My nodeBB website is not working anymore

[MJ]

My nodebb website isn't working anymore, only the title bar is showing. Content is gone and I can't login into my account.

Here is the link to my website.

Can somebody help me?

[larvell]

Have absolutly the same problem.
I was running 0.8.2 and after my vServer (Ubuntu 12.04) was down (hostsystem down) i had this effect.
I decided to rollback my vServer and everything was okay again for round about 18 hours. Then i got the same effect again without any downtime of the server.
I really though it has to do something with my system i don't understand.
So i just upgraded to 0.9.0, but after maybe 32 hours i now have the same problem again.
I Figured out that the \var\lib\redis\redis.rdb is messed up.
I made a rollback just couple hours ago, but somehow it seems my rdb is not in my server backup.
When i'm back home i can load a manually created backup file of my db and that should help.
Just a question of time when it will be messed up again.

I think i will have to completly cleanup the system from nodebb and all it's required packages and make a fresh install of 0.9.0

Since i'm not at home right now i can't provide any more informations.

just saw this https://community.nodebb.org/topic/6966/lost-all-my-data-help-please/2
two topics same problem

[CreeperFace]

Hello,

Sorry for the inconvenience, have you installed the files correctly? Please recheck twice and get me up-to-date whether it has been fixed! NodeBB is still the best forum generator out there !

[CreeperFace]

Loss of data might not be from us but from the VPS you are using. By 'us', I mean the NodeBB Development Team.

[MJ]

@CreeperFace said:

NodeBB is still the best forum generator out there !

If it was, why do I have this problem

I hope I have not lost the post and files posted on my forum. If I have to start over again I'm going to use an other software. Cause this is the second time.

Files are installed correctly I checked it.

[julian]

Guys, check that your Redis instance is not accessible from the outside world

Use a password, and limit access to localhost.

Please report back with whether this was the cause.

[alberto__segura]

Your redisdb is open to outside.. :S

[MJ]

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

[MJ]

@alberto__segura said:

Your redisdb is open to outside.. :S

I use DigitalOcean hosting

Is there a tutorial how to make redisdb not open to outside.
And if I do, this problem cannot return?

[CreeperFace]

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

[MJ]

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

[CreeperFace]

@MJ said:

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

Thankyou for your amazing understanding, customers like you should get helped. Here is a tip ~ Data may be recovered through Backups

[MJ]

@CreeperFace said:

@MJ said:

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

Thankyou for your amazing understanding, customers like you should get helped. Here is a tip ~ Data may be recovered through Backups

I have a back-up from 4 november 2015

Do you have any advice how to prevent this in the future?

[CreeperFace]

Here is a better VPS Hosting service . CONTAINERHOST

[MJ]

I'm now using only password protection on my DigitalOcean droplet. If I use SSH keys, would that be sufficient protection? Or should I then still put a password on redis?

[julian]

Whether you use password access or ssh key access is irrelevant, your Redis installation is open to anyone to access, even though your server is secured.

Please consult http://redis.io/topics/security

[alberto__segura]

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

I use DigitalOcean hosting

Is there a tutorial how to make redisdb not open to outside.
And if I do, this problem cannot return?

as @julian said, you should read it: http://redis.io/topics/security

[HolyPhoenix]

Also Digital Ocean works just fine, no reason to switch hosts as @CreeperFace suggests as this problem has nothing to do with your hosting provider.

[Bri]

@MJ I would also strongly suggest two factor authentication (2FA). Same goes for any other account you have that supports it like github, gmail, etc. it WILL protect you much more than any password.

[pichalite]

@MJ if this is not already mentioned... the first thing I would do is enable firewall on the server and block all ports except the very few required to be open for outside connections.