Commit 303f0a5a authored by Owain Jones's avatar Owain Jones
Browse files

enable NTP

parent b913be71
...@@ -93,6 +93,7 @@ systemctl enable fail2ban ...@@ -93,6 +93,7 @@ systemctl enable fail2ban
# Allow web through the firewall # Allow web through the firewall
systemctl enable firewalld systemctl enable firewalld
systemctl start firewalld systemctl start firewalld
firewall-cmd --permanent --zone=public --add-service=ssh
firewall-cmd --permanent --zone=public --add-service=http firewall-cmd --permanent --zone=public --add-service=http
firewall-cmd --permanent --zone=public --add-service=https firewall-cmd --permanent --zone=public --add-service=https
firewall-cmd --permanent --zone=public --add-service=8080/tcp # port 8080 for dev branch of site firewall-cmd --permanent --zone=public --add-service=8080/tcp # port 8080 for dev branch of site
...@@ -101,6 +102,9 @@ firewall-cmd --reload ...@@ -101,6 +102,9 @@ firewall-cmd --reload
# Set the system timezone to UTC # Set the system timezone to UTC
timedatectl set-timezone UTC timedatectl set-timezone UTC
# And enable NTP, since for some reason it's not on by default..
timedatectl set-ntp true
# Install haveged to stop crypto stuff from hanging so much # Install haveged to stop crypto stuff from hanging so much
# when it depletes /dev/random..! (The bcrypt library on PHP # when it depletes /dev/random..! (The bcrypt library on PHP
# has a tendency to do this, which causes the occasional # has a tendency to do this, which causes the occasional
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment