Go to file
2025-11-26 14:01:26 +01:00
public Initial guide 2025-11-18 14:44:53 +01:00
00_setup.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
01_applications.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
02_firewall.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
03_systemd.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
04_nginx-certbot.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
05_beszel.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
06_uptime-kuma.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
07_bunny-cdn.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00
08_alma-linux.md Added to SELinux section 2025-11-26 14:01:26 +01:00
README.md Changed file names to nicer present in submenus 2025-11-26 13:43:08 +01:00

Guide for systems / infra maintanance and creation

This guide provides good defaults and recipes on how to set up infra in a reliable, stable, effecient and secure way.

It guides you from setting up a fresh machine, to installing build dependencies, configuring the firewall, serving and monitoring your apps, protecting them from DDOS and more.

It assumes you are setting up or maintaining an AlmaLinux (9, 10) or a similar RHEL-based server.

Setting up a new machine

Prepare a new machine for use with an admin user. Lock out everything but SSH to it.

Installing aplications and build tools

Download packages to build future applications such as NodeJS / Rust. Set up your apps on /usr/local/bin/ path.

Firewall (opening/checking ports)

How to open firewall to let outside traffic to your apps. How to check and set firewall zones. If your service is timing out (nothing gets thru) this is probably the answer.

Running services and logging with systemd

How to set up a new systemd service and read its logs.

Nginx & Certbot

How to set up Nginx and Certbot to serve your apps with an SSL cert for your desired domain.

Monitoring servers (Beszel)

How to monitor servers with Beszel tool which gives you system load stats and systemd service stats.

Monitoring websites and apis and serving a Status Page (Uptime Kuma)

How to monitor your services and websites with Open Kuma.

Protecting your services and websites with BunnyCDN

How to protect and hide your services and websites from DDOS attacks.

AlmaLinux / RHEL linux