-
Notifications
You must be signed in to change notification settings - Fork 1
Milestone 0: Install FreedomBox as a $5 mo Digital Ocean droplet
Adrian Gropper edited this page Jan 3, 2016
·
3 revisions
- DO does not do debian unstable. Need to upgrade from 8.2 via https://wiki.debian.org/DebianTesting
- Digital Ocean MyAS 512 MB Memory / 20 GB Disk / NYC2 162.243.48.241 root password:
- adduser fbx / Password:
- ssh fbx@162.243.48.241 works but won’t sudo
- Do: https://www.privateinternetaccess.com/forum/discussion/18063/debian-8-1-0-jessie-sudo-fix-not-installed-by-default
- ssh fbx@162.243.48.241 works
- Changing to Debian unstable to prepare for FreedomBox
- via Duncan: You can upgrade using instructions from https://wiki.debian.org/DebianTesting
- in /etc/apt/ sudo nano sources.list and replace all jessie with testing
- run apt-get update && apt-get upgrade ; accept issue N default and config Keep default
- Reboot then check with cat /etc/debian_version - reports stretch/sid
- Make a Digital Ocean Snapshot
- sudo shutdown now
- Use the DO Control Panel to create a Snapshot
- Install FreedomBox per https://wiki.debian.org/FreedomBox/Hardware/Debian
- sudo apt-get update
- sudo apt-get install freedombox-setup accept default to ask on restart
- sudo /usr/lib/freedombox/setup | tee freedombox-setup.log
- Needed to delete the public key in /Users/adrian/.ssh/known_hosts
- ssh as fbx - reboot
- http://162.243.48.241 redirects to http://162.243.48.241/plinth but reports Forbidden
- https://httpd.apache.org/docs/trunk/mod/mod_authz_host.html
- sudo nano /etc/apache2/sites-available/plinth.conf added Require ip 146.115.179.89 and reboot
- https://162.243.48.241/plinth works! with self-signed cert issued to the Droplet name (MyAS)
- Plinth Setup
- added user adrian pw:
- Check versions:
- python3 -V shows Python 3.4.4
- python3 -c "import django; print(django.get_version())" shows 1.9
- Make a Digital Ocean Snapshot
- sudo shutdown now
- Use the DO Control Panel to create a Snapshot
- Get a Personal Domain
- Get a domain: https://ap.www.namecheap.com/ myas.xyz cost $1.18
- Make an A-Record to 162.243.179.89 and a CNAME for host www to myas.xyz
- Install Let’s Encrypt
- sudo apt-get update
- sudo apt-get install letsencrypt python-letsencrypt-apache
- Login as root from the Digital Ocean console
- Stop apache2: sudo service apache2 stop
- /etc/letsencrypt$ ls now shows: accounts csr keys renewal
- letsencrypt --apache
- “No host names found…” Accept default
- myas.xyz, www.myas.xyz
- Accept Easy
- Test with: https://www.ssllabs.com/ssltest/analyze.html?d=myas.xyz
- Make a Digital Ocean Snapshot
Tools
- nano http://mintaka.sdsu.edu/reu/nano.html for editing the sources.list file
- https://www.digitalocean.com/community/tutorials/how-to-add-delete-and-grant-sudo-privileges-to-users-on-a-debian-vps
- https://wiki.debian.org/FreedomBox/Manual/Firewall
- https://wiki.debian.org/FreedomBox/Manual
- https://wiki.debian.org/FreedomBox/Manual/Developer
- https://letsencrypt.readthedocs.org/en/latest/intro.html