True Light Designs Blog

nginx subdomain for WordPress Install

Monday, 11 July 2016 12:45

Tim Ramsey

0 Comments

#Add A Record to Point to Server IP
cd /etc/nginx/sites-available
cat default.conf > subdomain.conf
nano subdomain.conf

#Wordpress subdomain.conf Contents

server {
    listen 80;

    root /var/www/html/blog;
    index index.php index.html index.htm;

    ###################################################

    server_name blog.domain.com;

    # WordPress single site rules.
    # Designed to be included in any server {} block.
    
    # This order might seem weird - this is attempted to match last if rules below fail.
    # http://wiki.nginx.org/HttpCoreModule
    location / {
            try_files $uri $uri/ /index.php?$args;
    }
    
    # Add trailing slash to */wp-admin requests.
    rewrite /wp-admin$ $scheme://$host$uri/ permanent;
    
    # Directives to send expires headers and turn off 404 error logging.
    location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
           access_log off; log_not_found off; expires max;
    }
    
    # Uncomment one of the lines below for the appropriate caching plugin (if used).
    #include global/wordpress-wp-super-cache.conf;
    #include global/wordpress-w3-total-cache.conf;
    
    # Pass all .php files onto a php-fpm/php-fcgi server.
    location ~ [^/]\.php(/|$) {
            fastcgi_split_path_info ^(.+?\.php)(/.*)$;
            if (!-f $document_root$fastcgi_script_name) {
                    return 404;
            }
            # This is a robust solution for path info security issue and works with "cgi.fix_pathinfo = 1" in /etc/php.ini (default)
    
            include fastcgi_params;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    #       fastcgi_intercept_errors on;
            fastcgi_pass 127.0.0.1:9000;
    }

    location = /favicon.ico {
        log_not_found off;
        access_log off;
    }
    location = /robots.txt {
        allow all;
        log_not_found off;
        access_log off;
    }
    
    location ~ /\. {
        deny all;
    }
    
    location ~* /(?:uploads|files)/.*\.php$ {
        deny all;
    }
}

#test nginx
nginx -t

#restart nginx
service nginx restart

#Add A Record to Point to Server IP

cd /etc/nginx/sites-available

cat default.conf > subdomain.conf

nano subdomain.conf

#Wordpress subdomain.conf Contents

server {

listen 80;

root /var/www/html/blog;

index index.php index.html index.htm;

###################################################

server_name blog.domain.com;

# WordPress single site rules.

# Designed to be included in any server {} block.

# This order might seem weird - this is attempted to match last if rules below fail.

# http://wiki.nginx.org/HttpCoreModule

location / {

try_files $uri $uri/ /index.php?$args;

}

# Add trailing slash to */wp-admin requests.

rewrite /wp-admin$ $scheme://$host$uri/ permanent;

# Directives to send expires headers and turn off 404 error logging.

location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {

access_log off; log_not_found off; expires max;

}

# Uncomment one of the lines below for the appropriate caching plugin (if used).

#include global/wordpress-wp-super-cache.conf;

#include global/wordpress-w3-total-cache.conf;

# Pass all .php files onto a php-fpm/php-fcgi server.

location ~ [^/]\.php(/|$) {

fastcgi_split_path_info ^(.+?\.php)(/.*)$;

if (!-f $document_root$fastcgi_script_name) {

return 404;

}

# This is a robust solution for path info security issue and works with "cgi.fix_pathinfo = 1" in /etc/php.ini (default)

include fastcgi_params;

fastcgi_index index.php;

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

# fastcgi_intercept_errors on;

fastcgi_pass 127.0.0.1:9000;

}

location = /favicon.ico {

log_not_found off;

access_log off;

}

location = /robots.txt {

allow all;

log_not_found off;

access_log off;

}

location ~ /\. {

deny all;

}

location ~* /(?:uploads|files)/.*\.php$ {

deny all;

}

#test nginx

nginx -t

#restart nginx

service nginx restart

Add Beanstalkd to Cpanel Centos Linux

Sunday, 08 May 2016 03:54

Tim Ramsey

0 Comments

#You need to have the EPEL Repo Installed = yum -y install epel-release ^ yum repolist
yum install beanstalkd
chkconfig beanstalkd on
service beanstalkd start
service beanstalkd status

