Acorn Link

[andybraren]

Acorn Link v0.1 - "The basics"

Acorn Link will be the endpoint from which all Acorn sites download new version updates, notify of errors, and handle all business operations. It's the "home base" of the platform.

• Features
  • Create new hosted sites
    • After payment, Link will set up a new instance of Acorn on the most appropriate production server.
  • Distribute Acorn versions
• Useful links
  • Bash script to set folder permissions
  • Kirby plugin installer, similar concept for Acorn updates
  • https://httpd.apache.org/docs/2.4/vhosts/mass.html
  • https://www.digitalocean.com/community/tutorials/how-to-set-up-let-s-encrypt-certificates-for-multiple-apache-virtual-hosts-on-ubuntu-14-04
  • https://www.sitepoint.com/set-automatic-virtual-hosts-nginx-apache/
  • https://gist.github.com/hcooper/814250
  • https://serverfault.com/questions/772857/using-lets-encrypt-ssl-for-multiple-apache-servers-with-distributed-traffic
• How Link might work
  • When the customer decides to keep their site, Link is notified
  • Link replies, saying that it's going to put the new site on Canary (10.10.10.XXX)
    • The user is then told to adjust their DNS record
  • Link then asks acorn.blog to make a zip of the new site called newsite.com.zip and place it within its reach for transfer
  • Acorn does that, and tells Link when it finishes
  • Link then tells Canary to download the ZIP
  • Canary downloads the ZIP, and unzips it as a new site
  • Canary gives the new site a security certificate
  • When that's finished, Canary pings Link that the new site is up and running
  • Link relays the good news to the original subdomain.acorn.blog site where the user is waiting
  • The user is redirected to their new site at their own domain

Acorn Link v0.2 - "Hall Monitor"

• Features
  • 404 & 408 error reporting
  • IP address monitoring
  • Up time monitoring
  • The server will check if paying sites are up every minute or so. Check what Pingdom does. If one site is down, okay, if multiple are down then it’ll get my attention via my phone to investigate.
• Useful links
  • Graylog
    • Computer and Network security dashboard software, used by Christian Johnson
    • More from Christian
      • They subscribe to lists of known malicious IPs and block them outright
      • access.log and error.log are useful, nobody ever looks at them, they get huge, the logs get streamed into an elastic search database instead and never logged on the server, hmm
      • Monitor 404's, 408's, view all login attempts being made by IP addresses to block spammers