nostr/strfry
1
0
Fork 0
mirror of https://github.com/hoytech/strfry.git synced 2025-06-16 16:28:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update DEPLOYMENT.md

Browse Source 
Updated to add more ufw settings and fix ulimit issues on some systems
This commit is contained in:
Jascha
2023-07-13 11:32:59 -07:00
committed by GitHub
parent d83001b40a
commit d44b163cc3
1 changed files with 12 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
docs/DEPLOYMENT.md
View File

@ -42,7 +42,7 @@ While you wait for your server to provision, go to your DNS provider and point a
cd strfry
# Install complication dependencies
sudo apt install -y git build-essential libyaml-perl libtemplate-perl libregexp-grammars-perl libssl-dev zlib1g-dev liblmdb-dev libflatbuffers-dev libsecp256k1-dev libzstd-dev
sudo apt install -y git build-essential libyaml-perl libtemplate-perl libregexp-grammars-perl libssl-dev zlib1g-dev liblmdb-dev libflatbuffers-dev libsecp256k1-dev libzstd-dev ufw
# Build it
git submodule update --init
@ -100,6 +100,10 @@ Note here you'll use the DNS name you configured above
Edit the `db = "./strfry-db/"` line to: `db = "/var/lib/strfry/"`
Check system hard limit `ulimit -Hn`
If for example `524288` can set this to `nofiles = 524288` in strfry.conf (or set to 0)
Copy the strfry.conf file to /etc and change ownership:
sudo cp strfry.conf /etc/strfry.conf
@ -149,6 +153,13 @@ Now let's open the port to the outside world:
sudo ufw allow 'Nginx Full'
sudo ufw status
ufw default deny incoming
ufw default allow outgoing
ufw allow 22/tcp # allow incoming SSH traffic
ufw allow 80/tcp # allow incoming HTTP traffic
ufw allow 443/tcp # allow incoming HTTPS traffic
For added security you can `sudo apt install -y fail2ban`
sudo certbot --nginx -d relay.yourdomain.com