Upgrade PHP-FPM Beta Branch Centmin Mod .09 beta branch Testing

Updated 123.09beta01 to add a LOWMEM_INSTALL variable option. Full details at https://community.centminmod.com/threads/add-lowmem_install-variable-support-in-123-09beta01.10786/

---

 

Great news for Centmin Mod 123.09beta01 users. Akamai is sponsoring OpenSSL TLS 1.3 development for release on April 5, 2017 in OpenSSL 1.1.0 branch which is optionally supported by Centmin Mod 123.09beta01's Nginx setup where you can switch between default Nginx 1.11 + LibreSSL crypto library and Nginx 1.11 + OpenSSL 1.0.2/1.1 branches https://community.centminmod.com/threads/akamai-sponsors-openssl-tls-1-3-development.10898/

 

Add to 123.09beta01 tools/csfincapsula.sh script https://community.centminmod.com/th...-to-auto-whitelist-incapsula-ips-in-1….10930/

 

writing up official site, faq, and manual documentation for all the new 123.09beta01 features etc

 

Updated 123.09beta01 and merged 123.09beta01-dnf branch changes to enable optional support to DNF package management to replace some YUM package routines in Centmin Mod 123.09beta01 initial install https://community.centminmod.com/threads/centos-7-x-and-dnf-package-management-vs-yum.10958/

Full details at https://community.centminmod.com/th...e-support-for-centos-7-in-123-09beta01.11017/

 

updated Centmin Mod 123.09beta01 initial install routines to add more system cpu, memory and disk collected statistics so can tell the difference between DNF enabled versus DNF disabled installs.

 

update Centmin Mod 123.09beta01 to add sar_call function to log more system stats during Centmin Mod routines https://community.centminmod.com/posts/47246/

 

Updated 123.09beta01 sar logging with temp per minute interval logging at initial install time https://community.centminmod.com/th...p-etc-cron-d-cmsar-for-initial-install.11058/

 

Centmin Mod menu option 4 recompiles/updates Nginx and uses mainline nginx 1.11 branch always. FYI, in 123.09beta01 starting with nginx 1.11.5+ IIRC, IPv6 support is compiled in natively by nginx folks so no need for FAQ item 34 recompile of nginx itself though setting up IPv6 directives in nginx vhost still applies as per FAQ item 34

 

Nginx Dynamic Module Support Updates

As per https://community.centminmod.com/threads/nginx-dynamic-modules-how-they-work.11189/

Should have working nginx dynamic module manual drop in of modules working with these 4 committed updates in 123.09beta01+ and newer versions

• https://community.centminmod.com/th...-with-with-compat-flag-in-123-09beta01.11191/
• https://community.centminmod.com/th...-module-routine-update-in-123-09beta01.11192/
• https://community.centminmod.com/th...c-module-setup-routine-in-123-09beta01.11193/
• https://community.centminmod.com/th...n-variable-to-optional-override-nginx….11194/

So for manually dropped in nginx dynamic modules placed in /usr/local/nginx/modules, you can set in centmin mod persistent config file /etc/centminmod/custom_config.inc to NGXDYNAMIC_MANUALOVERRIDE='y' you can override centmin mod default behavior to purge manually dropped in nginx dynamic modules from /usr/local/nginx/modules and then add to /usr/local/nginx/conf/dynamic-modules-includes.conf the load_module line i.e.

Code (Text):

load_module "modules/ngx_pagespeed.so";

Then the Nginx dynamic module will persist even if it's control variable is set to = 'n' i.e. if NGINX_PAGESPEED='n' and NGXDYNAMIC_NGXPAGESPEED='n' is set.

 

Updated 123.09beta01 to enable TCP Fast Open support. Centmin Mod 123.09beta01 already supported this just is wasn't enabled by default community.centminmod.com/posts/47932/

 

Minor updates for WebP related stuff

• https://community.centminmod.com/th...unction-imagecreatefromwebp.11540/#post-49120
• https://community.centminmod.com/threads/add-webp-conf-map-include-file-to-nginx-conf.11539/

 

Wow just heads up Github user alexgoussev has been doing a bit of contribution to centmin mod code on Github - just awesome work The most valuable contribution one can make = their own time and knowledge

 

New error and maintenance page templates thanks to @Jimmy https://community.centminmod.com/threads/new-maintenance-html-error-page-templates.11685/

• https://community.centminmod.com/threads/maintenance-page-update.11681/
• https://community.centminmod.com/threads/40x-50x-error-pages-dark.11684/

 

my boo boo, made a change yesterday should read as

Code (Text):

access_log              /var/log/nginx/localhost.access.log     combined buffer=256k flush=5m;

fixed in 123.09beta01 update done just now

 

Updated 123.09beta01 CSF Tweaks etc

• More dynamic formula for non-openvz system based DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT settings based on system resources available.
• Add tools/csf-advancetweaks.sh which can be manually run on non-openvz systems which have linux kernel that supports IPSET to update existing Centmin Mod LEMP system's CSF Firewall settings for DENY_IP_LIMIT & DENY_TEMP_IP_LIMIT with these committed changes. The script also extends /etc/csf/csf.blocklists for blocklist.de additional block ip lists which are narrower than CSF default DBEALL chain provided. These additional blocklist.de chains are taken from www.blocklist.de -- Export all Attacker-IPs from the last 48 Hours.. Details at community.centminmod.com/posts/50058/

 

123.09beta01 update

• switch from OpenSSL 1.0.2l default to OpenSSL 1.1.0f default
• disable cloudflare chacha20 patch as OpenSSL 1.1.x branch like LibreSSL has native chacha20 support

https://community.centminmod.com/th...0-2l-default-to-openssl-1-1-0f-default.11990/