gilangvperdana

General Teleport

If you want to make a cluster for jump host/bastion to your server, you can install Teleport. on this guide, will be guided to install then expose with NGINX Reverse proxy.

Prerequisites

• Ubuntu 20.04LTS
• 1 GB RAM
• 1 VCPU
• 20 GB Storage

Installation Teleport

gilangvperdana

System Updates

http://bookofzeus.com/harden-ubuntu/initial-setup/system-updates/

Keeping the system updated is vital before starting anything on your system. This will prevent people to use known vulnerabilities to enter in your system.

sudo apt-get update
sudo apt-get upgrade
sudo apt-get autoremove
sudo apt-get autoclean

gilangvperdana

TOPOLOGY

Internet -> Ubuntu Server -> Mikrotik -> End Device

• Ubuntu Server has 2 physical interface (ens3 & ens4)
  • 1 from Internet (ens3)
  • 1 for Mikrotik (ens4)

Goals

• Can create 1 Virtual Interface (ens3.2) from 1 Physycal Interface (ens3)
• Can deliver multiple vlan tag (1 & 10) for ens4 with different gateway

gilangvperdana

General

Here is my experience installing Exporter on Proxmox and visualizing it on Grafana.

Install PVE Exporter

python3 -m pip install prometheus-pve-exporter

Add User

gilangvperdana

General

Protect your Ubuntu Server with Fail2ban

Installation

apt install -y fail2ban

Check Status Ban

• Default jail name is sshd

gilangvperdana

General

• Project opensource from prometheus-ssh-exporter
• Overview :

Version 1: Docker Run

docker run -d -p 999:9999 -v /run/utmp:/run/utmp flor0/prometheus-ssh-exporter

gilangvperdana

General

This is workaround for install stunnel4 (SSH over HTTPS)

Command

apt install -y stunnel4

cd /etc/stunnel/
openssl req -new -newkey rsa:2048 -days 3650 -nodes -x509 -sha256  -subj '/CN=127.0.0.1/O=localhost/C=US'  -keyout /etc/stunnel/stunnel.pem  -out /etc/stunnel/stunnel.pem

gilangvperdana

General

This is just all about virtualbox workaround

Change UUID of VDI Disk

• https://www.groovypost.com/howto/virtualbox-error-uuid-hard-disk/

Convert QCOW2 to VDI (for Import to VBox)

• https://gist.github.com/mamonu/671038b09f5ae9e034e8

Check Health of QCOW2

gilangvperdana

General

If you want to overwrite your /etc/resolv.conf configuration with Netplan configuration you can follow this step.

Remove & Link

sudo rm /etc/resolv.conf
sudo ln -s /run/systemd/resolve/resolv.conf /etc/resolv.conf

Reference

gilangvperdana

Goals

• Can use Ubuntu Server 20.04 LTS to be Router Gateway include DHCP Server
• Client who connected to Ubuntu Server can be access Internet

Environement

• Ubuntu 20.04 LTS
• 2 Interface
  • 1 Interface from WAN / ISP (enp2s0)
  • 1 Interface for distribution clients (enx00e04c534458)