Re:Ask HN: Advise for a self-taught budding programmer
by sdiq on Sunday November 29, 2015 @02:08AM
(#10644035)
Thank you very much for your inputs and advice.
As yet, I haven't touched anything other than a Windows machine. I was thus wondering whether, while your suggestions are very good and that is where I would ultimately have to end up in, in the meantime, could I learn the basics in a few weeks just so as to set-up everything correctly and thereafter expend more time in learning the finer details of such a set-up? If that is not possible then I will be forced to just go with a hosting provider that handles some of these stuff - at least in the beginning as I learn "everything".
Some notes:
- Default MySQL install listens only on loopback interface, so isn't exposed to the network (and if it's not in your case, you can change that in my.cnf)
- IPTables/NFTables can be used to whitelist allowed network traffic beyond HTTP/HTTPS
- SSH should be limited to public-key auth, with root login disabled as well as password auth disabled (or you can use 2 step verification with Google Authenticator, which is pretty easy to set up)
One thing I'll note is that I don't have Tomcat exposed directly to the internet: it's only exposed through an NGINX reverse proxy.
Apache Tomcat is fairly easy to download and set up (you can download the .tar.gz from Apache's website, untar, and run the executable ./bin/startup.sh).
I'd be happy to answer any questions really re: Java/Spring