Skip to content

Fix spelling to security section from Vale #1486

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 2 commits into from
Feb 2, 2018
Merged

Fix spelling to security section from Vale #1486

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
413a371
Fix spelling to security section from Vale
Feb 2, 2018
04e6e93
Typo fix
Jskobos Feb 2, 2018
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions docs/email/clients/install-roundcube-on-ubuntu.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ We will create a new virtual host for Roundcube in this section. This makes a ne

sudo chmod 644 apache2-roundcube.sample.conf

5. Determine what type of Secure Socket Layer (SSL) encryption certificate is best for your Roundcube deployment. A [self-signed SSL certificate](/docs/security/ssl/how-to-make-a-selfsigned-ssl-certificate) is easy and free, but triggers an error in most modern browsers reporting that the connection is not private. [Let's Encrypt](https://letsencrypt.org/) offers browser trusted, free SSL certificates, but does not support [Extended Validatation](https://en.wikipedia.org/wiki/Extended_Validation_Certificate) (EV) or multi-domain ([wildcard](https://en.wikipedia.org/wiki/Wildcard_certificate)) certificates. To gain those features, a [commercial SSL certificate](/docs/security/ssl/obtaining-a-commercial-ssl-certificate) must be used.
5. Determine what type of Secure Socket Layer (SSL) encryption certificate is best for your Roundcube deployment. A [self-signed SSL certificate](/docs/security/ssl/how-to-make-a-selfsigned-ssl-certificate) is easy and free, but triggers an error in most modern browsers reporting that the connection is not private. [Let's Encrypt](https://letsencrypt.org/) offers browser trusted, free SSL certificates, but does not support [Extended Validation](https://en.wikipedia.org/wiki/Extended_Validation_Certificate) (EV) or multi-domain ([wildcard](https://en.wikipedia.org/wiki/Wildcard_certificate)) certificates. To gain those features, a [commercial SSL certificate](/docs/security/ssl/obtaining-a-commercial-ssl-certificate) must be used.

6. Once you have your SSL certificate, edit the following options in `apache2-roundcube.sample.conf` to match your desired configuration:

Expand Down Expand Up @@ -151,7 +151,7 @@ PEAR is an acronym for "PHP Extension and Application Repository". Common PHP co

PEAR will print an **install ok** confirmation message for each package that it successfully installs. In this case, a complete installation will look similar to this:

{{< output >}}
{{< output >}}
install ok: channel://pear.php.net/Auth_SASL-1.1.0
install ok: channel://pear.php.net/Net_IDNA2-0.1.1
install ok: channel://pear.php.net/Mail_Mime-1.10.2
Expand Down
4 changes: 2 additions & 2 deletions docs/game-servers/garrys-mod-server-on-centos-7.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,7 +43,7 @@ From the SteamCMD guide, two additional steps are needed specifically for Gmod.

sudo firewall-cmd --zone=public --add-port=27000 27030/udp --permanent

2. Install an additonal 32-bit package:
2. Install an additional 32-bit package:

sudo yum install ncurses-libs.i686

Expand Down Expand Up @@ -144,7 +144,7 @@ writeip

2. Note the collection ID. It is located at the end of the url, denoted by the 'X's here:

http://steamcommunity.com/sharedfiles/filedetails/?id=XXXXXXXXX
http://steamcommunity.com/sharedfiles/filedetails/?id=XXXXXXXXX

3. Acquire a Steam API key from the [Steam API Keys](http://steamcommunity.com/dev/apikey) page. Note the key.

Expand Down
2 changes: 1 addition & 1 deletion docs/game-servers/install-black-mesa-on-debian-or-ubuntu.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -248,7 +248,7 @@ You can read the entire list of parameters on the [Valve Wiki](https://developer
wget http://www.metamodsource.net/mmsdrop/1.10/mmsource-1.10.7-git951-linux.tar.gz

{{< note >}}
This URL costantly changes as MetaMod is updated. Please check the downloads [page](http://www.metamodsource.net/snapshots) for the current URL.
This URL constantly changes as MetaMod is updated. Please check the downloads [page](http://www.metamodsource.net/snapshots) for the current URL.
{{< /note >}}

3. Extract the downloaded archive:
Expand Down
3 changes: 1 addition & 2 deletions docs/game-servers/install-dont-starve-together-game-server-on-ubuntu.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -41,11 +41,10 @@ From the SteamCMD guide, two additional steps are needed specifically for DST.

