You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+6-6Lines changed: 6 additions & 6 deletions
Original file line number
Diff line number
Diff line change
@@ -11,14 +11,14 @@ Getting started
11
11
----------------
12
12
13
13
1. Before you do anything else, thoroughly review [build.sh](https://github.com/betweenbrain/ubuntu-web-server-build-script/blob/master/build.sh). You need to understand what it is doing.
14
-
2. Then, fire up your VM or VPS with a fresh install of Ubuntu 10.04 on it, connect via SSH and become the Root user.
15
-
3. Upload build.sh to your server -OR- create a new shell script via `$ nano build.sh` and copy/paste the contents of [build.sh](https://github.com/betweenbrain/ubuntu-web-server-build-script/blob/master/build.sh) into it.
14
+
2. Then, fire up your VM or VPS with a fresh install of Ubuntu 10.04, connect via SSH and become the Root user.
15
+
3. Upload [build.sh](https://github.com/betweenbrain/ubuntu-web-server-build-script/blob/master/build.sh) to your server -OR- create a new shell script via `$ nano build.sh` and copy/paste the contents of [build.sh](https://github.com/betweenbrain/ubuntu-web-server-build-script/blob/master/build.sh) into it.
16
16
4. Make your script executable `$ chmod +x build.sh`
17
17
5. Let 'er rip! `$ ./build.sh` and follow the on-screen prompts.
18
18
19
19
When running this script, please keep an eye on things (they tend happen fast) and keep an eye out for errors. If you see any, please [create an issue report](https://github.com/betweenbrain/ubuntu-web-server-build-script/issues?sort=created&direction=desc&state=open).
20
20
21
-
Need a VPS? Grab one at[Linode](http://www.linode.com/?r=e0368c8dce7aa292de419c36ae0078f64d6d4233). They rock!
21
+
Need a VPS? Get one from[Linode](http://www.linode.com/?r=e0368c8dce7aa292de419c36ae0078f64d6d4233), they rock!
22
22
23
23
The highlight real
24
24
-----------------
@@ -29,13 +29,13 @@ This script does a bunch of things. The general run down is that it:
29
29
- Two scripts are added so that IPTables rules are saved and re-loaded when reboting.
30
30
- Installs and configures Apache2 (MPM Worker), MySQL, PHP5, suExec, fcgid, as well as creates and enables a new site under your admin user's account.
31
31
- Installs and configures mod_evasive, fail2ban, and mod_security. Your admin user's IP address is whitelisted from these security services and a mod_security filter is added to fail2ban. OWASP rules for mod_security v2.2.3 are fetched, configured, and a select set of rules are loaded.
32
-
NOTE: The OWASP rules are configured for DetectionOnly by default. You need to change that to On when you are comforatble with them.
33
-
ANOTHER NOTE: As Ubuntu 10.04 uses mod_security v2.5.11-1, a couple of workarounds for backwards compatability issues are implemented. Read the script and see for yourself ;)
32
+
NOTE: The OWASP rules are configured for DetectionOnly by default. You need to change that to On when you are comfortable with them.
33
+
ANOTHER NOTE: As Ubuntu 10.04 uses mod_security v2.5.11-1, a couple of workarounds for backwards compatibility issues are implemented. Read the script and see for yourself ;)
34
34
35
35
What's Next?
36
36
------------
37
37
There are many things to do next (like keep your server up to date!), here are a few ideas:
38
-
- Grab a copy of mysqltuner.pl and tweak your mysql install `wget http://mysqltuner.pl/mysqltuner.pl` (run with `perl mysqltuner.pl` and follow the recomendations. I.e. `sed -i "s/ssl-key=\/etc\/mysql\/server-key.pem/ssl-key=\/etc\/mysql\/server-key.pem\n\nskip-innodb\n/g" /etc/mysql/my.cnf`)
38
+
- Grab a copy of mysqltuner.pl and tweak your mysql install `wget http://mysqltuner.pl/mysqltuner.pl` (run with `perl mysqltuner.pl` and follow the recommendations. i.e. `sed -i "s/ssl-key=\/etc\/mysql\/server-key.pem/ssl-key=\/etc\/mysql\/server-key.pem\n\nskip-innodb\n/g" /etc/mysql/my.cnf`
39
39
- Keep an eye on your logs and adjust mod_security / fail2ban accordingly
40
40
- Keep things up to date `sudo aptitude safe-upgrade`
41
41
- Add a new database, with user, with [add-db.sh](https://github.com/betweenbrain/ubuntu-web-server-build-script/admin-scripts/blob/master/add-db.sh)
0 commit comments