Everything posted by Sandeep B.
-
Backup Remote Sync ith Hetzner Storage box
then you need to use scp to transfer files scp -P 23 /path/of/the/source/backupfile.zip username@backup_server_hostname:/path/of/the/backup/directory/
-
Backup Remote Sync ith Hetzner Storage box
to use rsync both source and destination servers should have the rsync package installed.
-
secure and top performance config for /etc/nginx/nginx.conf
hi replace these lines : worker_rlimit_nofile 65535; worker_connections 5000; final config : user nobody; worker_processes auto; worker_rlimit_nofile 65535; error_log /var/log/nginx/error.log crit; pid /var/run/nginx.pid; events { worker_connections 5000; use epoll; multi_accept on; } http { sendfile on; tcp_nopush on; tcp_nodelay on; client_header_timeout 3m; client_body_timeout 3m; client_max_body_size 256m; client_header_buffer_size 4k; client_body_buffer_size 256k; large_client_header_buffers 4 32k; send_timeout 3m; keepalive_timeout 60 60; reset_timedout_connection on; server_names_hash_max_size 1024; server_names_hash_bucket_size 1024; ignore_invalid_headers on; connection_pool_size 256; request_pool_size 4k; output_buffers 4 32k; postpone_output 1460; include mime.types; default_type application/octet-stream; # Compression gzip gzip on; gzip_vary on; gzip_disable "MSIE [1-6]\."; gzip_proxied any; gzip_min_length 512; gzip_comp_level 6; gzip_buffers 8 64k; gzip_types text/plain text/xml text/css text/js application/x-javascript application/xml image/png image/x-icon image/gif image/jpeg image/svg+xml application/xml+rss text/javascript application/atom+xml application/javascript application/json application/x-font-ttf font/opentype; # Proxy settings proxy_redirect off; proxy_set_header Host $host; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_pass_header Set-Cookie; proxy_connect_timeout 300; proxy_send_timeout 300; proxy_read_timeout 300; proxy_buffers 32 4k; proxy_cache_path /var/cache/nginx levels=2 keys_zone=cache:10m inactive=60m max_size=512m; proxy_cache_key "$host$request_uri $cookie_user"; proxy_temp_path /var/cache/nginx/temp; proxy_ignore_headers Expires Cache-Control; proxy_cache_use_stale error timeout invalid_header http_502; proxy_cache_valid any 1d; open_file_cache_valid 120s; open_file_cache_min_uses 2; open_file_cache_errors off; open_file_cache max=5000 inactive=30s; open_log_file_cache max=1024 inactive=30s min_uses=2; # SSL Settings ssl_session_cache shared:SSL:10m; ssl_protocols TLSv1.2; ssl_prefer_server_ciphers on; ssl_ciphers "EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA!RC4:EECDH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS"; # Logs log_format main '$remote_addr - $remote_user [$time_local] $request ' '"$status" $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; log_format bytes '$body_bytes_sent'; #access_log /var/log/nginx/access.log main; access_log off; # Cache bypass map $http_cookie $no_cache { default 0; ~SESS 1; ~wordpress_logged_in 1; } # Include additional configuration include /etc/nginx/cloudflare.inc; include /etc/nginx/conf.d/*.conf; }
-
secure and top performance config for /etc/nginx/nginx.conf
Hi what you're looking specifically?
-
CWP Apache Enable HTTP/2 with mod_http2 module - Control Web Panel
will check what is the issue exactly
-
PHP Defender using Snuffleupagus
hi will be soon added to cwp seems they added the support for php 8.2
-
Email delivery
any error you're getting here ?
-
Upgrade openssl
on enterprise linux don't upgrade openssl as this will break the system dependecies
-
Wrong IP is sending the email. It is not using the default IP
you need to configure the postfix like the below : in /etc/postfix/master.cf smtp unix - - n - - smtp -o smtp_bind_address=100.100.100.100 # When relaying mail as backup MX, disable fallback_relay to avoid MX loops relay unix - - n - - smtp -o smtp_bind_address=100.100.100.100 -o fallback_relay= # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5
-
CWP postfix split with gsuite
to investigate more about this error you need to check all the alias forwarders and check if the same email is not set for the alias.
-
CWP postfix split with gsuite
hi, the cwp postfix is a modified version and there is no issue with it. also, scan your websites for malware as the spamming issue usually comes with it.
-
CWP postfix split with gsuite
The error indicates that it was blocked for spaming issue.
-
CWP postfix split with gsuite
please check the /var/log/maillog and check what you see there
-
Wrong IP is sending the email. It is not using the default IP
did you try it?
