wikijs/en/server.md
2023-12-21 10:50:32 +01:00

2.4 KiB

title description published date tags editor dateCreated
Server true 2023-12-21T09:50:30.260Z markdown 2023-12-21T09:50:30.260Z

Details on the technology

Overview of servers used

Purpose Type Processor RAM HDD LAN OS
Current for all services virtual root server (KVM) AMD EPYC™ 7702 6x 3.35 GHz 32 GB DDR4 800 GB SSD 2.5 GBit/s Ubuntu 20.04

Currently, one server is used for all services. This should be sufficient for our current needs and membership numbers, and the first upgrade will only be a move to a single, larger server. Technically, it would be better and more secure to run the individual services on different servers. At the moment, however, we have of course decided to keep the costs low so that we can set a low annual fee.

Overview of software used

In addition to the directly accessible services, other software is also used:

  • nginx Webserver In addition to its direct function as a web server, nginx is primarily used as a proxy for almost all services so that they can only be accessed directly locally
  • OpenSSH Administrative access
  • PostgreSQL SQL database for some services
  • MariaDB SQL database for some services
  • Ufw Firewall
  • Fail2ban Bruteforce protection
  • Docker Containerization for some services
  • Redis In-memory database for some services

F.A.Q.

Why Ubuntu?

Certainly a legitimate question. However, the reasons are less technical and more pragmatic. The handling of Debian-based systems is very familiar and Ubuntu offers a slightly better update policy than Debian stable. With an Ubuntu desktop, things can easily be tested at the same time, as the environments are largely identical.

Why two SQL databases

Due to the fact that all services run on one server, MariaDB must be installed in addition to the preferred PostgreSQL, as some services unfortunately do not (yet?) support PostgreSQL.

Why Apache Webserver and not nginx?

Also simply due to lack of experience with nginx but relatively high expertise in dealing with Apache.

Migrated to nginx in the meantime.