76 lines
1.8 KiB
Markdown
76 lines
1.8 KiB
Markdown
# Hetzner Coolify Setup
|
|
|
|
## Sources
|
|
|
|
- https://www.youtube.com/watch?v=taJlPG82Ucw&t=56s
|
|
|
|
|
|
## Hetzner dashboard setup
|
|
- add ssh key
|
|
|
|
- add this to cloud init
|
|
``` cloud_init.yml
|
|
# This config was written for Ubuntu 22.04
|
|
# If you are using a more recent version, see the comments of this gist for fixes
|
|
#cloud-config
|
|
users:
|
|
- name: dkelly
|
|
ssh_authorized_keys:
|
|
- "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKQWloxYNqNyOw6KKXsQnYPakthlq9gqf5qR1QGR1g6w donovan.a.kelly@pm.me"
|
|
sudo: ALL=(ALL:ALL) ALL
|
|
groups: sudo
|
|
shell: /bin/bash
|
|
chpasswd:
|
|
expire: true
|
|
users:
|
|
- name: dkelly
|
|
password: replacethispasswordplease
|
|
type: text
|
|
runcmd:
|
|
- sed -i '/PermitRootLogin/d' /etc/ssh/sshd_config
|
|
- echo "PermitRootLogin without-password" >> /etc/ssh/sshd_config
|
|
- sed -i '/PubkeyAuthentication/d' /etc/ssh/sshd_config
|
|
- echo "PubkeyAuthentication yes" >> /etc/ssh/sshd_config
|
|
- sed -i '/PasswordAuthentication/d' /etc/ssh/sshd_config
|
|
- echo "PasswordAuthentication no" >> /etc/ssh/sshd_config
|
|
- systemctl restart sshd
|
|
- echo "\$nrconf{kernelhints} = -1;" > /etc/needrestart/conf.d/99disable-prompt.conf
|
|
- apt update
|
|
- apt upgrade -y --allow-downgrades --allow-remove-essential --allow-change-held-packages
|
|
- reboot
|
|
```
|
|
|
|
## Setup
|
|
- ssh into root
|
|
```
|
|
apt update
|
|
apt upgrade
|
|
reboot
|
|
```
|
|
|
|
- Don't mess with ufw or ssh config or worry about create a sudo user. Do this at the end
|
|
|
|
|
|
## Install Coolify
|
|
|
|
curl -fsSL https://cdn.coollabs.io/coolify/install.sh | bash
|
|
|
|
## Setup
|
|
- create username and password. we'll have to change this later because it doesn't use ssl
|
|
|
|
- select localhost
|
|
|
|
## Lock down the server
|
|
|
|
- ssh into dkelly user and change password
|
|
- Set the root password `passwd`
|
|
- setup ufw
|
|
|
|
## Add DNS Records
|
|
|
|
-add wildcard * and empty A records
|
|
|
|
## Proxy restart
|
|
|
|
- might need to restart the proxy for ssh keys to take effect
|