for i in $(cut -d: -f1 /etc/userdatadomains );do whmapi1 php_set_vhost_versions version=inherit vhost-0=$i;done
Monthly Archives: November 2019
remi repo centos 8
dnf install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
dnf install https://rpms.remirepo.net/enterprise/remi-release-8.rpm
dnf module install php:remi-7.2
ssh-keygen secure
Curve cryptography with ed25519:
ssh-keygen -t ed25519 -a 100 -f ~/.ssh/id_ed25519 -q
or old way:
ssh-keygen -t rsa -b 4096 -o -a 100
openssl self signed certificate without passphrase
openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 10000 -nodes
litespeed WebP support for GD prestashop
Assuming you are using PHP 7.2 version standalone or with cyberpanel and you need add WebP support:
yum install -y lsphp72-devel gcc libjpeg-turbo-devel libpng-devel libXpm-devel freetype-devel libwebp-devel
wget https://www.php.net/distributions/php-7.2.24.tar.gz
tar xzvf php-7.2.24.tar.gz
cd php-7.2.24
cd ext/gd
/usr/local/lsws/lsphp72/bin/phpize
/usr/local/lsws/lsphp72/bin/php-config
./configure --with-php-config=/usr/local/lsws/lsphp72/bin/php-config --with-webp-dir=/usr/include/webp --with-freetype-dir=/usr/include/freetype2/freetype --with-jpeg-dir=/usr/include --with-png-dir=/usr/include --with-xpm-dir=/usr/include
make
make install
pkill lsphp
This works for Google webP Image Converter Module
fsck progress
e2fsck -v -C 0 /dev/sdc
e2fsck 1.41.12 (17-May-2010)
/dev/sdc has gone 215 days without being checked, check forced.
Pass 1: Checking inodes, blocks, and sizes
/dev/sdc: |==== – 7.8%
Restarting network (via systemctl): Job for network.service canceled
service network restart
Restarting network (via systemctl): Job for network.service canceled.
[FAILED]
systemctl restart network
Job for network.service canceled.
If cyberpanel server network is down (venet0:
vi /etc/fstab
#/usr/.tempdisk /tmp ext4 loop,rw,noexec,nosuid,nodev,nofail 0 0
#/tmp /var/tmp none bind 0 0
service network restart
Restarting network (via systemctl):
[ OK ]
monitor and block syn flood
Can help prevent SYN flood DDoS attack
[Mon Nov 4 17:35:53 2019] possible SYN flooding on ctid 0, port 465. Sending cookies.
[Mon Nov 4 19:23:41 2019] possible SYN flooding on ctid 0, port 25. Sending cookies
cat > SYN_RECV.sh << "END"
#!/bin/bash
netstat -natp | grep SYN_RECV | sort | awk '{ print $5 }' | sort | cut -d ":" -f1 | uniq -c | awk '{if ($1>100) system("iptables -I INPUT -s "$2" -j REJECT")}'
END
#ANsible copy and add to cron:
ansible -i inv.txt cpa -m copy -a "src=SYN_RECV.sh dest=/root/bin/SYN_RECV.sh mode=755 owner=root group=root"
ansible -i inv cpa -m cron -a "name=SYN_BLOCK job=/root/bin/SYN_RECV.sh user=root"