be of interest to the club to revive [[monkeysphere]] signing on the servers. ==== Project Hosting ==== Most vtluug internal projects (e.g. HokiePrivacy) are currently hosted on git repositories on milton. How to move forwards with these is stillindeterminate. For public hosting, there has been some conversation about using [https://github.com/gogits/gogs Go Git Service (gogs)], for public,www-viewable git repositories. ==== Gobblerpedia ==== [[gp:Main page|Gobblerpedia]] is effectively non-functional because account creation was disabled to prevent spam. This needs to be addressed by adding captchas which are Blacksburg-specific, limiting account creation access to local IP addresses, '''or''' enabling some form of LUUG-managed account creation. One suggestion was using CAS/Login future goals involving web services to authenticate, however that makes it difficult for Blacksburgresidents to add content, and has other disadvantages. ==== VTLUUG Main Page ==== This needs to be kept up-to-date, and have some way of adding calendar information. ==== VTLUUG Wiki ==== Meeting creation script needs to be re-implemented.
== Addressing ==
[[Category:Infrastructure]]
[[Category:VTLUUG:Projects]]
[[Category:Featured content]]