Web Servers

Structure and strategy

Websites are deployed in Docker containers, which are managed in Portainer (a universal container management platform). Several virtual servers host the Docker containers (websites):

• Webservices – sites with web services
• Web-ARDITI – sites related to admin activities
• Web-Research – sites related to research activities
• Web-Archive – sites which are archived (read-only)

There is an application proxy (Traefik) between the clients and the websites. Before passing traffic to the web servers, it passes through a CrowdSec “filtering” service.

Docker info

Run a command inside a Docker container

• sudo docker ps
• sudo docker exec -it <name of the container> <command to execute>

Traefik info

Traefik config files

• Traefik config files are located inside /etc/traefik, on web-research server the traefik conf are /opt/traefik

Servers

Web-services

System information

• IP: 194.210.52.10
• Gateway: 194.210.52.254
• OS: Debian 12 (bookworm)
• Proxmox VM: PR2, VM 165, authguard
• This web server runs Docker and hosts the following services:
  • Nginx Proxy Manager (https://webservices.arditi.pt)
  • Authentik, used for SSO and password recovery
  • Portainer (https://portainer.webservices.arditi.pt)
  • PostGres

Web-ARDITI

System information

• IP: 194.210.52.12
• Gateway: 194.210.52.254
• OS: Debian 12 (bookworm)
• Proxmox VM: PR1, VM 162, web-arditi
• This web server runs Docker and hosts the following services:
  • Traefik Proxy
  • Crowdsec
  • www.arditi.pt (Joomla website)
  • wiki.arditi.pt (Media Wiki website)
  • dev-wp.arditi.pt (offline – not used)
  • analytics.arditi.pt (Matomo)

Web-Research

System information

• IP: 194.210.52.13
• Gateway: 194.210.52.254
• OS: Debian 12 (bookworm)
• Proxmox VM: PR2, VM 165, web-research
• This web server runs Docker and hosts the following services:
  • Crowdsec
  • Traefik Proxy
  • oom.arditi.pt (PHP site)
  • maremadeira.pt (WP site)
  • smartislandshub.eu (WP site)

Note: pure-ftp is configured on the host server. To manage use the command: sudo pure-pw

Web-Research

System information

• IP: 194.210.52.14
• Gateway: 194.210.52.254
• OS: Debian 12 (bookworm)
• Proxmox VM: PR1, VM 166, web-archive
• This web server runs Docker and hosts the following services:
  • Crowdsec
  • Traefik Proxy
  • havita.arditi.pt
  • mocp.arditi.pt
  • unleashed.arditi.pt
  • beanstalk.arditi.pt

Add a new Joomla or WordPress website

If the site is a Joomla or WordPress site, 2 steps are required:

• Create the database
• Deploy the site

Create Database

• Use phpmyadmin or mysql from the command line. Use user with full admin rights (root).
  • Create a database for the new site.
  • Create a new user with access only to the new database.

Site Deployment

• Go to Portainer
• Select which host server to host the container
• Select a similar service/Stack (i.e., Joomla, WP, etc)
• Go to “Edit” and copy the container configuration
• Create a new Stack, go to “Edit” and paste the configuration
• Edit the configuration to match the new service name and any other features that might differ from the original site
• Press “Update the Stack”. Check for Errors
• Traefik config on /etc/traefik/data/traefik.yml