52 lines
1.3 KiB
Markdown
52 lines
1.3 KiB
Markdown
# Main
|
|
|
|
Ставим на fedora-37
|
|
|
|
0. firewall
|
|
|
|
```shell
|
|
firewall-cmd --permanent --add-port=53/{tcp,udp} --add-port=80/tcp --add-port=88/{tcp,udp} \
|
|
--add-port=123/udp --add-port=389/tcp --add-port=443/tcp --add-port=464/{tcp,udp} \
|
|
--add-port=636/tcp && firewall-cmd --reload
|
|
```
|
|
|
|
```shell
|
|
sed -i 's/^SELINUX=.*/SELINUX=disabled/g' /etc/selinux/config
|
|
sed -i 's/^NETWORKING_IPV6=.*/NETWORKING_IPV6=false/g' /etc/sysconfig/network
|
|
|
|
reboot
|
|
```
|
|
|
|
1. dnf update -y && dnf -y install freeipa-server freeipa-server-dns freeipa-client mc htop zip nano git wget curl
|
|
|
|
- правим /etc/hosts >>
|
|
- убираем все, кроме этих записей
|
|
|
|
```shell
|
|
135.181.36.160 id.rmnl.ru id
|
|
```
|
|
|
|
- правим /etc/hostname по необходимости
|
|
|
|
```shell
|
|
hostname -f
|
|
```
|
|
|
|
2. ipa-server-install --setup-dns --allow-zone-overlap --domain=rmnl.ru
|
|
|
|
- Do you want to configure DNS forwarders? [yes]: `yes`
|
|
- Enter an IP address for a DNS forwarder, or press Enter to skip: `8.8.8.8`
|
|
- ntp - ставим, указываем: `91.189.89.198,91.189.91.157,91.189.94.4`
|
|
|
|
pass = 7MOYtC12B2mSZhu15cWFBw
|
|
|
|
## Сертификаты
|
|
|
|
1. dnf install -y certbot
|
|
2. certbot certonly --manual --preferred-challenges=dns --email admin@rmnl.ru --agree-tos -d id.rmnl.ru
|
|
3. cd letsencrypt && ./setup-le.sh
|
|
|
|
## Системный юзер
|
|
|
|
1. ./ipa-ctl.sh
|