https://www.wvds.it/wiki/ 2026-05-22T16:13:20+00:00 https://www.wvds.it/wiki/ https://www.wvds.it/wiki/lib/exe/fetch.php?media=wiki:dokuwiki.svg text/html 2026-01-29T23:37:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:operator:sicherheit:firewall-regeln&rev=1769729854&do=diff Runbook: Firewall Rules Duration: ~10 minutes Role: Network Admin, Security Admin Prerequisite: Root/Admin rights Access control for the Data Gateway at network level. ---------- Workflow ---------- Required Ports Port Protocol Direction text/html 2026-01-30T08:47:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:operator:sicherheit:start&rev=1769762822&do=diff Security Target audience: Security Admins, DevOps Content: TLS, Certificates, Access control Priority: Critical for production Security configuration for production operation of the Data Gateway. ---------- Workflow ---------- Runbooks Runbook text/html 2026-01-30T08:47:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:operator:sicherheit:tls-einrichten&rev=1769762820&do=diff Runbook: Set Up TLS Duration: ~15 minutes Role: Security Admin Prerequisite: Certificate (PFX or PEM+KEY) Enable HTTPS for the Data Gateway. ---------- Workflow ---------- 1. Obtain Certificate Option A: Let's Encrypt (free) # Install certbot sudo apt install certbot # Request certificate sudo certbot certonly --standalone -d gateway.example.com # Result: # /etc/letsencrypt/live/gateway.example.com/fullchain.pem # /etc/letsencrypt/live/gateway.example.com/privkey.pem text/html 2026-01-30T08:46:56+00:00 Anonymous (anonymous@undisclosed.example.com) https://www.wvds.it/wiki/doku.php?id=en:int:dbgway:operator:sicherheit:zertifikat-erneuern&rev=1769762816&do=diff Runbook: Renew Certificate Duration: ~10 minutes Role: Security Admin Frequency: Every 90 days (Let's Encrypt) or annually Renewal of TLS certificate for the Data Gateway. ---------- Workflow ---------- 1. Check Expiry # Check current certificate openssl s_client -connect gateway.example.com:443 -servername gateway.example.com 2>/dev/null | \ openssl x509 -noout -dates # Days until expiry echo | openssl s_client -connect gateway.example.com:443 2>/dev/null | \ openssl x509…