Update System

# switch to user root
su -
apt update && apt upgrade
apt install sudo
usermod -aG sudo rayed 
# logout from root & user

Network

Enable New Interface

Ref: https://wiki.debian.org/NetworkConfiguration

sudo vi /etc/network/interfaces
:
auto enp0s8
iface enp0s8 inet dhcp
:
sudo ifup enp0s8

NTP

sudo vi /etc/systemd/timesyncd.conf 
:
NTP=sa.pool.ntp.org
:
sudo systemctl restart systemd-timesyncd
timedatectl timesync-status 

Security

Secure SSH

sudo vi /etc/ssh/sshd_config
:
PasswordAuthentication no
:
sudo systemctl restart ssh

Firewall

Ref: https://wiki.debian.org/Uncomplicated%20Firewall%20%28ufw%29

In this post we will run Django application behind a NGINX webserver, which is a very common practice in production.

Let’s start with this small Go program:

package main

import "github.com/gin-gonic/gin"

func main() {
    r := gin.Default()
    r.GET("/ping", func(c *gin.Context) {
        c.JSON(200, gin.H{
            "message": "pong",
        })
    })
    r.Run() // listen and serve on 0.0.0.0:8080 (for windows "localhost:8080")
}

We will use go modules to manage dependencies:

go mod init rayed.com/server
go mod tidy

You can run it without installing Go on your machine using Docker:

docker run --rm -it   -v `pwd`:/app -w /app golang:1.16   go run server.go

Building a Docker Image

Next step we will make a custom Docker image from our application, we would need a Dockerfile like this:

I moved my website to new a server, since I moved my blog to Hugo I only needed small machine with minimal spec, so I downgraded my server to one costing $5 per month instead of $10.

I usually put all my personal projects including the blog under my home directory /home/rayed, and point the Apache web server to serve content from inside it.

So I configured Apache web server as follow:

I had the pleasure to give a talk at The Saudi Federation for Cyber Security and Programming titled “Introduction to Cryptography & PGP”

You can watch Video of the talk, and for the slides: