# Digital Ocean hosting: Do I need a system admin?

**URL:** https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525
**Category:** Self-hosting
**Tags:** hosting
**Created:** [March 20, 2017, 10:01am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525 "2017-03-20T10:01:55Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![immalex](https://avatars.discourse-cdn.com/v4/letter/i/258eb7/32.png) [@immalex](https://meta.discourse.org/u/immalex)
#### Post date: [March 20, 2017, 10:01am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/1 "2017-03-20T10:01:55Z")

</div>

I have been running my discourse forum on Digital Ocean for a few months. Works beautifully at $10 a month. I know DO is an unmanaged VPS, so I am wondering what maintenance task is required?

If maintenance tasks are required, what happen if I leave the server alone? This is a fairly small forum, just wondering if i need a system admin. If i do, it might make more sense to go with [Communiteq](https://www.communiteq.com) (formerly DiscourseHosting).

Thanks

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [March 20, 2017, 10:26am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/2 "2017-03-20T10:26:43Z")

</div>

Setting up unattended upgrades and occasionally (every few months) running

```plaintext
cd /var/discourse
./launcher rebuild app

```

(in addition to regular web-based upgrades) should be enough for quite some time. When the disk gets full, run

```plaintext
sudo apt-get autoremove
sudo apt-get clean
cd /var/discourse
./launcher cleanup

```

to free up some space. When the support for your version of Ubuntu runs out, it’s probably easiest to take a backup and restore on a new droplet (using the same `app.yml` file).

In short: _Some_ maintenance is required (and neglecting that will pose security risks), but it’s neither hard nor a lot to do. And if you run into problems, we’d be happy to help 🙂

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [March 21, 2017, 12:40am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/3 "2017-03-21T00:40:40Z")

</div>

I believe @pfaffman has some magic scripts that automate even this part (the cleanup of old Ubuntu and Launcher stuff, at least).

---

<div class="post-metadata">

### Author: ![ron\_jeremy](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ron_jeremy/32/56621_2.png) [@ron\_jeremy](https://meta.discourse.org/u/ron_jeremy)
#### Post date: [March 21, 2017, 12:55am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/4 "2017-03-21T00:55:22Z")

</div>

I am also running a small community on Digitalocean. It has been running like a top (knock on wood) for almost a year now, and I have done nothing but perform Discourse upgrades via the web interface.

Never really thought about Ubuntu upgrades, etc. Maybe I should, but I am no sys admin…

---

<div class="post-metadata">

### Author: ![Steven](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/steven/32/187890_2.png) [@Steven](https://meta.discourse.org/u/Steven)
#### Post date: [March 21, 2017, 1:13am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/5 "2017-03-21T01:13:15Z")

</div>

For Ubuntu & docker, I do these commands (one by one) :

```
apt-get update && apt-get upgrade
apt-get dist-upgrade
sudo apt-get upgrade docker-engine

```

After that a little cleanup

```
apt-get autoremove && apt-get autoclean

```

And to finish this, a simple

```
reboot

```

And it will be fresh and clean

You can configure automatic updates, but I don’t know if it’s the best option :

```
dpkg-reconfigure -plow unattended-upgrades

```

---

<div class="post-metadata">

### Author: ![ron\_jeremy](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ron_jeremy/32/56621_2.png) [@ron\_jeremy](https://meta.discourse.org/u/ron_jeremy)
#### Post date: [March 21, 2017, 4:20am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/6 "2017-03-21T04:20:21Z")

</div>

Thx for the info @Steven. How risky is all that? I would have no clue how to revive the server if anything went sideways.

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [March 21, 2017, 5:23am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/7 "2017-03-21T05:23:24Z")

</div>

I’ve never had any problems with this.

But if you want to be in the safe side (which is always a good idea), begin by taking and downloading a backup, and store a copy of `app.yml`. If anything goes sideways and you cannot fix it, it takes less than 60 minutes to reimage and restore your droplet 🙂

---

<div class="post-metadata">

### Author: ![JagWaugh](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jagwaugh/32/69335_2.png) [@JagWaugh](https://meta.discourse.org/u/JagWaugh)
#### Post date: [March 21, 2017, 7:08am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/8 "2017-03-21T07:08:08Z")

</div>

Consider building yourself a free [Sandbox](https://meta.discourse.org/t/howto-build-yourself-a-sandbox/58298).