#You need to have the EPEL Repo Installed = yum -y install epel-release ^ yum repolist

yum install beanstalkd

chkconfig beanstalkd on

service beanstalkd start

service beanstalkd status

I am using cPanel and added this to chkservd so to make sure that it always stays running

nano /etc/chkserv.d/beanstalkd
service[beanstalkd]=x,x,x,/etc/init.d/beanstalkd restart,beanstalkd,root|beanstalkd

#Add this line to /etc/chkserv.d/chkservd.conf
beanstalkd:1

#If you need to /scripts/restartsrv_tailwatchd as chkservd is now a part of tailwatch

nano /etc/chkserv.d/beanstalkd

service[beanstalkd]=x,x,x,/etc/init.d/beanstalkd restart,beanstalkd,root|beanstalkd

#Add this line to /etc/chkserv.d/chkservd.conf

beanstalkd:1

#If you need to /scripts/restartsrv_tailwatchd as chkservd is now a part of tailwatch

Recover MySQL root password with root access

Sunday, 31 January 2016 17:12

Tim Ramsey

0 Comments

There are times when you lose root mysql password, but you still have root access to the server. You will probably get an error something like this:


mysqladmin: connect to server at 'localhost' failed
error: 'Access denied for user 'root'@'localhost' (using password: YES)'

Reset it with the following steps

#Stop mysql service
/etc/init.d/mysql stop

#Start the MySQL server w/o password
mysqld_safe --skip-grant-tables &

#Connect to the MySQL server without password
mysql -u root

#Set a new MySQL root user password
mysql> use mysql;
mysql> update user set password=PASSWORD("NEW-PASSWORD") where User='root';
mysql> flush privileges;
mysql> quit

#Stop mysql service
/etc/init.d/mysql stop

#Start mysql service
/etc/init.d/mysql start

#now you can login with password
mysql -u root -p

#Stop mysql service

/etc/init.d/mysql stop

#Start the MySQL server w/o password

mysqld_safe --skip-grant-tables &

#Connect to the MySQL server without password

mysql -u root

#Set a new MySQL root user password

mysql> use mysql;

mysql> update user set password=PASSWORD("NEW-PASSWORD") where User='root';

mysql> flush privileges;

mysql> quit

#Stop mysql service

/etc/init.d/mysql stop

#Start mysql service

/etc/init.d/mysql start

#now you can login with password

mysql -u root -p

Useful SSH commands for access issues and Keys

Thursday, 14 January 2016 13:44

Tim Ramsey

0 Comments

#How to block an IP using iptables?
iptables -A INPUT -s xx.xx.xx.xx -j DROP

#How to block an IP for a specific port:
iptables -A INPUT -p tcp -s xx.xx.xx.xx --dport PORT -j DROP

#How to allow access to an IP?
iptables -A INPUT -s xx.xx.xx.xx -j ACCEPT

#How to allow access to an IP to a specific port using iptables?
iptables -A INPUT -p tcp -s xx.xx.xx.xx --dport PORT -j ACCEPT

#See if SSHD is running and listen to port
netstat -tlpn

mkdir .ssh
chmod 700 .ssh
nano .ssh/authorized_keys
chmod 600 .ssh/authorized_keys

#restart ssh ubuntu
/etc/init.d/ssh

#How to block an IP using iptables?

iptables -A INPUT -s xx.xx.xx.xx -j DROP

#How to block an IP for a specific port:

iptables -A INPUT -p tcp -s xx.xx.xx.xx --dport PORT -j DROP

#How to allow access to an IP?

iptables -A INPUT -s xx.xx.xx.xx -j ACCEPT

#How to allow access to an IP to a specific port using iptables?

iptables -A INPUT -p tcp -s xx.xx.xx.xx --dport PORT -j ACCEPT

#See if SSHD is running and listen to port

netstat -tlpn

mkdir .ssh

chmod 700 .ssh

nano .ssh/authorized_keys

chmod 600 .ssh/authorized_keys

#restart ssh ubuntu

/etc/init.d/ssh

Page 10 of 13

nginx subdomain for WordPress Install

Add Beanstalkd to Cpanel Centos Linux

Recover MySQL root password with root access

Useful SSH commands for access issues and Keys

Categories

Recent Posts