-
CWP postfix split with gsuite
Hi in mail routing you need to change to remote for the domain. you can do it from cwp admin search for routing
-
Vertical scaling CWP server storage
is this a XFS file system ? can you post the output for the command : pvs example output : PV VG Fmt Attr PSize PFree /dev/vda2 rhel lvm2 a-- <39.00g 10.00g
-
SSH access to hosting clients - Security measures
jk_cp -k -j /home/jail/username /usr/bin/nano jk_cp -k -j /home/jail/username /usr/local/bin/php jk_cp -k -j /home/jail/username /usr/bin/clear jk_cp -k -j /home/jail/usernamem /usr/bin/composer you can do it like upper example
-
SSH access to hosting clients - Security measures
You can use jailkit, in cwp you,ve the option for it under shell access.
-
Correct Redis set up with php-fpm varnish server set up - not working
Hi you need to go to php-fpm selector and rebuild the php by selecting the redis option. After it is built successful you can confirm it by checking the phpinfo option under php-fpm selector module, i.e. every php versions will have it's own phpinfo option.
-
Varnish reverse proxy selection
Hi, no there is no option in cwp for now, only admin can select it.
-
Mail hostname suddenly stopped working
Try to rebuild the mail server and test also send some screenshot of the error or send the subdomain name for the checks.
-
Mail hostname suddenly stopped working
you can reinstall the ssl from cwp autossl module by deleting the current ssl and then recreating it, this will fix the mail ssl issue
-
Mail hostname suddenly stopped working
if you check the ssl for the hostname, is it returning the valid ssl ? also send output for the command: openssl s_client -showcerts -connect mail.example.com:465 replace mail.example.com with your valid sub domain
-
Install and Build PHP 8.3 in CWP - Control WEB Panel from Source
In this tutorial we’ll install most awaited php version in CWP control panel as php switcher. This easy guide will guide you upon how to install PHP 8 easily. PHP 8.3 comes with numerous improvements and new features such as: Typed Class Constants Added json_validate function Dynamic class constant and Enum member fetch support class_alias() supports aliasing built-in PHP classes New #[\Override] attribute New stream_context_set_options function PHP CLI Lint (php -l) supports linting multiple files at once Fallback value support for PHP INI Environment Variable syntax Random extension: New \Random\Randomizer::getFloat() and nextFloat() methods Random extension: New \Random\Randomizer::getBytesFromString method gc_status() returns additional GC information PHP 8.3 will not support your current php scripts/cms/themes. Check before shifting to php 8.3., Latest version of WordPress works great with it also check the theme and plugin support by the devs. Step 1 : Building files which are required to compile php 8.3 Centos 7/el7 : yum install oniguruma oniguruma-devel gcc make gcc-c++ cpp kernel-headers.x86_64 libxml2-devel openssl-devel bzip2-devel libjpeg-devel libpng-devel freetype-devel openldap-devel postgresql-devel aspell-devel net-snmp-devel libxslt-devel libc-client-devel libicu-devel gmp-devel curl-devel libmcrypt-devel pcre-devel sqlite-devel db4-devel enchant-devel libXpm-devel mysql-devel readline-devel libedit-devel recode-devel libtidy-devel libtool-ltdl-devel libwebp libwebp-devel expat expat-devel libargon2 libargon2-devel Centos 8/stream/el8 : yum install oniguruma oniguruma-devel gcc make gcc-c++ cpp kernel-headers.x86_64 libxml2-devel openssl-devel bzip2-devel libjpeg-devel libpng-devel freetype-devel openldap-devel postgresql-devel aspell-devel net-snmp-devel libxslt-devel libc-client-devel libicu-devel gmp-devel curl-devel libmcrypt-devel pcre-devel sqlite-devel libdb-devel enchant-devel libXpm-devel mysql-devel readline-devel libedit-devel recode-devel libtidy-devel libtool-ltdl-devel libwebp libwebp-devel expat expat-devel libmemcached libmemcached-devel libargon2 libargon2-devel Now we’ll build libzip and pcre2 : Install EPEL : yum install epel-release