Ubuntu

sudo apt-get update -yqq
sudo apt-get install -yqq p7zip-full

Fedora or CentOS / RHEL

CentOS 7.x Download and install manually

wget https://www.mirrorservice.org/sites/dl.fedoraproject.org/pub/epel/7/x86_64/Packages/p/p7zip-16.02-10.el7.x86_64.rpm
wget https://www.mirrorservice.org/s...

Add a Node to Percona XtraDB Cluster on Ubuntu 24.04

Prerequisites

• Cluster bootstrapped and running
• PXC installed on this node
• Ports 3306, 4444, 4567, 4568 open

Configure this node (/etc/mysql/mysql.conf.d/mysqld.cnf, example Node 2)

[mysqld]
server-id            = 2
wsrep_on...

Apache .htaccess and mod_rewrite on Ubuntu 24.04

Enable mod_rewrite

a2enmod rewrite && systemctl restart apache2

Allow overrides in virtual host

    AllowOverride All
    Require all granted

Common .htaccess recipes

Force HTTPS

Rewrite...

Apache + PHP-FPM on Ubuntu 24.04

Step 1 – Enable proxy modules

a2enmod proxy_fcgi setenvif
a2enconf php8.3-fpm
systemctl reload apache2

Step 2 – Virtual host with PHP-FPM handler

    ServerName example.com
    DocumentRoot /var/www/example.com/html
    ...

Bootstrap a Percona XtraDB Cluster on Ubuntu 24.04

Nodes: 192.168.1.10 (bootstrap) · 192.168.1.11 · 192.168.1.12

Step 1 – Configure Node 1 (/etc/mysql/mysql.conf.d/mysqld.cnf)

[mysqld]
server-id            = 1
wsrep_on             = ON
wsrep_provider       = /usr/lib64/galera4/libgalera...

Configure Apache Virtual Hosts on Ubuntu 24.04

Step 1 – Create document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html
chown -R www-data:www-data /var/www/example.com 2>/dev/null || chown -R apache:apache /var/www/example.com 2>/dev/null ||...

Configure UFW on Ubuntu 24.04

Install and set defaults

apt install -y ufw
ufw default deny incoming
ufw default allow outgoing

Allow services

ufw allow ssh
ufw allow 80/tcp
ufw allow 443/tcp
ufw enable

Status

ufw status verbose

Allow from specific IP

ufw allow from 192.168.1.100 to a...

Configure Nginx as a Reverse Proxy on Ubuntu 24.04

Basic reverse proxy

upstream backend {
    server 127.0.0.1:3000;
}

server {
    listen 80;
    server_name app.example.com;
    location / {
        proxy_pass         http://backend;
        proxy_http_version 1.1;
        proxy_set_header...

Configure Nginx Virtual Hosts on Ubuntu 24.04

Step 1 – Create the document root

mkdir -p /var/www/example.com/html
echo '
Works!
' > /var/www/example.com/html/index.html

Step 2 – Create /etc/nginx/sites-available/example.com

server {
    listen 80;
    listen [::]:80;
    server_name...

Configure OpenSMTPD on Ubuntu 24.04

Install

# OpenBSD – built-in:
rcctl enable smtpd && rcctl start smtpd

# Other platforms:
# Ubuntu/Debian:
apt install opensmtpd
# AlmaLinux/RHEL:
dnf install opensmtpd
# Arch:
pacman -S opensmtpd

Basic /etc/mail/smtpd.conf

pki mail.example.com cert "/etc...

Elasticsearch Multi-Node Cluster on Ubuntu 24.04

Nodes: node-1 192.168.1.10 · node-2 192.168.1.11 · node-3 192.168.1.12

Node 1 elasticsearch.yml

cluster.name: production-cluster
node.name: node-1
node.roles: [master, data, ingest]
network.host: 192.168.1.10
http.port: 9200
transport.por...

Elasticsearch Snapshot Backup on Ubuntu 24.04

Register filesystem repository

mkdir -p /var/backups/elasticsearch
chown elasticsearch:elasticsearch /var/backups/elasticsearch

elasticsearch.yml: path.repo: ["/var/backups/elasticsearch"]

curl -X PUT "https://localhost:9200/_snapshot/my_backup...

