ImcChNewProd08

Table of content :

Infos

• ester.indymedia.org (commandante ester)
• debian etch 4.0
• 512MB Ram
• 79GB HD

ToDo:

• preparing work
  • advertise interruption (temporal openposting closing) and announce new server on site (at least 1 week before) -> who prepares? om (italian version http://ch.indymedia.org/it/2008/01/56379.shtml8)
  • cacert-signed certificate should be organised -> ng
  • beginning to sync the site to the new prod server -> ng
• configuring system:
  • adding indy.ch users (ch,ng,whoeverwantsauser) ng
  • configuring sudo ng
  • configuring ssh ng
  • installing and configuring shorewall (port 22 port 443) ng
  • setting up crypted harddisk for certs, generate cert
  • ensure that dns ttl is low
• installing mir
  • start with the rsyncing of the site & make db dump on old server
  • see https://docs.indymedia.org/view/Devel/MiRInstallDebian
• moving a first instance of the site
  • import db-dump
  • finish rsyncing the site
• test and play with the setup
• move final site
  • close openposting on old server
  • dump and copy db, reimport
  • rsync last deltas from site
  • change dns
  • reopen openposting
  • move scripts and certs
  • add cronjobs
• backup / monitoring
  • install backupninja
  • configure pushing of backups to offsite (ng)
  • maintenace things
  • install munin and plugins
• setup hidden service
  • http://www.torproject.org/docs/tor-hidden-service.html.en
  • generate second self signed cert for onion-dns
  • (include onion dns in templates?!)
• inform about the move and the new certificate (and maybe as well about the hidden service)
• clean up kosmos, take down stuff there