Openvscode - Revision history

Qljca: /* Harden Security */

2025-08-30T17:19:15Z

Harden Security

← Older revision		Revision as of 17:19, 30 August 2025
Line 20:		Line 20:
	== Harden Security ==		== Harden Security ==
	Configure firewall:		Configure firewall:
	<pre> ufw allow 22 ufw allow 80 ufw allow 443 ufw enable </pre>		<pre> ufw allow 22
			ufw allow 80
			ufw allow 443
			ufw enable </pre>

	Set up Fail2Ban and enable automatic upgrades:		Set up Fail2Ban and enable automatic upgrades:
	<pre> systemctl enable --now fail2ban apt install unattended-upgrades dpkg-reconfigure unattended-upgrades </pre>		<pre>
			systemctl enable --now fail2ban
			apt install unattended-upgrades
			dpkg-reconfigure unattended-upgrades
			</pre>

	Use SSH key authentication—disable password login in <code>/etc/ssh/sshd_config</code> (<code>PasswordAuthentication no</code>).~~<ref name="4"/>~~		Use SSH key authentication—disable password login in <code>/etc/ssh/sshd_config</code> (<code>PasswordAuthentication no</code>).

	= OpenVSCode Server Installation =		= OpenVSCode Server Installation =

Qljca at 17:17, 30 August 2025

2025-08-30T17:17:30Z

← Older revision		Revision as of 17:17, 30 August 2025
Line 189:		Line 189:
	= Conclusion =		= Conclusion =
	This setup delivers a '''secure, scalable, browser IDE''' with local AI coding assistant and workflow automation—all on Ubuntu 24.04 LTS. This workflow is suitable for remote development teams, solo devs, and anyone needing advanced code capabilities balanced with maximum data control and security.		This setup delivers a '''secure, scalable, browser IDE''' with local AI coding assistant and workflow automation—all on Ubuntu 24.04 LTS. This workflow is suitable for remote development teams, solo devs, and anyone needing advanced code capabilities balanced with maximum data control and security.

	~~== References ==~~
	~~<references/>~~

Qljca: /* Install and Configure Continue Extension */

2025-08-30T17:15:47Z

Install and Configure Continue Extension

← Older revision		Revision as of 17:15, 30 August 2025
Line 155:		Line 155:

	Open a terminal in OpenVSCode as vscode user:		Open a terminal in OpenVSCode as vscode user:
	<pre> mkdir -p ~/.continue nano ~/.continue/config.json </pre>		<pre> mkdir -p ~/.continue
			nano ~/.continue/config.json </pre>

	Paste (replace <code><SERVER_IP></code>):		Paste (replace <code><SERVER_IP></code>):
	<pre> { "models": [ { "title": "Ollama (Llama 3)", "provider": "ollama", "model": "llama3", "api_base": "http://<SERVER_IP>:11434" } ] } </pre>		<pre>
			{
			"models": [
			{
			"title": "Ollama (Llama 3)",
			"provider": "ollama",
			"model": "llama3",
			"api_base": "http://<SERVER_IP>:11434"
			}
			]
			}
			</pre>

	Confirm connection:		Confirm connection:

Qljca: /* Install Certbot and Issue SSL */

2025-08-30T17:15:06Z

Install Certbot and Issue SSL

← Older revision		Revision as of 17:15, 30 August 2025
Line 137:		Line 137:

	== Install Certbot and Issue SSL ==		== Install Certbot and Issue SSL ==
	<pre> sudo apt install certbot python3-certbot-nginx -y sudo certbot --nginx -d "ide.illuni.in" -m "admin@illuni.in" --agree-tos -n sudo systemctl reload nginx </pre>		<pre>sudo apt install certbot python3-certbot-nginx -y
			sudo certbot --nginx -d "ide.illuni.in" -m "admin@illuni.in" --agree-tos -n
			sudo systemctl reload nginx </pre>

	Certbot automates SSL certificate provisioning and renewal.~~<ref name="4"/>~~		Certbot automates SSL certificate provisioning and renewal.

	= Install n8n (Automation Tool) =		= Install n8n (Automation Tool) =

Qljca: /* Configure Reverse Proxy */

2025-08-30T17:14:23Z

Configure Reverse Proxy

← Older revision		Revision as of 17:14, 30 August 2025
Line 131:		Line 131:

	Enable config:		Enable config:
	<pre> ln -sf /etc/nginx/sites-available/openvscode.conf /etc/nginx/sites-enabled/openvscode.conf		<pre>
	sudo nginx -t sudo systemctl reload nginx </pre>		ln -sf /etc/nginx/sites-available/openvscode.conf /etc/nginx/sites-enabled/openvscode.conf
			sudo nginx -t
			sudo systemctl reload nginx </pre>

