emrah-jessie is an installer to create the containerized systems on Debian
Jessie host. It built on top of LXC (Linux containers).
- About
- Usage
- Example
- Available templates
- Requirements
Download the installer, run it with a template name as an argument and drink a coffee. That's it.
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej <TEMPLATE_NAME>To install a containerized PowerDNS system, login a Debian Jessie host as
root and
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej ej-powerdnsInstall only a containerized Debian Jessie.
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej ej-baseInstall a ready-to-use email system.
- Exim4 with a MariaDB backend as SMTP server
- Dovecot as IMAP/POP3 server
- Roundcube as a webmail application
- Vexim2 to manage the virtual mailboxes
- SpamAssassin as a spam filter
- ClamAV as a virus scanner
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej ej-emailhttps://<IP_ADDRESS>/veximto manage the virtual mailboxeshttps://<IP_ADDRESS>/roundcubeas a webmail application- SMTP: 25 (+STARTTLS) and 587 (+STARTTLS)
- POP3: 110 (+STARTTLS)
- POP3S: 995 (SSL/TLS)
- IMAP: 143 (+STARTTLS)
- IMAPS: 993 (SSL/TLS)
To use Let's Encrypt certificate, connect to ej-email container as root and
FQDN="your.host.fqdn"
certbot certonly --webroot -w /var/www/html -d $FQDN
chmod 750 /etc/letsencrypt/{archive,live}
chown root:ssl-cert /etc/letsencrypt/{archive,live}
mv /etc/ssl/certs/{ssl-ej.pem,ssl-ej.pem.bck}
mv /etc/ssl/private/{ssl-ej.key,ssl-ej.key.bck}
ln -s /etc/letsencrypt/live/$FQDN/fullchain.pem \
/etc/ssl/certs/ssl-ej.pem
ln -s /etc/letsencrypt/live/$FQDN/privkey.pem \
/etc/ssl/private/ssl-ej.key
systemctl restart exim4.service
systemctl restart dovecot.service
systemctl restart apache2.serviceInstall a ready-to-use self-hosted Git service. Only AMD64 architecture is supported for this template.
- Gogs
- Git
- Nginx
- MariaDB
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej ej-gogs-
Access
https://<IP_ADDRESS>/to finish the installation process. Easy! -
Password: There is no password for the database. So, leave it blank! Don't worry, only the local user can connect to the database server.
-
Domain: Write your host FQDN or IP address. Examples: git.mydomain.com 123.2.3.4
-
SSH Port: Leave the default value which is the SSH port of the container.
-
HTTP Port: Leave the default value which is the internal port of Gogs service.
-
Application URL: Write your URL. HTTP and HTTPS are OK. Examples: https://git.mydomain.com/ https://123.2.3.4/
-
The first registered user will be the administrator.
To use Let's Encrypt certificate, connect to ej-gogs container as root and
FQDN="your.host.fqdn"
certbot certonly --webroot -w /var/www/html -d $FQDN
chmod 750 /etc/letsencrypt/{archive,live}
chown root:ssl-cert /etc/letsencrypt/{archive,live}
mv /etc/ssl/certs/{ssl-ej.pem,ssl-ej.pem.bck}
mv /etc/ssl/private/{ssl-ej.key,ssl-ej.key.bck}
ln -s /etc/letsencrypt/live/$FQDN/fullchain.pem \
/etc/ssl/certs/ssl-ej.pem
ln -s /etc/letsencrypt/live/$FQDN/privkey.pem \
/etc/ssl/private/ssl-ej.key
systemctl restart nginx.serviceInstall a ready-to-use livestream system.
-
Nginx server with nginx-rtmp-module as a stream origin. It gets the RTMP stream and convert it to HLS.
-
Nginx server with standart modules as a stream edge. It publish the HLS stream.
-
Web based video player
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej ej-livestream-
rtmp://<IP_ADDRESS>/livestream/<CHANNEL_NAME>to push a stream (H264/AAC) -
http://<IP_ADDRESS>/livestream/hls/<CHANNEL_NAME>.m3u8to pull the HLS stream -
http://<IP_ADDRESS>/livestream/channel/<CHANNEL_NAME>for the video player page -
http://<IP_ADDRESS>:10080/livestream/statusfor the RTMP status page
-
nginx-rtmp-module Arut's repo
-
nginx-rtmp-module Sergey's repo
Install a ready-to-use DNS system.
- PowerDNS server with a PostgreSQL backend
- Poweradmin - the web based control panel for PowerDNS
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej ej-powerdnshttp://<IP_ADDRESS>/poweradminto access the DNS control panelhttps://<IP_ADDRESS>/poweradminto access the DNS control panel via HTTPS
Install a ready-to-use WAF (Web Application Firewall) system.
- lua-resty-waf - High-performance WAF built on the OpenResty stack
- Nginx as the proxy server
wget https://raw.githubusercontent.com/emrahcom/emrah-jessie/master/installer/ej
bash ej ej-waf- Edit
/etc/nginx/conf.d/upstream.conffile inej-wafcontainer to set your backend server
emrah-jessie requires a Debian Jessie host with a minimal install and
Internet access during the installation. It's not a good idea to use your
desktop machine or an already in-use production server as a host machine.
Please, use one of the followings as a host:
-
a cloud host from a hosting/cloud service (Digital Ocean's droplet, Amazon EC2 instance etc)
-
a virtual machine (VMware, VirtualBox etc)
-
a Debian Jessie container
-
a physical machine with a fresh installed Debian Jessie