Ubuntu 14.04 / python / Django / uWsgi / Nginix / postgres / postgis / upstart
# Notes and reference on building Ubuntu 14.04 server
adduser skywalker
echo "skywalker ALL=(ALL:ALL) ALL" >> visudo
nano /etc/ssh/sshd_config
Port 10022
PermitRootLogin no
AllowUsers skywalker
service ssh restart
sudo apt-get update
sudo apt-get upgrade
sudo apt-get install python-virtualenv
sudo pip install virtualenvwrapper
sudo apt-get install mercurial
https://confluence.atlassian.com/pages/viewpage.action?pageId=270827678#SetupSSHforGitandMercurialonMacOSX/Linux-startagent
clone the repo
sudo apt-get install python-dev libffi-dev
maakevirtualenv starwars
workon starwars
pip install -r requirements.txt
deactivate
sudo apt-get install libpq-dev
sudo apt-get install postgresql postgresql-contrib
http://www.peterstratton.com/2014/04/how-to-install-postgis-2-dot-1-and-postgresql-9-dot-3-on-ubuntu-servers/
sudo adduser yoda
sudo -u postgres createuser -D -A -P --superuser yoda
sudo -u postgres createdb -O yoda starwars
workon starwars
python manage.py migrate
python manage.py runserver
deactivate
sudo apt-get install nginx
sudo cp code/starwars/conf/djago /etc/nginx/sites-available
ln -s /etc/nginx/sites-available /etc/nginx/sites-enbled
sudo service nginx restart
mkdir /home/skywalker/code/starwars/log
sudo chmod -R 777 /home/skywalker/code/starwars/log
sudo mkdir /opt/django-nginx-uwsgi/
sudo chmod -R 777 /opt/django-nginx-uwsgi/
sudo chown skywalker:www-data /opt/django-nginx-uwsgi/
sudo usermod -g www-data skywalker
id
sudo cp /code/starwars/conf/upstart.conf /etc/init/uwsgi.conf
sudo reboot
## important
iptables -L
cat /etc/host.conf
cat /etc/hosts.allow
cat /etc/hosts.deny
netstat -tulpn | grep ssh
## setting up SSL - Reference https://www.digitalocean.com/community/tutorials/how-to-create-an-ssl-certificate-on-nginx-for-ubuntu-14-04 ## Hardening SSL https://aralbalkan.com/scribbles/setting-up-ssl-with-nginx-using-a-namecheap-essentialssl-wildcard-certificate-on-digitalocean/ https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