sudo dpkg-reconfigure iptables-persistent

3. Install some additonal 32-bit packages:
3. Install some additional 32-bit packages:

sudo apt-get install libcurl4-gnutls-dev:i386


## Install Don’t Starve Together

1. Be sure you are in the directory `~/Steam`, then access the `Steam>` prompt.
Expand Down
4 changes: 2 additions & 2 deletions ...game-servers/launch-a-counter-strike-global-offensive-server-on-ubuntu-14-04.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -79,7 +79,7 @@ CS:GO requires a server token unless you want to limit players to only clients c

## Configure the Server

1. Create a file called `server.cfg` using your prefered text editor. Choose a hostname and a unique RCON password that you don't use elsewhere.
1. Create a file called `server.cfg` using your preferred text editor. Choose a hostname and a unique RCON password that you don't use elsewhere.

{{< file "~/Steam/csgo-ds/csgo/cfg/server.cfg" aconf >}}
hostname "server_hostname"
Expand Down Expand Up @@ -163,4 +163,4 @@ These settings are changed in the launch command.

### RCON

When logged into the server, you can open the RCON console with the backtic button (<code>`</code>), or your mapped key. To log in type `rcon_password` followed by your password. For more information regarding RCON, click [here](/docs/game-servers/team-fortress2-on-debian-and-ubuntu/#rcon).
When logged into the server, you can open the RCON console with the backtick button (<code>`</code>), or your mapped key. To log in type `rcon_password` followed by your password. For more information regarding RCON, click [here](/docs/game-servers/team-fortress2-on-debian-and-ubuntu/#rcon).
6 changes: 3 additions & 3 deletions docs/game-servers/left-4-dead-2-multiplayer-server-installation.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -142,7 +142,7 @@ This guide requires additional libraries which are not included in our standard

cd ~/Steam/L4D2-server/left4dead2/cfg

Choose one of the following example files:
Choose one of the following example files:

wget https://www.gottnt.com/l4d2/basic-server.cfg
wget https://www.gottnt.com/l4d2/detailed-server.cfg
Expand All @@ -168,7 +168,7 @@ The `+port 27020` parameter is not required but is recommended so that your serv
{{< /note >}}

You can change the map to whichever one you prefer.
This script, when run, will execute the L4D2 server in a [Screen](/docs/networking/ssh/using-gnu-screen-to-manage-persistent-terminal-sessions) session.
This script, when run, will execute the L4D2 server in a [Screen](/docs/networking/ssh/using-gnu-screen-to-manage-persistent-terminal-sessions) session.

5. Make the script executable:

Expand Down Expand Up @@ -202,7 +202,7 @@ You can connect to the server in any one of three easy methods:
3. A third method is to install the following add-on: [Link](https://steamcommunity.com/sharedfiles/filedetails/?id=121088946) and then launch the game. Next, click on the new `Server Browser` option on the main menu and find your server in the long list of servers. This method only works if you have set the `hostname`, `sv_search_key`, and `sv_tags` options in the config file.

{{< note >}}
Your L4D2 server will only show up in the `Custom` list of servers. Therefore, we recomend that you add it to your favorites to avoid having to look for it again.
Your L4D2 server will only show up in the `Custom` list of servers. Therefore, we recommend that you add it to your favorites to avoid having to look for it again.
{{< /note >}}

Finally, invite friends to the game using the Steam Overlay (`SHIFT + TAB`). Let the playing begin!
21 changes: 10 additions & 11 deletions docs/game-servers/minecraft-with-bungee-cord.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,18 +52,18 @@ On the Linode that is going to host BungeeCord:

4. Create another user for the BungeeCord proxy, so that it doesn't have the same privileges as your user. You'll need to keep this password for future reference.

sudo adduser bungeecord
sudo adduser bungeecord

### Configuring the Firewall on the BungeeCord Node

If you're using iptables or ufw to act as a firewall, you'll need to make a rule on the Linode running BungeeCord, to permit TCP on port 25565. This can be done by running:

sudo iptables -A INPUT -p tcp --dport 25565 -j ACCEPT
sudo iptables -A INPUT -p tcp --dport 25565 -j ACCEPT


### Configuring the Firewall on the Spigot Server Linodes

For BungeeCord, the Spigot servers need to be in offline mode, as the BungeeCord proxy handles the authentication. This can make the servers vulnerable to people connecting directly, as they can connect with any username, potentially allowing for connection as a user with adminsitrative permissions. To prevent this, you can set up iptables to limit connections to only the BungeeCord server.
For BungeeCord, the Spigot servers need to be in offline mode, as the BungeeCord proxy handles the authentication. This can make the servers vulnerable to people connecting directly, as they can connect with any username, potentially allowing for connection as a user with administrative permissions. To prevent this, you can set up iptables to limit connections to only the BungeeCord server.

