From c86378fa032ef74b04c5dd7731e996e169319e6b Mon Sep 17 00:00:00 2001
From: arcan1s <esalexeev@gmail.com>
Date: Sat, 12 Apr 2014 19:58:47 +0400
Subject: [PATCH] edited post site-changes

---
 _posts/2014-03-06-site-changes.html    | 18 ++++++++++--------
 ru/_posts/2014-03-06-site-changes.html | 16 +++++++++-------
 2 files changed, 19 insertions(+), 15 deletions(-)

diff --git a/_posts/2014-03-06-site-changes.html b/_posts/2014-03-06-site-changes.html
index a3b32e6..aa99f14 100644
--- a/_posts/2014-03-06-site-changes.html
+++ b/_posts/2014-03-06-site-changes.html
@@ -9,7 +9,7 @@ description: I decided to change my site. You may find short list of changes bel
 ---
 <h2><a name="list" class="anchor" href="#list"><span class="octicon octicon-link"></span></a>The list of changes:</h2>
 <ul>
-  <li>I rented a <code>arcanis.name</code> domain. Now I have a normal address, as well as all white people have it. Small description of how to do it. Firstly, you should rent domain and activate DNS editing (it is called <a href="http://www.nic.ru/dns/service/dns_hosting/">DNS-master</a> for Ru-center). I pay about $30 in year. Then you should create CNAME file in your repository; this file has line with your domain name. And finally you should create two DNS records for your domain:
+  <li>I rented a <code>arcanis.name</code> domain. Now I have a normal address, as well as all normal people have it. Small description of how to do it. Firstly, you should rent domain and activate DNS editing (it is called <a href="http://www.nic.ru/dns/service/dns_hosting/">DNS-master</a> for Ru-center). I pay about $30 in year. Then you should create CNAME file in your repository; this file has line with your domain name. And finally you should create two DNS records for your domain:
 {% highlight bash %}
 @    A   192.30.252.153
 @    A   192.30.252.154
@@ -29,12 +29,13 @@ domain.name.           912     IN      A       192.30.252.154
   <li>Also I've created <a href="ftp://repo.arcanis.name/repo">my own repo</a>, which will contain some AUR packages that I'm using. Support of both architectures is planned.</li>
   <li>Since the repo requires ftp protocol, I've changed samba shared folders to ftp. The problem of access has been resolved by using mount options:
 {% highlight bash %}
-# read and write rights (the file has size 2 Gb)
-/home/share/share.fs /mnt/ftp/share ext4 defaults,rw 0 0
 # only read rights
-/home/arcanis/arch/repo /mnt/ftp/repo ext4 defaults,bind,ro 0 0
-/mnt/global/Музыка /mnt/ftp/music ext4 defaults,bind,ro 0 0
+/home/arcanis/music                         /mnt/ftp/music  ext4    defaults,bind,ro   0 0
+/home/arcanis/arch/repo                     /mnt/ftp/repo   ext4    defaults,bind,ro   0 0
+# read and write rights (the file has size 2 Gb)
+/home/arcanis/share.fs                      /mnt/ftp/share  ext4    defaults,rw   0 0
 {% endhighlight %}
+Login on special user and option <code>anon_world_readable_only=YES</code> are used for prevent access to the music directory.
 Also here is my <code>/etc/vsftpd.conf</code> configuration file:
 {% highlight bash %}
 anonymous_enable=YES
@@ -49,16 +50,17 @@ anon_world_readable_only=YES
 dirmessage_enable=YES
 xferlog_enable=YES
 connect_from_port_20=YES
-nopriv_user=share
+nopriv_user=music
 ascii_upload_enable=YES
 ftpd_banner=Welcome to arcanis
+chroot_local_user=YES
+local_root=/mnt/ftp/music
 listen=YES
 {% endhighlight %}
 Now let's add redirection from <code>repo.arcanis.name</code> to the needed IP address. To do this, add the following entry in DNS:
 {% highlight bash %}
-repo.arcanis.name.   A   89.249.170.38
+repo   A   89.249.170.38
 {% endhighlight %}
-(Do not forget add point at the end of domain.)
   </li>
   <li>Also there are plans to buy a server for compiling packages and hosting the repository, filesharing and backups.</li>
 </ul>
diff --git a/ru/_posts/2014-03-06-site-changes.html b/ru/_posts/2014-03-06-site-changes.html
index 49d82f7..6517ece 100644
--- a/ru/_posts/2014-03-06-site-changes.html
+++ b/ru/_posts/2014-03-06-site-changes.html
@@ -29,12 +29,13 @@ domain.name.           912     IN      A       192.30.252.154
   <li>На радостях создал <a href="ftp://repo.arcanis.name/repo">собственный репозиторий</a>, в котором будут лежать некоторые пакеты из AUR, которые я использую. Планируется поддержка обеих архитектур.</li>
   <li>Поскольку репозиторий требует ftp, то перевел samba на ftp. Проблему доступа решил опциями монтирования:
 {% highlight bash %}
-# чтение и запись (файл ограничен 2 Гб)
-/home/share/share.fs /mnt/ftp/share ext4 defaults,rw 0 0
 # только чтение
-/home/arcanis/arch/repo /mnt/ftp/repo ext4 defaults,bind,ro 0 0
-/mnt/global/Музыка /mnt/ftp/music ext4 defaults,bind,ro 0 0
+/home/arcanis/music                         /mnt/ftp/music  ext4    defaults,bind,ro   0 0
+/home/arcanis/arch/repo                     /mnt/ftp/repo   ext4    defaults,bind,ro   0 0
+# чтение и запись (файл ограничен 2 Гб)
+/home/arcanis/share.fs                      /mnt/ftp/share  ext4    defaults,rw   0 0
 {% endhighlight %}
+Для отсутствия доступа извне к директории с музыкой, используется логин под специальным пользователем и ограничение <code>anon_world_readable_only=YES</code>.
 Также привожу свой файл настроек <code>/etc/vsftpd.conf</code>:
 {% highlight bash %}
 anonymous_enable=YES
@@ -49,16 +50,17 @@ anon_world_readable_only=YES
 dirmessage_enable=YES
 xferlog_enable=YES
 connect_from_port_20=YES
-nopriv_user=share
+nopriv_user=music
 ascii_upload_enable=YES
 ftpd_banner=Welcome to arcanis
+chroot_local_user=YES
+local_root=/mnt/ftp/music
 listen=YES
 {% endhighlight %}
 Теперь добавим переадресацию с <code>repo.arcanis.name</code> на нужный IP адрес. Для этого внесем следующие записи в DNS:
 {% highlight bash %}
-repo.arcanis.name.   A   89.249.170.38
+repo   A   89.249.170.38
 {% endhighlight %}
-(Обратите внимание на точку в конце.)
   </li>
   <li>В ближайшее время (как дойду до магазина с деньгами) планируется приобретение небольшого сервера для работы на постоянной основе (компиляция пакетов, репозиторий, файлообмен, бэкапы).</li>
 </ul>