Dette viser forskellene mellem den valgte og den nuværende udgave af dokumentet. Gul er linjer der findes i den gamle udgave, og grøn er linjer der findes i den nuværende.
| Begge sider forrige revision Forrige revision Næste revision | Forrige revision | ||
|
cpanel_server_setup [2017/03/08 15:23] noer [System Setup] |
cpanel_server_setup [2021/01/26 19:43] (nuværende) noer |
||
|---|---|---|---|
| Linje 52: | Linje 52: | ||
| ==== Setup CloudLinux Features ==== | ==== Setup CloudLinux Features ==== | ||
| + | Install LVE Manager | ||
| + | < | ||
| + | lvectl set 10000 --speed=400% --pmem=0 --io=0 --nproc=0 | ||
| + | yum install lvemanager | ||
| + | </ | ||
| + | Copy ''/ | ||
| + | Install CageFS | ||
| < | < | ||
| + | yum install cagefs | ||
| + | / | ||
| + | |||
| + | / | ||
| + | / | ||
| + | / | ||
| + | / | ||
| + | </ | ||
| + | |||
| + | Install MySQL Governor | ||
| + | < | ||
| + | yum install governor-mysql | ||
| + | |||
| + | # Read Documentation about version | ||
| + | / | ||
| + | / | ||
| </ | </ | ||
| Linje 87: | Linje 110: | ||
| Restart the puppet service with '' | Restart the puppet service with '' | ||
| + | ==== Setup for Hosting.gl ==== | ||
| + | == DNS == | ||
| + | Add hook to unset NSEC3 when DNSSEC is enabled, because otherwise it cannot be transferred to the DNS slave server. | ||
| + | Put script in ''/ | ||
| + | < | ||
| + | # | ||
| + | <?php | ||
| + | // Get decoded input. | ||
| + | $input = get_passed_data(); | ||
| + | // Declare return variables and set their values. | ||
| + | list($result_result, | ||
| + | |||
| + | // Return the return variables. | ||
| + | echo " | ||
| + | |||
| + | // Perform the hooks action, using the decoded input. | ||
| + | function unset_nsec3($input = array()) { | ||
| + | // Insert your actions here. | ||
| + | $domain = $input[' | ||
| + | system(" | ||
| + | |||
| + | // Set success and failure messages. | ||
| + | $result = " | ||
| + | $message = "This is an error message."; | ||
| + | |||
| + | // Return the hook result and message. | ||
| + | return array($result, | ||
| + | } | ||
| + | |||
| + | // Process data from STDIN. | ||
| + | function get_passed_data() { | ||
| + | |||
| + | // Get input from STDIN. | ||
| + | $raw_data; | ||
| + | $stdin_fh = fopen(' | ||
| + | if ( is_resource($stdin_fh) ) { | ||
| + | stream_set_blocking($stdin_fh, | ||
| + | while ( ($line = fgets( $stdin_fh, 1024 )) !== false ) { | ||
| + | $raw_data .= trim($line); | ||
| + | } | ||
| + | fclose($stdin_fh); | ||
| + | } | ||
| + | |||
| + | // Process and JSON-decode the raw output. | ||
| + | if ($raw_data) { | ||
| + | $input_data = json_decode($raw_data, | ||
| + | } else { | ||
| + | $input_data = array(' | ||
| + | } | ||
| + | |||
| + | // Return the output. | ||
| + | return $input_data; | ||
| + | } | ||
| + | </ | ||
| + | |||
| + | Run command to add the hook | ||
| + | < | ||
| + | / | ||
| + | </ | ||
| + | |||
| + | Create new user on '' | ||
| + | |||
| + | Copy the script ''/ | ||
| + | |||
| + | Create ssh key for root | ||
| + | < | ||
| + | ssh-keygen -t rsa -b 4096 -f / | ||
| + | </ | ||
| + | |||
| + | Copy pub-key to '' | ||
| + | |||
| + | Add to ''/ | ||
| + | < | ||
| + | Host master.ns.gl | ||
| + | User cpanel2 | ||
| + | IdentityFile ~/.ssh/id2 | ||
| + | </ | ||
| + | |||
| + | Add cronjob | ||
| + | < | ||
| + | # Sync DNS to master.ns.gl | ||
| + | * * * * * sh / | ||
| + | </ | ||
| + | |||
| + | == RDiff Backup == | ||
| + | Create new user on '' | ||
| + | |||
| + | Copy pub-key to '' | ||
| + | |||
| + | Add to ''/ | ||
| + | < | ||
| + | Host backup1.hosting.gl | ||
| + | User cpanel2 | ||
| + | IdentityFile ~/.ssh/id2 | ||
| + | </ | ||
| + | |||
| + | Copy the script ''/ | ||
| + | |||
| + | == Exim Setup == | ||
| + | Change ciphers | ||
| + | < | ||
| + | # strong but tolerant | ||
| + | tls_require_ciphers = AESGCM: | ||
| + | </ | ||