Then install some more dependencies and remove the libzip package : Centos 7 : rpm -e --nodeps libzip libzip-devel yum -y install cmake3 cmake zlib-devel --enablerepo=epel Centos 8 : rpm -e --nodeps libzip libzip-devel yum install cmake zlib-devel ln -s /usr/bin/cmake /usr/bin/cmake3 Installing Latest version Libzip from source : cd /usr/local/src rm -rf libzip* wget https://github.com/mysterydata/md-disk/raw/main/libzip-1.10.0.tar.gz tar zxvf libzip* ## for centos 7 : cd libzip* ## for centos 8 : cd libzip*/ mkdir build cd build /usr/bin/cmake3 .. make && make install Installing Latest version pcre2 from source : cd /usr/local/src rm -rf pcre2* wget https://github.com/PCRE2Project/pcre2/releases/download/pcre2-10.42/pcre2-10.42.zip -O pcre2.zip unzip pcre2.zip ## for centos 7 : cd pcre2-* ## for centos 8 : cd pcre2-*/ ./configure make && make install Install Latest libavif for new AVIF GD image support: cd /usr/local/src rm -rf master* libavif-* build-dir wget https://github.com/mysterydata/md-disk/raw/main/libavif-0.11.1.zip unzip libavif-0.11.1 mkdir build-dir cd build-dir #Run this if you've centos 7/el7: cmake3 ../libavif-0.11.1 #Run this if you've centos 8/stream/el8 or up: cmake ../libavif-0.11.1 make make install Step 2 : Configuring pkg-config path variables run the below command : export PKG_CONFIG_PATH=/usr/local/lib/pkgconfig:/usr/local/lib64/pkgconfig After you installed deps and exporting path variable continue to install php 8 with this steps : For centos 7/EL7 : rm -rf /usr/local/php-83 mkdir -p /usr/local/php-83 cd /usr/local/php-83 wget http://php.net/distributions/php-8.3.4.tar.gz tar zxvf php-8.3.4.tar.gz cd php-8.3.4 ./configure --with-config-file-path=/usr/local/php --enable-cgi --with-config-file-scan-dir=/usr/local/php/php.d --with-zlib=/usr --enable-mbstring --with-zip --enable-bcmath --enable-pcntl --enable-ftp --enable-exif --enable-calendar --enable-sysvmsg --enable-sysvsem --enable-sysvshm --with-tidy --with-curl --with-iconv --with-gmp --with-pspell --enable-gd --with-avif --with-jpeg --with-freetype --enable-gd-jis-conv --with-webp --with-zlib-dir=/usr --with-xpm --with-openssl --with-pdo-mysql=mysqlnd --with-gettext=/usr --with-bz2=/usr --with-mysqli --enable-soap --enable-phar --with-xsl --with-kerberos --enable-posix --enable-sockets --with-external-pcre --with-libdir=lib64 --with-mysql-sock=/var/lib/mysql/mysql.sock --enable-intl --with-password-argon2 --enable-litespeed --with-ldap=/usr --with-ldap-sasl=/usr --with-imap --with-imap-ssl --with-litespeed make make install For centos 8/EL8/alamlinux 8 : rm -rf /usr/local/php-83 mkdir -p /usr/local/php-83 cd /usr/local/php-83 wget http://php.net/distributions/php-8.3.4.tar.gz tar zxvf php-8.3.4.tar.gz cd php-8.3.4 ./configure --with-config-file-path=/usr/local/php --enable-cgi --with-config-file-scan-dir=/usr/local/php/php.d --with-zlib=/usr --with-zip --enable-bcmath --enable-pcntl --enable-ftp --enable-exif --enable-calendar --enable-sysvmsg --enable-sysvsem --enable-sysvshm --with-tidy --with-curl --with-iconv --with-gmp --with-pspell --enable-gd --with-avif --with-jpeg --with-freetype --enable-gd-jis-conv --with-webp --with-zlib-dir=/usr --with-xpm --with-openssl --with-pdo-mysql=mysqlnd --with-gettext=/usr --with-bz2=/usr --with-mysqli --enable-soap --enable-phar --with-xsl --with-kerberos --enable-posix --enable-sockets --with-external-pcre --with-libdir=lib64 --with-mysql-sock=/var/lib/mysql/mysql.sock --enable-intl --with-password-argon2 --enable-litespeed --with-ldap=/usr --with-ldap-sasl=/usr --with-imap --with-imap-ssl --with-litespeed make make install curl -s -L https://www.alphagnu.com/upload/mbstring.sh | bash it will take some time depends on your server speed when it is finished you can check the php version via command : php -v eg : PHP 8.3.1 (cli) (built: Jan 4 2024 05:42:06) (NTS) Copyright (c) The PHP Group Zend Engine v4.3.1, Copyright (c) Zend Technologies if you’ve any question comment below
-
Logrotate for CWP own logs
Install log rotate yum install logrotate