Install DigitalOcean VPS installation questions

Hello,

I created a new fresh DigitalOcean VPS. Should I configure and secure it before installing the centminmod like these tutorials 1 , 2 as example or I will install the centminmod directly without configuring anything with my server ?

Thanks

 

Even without configuring SSH daemon or timezone as ex. ??

Thanks for your replay

 

Thanks for your answer. I'm familiar with using DO initial server setup and installing the additional recommended steps but I will do that after installing centminmod only or after installing it and following the getting started points too.

So I will ignore these steps as it's already in centminmod, and follow only this tutorial.

Sorry for asking you many questions but I started self learning of linux two months ago after using managed servers with many web hosting provider and using cPanel/WHM for more than 5 years so I decided to manage my own server. Which company do you suggest to use ?, I'm using DO and I think it's the best, may be you have another point of view.

Thank you very much...

 

Thanks a lot but what is your answer regarding this point :

I'm familiar with using DO initial server setup and installing the additional recommended steps but I will do that after installing centminmod only or after installing it and following the getting started points too.

 

can you tell me how to make sure that the cron update every 6 hours of my server is installed correctly and running every 6 hrs ?

Thanks

 

Hi, regarding open_basedir restrictions which may cause error to xenforo, I found the line mentioned has "#" before it so no need for this point correct ?? or should I remove the "#" ?thanks

 

regarding the friendly URLs of xenforo, I added the official nginx conf. to my configuration file with changing the path for sure. And then I will add centminmod configuration listed here to the same file but i will change the IP.. to my static IP ?? what do you mean by my static IP ?? my pub server IP ?

AM I correct ?

 

hi

when I added the info below to my conf file(at the end of the file) my forum down "cant find server" :

Code:

location / {
            index index.php index.html index.htm;
            try_files $uri $uri/ /index.php?$uri&$args;
       
        }
 
        location /internal_data/ {
        internal;
        allow 127.0.0.1;
        allow my ISP ip;
        deny all;
        }

        location /library/ {
        internal;
        allow 127.0.0.1;
        allow my ISP ip;
        deny all;
        }

and when I tried to restart nginx I got this error :

Restarting nginx (via systemctl): Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.
[FAILED]

 

The Outputs are :

Code (Text):

cat /usr/local/nginx/conf/conf.d/mydomain.com.conf
# Centmin Mod Getting Started Guide
# must read http://centminmod.com/getstarted.html

# redirect from non-www to www
# uncomment, save file and restart Nginx to enable
# if unsure use return 302 before using return 301
#server {
#            listen   80;
#            server_name mydomain.com;
#            return 301 $scheme://www.mydomain.com$request_uri;
#       }

server {

  server_name mydomain.com www.mydomain.com;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;

  # limit_conn limit_per_ip 16;
  # ssi  on;

  access_log /home/nginx/domains/mydomain.com/log/access.log main_ext buffer=256k flush=60m;
  error_log /home/nginx/domains/mydomain.com/log/error.log;

  include /usr/local/nginx/conf/autoprotect/mydomain.com/autoprotect-mydomain.com.conf;
  root /home/nginx/domains/mydomain.com/public;
  # uncomment cloudflare.conf include if using cloudflare for
  # server and/or vhost site
  #include /usr/local/nginx/conf/cloudflare.conf;
  include /usr/local/nginx/conf/503include-main.conf;

  # prevent access to ./directories and files
  #location ~ (?:^|/)\. {
  # deny all;
  #}

  location / {
  include /usr/local/nginx/conf/503include-only.conf;

# block common exploits, sql injections etc
#include /usr/local/nginx/conf/block.conf;

  # Enables directory listings when index file not found
  #autoindex  on;

  # Shows file listing times as local time
  #autoindex_localtime on;

  # Enable for vBulletin usage WITHOUT vbSEO installed
  # More example Nginx vhost configurations at
  # http://centminmod.com/nginx_configure.html
  #try_files    $uri $uri/ /index.php;

  }

  include /usr/local/nginx/conf/staticfiles.conf;
  include /usr/local/nginx/conf/php.conf;
  include /usr/local/nginx/conf/drop.conf;
  #include /usr/local/nginx/conf/errorpage.conf;
  include /usr/local/nginx/conf/vts_server.conf;
}
location / {
            index index.php index.html index.htm;
            try_files $uri $uri/ /index.php?$uri&$args;

