
INSTALANDO O PROXY.LSTIMELAPSES.COM.BR
hostnamectl set-hostname proxy.lstimelapses.com.br
sudo timedatectl set-timezone America/Sao_Paulo
apt update
apt upgrade
hostnamectl set-hostname proxy.lstimelapses.com.br
sudo timedatectl set-timezone America/Sao_Paulo
hostnamectl set-hostname proxy.lstimelapses.com.br –pretty
apt install net-tools
sudo apt install iputils-ping
sudo apt-get install open-vm-tools
apt install rsync
apt install cron
Fazer o ubuntu usar 100% do espaço do disco para o root
lvextend -l +100%FREE /dev/ubuntu-vg/ubuntu-lv
resize2fs /dev/mapper/ubuntu–vg-ubuntu–lv
HARDENING THE SERVER
apt clean
apt autoremove
adduser lst
adduser lst sudo
id lst
Faça logout
Faça login como lst
sudo -i
vi /etc/ssh/sshd_config
PermitRootLogin no
reboot
Tente login como root para testar
Installing….
apt install haproxy
sudo nano /etc/ssh/sshd_config
Add the following lines
allowtcpforwarding yes
AuthorizedKeysFile .ssh/authorized_keys
PubkeyAuthentication yes
systemctl restart haproxy
systemctl enable haproxy
Copie o haproxy.cfg do backup e a pasta certs e coloque em /etc/haproxy
Na máquina local (ex: lstsrvkit01)
ssh-copy-id lst@proxy.lstimelapses.com.br
https://www.haproxy.com/documentation/hapee/latest/security/authentication/basic-authentication/