VPS Setup Instructions

[Chalwk 316]

This is a step-by-step tutorial that covers the installation of a Ubuntu VPS with Wine and a VNC server for remote connection.
The hosting company that I use in this tutorial is Vultr but will work for other providers as well.

 

Please see this page for the guide.

 

[AntiMomentum 65]

This is a great tutorial for users to begin learning how setup a linux vps.

I will say that VNC being less secure than SSH it would probably be good to add more security to it. Perhaps with a firewall rule to whitelist the ip or ips allowed to the 5901 port. Especially running it as root.

Edited February 9 by AntiMomentum

[Chalwk 316]

1 hour ago, AntiMomentum said:

This is a great tutorial for users to begin learning how setup a linux vps.

I will say that VNC being less secure than SSH it would probably be good to add more security to it. Perhaps with a firewall rule to whitelist the ip or ips allowed to the 5901 port. Especially running it as root.

Pretty sure I covered that with sudo ufw default reject incoming

And then sudo ufw allow from 0.0.0.0 (you will replace 0.0.0.0 with your own ip)

 

Requires that they have a static IP for obvious reasons.

Edited February 9 by Chalwk

[AntiMomentum 65]

1 hour ago, Chalwk said:

Pretty sure I covered that with sudo ufw default reject incoming

And then sudo ufw allow from 0.0.0.0 (you will replace 0.0.0.0 with your own ip)

 

Requires that they have a static IP for obvious reasons.

When running the ufw rules in that order on the github the port is open. With 0.0.0.0 replaced with a specific ip address of course. iptables is sequential, and the first ufw rule (ufw allow 5901/tcp) already accepts all for 5901

To whitelist that port for a static ip adress (when used with your other rules) replace this rule:
ufw allow 5901/tcp

with this rule (the ip address here is just an example of course):

ufw allow from 45.56.67.78 proto tcp to any port 5901

On a side note:
ufw default reject incoming

will still send an icmp destination unreachable response back to whatever ip sent the packet. Which can be useful for troubleshooting purposes. However this will just silently drop the packet:

ufw default deny incoming

Edited February 9 by AntiMomentum

[Chalwk 316]

39 minutes ago, AntiMomentum said:

When running the ufw rules in that order on the github the port is open. With 0.0.0.0 replaced with a specific ip address of course. iptables is sequential, and the first ufw rule (ufw allow 5901/tcp) already accepts all for 5901

To whitelist that port for a static ip adress (when used with your other rules) replace this rule:
ufw allow 5901/tcp

with this rule (the ip address here is just an example of course):

ufw allow from 45.56.67.78 proto tcp to any port 5901

On a side note:
ufw default reject incoming

will still send an icmp destination unreachable response back to whatever ip sent the packet. Which can be useful for troubleshooting purposes. However this will just silently drop the packet:

ufw default deny incoming

 

Many thanks for the feedback. I have made changes accordingly. 

[Java 169]

Atm if you use this guide and utilize Debian 11, kinda stay away from fail2ban. Oddly enough it has been locking up systems without proper tuning

Edited March 19 by Java

[gussil 0]

Hello, your tutorial was very helpful because I just migrated to AWS. I have a question, how can I make halo detect custom maps? When I add my custom maps, the server does not detect them. Is there a way?

[Chalwk 316]

2 hours ago, gussil said:

Hello, your tutorial was very helpful because I just migrated to AWS. I have a question, how can I make halo detect custom maps? When I add my custom maps, the server does not detect them. Is there a way?

 

Are you using the pre-configured servers mentioned in the guide?

 

Either way, upload your custom maps to the servers ./maps directory.

Then add a new entry in the mapvote.txt (or mapcycle.txt) file. 

 

The format for mapvotes.txt is: map:mode:name:min:max

For example: hangemhigh:TAG-PC:[Hangemhigh TAG]:0:16

The name part is the custom message players will see when a game ends; This does not need to be encapsulated in square brackets, that's just how I like to format it personally. 

 

The format for mapcycle.txt is: map:mode:min:max

For example: hangemhigh:TAG-PC:0:16

 

~ Min/Max are player limits.

 

Note that custom maps made for CE are only compatible with CE servers. Do not upload these to a retail (PC) server.

There are, however, 386 custom maps available for PC on the map repo.

Edited April 8 by Chalwk

[Chalwk 316]

Updated the guide with corrections to some typos and linked the newly released server template instead of the Multi-Server.

Edited April 10 by Chalwk

[Denn 5]

Change VNC port on a Linux VPS.

this is the tutorial video I use in Ubuntu.

https://www.youtube.com/watch?v=jnpWYko4FNo

 

I change my port to a much higher number.

Example 8887  <-not the port I use haha

this helps to secure your VNC port to avoid bot attacks.