Web stack
Sites and reverse proxy on nginx, certificates and HTTPS, PostgreSQL access and restoring from a dump — up to a site and a database on two machines.
9 stages7 labs~6 hours medium
The track has not been started. The first stage is «How nginx picks a site and a file», ~50 min.
Module 1
Nginx: sites and proxy
How nginx picks a site by Host and a file by URI, how it proxies a request to an application and where to look for the cause of a 502.
3 stages · ~2 hours
-
Stage 1 of 9
1 · How nginx picks a site and a fileHow nginx picks a site and a file
7 steps · 1 lab · ~50 min 7 steps · 1 lab · ~50 min- The docs open the portal exercises 0 of 1 on a machine 5 min
- 2 The site name travels in the request theory 6 min
- 3 A link enables the site on a machine 7 min
- 4 From a page address to a file on a machine 6 min
- 5 A third site on a machine 4 min
- 6 Two sites on one nginx lab 20 min
- 7 Summary summary 2 min
-
Stage 2 of 9
2 · Reverse proxy and 502Reverse proxy and 502
8 steps · 2 labs · ~1 hour 8 steps · 2 labs · ~1 hour- The shop answers 502 exercises 0 of 1 on a machine 5 min
- 2 Two requests instead of one on a machine 6 min
- 3 Test the second leg yourself on a machine 5 min
- 4 What else error.log says theory 5 min
- 5 The path the application sees on a machine 7 min
- 6 Set up an nginx reverse proxy lab 25 min
- 7 Fix 502 Bad Gateway lab 25 min
- 8 Summary summary 2 min
-
3 · Module test 10 questions · pass mark 70%
Module 2
TLS and certificates
Why a client does not trust a certificate — name, expiry or chain, how to issue a new one with the same key and enable HTTPS with a redirect.
3 stages · ~2 hours
-
Stage 4 of 9
4 · Trust, name and expiry of a certificateTrust, name and expiry of a certificate
8 steps · 1 lab · ~55 min 8 steps · 1 lab · ~55 min- The site will not open exercises 0 of 1 on a machine 4 min
- 2 What the server sent on a machine 6 min
- 3 The name in a certificate on a machine 6 min
- 4 Whom the client trusts on a machine 5 min
- 5 A new certificate with the same key theory 4 min
- 6 A second name for shop on a machine 3 min
- 7 The portal fails over HTTPS lab 25 min
- 8 Summary summary 2 min
-
Stage 5 of 9
5 · HTTPS in nginx: chain and redirectHTTPS in nginx: chain and redirect
7 steps · 1 lab · ~55 min 7 steps · 1 lab · ~55 min- The root is there, yet curl does not trust exercises 0 of 1 on a machine 5 min
- 2 The certificate chain on a machine 8 min
- 3 A full chain file on a machine 7 min
- 4 The old address over HTTP on a machine 4 min
- 5 HTTPS for docs on a machine 4 min
- 6 The shop after a certificate renewal lab 25 min
- 7 Summary summary 2 min
-
6 · Module test 10 questions · pass mark 70%
Module 3
PostgreSQL for administrators
A refused connection layer by layer — network, pg_hba rule, role and password; a database dump and a restore into a separate database with a check.
3 stages · ~2 hours
-
Stage 7 of 9
7 · Connection, role and pg_hbaConnection, role and pg_hba
7 steps · 1 lab · ~55 min 7 steps · 1 lab · ~55 min- The application cannot log in exercises 0 of 1 on a machine 5 min
- 2 Three checks on the way to the database on a machine 7 min
- 3 The pg_hba.conf rules file on a machine 5 min
- 4 A line for shop on a machine 7 min
- 5 The reports cannot log in on a machine 4 min
- 6 App can't connect to PostgreSQL lab 25 min
- 7 Summary summary 2 min
-
Stage 8 of 9
8 · A dump and a verified restoreA dump and a verified restore
7 steps · 1 lab · ~55 min 7 steps · 1 lab · ~55 min- A dump on a live database exercises 0 of 1 on a machine 5 min
- 2 What a dump holds on a machine 8 min
- 3 Restoring into a separate database on a machine 6 min
- 4 Comparing the copy theory 5 min
- 5 A dump in another format on a machine 4 min
- 6 Restore a database from a dump lab 25 min
- 7 Summary summary 2 min
-
9 · Module test 10 questions · pass mark 70%
-
-
Final test 18 questions · pass mark 80%