Editing Unicorn (section)

== System Info ==

* Homepage URL: [https://noisebridge.info noisebridge.info]

* IP: <code>172.93.55.252</code>

* OS: Debian 10 Buster x86_64

* Web server: Nginx is running on ports 80 and 443

* Domains: Current domains and subdomains hosted on this server: (see <code>/etc/nginx/sites-enabled/*</code>)

* DNS: all <code>*.noisebridge.info</code> subdomains point to this server, as does the naked domain (<code>noisebridge.info</code>)

* SSL: certbot runs every day to renew certs for all (sub)domains it knows about
** ...but to manually renew, run <code>/home/noisebridge/bin/recert; sudo service nginx restart</code>

* To add a new service at, say, <code>somethingcool.noisebridge.info</code>...
** Create a file similar to <code>/etc/nginx/sites-available/noisebridge.info</code> called <code>/etc/nginx/sites-available/somethingcool.noisebridge.info</code>
** Run <code>sudo ln -s /etc/nginx/sites-available/somethingcool.noisebridge.info /etc/nginx/sites-enabled/somethingcool.noisebridge.info; sudo nginx -t</code>
** If you don't get any errors, add <code>-d somethingcool.noisebridge.info</code> to <code>/home/noisebridge/bin/recert</code> then run <code>/home/noisebridge/bin/recert</code> to (U)pdate the <code>*.noisebridge.info</code> SSL cert!

* Unicorn uses [https://wiki.ubuntu.com/UncomplicatedFirewall ufw] to whitelist which ports can receive incoming connections from the outside world.
** To add a port to the whitelist: <code>sudo ufw allow <port></code>
** To list firewall rules: <code>sudo ufw show added</code>
** To delete a firewall rule: <code>sudo ufw delete <rule></code>
** To view (and delete) rules chronologically rather than by port: <code>sudo ufw status numbered</code>