blob: 967dac8e96a9b7709a44184a2d98007fb60692e0 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
|
#!/usr/bin/env bash
# Secure SSHD
# ssh-copy-id user@hostname
# PasswordAuth no
# Update server
apt update
apt upgrade
#Setting up firewall
ufw default deny incoming
ufw default allow outgoing
ufw default deny routed
ufw allow 22/tcp
ufw allow 80/tcp
ufw allow 443/tcp
ufw enable
systemctl enable --now ufw
# Installing necessary packages
apt install ufw curl
apt install nginx mariadb-server php-fpm php-mysql
apt install php-curl php-gd php-intl php-mbstring php-soap php-xml php-xmlrpc php-zip
apt install python3-certbot-nginx
systemctl restart php7.3-fpm.service
# Setting up Nginx
mkdir -p /var/www/example.com
cat > /etc/nginx/sites-available/example.com << EOF
server {
listen 80;
listen [::]:80;
root /var/www/example.com;
index index.php index.html index.htm;
server_name example.com;
location = /favicon.ico { log_not_found off; access_log off; }
location = /robots.txt { log_not_found off; access_log off; allow all; }
location ~* \.(gif|jpeg|jpg|png)$ {
expires max;
log_not_found off;
}
location / {
# try_files $uri $uri/ =404;
try_files $uri $uri/ /index.php$is_args$args;
}
location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php/php7.3-fpm.sock;
}
}
EOF
## Test Nginx config with nginx -t
cat > /var/www/example.com/index.php << EOF
<?php
phpinfo();
?>
EOF
ln -s /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/
systemctl restart nginx
# HTTPS
certbot --nginx -d example.com
systemctl restart nginx
# MariaDB
mysql_secure_installation
|
