Here is one liner which gives you average memory consumption of php-fpm processes.
ps --no-headers -o "rss,cmd" -C "php-fpm" | awk '{ sum+=$1 } END { printf ("%d%s\n", sum/NR/1024,"M") }'
If you have more pools, you can grep for specific pool and get average for that one:
ps --no-headers -o "rss,cmd" -C "php-fpm" | grep <mypool2> | awk '{ sum+=$1 } END { printf ("%d%s\n", sum/NR/1024,"M") }'
Because I don’t own NGINX plus, I must build mod_security and geoip2 modules manually each time I set up a new server with NGINX. It’s good practice to have both installed, as it can increase security of your web application significantly. I was getting tired of building every time, so I created a script which will do that for you. This script is build for Rocky Linux 8, so it should work on CentOS 8 (Stream), AlmaLInux …
This script will auto-detect your NGINX version and will download source, build extensions and install ModSecurity also. It will also install necessary dependencies which are needed for install. If you encounter errors, please check for errors on which library you need. It will also install OWASP ruleset for mod_security and configure your NGINX accordingly. Path to extensions will be inserted in your NGINX configuration by script.
You should install and configure geoipupdate and add geoip definitions in your nginx configuration.
I hope this helps you and saves you some time. Feel free to modify and customize the script according to your needs.
Here is the script: build nginx modules script
It’s always a good idea to do basic MySQL security measures after installing fresh version of MariaDB server. For this task, I always used “mysql_secure_installation” command, which was part of installation. Some time ago, I’ve got stucked when trying to do so on MariaDB version 10.7. After some searching around, I guess command was changed.
[root@server ~]# mysql_secure_installation
-bash: mysql_secure_installation: command not found
This is a correct way on newer MariaDB versions:
root@server ~]# mariadb-secure-installation
NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
. . .
I setup a Directadmin server which was primary for website hosting. Separating every project with new DirectAdmin user is a good practice security vise. If one website/project is hacked, other sites that are with different users are safe. But creating new users and then set up ssh keys that are allowed for every user can be time consumedly. In this case, ssh public keys were the same for every user as only developers were able to ssh connect to user account. I created a simple script that will create .ssh directory and authorized_keys with public keys for every user.
#!/bin/sh
mkdir /home/$username/.ssh
chown $username:$username /home/$username/.ssh
cp /usr/local/directadmin/data/custom-authorized_keys /home/$username/.ssh/authorized_keys
chown $username:$username /home/$username/.ssh/authorized_keys
chmod 600 /home/$username/.ssh/authorized_keys
echo "SSH keys added!"
exit 0;
chmod +x /usr/local/directadmin/scripts/custom/user_create_post.sh
That is it. Every time a new user is created, .ssh directory with authorized_keys will be created inside user’s home account.
If you want to get information about how much of disk is consuming every email account on your Directadmin server, then you can use this command.
[root@post ~]# find /home/*/imap/*/*/ -maxdepth 1 -type d -exec du -sh {} \; | awk -F '/' {'print $6"@"$5 " -> " $1'}
info@domain1.si -> 60K
test@domain1.si -> 60K
lala@domain1.ba -> 529M
info@somedomain.ba -> 529M
igor@somedomain.eu -> 772K
...
If you would want for every email account of some specific user, than you can use this:
[root@post ~]# find /home/user1/imap/*/*/ -maxdepth 1 -type d -exec du -sh {} \; | awk -F '/' {'print $6"@"$5 " -> " $1'}
info@domain1.si -> 1.3G
test2@domain1.it -> 1.3G
igor@test.si -> 68M
...
Simple, but it can save some time 🙂
I had large list of domains for which I had to check to which location are they pointing/redirecting. Curl is best option for this kind of work. To save some time, I wrote this simple one liner which will do that for you.
First, create txt file which will contain list of all domains that you want to check. For this example I will create domains.txt.
Then, run this command – replace file name with yours.
> $ for i in `cat domains.txt`; do echo -n "$i -> "; curl -I -s -L -o /dev/null -w %{url_effective} -o /dev/null $i; echo "\t"; done
This will give you domain name with location to which it’s redirecting:
domain1.com -> https://www.domain1.com/sl domain1.de -> https://www.domain1.com/de domain2.si -> http://domain2.si/si example.com -> https://www.example.com/ lalala.es -> https://www. lalala.es/spain bash.com -> https://www.bash.com/i/love ...
Here is really simple trick how to search for strings that are the same within two different files.
For presenting purposes I created two files with some text in it. Some text is the same, some not.
File 1:
> $ cat file1.txt test1 test2 test3 test4 test5
File2:
> $ cat file2.txt lala1 lala2 test3 test4 lala4 lala6
Here is how to find strings that are the same within both files:
> $ cat file1.txt file2.txt | sort | uniq -c | grep "2 " 2 test3 2 test4
So, strings test3 and test4 occurring in both files.
With YUM, upgrading php is simple as “yum install php”. This will install latest php version on your machine. But if you have multi different php modules that aren’t part of php package (eg. gd, mysqli …), than you can use this simple one liner and install all those modules at once.
Just run this as root:
php -m | grep -v "Modules" | while read i; do yum install php-$i -y; done
This will check for all currently installed php packages and will try to upgrade them.
SSL certificates are daily routine of my work, so there was regular practice to check expiry date of live certificate through Chrome browser -> Developer tools. It is quite time-consuming and annoying work if you have to repeat it. So I made this very simple bash script with which you can check expiry date and some other certificate information quickly, from your terminal. This will work on osx or linux machines. Of corse, you must have OpenSSL installed on your machine in order to use this script.
When dealing with web servers where there are a lot of web sites, especially WordPresses, Joomlas etc., it is very common problem to dealing with flood/brute force attacks. One of most common for example, is generating massive requests on wp-login.php, or xmlrpc.php. With brute force, attackers goal is usually gaining access to administration. This is the simplest kind of method to gain access. Idea is very simple, attacker tries with a lot of different passwords and usernames, until it gets it right. Those operations of course, are automated by bots, scripts.
This can be very damaging for your server as it consumes a lot of memory. Every request means that someone just visited your website. When there is a script with bad intentions visiting your site, that means a lot of requests. Most modern web pages, every request like this, also makes database query. In most cases, server will become unresponsive, system will run out of memory, swap will fill up, mysql will stop responding.. This also means, that all websites on your server will stop working. In many cases, you’ll have to reboot your server to make it responsive again. Of course, there are systems that don’t allow this, like Cloud Linux with its LVE. One of great practices is to lock your administration to some static IP. There different ways.
© 2024 geegkytuts.net Hosted by SIEL
Recent Comments