	== Install Certbot and Issue SSL ==		== Install Certbot and Issue SSL ==

Qljca: /* Configure Reverse Proxy */

2025-08-30T17:13:58Z

Configure Reverse Proxy

← Older revision		Revision as of 17:13, 30 August 2025
Line 115:		Line 115:
	== Configure Reverse Proxy ==		== Configure Reverse Proxy ==
	Create <code>/etc/nginx/sites-available/openvscode.conf</code>:		Create <code>/etc/nginx/sites-available/openvscode.conf</code>:
	<pre> server { listen 80; server_name ide.illuni.in; location / { proxy_pass http://127.0.0.1:3100; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection "Upgrade"; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; } } </pre>		<pre>
			server {
			listen 80;
			server_name ide.illuni.in;
			location / {
			proxy_pass http://127.0.0.1:3100;
			proxy_http_version 1.1;
			proxy_set_header Upgrade $http_upgrade;
			proxy_set_header Connection "Upgrade";
			proxy_set_header Host $host;
			proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
			}
			}
			</pre>

	Enable config:		Enable config:
	<pre> ln -sf /etc/nginx/sites-available/openvscode.conf /etc/nginx/sites-enabled/openvscode.conf sudo nginx -t sudo systemctl reload nginx </pre>		<pre> ln -sf /etc/nginx/sites-available/openvscode.conf /etc/nginx/sites-enabled/openvscode.conf
			sudo nginx -t sudo systemctl reload nginx </pre>

	== Install Certbot and Issue SSL ==		== Install Certbot and Issue SSL ==

Qljca: /* Install Nginx */

2025-08-30T17:13:23Z

Install Nginx

← Older revision		Revision as of 17:13, 30 August 2025
Line 109:		Line 109:
	= Nginx Reverse Proxy with HTTPS (Certbot) =		= Nginx Reverse Proxy with HTTPS (Certbot) =
	== Install Nginx ==		== Install Nginx ==
	<pre> sudo apt install nginx -y sudo systemctl enable --now nginx sudo systemctl status nginx </pre>		<pre> sudo apt install nginx -y
			sudo systemctl enable --now nginx
			sudo systemctl status nginx </pre>

	== Configure Reverse Proxy ==		== Configure Reverse Proxy ==

Qljca: /* Configure Ollama as a Service (open to network) */

2025-08-30T17:12:57Z

Configure Ollama as a Service (open to network)

← Older revision		Revision as of 17:12, 30 August 2025
Line 85:		Line 85:
	== Configure Ollama as a Service (open to network) ==		== Configure Ollama as a Service (open to network) ==
	Edit <code>/etc/systemd/system/ollama.service</code>:		Edit <code>/etc/systemd/system/ollama.service</code>:
	<pre> [Unit] Description=Ollama AI Service After=network.target [Service] Type=simple User=root ExecStart=/usr/local/bin/ollama --host 0.0.0.0 --port 11434 serve Restart=always RestartSec=5 [Install] WantedBy=multi-user.target </pre>		<pre>
			[Unit]
			Description=Ollama AI Service
			After=network.target

			[Service]
			Type=simple
			User=root
			ExecStart=/usr/local/bin/ollama --host 0.0.0.0 --port 11434 serve
			Restart=always
			RestartSec=5

			[Install]
			WantedBy=multi-user.target
			</pre>

	Reload and start service:		Reload and start service:
	<pre> sudo systemctl daemon-reload sudo systemctl enable --now ollama sudo systemctl status ollama ss -tulpn \| grep 11434 </pre>		<pre> sudo systemctl daemon-reload
			sudo systemctl enable --now ollama
			sudo systemctl status
			ollama ss -tulpn \| grep 11434 </pre>

	= Nginx Reverse Proxy with HTTPS (Certbot) =		= Nginx Reverse Proxy with HTTPS (Certbot) =

Qljca: /* Pull AI Models */

2025-08-30T17:12:15Z

Pull AI Models

← Older revision		Revision as of 17:12, 30 August 2025
Line 77:		Line 77:

	== Pull AI Models ==		== Pull AI Models ==
	<pre> /usr/local/bin/ollama pull llama3 /usr/local/bin/ollama pull codellama:7b /usr/local/bin/ollama pull mistral:latest /usr/local/bin/ollama list </pre>		<pre>
			/usr/local/bin/ollama pull llama3
			/usr/local/bin/ollama pull codellama:7b
			/usr/local/bin/ollama pull mistral:latest
			/usr/local/bin/ollama list </pre>

	== Configure Ollama as a Service (open to network) ==		== Configure Ollama as a Service (open to network) ==

Qljca: /* Setup systemd Service */

2025-08-30T17:11:44Z

Setup systemd Service

@@ Line 45: / Line 45: @@
 == Setup systemd Service ==
 Create <code>/etc/systemd/system/openvscode.service</code>:
-<pre> [Unit] Description=OpenVSCode Server After=network.target [Service] Type=simple User=vscode WorkingDirectory=/opt/openvscode-server ExecStart=/opt/openvscode-server/bin/openvscode-server --host 0.0.0.0 --port 3100 --without-connection-token Restart=always RestartSec=3 [Install] WantedBy=multi-user.target </pre>
+<pre>
 Load and start the service:
-<pre> sudo systemctl daemon-reload sudo systemctl enable --now openvscode sudo systemctl status openvscode ss -tulpn | grep 3100 </pre>
+<pre> sudo systemctl daemon-reload
 = Ollama Installation (Local AI Models) =