This gives you:

- A way to practice installing, restoring, and modifying Discourse.
- A non production environment to test changes on.
- If you run it with mail enabled you can get user feedback about new features.

If you use a different provider for your VPS, but the same OS, with the same updates, and your discourse installation has the same plugins, permissions, groups, settings (Except for site name, notification email), and update level, then if something stops working on your live site, but still works on your sandbox, then you’ve already narrowed down the list of possible causes by a large factor.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2017, 5:22pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/9 "2017-03-21T17:22:42Z")

</div>

> [@immalex](#):
>
> If maintenance tasks are required, what happen if I leave the server alone?

Probably nothing. I have reason to believe that at least 50 people for whom I have done installs have never logged in to their server.

> [@ron\_jeremy](#):
>
> Never really thought about Ubuntu upgrades,

Well, you **do** want to do the OS upgrades, but you can set it up so that you don’t have to think about them.

> [@codinghorror](#):
>
> I believe @pfaffman has some magic scripts that automate even this part (the cleanup of old Ubuntu and Launcher stuff, at least).

I don’t (currently) automate doing a `./launcher cleanup`, but you can automate a bit more of the Ubuntu stuff with

```plaintext
dpkg-reconfigure -phigh unattended-upgrades
echo 'Unattended-Upgrade::Remove-Unused-Dependencies "true";' >> /etc/apt/apt.conf.d/50unattended-upgrades
echo 'Unattended-Upgrade::Automatic-Reboot "true";' >> /etc/apt/apt.conf.d/50unattended-upgrades
echo 'Unattended-Upgrade::Automatic-Reboot-Time "09:00";' >> /etc/apt/apt.conf.d/50unattended-upgrades

```

Best I can tell, the difference between `-phigh` and `-plow` is that the former doesn’t ask you any questions.

If you’re someone who’s not likely to log in to your server, you really need to reboot it without your having to log in if security updates require a reboot. The time is in UDT, 9:00 is 5AM EST and 2AM PST (and I guess it might be an hour different from that now). A reboot takes just a minute or two. The 40 or so people for whom I left the reboot time at 2:00, haven’t complained.

If you want an occasional sysadmin to intervene in some emergency or do a check-up, or want someone to pay attention to upgrades and such [I am available](https://www.literatecomputing.com/product/discourse-support/) as are others if you post in #Marketplace.

---

<div class="post-metadata">

### Author: ![Lutz](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/lutz/32/65103_2.png) [@Lutz](https://meta.discourse.org/u/Lutz)
#### Post date: [March 21, 2017, 6:00pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/10 "2017-03-21T18:00:54Z")

</div>

> [@pfaffman](#):
>
> Probably nothing. I have reason to believe that at least 50 people for whom I have done installs have never logged in to their server.

I must respectfully disagree. Without making a drama, if you do not make security updates for weeks or months, you will get hacked. It’s that simple. There are occasional kernel exploits that do not even require open services. In order to protect the data, such as the e-mail address of the users, a maintained system is essential.

Depending on the country in which you live, you can be held responsible for any damage caused. For example, if spam is sent via the hacked server, or a DDOS attack is executed, it becomes expensive.

I know I am rather alone with this opinion. But a server with large bandwidth is like a internet weapon. You have to know what you are doing or you let others do it.

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2017, 6:08pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/11 "2017-03-21T18:08:26Z")

</div>

Agreed. I gave instructions for having security patches automatically applied and automatic reboots.

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [March 21, 2017, 6:24pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/12 "2017-03-21T18:24:16Z")

</div>

To add some more confidence to that solution: I’ve been running multiple servers with this exact setup for quite some time, without any problems.

