Repository files navigation

• Evan Sahlos
• &Alistair Horwood

• Hack Me Light Bulb / O-Week
• Table of Contents
• Tech Used
• Production Install Guide
  • Some things you'll need to have setup / access to will be:
  • Creating the Web Server
  • Logging into the Web Server & Installing Required Software
  • Adding a Domain Name and SSL/HTTPS Setup
  • Moving Web Files onto the server
• Development Guide

• Cloud Provider (Oracle Cloud Recommended. others include; AWS, Google Cloud, IBM Cloud, Azure)
• LAMP Stack
  • Linux (Ubuntu Server 22.04.* LTS)
  • Apache
  • MySQL
  • PHP (8.1.2-1ubuntu2.13)
• Certbot by EFF
• Tailwindcss
  • Page styling and use of prebuilt elements (table, header)
• Cloudflare Turnstile
  • Captcha (stops someone from botting the player registration page)

This guide will take you through setting up a web server to host a production ready version of the hack me light bulb demo.

• A cloud provider account (This guide uses Oracle Cloud)
  • Even though this won't cost any money, be prepared to enter a debit/credit card for verification
• Access to a Domain Name and ability to access DNS Configuration

1. Within your cloud provider, create an web instance

2. Select Ubuntu as the guide-files/image (22.04 is supported by security updates until April 2032)

3. (optional) For a free service with Oracle Cloud, change the shape to a Virtual Machine with Ampere Processor

4. Select CPUs & RAM (2022 - 2023 Server had 1 OCPU and 6GB of RAM)

5. Download both Private and Public SSH Keys (this will be used later for connecting to the server, DONT LOOSE THESE FILES)

6. Create Instance (rest of the default settings are fine, we want a public IP address)

7. Wait for instance to start

1. Open up a terminal and with the IP address and username from the cloud provider

ssh username@IPADDRESS -i "PRIVATEKEYLOCATION.key"

2. Update the instance (updates everything and automatically says yes to all recommended updates)

sudo apt update && sudo apt upgrade -y

• sometimes a restart is required, type inreboot to restart

3. Install Apache2

sudo apt install apache2

4. View Firewall rules and allow apache through the firewall

sudo ufw app listsudo ufw app info "Apache Full"sudo ufw allow "Apache Full"sudo ufw enable

5. Reboot Instance

sudo reboot

7. Wait a few mins for instance to start again
8. Try going to the IP address in the web browser (HTTP ONLY)

• you should see a page as show above
• don't proceed if you dont get this page
• could be problems with the firewall, apache2 not being installed correctly, firewall rules on the cloud provider

9. Install MySQL and start setup

sudo apt install mysql-serversudo mysql_secure_installation

10. Go through the process of setting up MySQL, most questions are security based and different levels of security can be setup

11. Set a secure MySQL password that you can save and use later

12. Once setup finished, runsudo mysql and something like this should appear:

Welcome to the MySQL monitor.  Commands end with ; or \g.Your MySQL connection id is 5Server version: 5.7.34-0ubuntu0.18.04.1 (Ubuntu)Copyright (c) 2000, 2021, Oracle and/or its affiliates.Oracle is a registered trademark of Oracle Corporation and/or itsaffiliates. Other names may be trademarks of their respectiveowners.Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.mysql>

13. Typeexit to exit

14. Install PHP

sudo apt install php libapache2-mod-php php-mysql

15. Changing Apache’s Directory Index

• you'll want to move index.php to the first entry in the line (see below)

<IfModule mod_dir.c>    DirectoryIndex index.php index.html index.cgi index.pl index.xhtml index.htm</IfModule>

sudo nano /etc/apache2/mods-enabled/dir.conf

16. Restart Apache

sudo systemctl restart apache2

17. Add DNS Record to DNS Provider

• We use cloudflare
• Login and select flinderscybersociety.org
• add A record using the config options below

18. Check if going to the domain makes you go to the webserver eg:beta-oweek.flinderscybersociety.org

19. Get SSL Setup using certbot

sudo apt updatesudo apt install snapdsudo snap install --classic certbotsudo ln -s /snap/bin/certbot /usr/bin/certbotsudo certbot --apache

18. Fill out the questions cert bot asks, pretty easy. If any issues restart withsudo certbot --apache

19. Go to website and check that it has redirected to https:// and that we have the lock icon in the browser

20. Move into the web directory on the servercd /var/www/html

21. Remove all files in this foldersudo rm *

    • MAKE SURE THAT YOU ARE IN THE FOLDER AS LISTED ABOVE

22. Go tohttps://github.com/Flinders-Cybersecurity-Society/Hack-Me-Lightbulb/releases and right click the release.zip file and copy the link

23. cd to move back to the home directory

24. Runwget https://github.com/Flinders-Cybersecurity-Society/Hack-Me-Lightbulb/releases/download/releases/release.zip (with the copied link)

25. Install unzip, extract the file and move to web servers directory

sudo apt-get install unzipunzip release.zipsudo mv src/* /var/www/html/