2.2 KiB
Notes for web server configuration
These notes capture actions taken to build the www vm around 9/15 to 10/1 2020.
packages to install
- php stuff and other packages needed :
sudo apt install memcached php7.4 php7.4-mysqli php7.4-fpm php7.4-mbstring php7.4-xml php7.4-imap php7.4-json php7.4-zip php7.4-gd php7.4-curl php7.4-ldap php7.4-gd php7.4-gmp php-par php-apcu jq unzip python3-pip —no-install-recommends
- Modules for languages from upstream:
Python: pip3 install certbot-dns-ovh
php modications
memcache
root@www:/etc/php/7.4/fpm/conf.d# grep -v ^# 20-memcache.ini
extension=memcache.so
[memcache]
memcache.allow_failover="1"
memcache.max_failover_attempts="20"
memcache.default_port="11211"
memcache.hash_strategy="consistent"
session.save_handler="memcache"
session.save_path = 'tcp://10.251.51.1:11211,tcp://10.251.51.2:11211,tcp://10.251.51.3:11211'
memcache.redundancy=1
memcache.session_redundancy=4
fpm (pool)
php config
Timezone
apache
apache configuration mods needed
-- alter site config for fpm socket to php7.4-fpm (from 7.3) (socket path)
apache modules needed
headers,deflate,rewrite,proxy,proxy_http,ssl,proxy_fcgi,cache_disk
apache tweaks performed
1153 sudo a2dismod mpm_prefork
1154 sudo a2enmod mpm_event
1155 sudo apt install libapache2-mod-fcgid
1156 sudo a2enconf php7.2-fpm
1157 sudo a2enconf php7.-fpm
1158 sudo a2enconf php7.4-fpm
scripts to load
newcert.sh
!/bin/bash
certbot certonly \
--dns-cloudflare \
--dns-cloudflare-credentials /root/cfapi.ini \
-d $1
sandstorm-cert.sh
certbot certonly --manual --preferred-challenges dns --server https://acme-v02.api.letsencrypt.org/directory --manual-public-ip-logging-ok -d '*.sandstorm.turnsys.com' -d sandstorm.turnsys.com
TSYS root ca and UCS DC root cert
root@www:/usr/local/share/ca-certificates# ls -l
total 12
drwxr-xr-x 2 root root 4096 Sep 28 20:43 extra
lrwxrwxrwx 1 root root 13 Sep 28 20:44 tsys-root.crt -> tsys-root.pem
-r--r--r-- 1 root root 822 Sep 28 20:43 tsys-root.pem
lrwxrwxrwx 1 root root 12 Sep 28 20:44 ucs-root.crt -> ucs-root.pem
-rw-r--r-- 1 root root 2094 Sep 28 20:43 ucs-root.pem
root@www:/usr/local/share/ca-certificates#