lucien144 / lemp-stack

🤖 LEMP w/ PHP7.X & MariaDB on Ubuntu 16/17/18 x64

👋 Hey, I'm Honza.

🧰 Fullstack & Mobile Dev
🌆 Prague & Sydney
🥳 Chipmunks & Coffee
📍 Currently the tech lead at Circul8

lemp-stack's Issues

Remove Let's Encrypt

Since it's not complete and valid... ?

Update the default nginx server

Especially include the HTTPS version -> https://irulan.net/nginx-http-and-https-default-server/

Include basic php configuration

Nginx → /etc/nginx/sites-available/new-site.tld
client_max_body_size 128M;

PHP → /etc/php/7.0/fpm/php.ini
upload_max_filesize = 128M

...

PHP7.2 missing mcrypt

#9 (comment)

unattended-upgrades

Include automatic security updates with unattended-upgrades

Update nginx conf

Based on some of these tips https://github.com/A5hleyRich/wordpress-nginx

Include MongoDB installation?

Ref: https://www.digitalocean.com/community/tutorials/how-to-install-and-secure-mongodb-on-ubuntu-16-04

Include the logrotate?

Include the logrotate for each vhost in logrotate config?
Renaming the vhost logs to $HOSTNAME-{access,error}.log for better logrotate logging?

include sftp jail

1. Create the sftp group and put desired user to that group.

$ sudo groupadd sftp
$ sudo usermod -g sftp yournewuser

2. Update the SSH settings

$ sudo nano /etc/ssh/sshd_config

Change the /etc/ssh/sshd_config

# override default of no subsystems
#Subsystem      sftp    /usr/lib/openssh/sftp-server
# 👇
Subsystem sftp internal-sftp

Add this to the end of the /etc/ssh/sshd_config

Match group sftp
        X11Forwarding no
        ChrootDirectory %h
        AllowTcpForwarding no
        ForceCommand internal-sftp

3. Check the permissions

⚠️ All directories up to the user root must be owned by root with permissions 755

$ sudo chown root: /var/www/vhosts/USERSHOME
$ sudo chmod 755 /var/www/vhosts/USERSHOME

4. Restart SSH

$ sudo service ssh restart

5. Optional

To disable the bash entirely for this user, you can run $ sudo usermod -s /bin/false USER

Reference: https://shapeshed.com/chroot-sftp-users-on-ubuntu-intrepid/

Include MyTop?

Create Docker image

Disable "rm" in favor to "trash-cli"

Add to the /etc/bash.bashrc
alias rm='echo "This is not the command you are looking for. Use trash-put instead."; false'

Install trash-cli apt install trash-cli

Include basic WordPress settings?

Like if WP is in subdirectory:

        location / {
                try_files $uri /wordpress/index.php?q=$uri&$args;
        }

        location /wordpress {
                index index.php index.html index.htm;
                try_files $uri $uri/ /index.php?q=$uri&$args;
        }

fail2ban

Include fail2ban ?

set the dafault shell to bash for all users

$ sudo usermod -s /bin/bash USER

Implement sendmail?

$ apt-get install -y sendmail
$ sudo sendmailconfig
$ hostname
$ sudo nano /etc/hosts # 127.0.0. localhost localhost.localdomain hostname
$ sudo ufw allow 587
$ sudo service ufw restart

Support PHP7.3

Update Adminer scripts

👉 https://gist.github.com/lucien144/dc34bb91cde424681ac1d701d7f6e8e6

domain name tqode.com no more working

After I completed the tutorial my domain name started to redirect to www.tqode.com and I see no response at all, and even if I hit the ip http://178.62.76.82/ I get 403 error, if you can help please.