Install After Centmin Mod Install - 5 tasks you do manually that wish to be automated?

Please add rm -rf .* * or rm -rf / after your server is installed as automatic task

 

1) enable multiple phpfpm pools
2) set files and database backups
3) install netdata

I can't find 5 options as already Centminmod take care all of the needed options for me

 

I think:

• Memcached memory value based on Servers Ram installed.
• Automatically add Cloudflare, Sucuri IP list on csf.allow and csf.ignore

 

Yes forgot about Memcached configuration optimization values ....
I do that also....

 

Interesting, do you have a link to those Cloudflare, Sucuri IP lists?
already using the default CSF block lists (Dshield, spamhaus et all) but the above lists would be a nice add on.

 

IP Ranges | Cloudflare

 

Installing pigz and other compressions (menu option 17)
Ask before/during install which version of php, nginx and mariaDB to install

 

Misread. Hmm sorry my mistake, I thought that they released blacklists with known server trolls.
Not white lists
If someone do have nice lists to add at CSF (blacklists that aren't default at CSF).
recommended.

 

I thing @Revenge has a list related to some servers that are used for ddos attacks if he want to share it

 

• csf.conf (ports)
• stop ftp, dns and another no useful for me services
• uninstall-demodomain.com
• backup
• edit nginx confs (need a menu with options)

 

Any wordpress with pingaback is a potential attack server.

 

I agree but i think we can have as default a higher number for memory like 32M than 8M that it is now as even on a small vps will not cause any issues for a few MB extra...

 

For me these are some of the commands that I added to my post centmin install script

1. since I use pubkeys to login via ssh, I generate the pub and priv keys and create authorized_keys just in case it's non existent

Code (Text):

echo -e "\n" | ssh-keygen -t rsa -N ''; cd ~/.ssh; touch authorized_keys; chmod 600 authorized_keys

2. install borg

Code (Text):

# install borg
wget -O /usr/local/bin/borg https://github.com/borgbackup/borg/releases/download/1.0.8/borg-linux64
chown root:root /usr/local/bin/borg
chmod 755 /usr/local/bin/borg

3. just recently I noticed that cron wasn't following the timezone that I set in ZONEINFO (custom_config.inc) and so I added this command in the script to make sure that it does

Code (Text):

service crond restart

4. related to item number 1, set up pubkey authentication

Code (Text):

# secure ssh
sed -i 's/#Port 22/Port 22/g' /etc/ssh/sshd_config
sed -i 's/#PubkeyAuthentication/PubkeyAuthentication/g' /etc/ssh/sshd_config
sed -i 's/#AuthorizedKeysFile/AuthorizedKeysFile/g' /etc/ssh/sshd_config
sed -i 's/PasswordAuthentication yes/PasswordAuthentication no/g' /etc/ssh/sshd_config
sed -i 's/#PermitRootLogin yes/PermitRootLogin yes/g' /etc/ssh/sshd_config
service sshd restart

5. install redis

Code (Text):

maxmemory=200mb

yum -y install redis --enablerepo=remi --disableplugin=priorities
chkconfig redis on
service redis start

sed -i 's/appendonly no/appendonly yes/g' /etc/redis.conf
sed -i 's/daemonize no/daemonize yes/g' /etc/redis.conf
sed -i 's;pidfile /var/run/redis_6379.pid;pidfile /var/run/redis/redis.pid;g' /etc/redis.conf
mkdir /var/run/redis
chown redis /var/run/redis
echo -e "maxmemory $maxmemory\nmaxmemory-policy allkeys-lru\nmaxmemory-samples 10" >> /etc/redis.conf
service redis restart

install monit, incorporate mailgun with postfix.

 

also perhaps automatic detection if running KVM/Dedi/Xen or OpenVZ and if it's the former run

Code (Text):

echo "vm.overcommit_memory = 1" >> /etc/sysctl.conf
sysctl -p

 

I don't understand how Automattic does nothing about this issue. We don't even imagine how many ddos attacks are performed every single day using the Wordpress pingback function...