{{< note >}}
This section assumes that you've only got a Spigot server running on each Linode. If you have other services, you'll need to modify the rules to allow them to continue working.
Expand Down Expand Up @@ -100,7 +100,7 @@ If you've configured your `iptables` firewall by following our [Securing Your Se

Log into the BungeeCord Linode as the `bungeecord` user created earlier, and download BungeeCord:

wget -O BungeeCord.jar http://ci.md-5.net/job/BungeeCord/lastSuccessfulBuild/artifact/bootstrap/target/BungeeCord.jar
wget -O BungeeCord.jar http://ci.md-5.net/job/BungeeCord/lastSuccessfulBuild/artifact/bootstrap/target/BungeeCord.jar

{{< note >}}
This downloads the latest version of BungeeCord. You can find older versions for older Minecraft server versions, [here](http://ci.md-5.net/job/BungeeCord/).
Expand All @@ -110,16 +110,15 @@ This downloads the latest version of BungeeCord. You can find older versions for

1. Start BungeeCord up, allowing it to generate the configuration files:

java -jar BungeeCord.jar

java -jar BungeeCord.jar

After the prompt `[INFO] Listening on /0.0.0.0:25577` is displayed in the console, type `end` and press Enter.

2. Edit `config.yml` by replacing the section of the configuration that says `host: 0.0.0.0:25577` to `host: 0.0.0.0:25565` as this is the default port that the Minecraft Client attempts to connect to.

3. Edit the following block of the configuration, in order to add our existing Spigot servers:

{{< file-excerpt "config.yml" yaml >}}
{{< file-excerpt "config.yml" yaml >}}
servers:
lobby:
address: localhost:25565
Expand All @@ -137,7 +136,7 @@ servers:
address: 203.0.113.112:25565
restricted: false
motd: 'Just another BungeeCord - Forced Host'
games:
games:
address: 203.0.113.198:25565
restricted: false
motd: 'Just another BungeeCord - Forced Host'
Expand Down Expand Up @@ -197,7 +196,7 @@ Connect to your BungeeCord address in Minecraft, and run `/server name` where `n

To see who is online on any of the BungeeCord servers that you've linked, you can run:

/glist
/glist


## Troubleshooting
Expand All @@ -213,7 +212,7 @@ If there is an issue connecting, then it's important to check that the login ser

If the server shows the MOTD and a ping in the server list, as per the image above, it's likely that the problem lies between BungeeCord and your Spigot servers. To check, you can log into your BungeeCord server, and you'll most likely see a line similar to the following in the logs, where the IP `198.51.100.0` is replaced by your IP. This shows that your client is successfully pinging the BungeeCord server:

00:20:34 [INFO] [/198.51.100.0:50677] <-> InitialHandler has connected
00:20:34 [INFO] [/198.51.100.0:50677] <-> InitialHandler has connected

If the logs look similar to above, the following error is likely occurring:

Expand All @@ -239,6 +238,6 @@ If this happens, you should check that BungeeCord is actually running, and that

Assuming that the issue is not solved, the issue is likely to be the firewall. You can flush your firewalls with:

iptables -F
iptables -F

You should try again to reconnect. If you can connect now, then you'll need to reconfigure the firewall as detailed above.
54 changes: 27 additions & 27 deletions docs/game-servers/minecraft-with-mcmyadmin-on-debian.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ aliases: ['applications/game-servers/minecraft-with-mcmyadmin-on-debian/']

1. Familiarize yourself with our [Getting Started](/docs/getting-started) guide and complete the steps for setting your Linode's hostname and timezone.

2. This guide will use `sudo` wherever possible. Complete the sections of our [Securing Your Server](/docs/security/securing-your-server) guide to create a standard user account, harden SSH access and remove unnecessary network services. Do **not** follow the *Configure a Firewall* section yet--this guide includes firewall rules specifcally for a Minecraft server.
2. This guide will use `sudo` wherever possible. Complete the sections of our [Securing Your Server](/docs/security/securing-your-server) guide to create a standard user account, harden SSH access and remove unnecessary network services. Do **not** follow the *Configure a Firewall* section yet--this guide includes firewall rules specifically for a Minecraft server.