One side effect of the way that `unattended-upgrades` works is that this will _not_ update Docker – I’ve added `"Docker:ubuntu-xenial"` to `Unattended-Upgrade::Allowed-Origins` to fix this (and also uncommented `"${distro_id}:${distro_codename}-updates"` to get non-security updates). Automatic updates for Docker will cause about one minute of downtime when they are installed (at an unpredictable time), so this may not be suitable for everyone 🙂

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2017, 6:28pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/13 "2017-03-21T18:28:51Z")

</div>

Hmm. So you don’t think that docker will upgrade even if it’s a security patch?

I’m mildly concerned that a docker upgrade could break something. Docker still seems to be rather fast moving.

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [March 21, 2017, 6:34pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/14 "2017-03-21T18:34:33Z")

</div>

> [@pfaffman](#):
>
> Hmm. So you don’t think that docker will upgrade even if it’s a security patch?

I don’t think so, because the origin shouldn’t match – this is because Docker doesn’t come out of Ubuntu’s repository and uses a different origin.

I’m no expert here, though, so feel free to correct me. I _can_ confirm that non-security-updates will not be installed automatically even if `"${distro_id}:${distro_codename}-updates"` has been uncommented.

(`unattended-upgrades -d` is your friend if you want to play around with this.)

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [March 21, 2017, 6:59pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/15 "2017-03-21T18:59:45Z")

</div>

Sounds right to me. I’ll update my script and see about amending the install docs.

---

<div class="post-metadata">

### Author: ![Tumi](https://avatars.discourse-cdn.com/v4/letter/t/f475e1/32.png) [@Tumi](https://meta.discourse.org/u/Tumi)
#### Post date: [November 25, 2017, 9:17pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/16 "2017-11-25T21:17:31Z")

</div>

Hello, pls tell me what is the real minimum requirent for install discourse ?  
I wanna start comunity for 300 users per day. Im not sure , discourse will be good on my server with 1gb ram ? 1 core, and 10 gb ? Do i need ssd disk or not really ?

---

<div class="post-metadata">

### Author: ![pfaffman](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/pfaffman/32/120154_2.png) [@pfaffman](https://meta.discourse.org/u/pfaffman)
#### Post date: [November 26, 2017, 1:52am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/17 "2017-11-26T01:52:12Z")

</div>

You really want at least 20gb and you really want ssd.

---

<div class="post-metadata">

### Author: ![itsbhanusharma](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/itsbhanusharma/32/180717_2.png) [@itsbhanusharma](https://meta.discourse.org/u/itsbhanusharma)
#### Post date: [November 26, 2017, 4:39am UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/19 "2017-11-26T04:39:28Z")

</div>

Find something a bit more powerful if You want less pains in life managing a forum server!  
I’d suggest a bare minimum of 2Cores and at least 2 GB RAM when You set up the forum for 300 Users you also have to bother about the images and stuffs they post so for the foreseeable time and estimation of their behaviour I’d suggest something like a 40GB SSD on Which You can actually set up vswap in case You’re blowing up your system RAM.

---

<div class="post-metadata">

### Author: ![Tumi](https://avatars.discourse-cdn.com/v4/letter/t/f475e1/32.png) [@Tumi](https://meta.discourse.org/u/Tumi)
#### Post date: [November 26, 2017, 9:08pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/20 "2017-11-26T21:08:58Z")

</div>

> [@itsbhanusharma](#):
>
> vswap

Oh thanks for info but wait , im not sure im understand You .  
I must set any partition or somethink or just i need to take only server with 40gb ssd and clean os ? I can set this partition after instalation discourse or before ? Btw Ubuntu will be the better than centos / debian ?

---

<div class="post-metadata">

### Author: ![RGJ](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/rgj/32/523185_2.png) [@RGJ](https://meta.discourse.org/u/RGJ)
#### Post date: [November 26, 2017, 9:40pm UTC](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525/21 "2017-11-26T21:40:05Z")

</div>

> [@Tumi](#):
>
> Oh thanks for info but wait , im not sure im understand You

I think you should just get managed hosting so you can focus on building your community while someone else manages the technical stuff for you.

[Next page](https://meta.discourse.org/t/digital-ocean-hosting-do-i-need-a-system-admin/59525.md?page=2)
