Linux-SysAdmin-Network-Guide

An enterprise-grade, full-stack Infrastructure Blueprint detailing the structural deployment, inter-service integration, and compliance verification of a multi-service corporate network environment built on Ubuntu Server.

Rather than tracking heavy, multi-gigabyte virtual machine snapshots (.ova/.vmdk) which saturate storage and slow down version tracking, this repository approaches infrastructure through standard modern DevOps and SysAdmin practices. It acts as an operational blueprint tracking modular configuration templates, asset matrices, and step-by-step deployment runbooks. Any engineer can spin up a baseline operating system instance, apply these blueprints, and faithfully reconstruct the exact environment.

---

Architectural Environment Blueprint

The underlying environment is engineered to operate seamlessly within a controlled private virtual network topology running under the following hardcoded architectural parameters:

Metric	Configuration Target
Host Platform / Hypervisor	VMware Workstation Player 17
Operating System	Ubuntu 22.04 LTS (Server / Desktop Base Node)
Static Server IP Address	192.168.206.129
Network Gateway IP	192.168.206.2
Network Subnet Segment	192.168.206.0/24
Private Network Domain	shar.local
System Hostname	tp073394-virtual-machine
Fully Qualified Domain Name (FQDN)	tp073394-virtual-machine.shar.local

---

Integrated Service Matrix

This blueprint orchestrates six decoupled core server systems into a single inter-dependent network architecture:

1. Core Networking & Netplan Routing: Establishes a rigid network layer by deactivating dynamic interfaces and locking down a highly reliable static routing interface topology.
2. Authoritative DHCP (ISC DHCP Server): Controls automated IP address distribution via defined address pools (192.168.206.150 to .200) for clients interfacing with the internal broadcast segment.
3. Internal Domain Name Resolution (BIND9 DNS): Provides authoritative forward and reverse local lookup routing for system aliases (www, mail, ftp), while managing secure upstream transit lines to resolve outside internet interfaces.
4. Centralized Identity Services (OpenLDAP & LAM): Initializes directory backend schemas mapping secure organizational units (ou=people, ou=groups) underneath the core dc=shar,dc=local suffix, managed cleanly via a web UI dashboard (LDAP Account Manager).
5. Secure Web Services (Apache2 HTTP Server): Configures isolated virtual host containers (www.shar.local) utilizing custom self-signed 2048-bit RSA keys to force automated HTTPS rule rewrites and lock explicit site paths behind centralized LDAP validation checks.
6. Enterprise Messaging Stack (Postfix MTA & Dovecot MDA): Interlinks a comprehensive message routing network mapping transactional local accounts with modern individual Maildir file directory infrastructure structures.

---

Network Service Inter-Dependency Flow

Every service inside this network node acts in conjunction with the local directory backend and name resolution layers to secure incoming connections, route mail payloads, and authenticate enterprise users.

graph TD
    subgraph Host_Node [Ubuntu Server Node: 192.168.206.129]
        DHCP[ISC DHCP Server] -->|Assigns Pools| Net[Local Client Node]
        DNS[BIND9 DNS Server] -->|Resolves Local Zones| Apache[Apache Web Server]
        DNS -->|Validates MX Records| Mail[Postfix/Dovecot Stack]
        
        LDAP[OpenLDAP + LAM] -->|Central Auth: ou=people| Apache
        LDAP -->|Central Auth: Suffix dc=shar,dc=local| Mail
        
        SSL[SSL/TLS Layer] -->|Enforces HTTPS Port 443| Apache
        SSL -->|Secures IMAP/POP3 Sockets| Mail
    end
    
    Gateway[Network Gateway: 192.168.206.2] <--> DNS

Loading