Common to all installations

Assuming you use the latest Debian version.

Create a .env.secrets file at the project root based on .env.secrets.example containing actual secrets
Install Docker
Add this in a new /etc/docker/daemon.json file, otherwise users with an IPv6 will not get their IP forwarded to Django, due to a Docker limitation:
```
{
  "ip6tables": true,
  "experimental": true
}
```
Restart Docker with systemctl restart docker
Limit the journalctl log size (it can take several GB after months) by editing /etc/systemd/journald.conf and set:
```
[Journal]
SystemMaxUse=250M
```
then restart it with systemctl restart systemd-journald
For Debian >= 12: apt install rsyslog, otherwise Fail2ban cannot access auth.log. See https://unix.stackexchange.com/a/636689

FIXME: Make Fail2ban work with the host journalctl.

Navigation Menu