marsderp / midendscript

Debian 6 bash script to set up/bootstrap mid-end virtual servers

Mid End Script for Mid End Boxes (Debian 6)

Modified script to run optimally on 1-2GB RAM VPS

Base Software

• Base software list: make g++ iptables dash syslogd exim4 vim nano mc htop iftop iotop
• Added secure to create a new ssh user, change ssh port and disable ssh root logins
• Moved install_iptables into secure

nginx

• v1.2.1+
• Configured with gzip
• Must have a site installed later as config does not include server params
• Does not assume nginx will definitely be used to serve PHP files

MongoDB (New)

MySQL

• v5.5+ without InnoDB,
• Configured with query caching

PHP-FPM

• v5.4+ with APC installed and configured
• Other packages installed:
• php5-cli php5-mysql php-apc php5-dev php5-mcrypt php5-imagick php5-common php5-suhosin php5-curl php5-intl php-gettext php-pear
• PECL packages: rar zip apc mongo
• PECL extensions are added as additional .ini in /etc/php/conf.d

Install Site

• Creates a MySQL database and a user from the provided username
• Creates a DOMAIN.conf in /etc/php5/fpm/pool.d/
• Creates a DOMAIN.conf in /etc/nginx/sites-available/
• Attempts to prevent image file script execution exploits (e.g. someimage.jpg/malicious.php)
• Attempts to rewrite URL /index.php? params (currently for FuelPHP)

Creates the following directories and files:

/var/www/DOMAIN/
	listen.sock (automatically created for nginx to connect to php5-fpm)
/var/www/DOMAIN/public_html
    index.php (MySQL database, username and password are in comments)
    pinfo.php (phpinfo)
/var/www/DOMAIN/logs

Usage:

$ wget --no-check-certificate https://raw.github.com/marsd/midendscript/master/setup-debian.sh
$ chmod 744 setup-debian.sh
$ ./setup-debian.sh system
$ ./setup-debian.sh mysql
$ ./setup-debian.sh mongodb
$ ./setup-debian.sh nginx
$ ./setup-debian.sh php
$ ./setup-debian.sh site <example.com> <MySQL username>
$ ./setup-debian.sh secure <12345> <New SSH user>

After installation

• Disconnect from your current SSH connection and reconnect using the new port and username.
• Use su to switch to root user after logging in
• MySQL root is given a new password which is located in ~root/.my.cnf.
• MySQL user for each site is located in /var/www/DOMAIN/public_html/index.php file, and should be removed after storing the password in a safe location.
• Delete, move or password protect /var/www/<DOMAIN>/public_html/pinfo.php file, which installed automatically on each new site installation.

Credits

LowEndBox admin (LEA), Xeoncross,