3. Update your system.

Expand Down Expand Up @@ -99,62 +99,62 @@ COMMIT

1. Install the Java Runtime Environment, OpenJDK:

sudo apt-get install openjdk-7-jre
sudo apt-get install openjdk-7-jre

2. [Mono](http://www.mono-project.com/). CubeCoders Limited, the company behind McMyAdmin, packages its own minimal installation of Mono with some necessary source and configuration files. This must be used instead of the generic Mono packages from Debian's repositories.
2. [Mono](http://www.mono-project.com/) is an open source implementation of the .NET framework. CubeCoders Limited, the company behind McMyAdmin, packages its own minimal installation of Mono with some necessary source and configuration files. This must be used instead of the generic Mono packages from Debian's repositories.

cd /usr/local
sudo wget http://mcmyadmin.com/Downloads/etc.zip
sudo unzip etc.zip; sudo rm etc.zip
cd /usr/local
sudo wget http://mcmyadmin.com/Downloads/etc.zip
sudo unzip etc.zip; sudo rm etc.zip

## Install and Start McMyAdmin

This section should be completed as your standard user, **not** as root. McMyAdmin will then install to `/home/username`.

1. Create the installation directory and change location to it.

mkdir ~/mcmyadmin && cd ~/mcmyadmin
mkdir ~/mcmyadmin && cd ~/mcmyadmin

2. Download the McMyAdmin installer. You will want to double check its [Download](https://www.mcmyadmin.com/#/download) page to be sure you're grabbing the latest version.

wget http://mcmyadmin.com/Downloads/MCMA2_glibc26_2.zip
wget http://mcmyadmin.com/Downloads/MCMA2_glibc26_2.zip

3. Extract the archive and delete the original zip file.

unzip MCMA2_glibc26_2.zip; rm MCMA2_glibc26_2.zip
unzip MCMA2_glibc26_2.zip; rm MCMA2_glibc26_2.zip

4. Start the initial configuration of McMyAdmin. Replace `PASSWORD` with a strong password which you want for admin access to McMyAdmin's web interface.

./MCMA2_Linux_x86_64 -setpass PASSWORD -configonly
./MCMA2_Linux_x86_64 -setpass PASSWORD -configonly

This will return the output:
This will return the output:

The updater will download and install McMyAdmin to the current directory:
/home/your_user/mcmyadmin).
The updater will download and install McMyAdmin to the current directory:
/home/your_user/mcmyadmin).

Continue? [y/n] :
Continue? [y/n] :

Answer `y`. The installer will run and return you to the command prompt. If everything is as it should be, the only warning you'll see will be for a missing configuration file. As the output says, that would be normal since McMyAdmin was just started for the first time.
Answer `y`. The installer will run and return you to the command prompt. If everything is as it should be, the only warning you'll see will be for a missing configuration file. As the output says, that would be normal since McMyAdmin was just started for the first time.

5. Install screen, if it is not already installed.

sudo apt-get install screen
sudo apt-get install screen

6. Start a screen session for the McMyAdmin client.

screen -S mcma
screen -S mcma

7. Change into the McMyAdmin installation directory and start the program.

cd ~/mcmyadmin; ./MCMA2_Linux_x86_64
cd ~/mcmyadmin; ./MCMA2_Linux_x86_64

If successful, the last three lines of the output will be:
If successful, the last three lines of the output will be:

Notice : McMyAdmin has started and is ready for use.
Notice : This is the first time McMyAdmin has been started.
Notice : You must complete the first-start wizard via the web interface.
Notice : McMyAdmin has started and is ready for use.
Notice : This is the first time McMyAdmin has been started.
Notice : You must complete the first-start wizard via the web interface.

{{< note >}}
{{< note >}}
To exit McMyAdmin and return to the command line, enter `/quit`.
{{< /note >}}

Expand All @@ -164,16 +164,16 @@ To exit McMyAdmin and return to the command line, enter `/quit`.

2. Log in with the username `admin` and the password that you provided in the installation step.

![McMyAdmin Login Page](/docs/assets/mcmyadmin-login-page.png)
![McMyAdmin Login Page](/docs/assets/mcmyadmin-login-page.png)

3. Once the initial configuration steps are completed, select your settings and then switch to the status page.

![McMyAdmin Configuration Page](/docs/assets/mcmyadmin-config-page.png)
![McMyAdmin Configuration Page](/docs/assets/mcmyadmin-config-page.png)

4. Select *Start Server* and accept the Minecraft Server EULA.

![McMyAdmin Status Page](/docs/assets/mymyadmin-status-page.png)
![McMyAdmin Status Page](/docs/assets/mymyadmin-status-page.png)

![McMyAdmin Server Started](/docs/assets/mcmyadmin-server-running.png)
![McMyAdmin Server Started](/docs/assets/mcmyadmin-server-running.png)

Congratulations, you now have McMyAdmin running on your Minecraft server!
Loading