Enable TLS/SSL on Apache – Ubuntu 24.04

Step 1 – Enable mod_ssl

a2enmod ssl rewrite && systemctl restart apache2

Step 2 – Generate self-signed certificate

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/apache-selfsigned.key \
    -out /etc/ssl/certs/apache...

Enable TLS/SSL on Nginx – Ubuntu 24.04

Step 1 – Self-signed certificate (testing)

openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
    -keyout /etc/ssl/private/nginx-selfsigned.key \
    -out /etc/ssl/certs/nginx-selfsigned.crt \
    -subj "/CN=example.com"
openssl dhparam -out /etc/ssl/cer...

This tutorial assumes you have magento installed

Install geoip module and database:

sudo apt-get install libgeoip1 libnginx-mod-http-geoip geoip-database-extra -y

Update GeoIP databases:

cd /usr/share/GeoIP
mv GeoIP.dat GeoIP.dat.bak 
curl -O https://dl.miyuru.lk/geoip/maxmind/country/maxmin...

Zabbix Install

Php installation

sudo apt update

sudo apt dist-upgrade

sudo apt install php7.0-xml php7.0-bcmath php7.0-mbstring

Add repository

Setup the repository.

wget http://repo.zabbix.com/zabbix/3.4/ubuntu/pool/main/z/zabbix-release/zabbix-release_3.4-1+xenial_all.deb

sudo dpkg...

HAProxy MySQL Load Balancing on Ubuntu 24.04

Config section

listen mysql-cluster
    bind *:3306
    mode    tcp
    option  mysql-check user haproxy_check
    balance leastconn
    server db1 192.168.1.10:3306 check weight 1
    server db2 192.168.1.11:3306 check weight 1
    server db3 192.168...

HAProxy TLS Termination on Ubuntu 24.04

Step 1 – Combine cert + key

cat /etc/ssl/certs/example.com.crt /etc/ssl/private/example.com.key > /etc/haproxy/certs/example.com.pem
chmod 600 /etc/haproxy/certs/example.com.pem
openssl dhparam -out /etc/haproxy/dhparam.pem 2048

Step 2 – Config

global...

Harden SSH on Ubuntu 24.04

Back up config

cp /etc/ssh/sshd_config /etc/ssh/sshd_config.bak

Key settings (/etc/ssh/sshd_config)

Port 2222
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes
AllowUsers deploy alice
Protocol 2
ClientAliveInterval 600
ClientAliveCountMax 0
X1...

Install and Configure Postfix on Ubuntu 24.04

Step 1 – Install

DEBIAN_FRONTEND=noninteractive apt install -y postfix
systemctl enable --now postfix

Step 2 – /etc/postfix/main.cf

myhostname  = mail.example.com
mydomain    = example.com
myorigin    = $mydomain
inet_interfaces = all
inet_proto...

Install Apache HTTP Server on Ubuntu 24.04

Step 1 – Install

apt update && apt upgrade -y
apt install -y apache2
systemctl enable --now apache2

Step 2 – Open firewall ports

ufw allow 'Apache Full'
ufw reload

Step 3 – Verify

curl -I http://localhost
apachectl -v

Main config: /etc/apache...

Install Docker on Ubuntu 24.04

Step 1 – Install

install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/$(. /etc/os-release && echo "$ID")/gpg | gpg --dearmor -o /etc/apt/keyrings/docker.gpg
chmod a+r /etc/apt/keyrings/docker.gpg
echo "deb [arch=$(dpkg --print-architect...

Install Elasticsearch on Ubuntu 24.04

Step 1 – Install

wget -qO - https://artifacts.elastic.co/GPG-KEY-elasticsearch | gpg --dearmor -o /usr/share/keyrings/elasticsearch-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/elasticsearch-keyring.gpg] https://artifacts.elastic.co/packages/8.x/apt...

Install Fail2Ban on Ubuntu 24.04

Step 1 – Install

apt install -y fail2ban
systemctl enable --now fail2ban

Step 2 – /etc/fail2ban/jail.local

[DEFAULT]
bantime  = 3600
findtime = 600
maxretry = 5
banaction = iptables-multiport
ignoreip = 127.0.0.1/8 192.168.1.0/24

[sshd]
enabled  = true
port...