My nodeBB website is not working anymore

MJ

My nodebb website isn't working anymore, only the title bar is showing. Content is gone and I can't login into my account.

Here is the link to my website.

Can somebody help me?

larvell

Have absolutly the same problem.
I was running 0.8.2 and after my vServer (Ubuntu 12.04) was down (hostsystem down) i had this effect.
I decided to rollback my vServer and everything was okay again for round about 18 hours. Then i got the same effect again without any downtime of the server.
I really though it has to do something with my system i don't understand.
So i just upgraded to 0.9.0, but after maybe 32 hours i now have the same problem again.
I Figured out that the \var\lib\redis\redis.rdb is messed up.
I made a rollback just couple hours ago, but somehow it seems my rdb is not in my server backup.
When i'm back home i can load a manually created backup file of my db and that should help.
Just a question of time when it will be messed up again.

I think i will have to completly cleanup the system from nodebb and all it's required packages and make a fresh install of 0.9.0

Since i'm not at home right now i can't provide any more informations.

just saw this https://community.nodebb.org/topic/6966/lost-all-my-data-help-please/2
two topics same problem

CreeperFace

Hello,

Sorry for the inconvenience, have you installed the files correctly? Please recheck twice and get me up-to-date whether it has been fixed! NodeBB is still the best forum generator out there !

CreeperFace

Loss of data might not be from us but from the VPS you are using. By 'us', I mean the NodeBB Development Team.

MJ

@CreeperFace said:

NodeBB is still the best forum generator out there !

If it was, why do I have this problem

I hope I have not lost the post and files posted on my forum. If I have to start over again I'm going to use an other software. Cause this is the second time.

Files are installed correctly I checked it.

julian

Guys, check that your Redis instance is not accessible from the outside world

Use a password, and limit access to localhost.

Please report back with whether this was the cause.

alberto__segura

Your redisdb is open to outside.. :S

MJ

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

MJ

@alberto__segura said:

Your redisdb is open to outside.. :S

I use DigitalOcean hosting

Is there a tutorial how to make redisdb not open to outside.
And if I do, this problem cannot return?

CreeperFace

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

MJ

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

CreeperFace

@MJ said:

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

Thankyou for your amazing understanding, customers like you should get helped. Here is a tip ~ Data may be recovered through Backups

MJ

@CreeperFace said:

@MJ said:

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

Thankyou for your amazing understanding, customers like you should get helped. Here is a tip ~ Data may be recovered through Backups

I have a back-up from 4 november 2015

Do you have any advice how to prevent this in the future?

CreeperFace

Here is a better VPS Hosting service . CONTAINERHOST

MJ

I'm now using only password protection on my DigitalOcean droplet. If I use SSH keys, would that be sufficient protection? Or should I then still put a password on redis?

julian

Whether you use password access or ssh key access is irrelevant, your Redis installation is open to anyone to access, even though your server is secured.

Please consult http://redis.io/topics/security

alberto__segura

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

I use DigitalOcean hosting

Is there a tutorial how to make redisdb not open to outside.
And if I do, this problem cannot return?

as @julian said, you should read it: http://redis.io/topics/security

HolyPhoenix

Also Digital Ocean works just fine, no reason to switch hosts as @CreeperFace suggests as this problem has nothing to do with your hosting provider.

Bri

@MJ I would also strongly suggest two factor authentication (2FA). Same goes for any other account you have that supports it like github, gmail, etc. it WILL protect you much more than any password.

pichalite

@MJ if this is not already mentioned... the first thing I would do is enable firewall on the server and block all ports except the very few required to be open for outside connections.