Differenze tra le versioni di "Server/lessema/Technical documentation"
| Riga 15: | Riga 15: | ||
== Add Unix user == | == Add Unix user == | ||
| − | + | Create the user without password and with a public SSH key. | |
| − | |||
| − | |||
| − | |||
| − | + | Shortcut: | |
| − | |||
| − | + | <pre> | |
| − | + | /root/scripts/add-user.sh | |
</pre> | </pre> | ||
| − | Source code | + | Source code from [[Server/Setup]] |
| − | |||
| − | |||
;Important | ;Important | ||
: After creation, mark the related user page in this website with: | : After creation, mark the related user page in this website with: | ||
| − | :: {{Tl|Accesso server wmit|lessema|sistemisti}} | + | :: {{Tl|Accesso server wmit|lessema|sistemisti}} |
== On-site backup == | == On-site backup == | ||
Versione delle 10:44, 9 mag 2023
Unix users with sudo
Current enabled users with sudo:
- civihost-samuele (
💼 civih) - for CiviCRM development - civihost-stefano (
💼 civih) - for CiviCRM development - civihost-alessio (
💼 civih) - for CiviCRM development - emerald-stefano (
💼 eme) - tu support CiviCRM - anylink-davide-cuteri (
💼 Anylink) - in charge of operating system updates, backups, etc. - valerio-bozzolan (volunteer)
Password authentication is not allowed.
Add Unix user
Create the user without password and with a public SSH key.
Shortcut:
/root/scripts/add-user.sh
Source code from Server/Setup
- Important
- After creation, mark the related user page in this website with:
- {{Accesso server wmit|lessema|sistemisti}}
On-site backup
At 23:00 an on-site copy of all databases and webserver files are saved in this location:
/var/backups/wmi/lessema.wikimedia.it
Note: the permissions of the parent directory MUST be set to 750 root:root to keep the backups not accessible by untrusted users (note: the www-data is considered not trusted).
The execution time can be edited with
crontab -e
Note: the backup script prevents duplicate executions caused by daylight saving or standard time changeover.
The backup instructions can be configured here:
/opt/micro-backup-script/backup-instructions.conf
This is the source code of our dummy backup script in use:
https://gitpull.it/source/micro-backup-script/
Off-site backups
The same script that does #On-site backup also push the backup on server ⚙️ horror in this position:
/var/backups/wmi/lessema.wikimedia.it
The users are authorized to access this location:
💼 civih(preferred professional contact)💼 eme(secondary professional contact)- User:Valerio Bozzolan (emergency volunteer contact)
The exact data retention is documented on server ⚙️ horror.
Other on-site backups
There is also this location with additional backups handled by 💼 civih:
/mnt/backup/databases
Script:
/root/mysql_db_backup.sh
Usually they are executed at 11:00, 15:00, 18:00. If you notice slowness in the application in these hours, consider changing or disabling this backup entry.