Tap overview

tap (previously referred to as services) is a Debian GNU/Linux 9.11 (Stretch) virtual machine running on minifridge. It provides many services for the CSUA.

It's located at tap.csua.berkeley.edu (128.32.112.230)

A list of some of the services running on tap:

• ufw
  • Firewall
• Nginx (config files)
  • HTTP server, reverse proxies to Gunicorn
  • Serves https://www.csua.berkeley.edu/~$USER
• Gunicorn
  • Python wsgi server
  • Listens on port 3001
  • Config: /etc/systemd/system/csua-backend-gunicorn.service
  • Serves csua-backend at https://www.csua.berkeley.edu/
• MySQL (MariaDB)
  • Database for csua-backend
• certbot
  • Renews ssl certs
• PAM
  • Defers account, authentication, password, session management to ldap
  • Sets password security standards when using passwd
  • See /etc/pam.d/common-passwd
• slapd
  • LDAP server
  • Publicly accessible
  • Contains entries for posixAccounts and posixGroups
• bind9/named
  • DNS server
  • Authoritative for *.csua.berkeley.edu
  • soda.berkeley.edu and tap.berkeley.edu are managed by EECS IDSG (kraitchman)
• Mailman
  • Mailing list server
• postfix
  • Mail transfer agent/server
  • Sends and forwards mail and reads aliases from /etc/aliases
  • Configuration in /etc/postfix/
• spamd
  • Filters spam
• nfsd
  • Serves nfs to tap and soda
  • Serves /nfs/homes/ to /home/ and /nfs/mail to /var/mail
  • The nfs overhead + VM overhead can lead to reduced disk i/o but has since been fixed

TODO(samsafadi/robertquitt): make individual pages