diff --git a/docs/harden-shh.md b/docs/harden-shh.md deleted file mode 100644 index 09775bcc..00000000 --- a/docs/harden-shh.md +++ /dev/null @@ -1,33 +0,0 @@ ---- -id: harden-ssh -title: How to harden the SSH configuration? -sidebar_label: Harden SSH ---- -Although you don't port-forward SSH to the public internet (if you've followed this guide), which is BTW also really not recommended, you should nonetheless harden your SSH configuration to make SSH access for an attacker (e.g. from inside your home network) as hard as possible. - -Here is how to do this: -1. Run over CLI: - ```shell - sudo bash /var/scripts/not-supported.sh - ``` -1. Choose `Harden SSH` -1. Choose to install/reinstall Harden SSH -1. It should report now that SSH was successfully hardened -1. :::note optional 2FA SSH authentication - If you have a smartphone with an OTP app like Google Authenticator or password manager like Keepass or Bitwarden (or Vaultwarden), you can now choose to enable two-factor authentication for SSH connections. It is optional since you might will be no longer able to connect via SSH to your server if something goes wrong here. - 1. Choose `Yes` now to **enable Two-factor authentication for SSH connections** - 1. Scan the shown QR code with the OTP app and note down the emergency codes - 1. Confirm that you've saved them - - Now, the next time you connect to your server via SSH, you will get asked for the OTP code which makes SSH much more secure. - ::: - :::caution - You will loose access to your server via SSH if you don't scan the QR code or note down the emergency codes.
- You can simply disable the 2FA authentication for SSH by running this script again. - ::: - ---- - -:::tip -If you want to make SSH as secure as possible, you can also use SSH-keys to access your server. Here is a good guide how to configure this: [click here](https://www.digitalocean.com/community/tutorials/how-to-set-up-ssh-keys-on-ubuntu-20-04) -::: \ No newline at end of file diff --git a/docs/remotedesktop.md b/docs/remotedesktop.md index 779d88a7..6cd8dd93 100644 --- a/docs/remotedesktop.md +++ b/docs/remotedesktop.md @@ -16,7 +16,7 @@ It allows to use graphical tools directly on your server like viewing files from 1. Choose to install the `Gnome Desktop` 1. Wait until everything is installed 1. Now, you should see a menu with available recommended programs. Just press `[ENTER]` to **install all** of them. -1. Wait until everything is installed (you need to confirm that you want to install `MakeMKV` and `OnlyOffice` manually) +1. Wait until everything is installed (you need to confirm that you want to install `MakeMKV` manually) 1. At last, you should get asked if you want to **reboot** your server and press `[ENTER]` to do so. :::tip @@ -27,9 +27,6 @@ Here is how to connect you your server via RDP: [instructions](./rdp-connect) Currently is audio output via RDP not supported!
Because of that VLC will constantly show errors when you open a movie in a Remotedesktop session. You can disable those error messages by opening the VLC preferences (press `[CTRL] + [P]` in VLC), click on the Audio tab and **disable** the option `Enable Audio`. After restarting VLC, the issue should be gone. ::: -:::info pdf files -You can use OnlyOffice in the Remotedesktop session to view PDF files. So just select OnlyOffice to open PDF files if it should mistakenly report that no program is installed to open PDF files! -::: :::info edit metadata of audio/music files Here is a good guide how you can use MusicBranz Picard to edit the metadata of your Audio/Music files: [click here](./picard) ::: diff --git a/docs/restore-backup.md b/docs/restore-backup.md index 4f3b3dea..720652bb 100644 --- a/docs/restore-backup.md +++ b/docs/restore-backup.md @@ -21,6 +21,7 @@ Please read carefully through all info there, especially the `Things to check be :::warning At least Nextcloud 24 is required to proceed below, so make sure that you upgrade at least to this version! ::: +1. Disable port-forwarding in your router for all ports in order to make sure that no changes are made in the meantime 1. Create a backup of your server ([instructions](./manual-backup)) 1. Only if the backup (from step 2) was created successfully (otherwise skip this 3rd step!), get your `Off-Shore Backup HDD`, connect it to your server and create a new off-shore backup by running: ```shell @@ -40,7 +41,8 @@ At least Nextcloud 24 is required to proceed below, so make sure that you upgrad ::: ## Execution -1. **Shut down** your server by pressing the power button +1. If not already done, disable port-forwarding in your router for all ports in order to make sure that no changes are made in the meantime +1. **Shut down** your server by pressing the power button or running `sudo poweroff` via CLI. 1. **Disconnect** all external drives from your server 1. **Execute** the complete Basic setup section ([this section](./basic-setup))
:::note @@ -89,7 +91,6 @@ If the Nextcloud web interface works as expected, you will need to reinstall all ### Optional are those (You only need to reinstall them **if they were installed before**) - Reenable the Firewall on your server ([instructions](./firewall)) -- Reharden the SSH configuration ([instructions](./harden-ssh)) - Reinstall OnlyOffice for Nextcloud ([instructions](./onlyoffice)) - Reinstall High-Performance backend for Nextcloud Talk ([instructions](./hpb)) - Reinstall Push Notifications for Nextcloud ([instructions](./notify_push)) @@ -104,7 +105,6 @@ Attention! Please use the **same domain** that you've used before for Bitwarden ::: - Reinstall Pi-hole ([instructions](./pi-hole)) - Reinstall PiVPN ([instructions](./pivpn)) -- Redo the change of the update time ([instructions](./change-update-time)) - Redo the change to only allow access to your server from inside your home network ([instructions](./home-access-only)) - Reinstall Plex Media Server ([instructions](./pms)) :::note diff --git a/sidebars.js b/sidebars.js index 06391981..8cc292a1 100644 --- a/sidebars.js +++ b/sidebars.js @@ -12,7 +12,7 @@ module.exports = { "SMB-server and user accounts": ['smb-server', 'run-smb-server', 'create-users', 'create-shares', 'recycle-bin-cleanup'], "Customize Nextcloud": ['customize-nextcloud', 'previewgenerator', 'cookielifetime', 'share-folder', 'workspaces', 'user-flows'], "Activate Let's Encrypt": ['activate-lets-encrypt', 'ddns', 'ddns-providers', 'activate-ddns', 'configure-ddclient', 'port-forwarding', 'activate-tls', 'congratulations'], - "Optional": [ {"Server Addons": ['firewall', 'harden-ssh', 'vaultwarden', 'pi-hole', 'pivpn', 'pms', 'remotedesktop']}, + "Optional": [ {"Server Addons": ['firewall', 'vaultwarden', 'pi-hole', 'pivpn', 'pms', 'remotedesktop']}, {"Nextcloud Addons": ['share-link-audit', 'onlyoffice', 'hpb', 'notify_push', 'pdfannotate', 'whiteboard', 'pico', 'extract', 'more-apps']}, {"Miscellaneous": ['digitize', 'change-update-time', 'home-access-only']} ],