My nodeBB website is not working anymore

CreeperFace

Hello,

Sorry for the inconvenience, have you installed the files correctly? Please recheck twice and get me up-to-date whether it has been fixed! NodeBB is still the best forum generator out there !

CreeperFace

Loss of data might not be from us but from the VPS you are using. By 'us', I mean the NodeBB Development Team.

MJ

@CreeperFace said:

NodeBB is still the best forum generator out there !

If it was, why do I have this problem

I hope I have not lost the post and files posted on my forum. If I have to start over again I'm going to use an other software. Cause this is the second time.

Files are installed correctly I checked it.

julian

Guys, check that your Redis instance is not accessible from the outside world

Use a password, and limit access to localhost.

Please report back with whether this was the cause.

alberto__segura

Your redisdb is open to outside.. :S

MJ

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

MJ

@alberto__segura said:

Your redisdb is open to outside.. :S

I use DigitalOcean hosting

Is there a tutorial how to make redisdb not open to outside.
And if I do, this problem cannot return?

CreeperFace

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

MJ

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

CreeperFace

@MJ said:

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

Thankyou for your amazing understanding, customers like you should get helped. Here is a tip ~ Data may be recovered through Backups

MJ

@CreeperFace said:

@MJ said:

@CreeperFace said:

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

ok..

so now all my posts and everything is gone?

Data loss is not our fault. That's all your responsibility. Data loss caused by malicious software by a Developer is their or if they are from our company, our fault. Please understand this statement.

I'm not saying it's your fault, it was just a question sir

Thankyou for your amazing understanding, customers like you should get helped. Here is a tip ~ Data may be recovered through Backups

I have a back-up from 4 november 2015

Do you have any advice how to prevent this in the future?

CreeperFace

Here is a better VPS Hosting service . CONTAINERHOST

MJ

I'm now using only password protection on my DigitalOcean droplet. If I use SSH keys, would that be sufficient protection? Or should I then still put a password on redis?

julian

Whether you use password access or ssh key access is irrelevant, your Redis installation is open to anyone to access, even though your server is secured.

Please consult http://redis.io/topics/security

alberto__segura

@MJ said:

@alberto__segura said:

Your redisdb is open to outside.. :S

I use DigitalOcean hosting

Is there a tutorial how to make redisdb not open to outside.
And if I do, this problem cannot return?

as @julian said, you should read it: http://redis.io/topics/security

HolyPhoenix

Also Digital Ocean works just fine, no reason to switch hosts as @CreeperFace suggests as this problem has nothing to do with your hosting provider.

Bri

@MJ I would also strongly suggest two factor authentication (2FA). Same goes for any other account you have that supports it like github, gmail, etc. it WILL protect you much more than any password.

pichalite

@MJ if this is not already mentioned... the first thing I would do is enable firewall on the server and block all ports except the very few required to be open for outside connections.

wellenreiter

@MJ
Check your redis logs or the syslog for such an entry:

Nov 11 11:26:05 web02 redis[3992]: WARNING overcommit_memory is set to 0! Background save may fail under low memory condition. To fix this issue add 'vm.overcommit_memory = 1' to /etc/sysctl.conf and then reboot or run the command 'sysctl vm.overcommit_memory=1' for this to take effect.

Basically it tells you what to do to avoid the problem.
We had the problem twice in two days, applied that setting and the forum is running fine for nearly a week now

CreeperFace

@HolyPhoenix said:

Also Digital Ocean works just fine, no reason to switch hosts as @CreeperFace suggests as this problem has nothing to do with your hosting provider.

I actually suggested him that because it was not expensive (free at the moment) and works like a charm. No real reason to.