The ungleich static web hosting infrastructure¶

This document concerns the infrastructure side and is intended for ungleich staff. See Ungleich Static Web Hosting¶<br /> page for end-user/customer documentation.

• Table of contents
• The ungleich static web hosting infrastructure
  • Status
    • Environment
    • Tooling

Status¶

This document is in PRODUCTION.

Environment¶

• LDAP-backed PAM with sssd.
• SFTP (chrooted in homedir) for non-root users (see sshd_config).
• Automatic home directory creation via pam_mkhomedir.so
• NGINX running serving static files.
• HDD storage mounted in /home.
  - FIXME: quota are not implemented yet! Let's trust our users for the time being. We have monitoring in any case :-)
• Monitored by service-monitoring.ungleich.ch.

Tooling¶

• Defined in dot-cdist/manifest/ungleich under staticwebhosting.ungleich.ch entry.