'LINUX'에 해당되는 글 258건

Service Unavailable

The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

# systemctl restart php-fpm

# systemctl restart nginx

set global open_files_limit = 10000

#1238 Variable 'open_files_limit' is a read only variable

*                -       nofile          65536

또는

*                hard    nofile          65536

*                soft    nofile          65536

# ulimit -Hn -Sn

open files                      (-n) 65536

open files                      (-n) 65536

[Service]

LimitNOFILE=10000

# systemctl daemon-reload

# systemctl restart mariadb

#!/bin/sh

if [ `rpm -qa | grep httpd | wc -l` = 0 ] ; then

yum -y install httpd mariadb mariadb-server php php-common php-devel php-fpm php-gd php-mbstring php-mysql

fi

if [ `cat /etc/my.cnf | grep "set names utf8" | wc -l` = 0 ] ; then

echo "[mysqld]" >> /etc/my.cnf

echo "init_connect='set names utf8'" >> /etc/my.cnf

echo "character-set-server=utf8" >> /etc/my.cnf

echo "max_connections=1000" >> /etc/my.cnf

echo "log_slow_queries = On" >> /etc/my.cnf

echo "long_query_time = 5" >> /etc/my.cnf

echo "join_buffer_size = 16MB" >> /etc/my.cnf

echo "key_buffer_size = 8MB" >> /etc/my.cnf

echo "read_rnd_buffer_size = 32MB" >> /etc/my.cnf

echo "sort_buffer_size = 32MB" >> /etc/my.cnf

echo "query_cache_limit = 256KB" >> /etc/my.cnf

echo "query_cache_min_res_unit = 4096" >> /etc/my.cnf

echo "query_cache_size = 16MB" >> /etc/my.cnf

echo "thread_cache_size = 8" >> /etc/my.cnf

echo "table_open_cache = 16384" >> /etc/my.cnf

echo "max_heap_table_size = 256MB" >> /etc/my.cnf

echo "tmp_table_size = 256MB" >> /etc/my.cnf

echo "[Service]" >> /etc/systemd/system/multi-user.target.wants/mariadb.service

echo "LimitNOFILE=32768" >> /etc/systemd/system/multi-user.target.wants/mariadb.service

fi

if [ `cat /etc/php.ini | grep "short_open_tag = On" | wc -l` = 0 ] ; then

sed -i 's/^short_open_tag\ =\ Off/short_open_tag\ =\ On/g' /etc/php.ini

sed -i 's/^allow_url_fopen\ =\ On/allow_url_fopen\ =\ Off/g' /etc/php.ini

sed -i 's/^post_max_size\ =\ 8M/post_max_size\ =\ 32M/g' /etc/php.ini

sed -i 's/^upload_max_filesize\ =\ 2M/upload_max_filesize\ =\ 5M/g' /etc/php.ini

sed -i 's/^;date.timezone\ =/date.timezone\ =\ Asia\/Seoul/g' /etc/php.ini

sed -i 's/^session.gc_maxlifetime\ =\ 1440/session.gc_maxlifetime\ =\ 43200/g' /etc/php.ini

fi

if [ `cat /etc/httpd/conf.d/php.conf | grep "^AddType application/x-httpd-php" | wc -l` = 0 ] ; then

sed -i 's/^AddType\ text\/html\ .php/AddType\ text\/html\ .php\nAddType\ application\/x-httpd-php\ .htm\ .html\ .php\ .php3\ .php4\ .inc/g' /etc/httpd/conf.d/php.conf

fi

systemctl enable httpd.service

systemctl enable mariadb.service

systemctl start httpd.service

systemctl start mariadb.service

firewall-cmd --permanent --zone=public --add-service=http

firewall-cmd --permanent --zone=public --add-service=https

firewall-cmd --reload

mysql_secure_installation

cat /var/log/httpd/www.example.com | awk '{print $2}'

cat /var/log/httpd/www.example.com-access_log | awk '{print $2}' | sort -n -t . -k 1,1 -k 2,2 -k 3,3 -k 4,4

cat /var/log/httpd/www.example.com-access_log | awk '{print $2}' | sort -n -t . -k 1,1 -k 2,2 -k 3,3 -k 4,4 | uniq

[root@vps httpd]# cat www.example.com-access_log | grep "136.243.36.84" | wc -l

36819

[root@vps httpd]# cat www.example.com-access_log | wc -l

100993

[root@vps httpd]# cat www.example.com-error_log | grep "136.243.36.84" | wc -l

9465

[root@vps httpd]# cat www.example.com-error_log | wc -l

14270

User-agent: BLEXBot

Disallow: /

server {

    listen       80;

    server_name  www.example.com;

    root         /var/www/html;

}

# ln -s /usr/share/phpMyAdmin /var/www/html/phpmyadmin

RewriteEngine On

RewriteCond %{HTTP_HOST} ^www\.example\.com$ [NC]

RewriteCond %{SERVER_PORT} !^443$

RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

security.limit_extensions = .php .php3 .php4 .php5 .htm .html

server {

    listen       80;

    server_name  www.example.com;

    root         /var/www/html;

    location / {

        index    index.html index.htm index.php;

    }

    location ~ [^/]\.(php|htm|html)(/|$) {

        fastcgi_pass  127.0.0.1:9000;

        fastcgi_index index.html;

        fastcgi_param SCRIPT_FILENAME   $document_root$fastcgi_script_name;

        include       fastcgi_params;

    }

}

server {

    listen       443;

    server_name  www.example.com;

    root         /var/www/html;

    ssl on;

    ssl_certificate /etc/letsencrypt/live/www.example.com/cert.pem;

    ssl_certificate_key /etc/letsencrypt/live/www.example.com/privkey.pem;

    location / {

        index    index.html index.htm index.php;

    }

    location ~ [^/]\.(php|htm|html)(/|$) {

        fastcgi_pass  127.0.0.1:9000;

        fastcgi_index index.html;

        fastcgi_param SCRIPT_FILENAME   $document_root$fastcgi_script_name;

        include       fastcgi_params;

    }

}

# ssh-keygen

# ssh-copy-id root@192.168.1.100

# yum install rsnapshot

snapshot_root   /.snapshots/

cmd_ssh /usr/bin/ssh

ssh_args -p 22

rsync_long_args --delete --bwlimit=3840

retain daily 7

backup  root@192.168.1.100:/home/      192.168.1.100/home/

backup  root@192.168.1.100:/etc/       192.168.1.100/etc/

# rsnapshot configtest

Syntax OK

# rsnapshot -t daily

echo 1704 > /var/run/rsnapshot.pid

mkdir -m 0700 -p /.snapshots/

00 03 * * * root /usr/bin/rsnapshot daily

# ssh-copy-id root@192.168.1.100

Pseudo-terminal will not be allocated because stdin is not a terminal.

ssh: Could not resolve hostname exec sh -c 'cd; umask 077; test -d .ssh || mkdir .ssh ; cat >> .ssh/authorized_keys && (test -x /sbi: Name or service not known

# cat .ssh/id_rsa.pub | ssh root@192.168.1.100 "cat >> ~/.ssh/authorized_keys"

# cat .ssh/id_rsa.pub | ssh root@192.168.1.100 "mkdir -p ~/.ssh && cat >> ~/.ssh/authorized_keys"

# scp .ssh/id_rsa.pub root@192.168.1.100:~/.ssh/authorized_keys