kvm_ebrana-imes_1
| Zakaznik | |
| cislo UVT | |
| jmeno | eBrana |
| rypien v(e) ebrana.cz | |
| gsm | +420776212134 |
| IP | |
| vnitrni/vlan | 192.168.24.101/24 |
| verejna/reverse | 109.205.75.50/50.hosting.uvt.cz |
| Proroutovane porty: | |
| 1194 | 1194 |
| 80 | 80 |
| 443 | 443 |
| Prostredky: | |
| VEID | |
| RAM | 4096 |
| CPU | 4 |
| Hesla systemova: | |
| root: | viz. keepass |
| uvt: | 1:VloRFhQYSEkREiA= |
| root@mysql: | 1:tqD+/P/4uraqqq/M |
| LDAP admin | 1:JSAmLSozMXJxcEM= |
| cn=Directory Manager | 1:JSAmLSozMXJxcEM= |
| LUKS | 1:2djWyNnJ19Lf19eDgYODsQ== (bude zmeneno ebranou) |
| LUKS (imes NEW) | 1:193J+9zBiv6B/s304e+M8Lg= |
Na serveru mimo bezne hostingove veci bezi OpenVPN, LDAP, samba a pdns.
Sprava uzivatelu a pristupu k OpenVPN se resi ve stylu volnyho, cili vsechny uzivatele v LDAP vcetne nastaveni OpenVPN. Pristup na "root" jen pres "su -" pro uzivatele v skupine "sysadmins".
Data jsou na cryptovanem LV /dev/vg_imes1/home_encrypted, decryptuje se do /dev/mapper/home_decrypted. Montuje se do /home. /var/lib/mysql je softlinkem do /home/services/mysql.
Spusteni/zastaveni sluzeb vcetne decryptovani je pomoci scriptu start_server a stop_server v /root/
Uzivatel UVT je v skupine sysadmins.
konfigurace a certifikaty openvpn