This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

Server Configuration Wiki

Overview

This wiki documents the secure configuration and operation of our production server infrastructure.

The goal of this infrastructure is to host the following core services:

• Mattermost — internal team communication platform
• Forgejo — self-hosted Git service
• MinIO — S3-compatible object storage
• PostgreSQL — relational database engine
• Nginx — reverse proxy and TLS termination

All services are deployed using:

• Ubuntu Server
• Docker Engine
• Docker Swarm
• Overlay networks
• Docker secrets
• Let’s Encrypt certificates (Certbot)
• UFW firewall rules

Security and reproducibility are mandatory.

No application service is deployed before SSH hardening is completed.

---

Content

0. Architecture Overview
1. System Hardware
2. Operating System
3. SSH Hardening
4. Docker Installation
5. Docker Swarm Configuration
6. Network Architecture
7. Stacks Deployment
8. Reverse Proxy
9. Certbot & Let's Encrypt
10. TURN Server (Coturn)
11. PostgreSQL Configuration
12. MinIO Configuration
13. Forgejo Configuration
14. Mattermost Configuration
15. Backup and Recovery
16. Security Checklist