About The Author
Acknowledgements
Copyright, Trademarks, Disclaimers and Feedback.
Introduction
- Confidentiality, Integrity and Availability.
- Why we keep secrets and why we all need privacy
- The modern Internet, privacy and your data.
- Why I wrote this book
- What this book covers
- Who should buy this book
- What this book isn’t
- Compatibility
- Notes at the start you must read.
- Warnings
- Tips
- Known bugs and software limitations
- Information
1.The Cloud Design
- What you will need
- Choosing and Placing a home server
- Storing files securely on USB or Hard Disk
2.Certificates and Keys
- A simple little primer Public Key Encryption
- OpenSSL
- Keep your Private CA Files Secure!
- Creating Your Certificate Authority
- Publish Your CA Certificate
- Importing your CA into various devices.
- Firefox
- Chrome
- Internet Explorer
- Android
- Creating Certificates
- A bit about easy-rsa
- make-key.sh
- Revoking certificates
- SSH Keys
- Creating an SSH key pair on Linux and Mac
- Creating an SSH key pair with Windows
3.Domain Names and Networking
- Services we’ll use
- Domain Name
- Virtual Private Cloud
- IP Addresses
- Fake IP Addresses
- DNS Records
- Create Security Groups
- VPN Host
- Web/Mail Server
- Locking Down Security Groups
- Import your SSH Key Pairs
4.Building the Linux Boxes.
- Amazon Web Services (AWS)
- Building the Amazon EC2 Servers
- Assign Elastic IPs
- Logging in and configuring AWS Servers
- SSH Into your new server:
- Change it’s hostname
- Set Nameservers
- Set your time-zone:
- Add Swap
- Install Patches and Utilities
- Installing VMware ESXi
- Booting ESXi
- Installing ESXi
- Configuring ESXi
- The ESXi Home Screen
- Set a Static IP
- Building Ubuntu Servers on vSphere
- Downloading Ubuntu
- Installing vSphere console
- Uploading the Ubuntu ISO to the vSphere server
- Building your two VMs
- The Ubuntu Installation Process
- Starting the VMs
- Starting the Ubuntu Installer
- Location Settings
- Setting Names
- Disk Setup
- The install process
- Setting Timezone
- Final Steps – Logging in and patching
5.The VPN Server
- Now for something really fun.
- Differences between the two servers
- External VPN - Connect in from anywhere
- Installing OpenVPN Access Server.
- Extra Privacy
- Installing your Certificates on the Web Interface
- Downloading your profile
- Internal VPN - Connect your cloud servers securely
- Installing your certificates into OpenVPN
- Fixed IP Addresses for your servers.
6.Mail and Web server.
- Control Panel Software
- Database
- Amazon RDS
- Mail Server
- Web Server Software
- Securing The Administration Interface with your Own Certificates
- Tip for the extra sneaky:
- Securing your email server
- Adding a domain
- Adding an email user
7.File, Contact and Calendar Server
- The most awesome bit.
- Props to the programmers
- Super Secure
- Installing NextCloud
- Building your Home Data Silo
- Encrypting files on the server
- Testing the encryption
- Storing your admin recovery key
- Limitations
8.Getting your data back
- Exporting from Google
- Downloading all email to your mailserver
- Some notes on maildir
- A Recipe with getmail
- Downloading your contacts
- vCard
- Downloading your calendar
- Downloading your tasks list
- Importing contacts into NextCloud
- Importing calendar into Cloud
- Moving from Dropbox
9.Server Hardening
- Make sure you get all the mail for root
- SSHGuard
- Apticron
- Logwatch
- Stop services you won’t use
- Harden
10.Lets Encrypt
- Securing the Sentora Control Panel with LetsEncrypt
- Certificates for individual domains
11.Becoming a Spam Ninja
- I thought spam was dead!
- What is Spam
- Anti-Spam Legislation
- Use your brain!
- Postfix
- Tailing log files
- If it smells like spam and looks like spam…
12.Data Hygiene and Bad Habits you can just avoid.
- duckduckgo.com
- TOR
- LastPass
- OK is not OK
- Antivus doesn’t help much
Appendix A. Known Issues and Workarounds
Appendix B. Important Files and Useful Commands
- Web and Mail Server