Project

General

Profile

Actions

The ungleich static web hosting infrastructure

This document concerns the infrastructure side and is intended for ungleich staff. See Ungleich Static Web Hosting page for end-user/customer documentation.

Status

This document is in PRODUCTION.

Environment

  • LDAP-backed PAM with sssd.
  • SFTP (chrooted in homedir) for non-root users (see sshd_config).
  • Automatic home directory creation via pam_mkhomedir.so
  • NGINX running serving static files.
  • HDD storage mounted in /home.
    - FIXME: quota are not implemented yet! Let's trust our users for the time being. We have monitoring in any case :-)
  • Monitored by service-monitoring.ungleich.ch.

Tooling

  • Defined in dot-cdist/manifest/ungleich under staticwebhosting.ungleich.ch entry.

Updated by Timothée Floure about 1 year ago · 3 revisions