        }

        location /internal_data/ {
        internal;
        allow 127.0.0.1;
        allow my ISP ip;
        deny all;
        }

        location /library/ {
        internal;
        allow 127.0.0.1;
        allow my ISP ip;
        deny all;
        }

------------------

Code (Text):

cat /usr/local/nginx/conf/conf.d/mydomain.com.ssl.conf
# Centmin Mod Getting Started Guide
# must read http://centminmod.com/getstarted.html
# For SPDY SSL Setup
# read http://centminmod.com/nginx_configure_https_ssl_spdy.html

# redirect from www to non-www  forced SSL
# uncomment, save file and restart Nginx to enable
# if unsure use return 302 before using return 301
# server {
#       listen   80;
#       server_name mydomin.com www.mydomain.com;
#       return 302 https://$server_name$request_uri;
# }

server {
  listen 443 ssl http2;
  server_name mydomian.com www.mydomain.com;

  ssl_dhparam /usr/local/nginx/conf/ssl/mydomain.com/dhparam.pem;
  ssl_certificate      /usr/local/nginx/conf/ssl/mydomain.com/mydomain.com.crt;
  ssl_certificate_key  /usr/local/nginx/conf/ssl/mydomain.com/mydomain.com.key;
  include /usr/local/nginx/conf/ssl_include.conf;

  http2_max_field_size 16k;
  http2_max_header_size 32k;
  # mozilla recommended
  ssl_ciphers EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA256:EECDH+ECDSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+SHA384:EECDH+AES128:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!CAMELLIA;
  ssl_prefer_server_ciphers   on;
  #add_header Alternate-Protocol  443:npn-spdy/3;

  # before enabling HSTS line below read centminmod.com/nginx_domain_dns_setup.html#hsts
  #add_header Strict-Transport-Security "max-age=31536000; includeSubdomains;";
  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;
  #spdy_headers_comp 5;
  ssl_buffer_size 1369;
  ssl_session_tickets on;

  # enable ocsp stapling
  #resolver 8.8.8.8 8.8.4.4 valid=10m;
  #resolver_timeout 10s;
  #ssl_stapling on;
  #ssl_stapling_verify on;
  #ssl_trusted_certificate /usr/local/nginx/conf/ssl/mydomaint.com/mydomain.com-trusted.crt;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

  # limit_conn limit_per_ip 16;
  # ssi  on;

  access_log /home/nginx/domains/mydomain.com/log/access.log main_ext buffer=256k flush=60m;
  error_log /home/nginx/domains/mydomain.com/log/error.log;

  include /usr/local/nginx/conf/autoprotect/mydomain.com/autoprotect-mydomain.com.conf;
  root /home/nginx/domains/mydomain.com/public;
  # uncomment cloudflare.conf include if using cloudflare for
  # server and/or vhost site
  #include /usr/local/nginx/conf/cloudflare.conf;
  include /usr/local/nginx/conf/503include-main.conf;

  # prevent access to ./directories and files
  #location ~ (?:^|/)\. {
  # deny all;
  #}

  location / {
  include /usr/local/nginx/conf/503include-only.conf;

# block common exploits, sql injections etc
#include /usr/local/nginx/conf/block.conf;

  # Enables directory listings when index file not found
  #autoindex  on;

  # Shows file listing times as local time
  #autoindex_localtime on;

  # Enable for vBulletin usage WITHOUT vbSEO installed
  # More example Nginx vhost configurations at
  # http://centminmod.com/nginx_configure.html
  #try_files    $uri $uri/ /index.php;

  }

  include /usr/local/nginx/conf/staticfiles.conf;
  include /usr/local/nginx/conf/php.conf;
  include /usr/local/nginx/conf/drop.conf;
  #include /usr/local/nginx/conf/errorpage.conf;
  include /usr/local/nginx/conf/vts_server.conf;
}

--------------

Code (Text):

nginx -t
nginx: [emerg] "location" directive is not allowed here in /usr/local/nginx/conf/conf.d/mysite.com.conf:69
nginx: configuration file /usr/local/nginx/conf/nginx.conf test failed