aboutsummaryrefslogtreecommitdiffhomepage
diff options
context:
space:
mode:
authornodiscc <nodiscc@gmail.com>2020-05-18 21:06:14 +0200
committernodiscc <nodiscc@gmail.com>2020-09-12 14:31:45 +0200
commit41b93897f3acdde949eaacb63e82651a2aaa0a92 (patch)
tree9961a66c2087eef4a98fa416b07041615d59f515
parent6384447d1d9ff8f2f58a0c6a7e901ec95691bc87 (diff)
downloadShaarli-41b93897f3acdde949eaacb63e82651a2aaa0a92.tar.gz
Shaarli-41b93897f3acdde949eaacb63e82651a2aaa0a92.tar.zst
Shaarli-41b93897f3acdde949eaacb63e82651a2aaa0a92.zip
server-configuration: move firewall/NAT requirements to Network section
-rw-r--r--doc/md/Server-configuration.md4
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/md/Server-configuration.md b/doc/md/Server-configuration.md
index 89225b4f..3e5139e2 100644
--- a/doc/md/Server-configuration.md
+++ b/doc/md/Server-configuration.md
@@ -20,6 +20,10 @@ A **domain name** ([DNS record](https://opensource.com/article/17/4/introduction
20 20
21You can obtain a domain name from a [registrar](https://en.wikipedia.org/wiki/Domain_name_registrar) ([1](https://www.ovh.co.uk/domains), [2](https://www.gandi.net/en/domain)), or from free subdomain providers ([1](https://freedns.afraid.org/)). If you don't have a domain name, please set up a private domain name ([FQDN](ttps://en.wikipedia.org/wiki/Fully_qualified_domain_name)) in your clients' [hosts files](https://en.wikipedia.org/wiki/Hosts_(file)) to access the server (direct access by IP address can result in unexpected behavior). 21You can obtain a domain name from a [registrar](https://en.wikipedia.org/wiki/Domain_name_registrar) ([1](https://www.ovh.co.uk/domains), [2](https://www.gandi.net/en/domain)), or from free subdomain providers ([1](https://freedns.afraid.org/)). If you don't have a domain name, please set up a private domain name ([FQDN](ttps://en.wikipedia.org/wiki/Fully_qualified_domain_name)) in your clients' [hosts files](https://en.wikipedia.org/wiki/Hosts_(file)) to access the server (direct access by IP address can result in unexpected behavior).
22 22
23Setup a **firewall** (using `iptables`, [ufw](https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-with-ufw-on-debian-10), [fireHOL](https://firehol.org/) or any frontend of your choice) to deny all incoming traffic except `tcp/80` and `tcp/443`, which are needed to access the web server (and any other posrts you might need, like SSH). If the server is in a private network behind a NAT, ensure these **ports are forwarded** to the server.
24
25Shaarli makes outbound HTTP/HTTPS connections to websites you bookmark to fetch page information (title, thumbnails), the server must then have access to the Internet as well, and a working DNS resolver.
26
23 27
24### PHP 28### PHP
25 29