Folks,I did something I wanted to do for the longest time and that is to host my own server. I never pursued it because I wasn't sure if I could get a static IP address. I contacted the Frontier business rep. and found out I can. It's only $95 per month, the first year, for 1 Gig static. Once I had the order in, I went to work. I purchased a computer then I installed and configured the main programs: Apache, PHP, MySQL, and hMailServer. Later, I whipped up a few utilities using Visual Studio. HostGator was hosting my site. I still use HostGator for the domain register.
What does the server do anyways, it just serves pages and files? It also handles activations, paypal functions, web server & RSOIP directory functions. It also receives error reports if ProScan encounters an abnormal exemption.
What does this mean for the end user? Less time spent on server maintenance so I can spend more time on ProScan.
The reasons I wanted to host my own site:
1. Simplicity - The HostGator dedicated server package was more complicated than needed to be in so many ways, I don't want to bore you with all the details. Just a few areas I'll touch on. 1) It seems to me that the WHM and the Control Panel made things so much more complicated such as it had it's own configuration sections for Apache, PHP, etc. I would rather do the config in the program directly plus it made duplicate config files in different location which is confusing to me and I didn't know which one had the higher priority. 2) The dedicated server package I purchased is mainly geared for resellers so all kinds of programs and options that I don't know exactly what they do. 3) DNS Records - So many dns records in about 5 different zones. I just want one zone to keep it simple.
2. Shared IP address. HostGator uses shared IP addresses even when using dedicated servers. The IP address I was on is on a couple of blacklists.
3. My site was hacked 3 times. The first two times were almost identical. The Apache .htaccess file had a redirect from my index.html file to an index.php file. I couldn't tell what was going on in the php file as it was obfuscated. I would copy the backup .htaccess file over the hacked file and 30 minutes to an hour later, the hacked .htaccess file will reappear. The 2nd time, I dug further into the problem and found a cron job doing it. I deleted the cron job and it still came back. Then I found a program called Softaculous that owned the cron job. Then I found out I couldn't disable the cron on the free version of Softaculous, just the paid version. A form of ransomware?. My dedicated server came with Softaculous already installed. I deleted all files and folders that had to do with Softaculous and the problem never came back. After I got the problem fixed both times, I got an ad from Sitelock advertising their service. How did they know? I didn't report the problem to HostGator. The 3rd time I got hacked: I got an email from HostGator saying I sent out 5000 emails in one day. I found out there were several email accounts showing in CPanel that I didn't create. I deleted them and the problem never came back. I think there are backdoors built in for the 'trusted partners'. I'm using strong passwords and a firewall so I think all three instances were inside jobs.
4. My site was running CentOS which is end of life. I kept getting reminders to upgrade to AlmaLinux. There is a script that handles the upgrade but what happens if something goes haywire.
5. Accessing the server remotely. I never got SSH working so I was stuck using the terminal mode in WHM which was cumbersome. If I wanted to copy a file, I would have to type out the folder and file names and pay attention to the casing. If I want to download the file, I would have to copy the file to the public serve folder, then change the file permissions, then FTP the file to my local computer. There's a file manager in WHM which is a GUI but it doesn't work at the root level.
My server setup may seem complicated but it's really simple and especially compared to before.
See my notes attached.