Install Upgrade Nginx and PHP versions and update process

Centmin Mod won't work with YUM package supplied Nginx and PHP-FPM as it expects Nginx and PHP-FPM files in a certain place with certain configuration that is very different from YUM distro supplied packages.

Official site FAQ item 18 explains why source compiles are used by Centmin Mod

see below replies

Right now there's no way to auto php-fpm updates, there's a nginx update script but hasn't really been tested yet.

Best place is watching/subscribe to the software news forums all nginx, php and centos relevant updates especially for security get posted to them https://community.centminmod.com/categories/software-news.17/. Each forum has a RSS icon next to it's last thread linked name, so you can even subscribe within your RSS feed aggregator/app or mobile/desktop etc. This also helps if you are able to read and see feedback from other users who have updated a specific Nginx or PHP version so you can see if there are issues with update process i.e. recent Nginx 1.11.11 update and bugs

Just look at past threads posted for nginx, php, mariadb, centos security, openssl, libressl updates as an example. Also if it's security or critical updates, I will send out a forum mailing to all forum members, then to web push browser notifications if you subscribed and then to all Centmin Mod social media accounts (top right header of forum has links).

You can also get creative and setup your own private Slack channels for feeding RSS updates into dedicated Slack channels so you get Slack updater alerts via Slack desktop and mobile apps

Just some of the dedicated Slack channels I setup to get alerts straight from the devloper source or get security and product announcements as well as site monitoring ping/healthcheck and uptime alerts from various services



If you use Centmin Mod 123.09beta01, there's also in shell native updater alerts when you log in via SSH for yum and centmin mod updates as well as when you exit centmin.sh menu

example of exiting centmin.sh menu option 24 when there are system yum updates

Code (Text):

 checking for YUM updates... please wait...

-------------------------------------------------------------
  New YUM Updates available for host xeon.centminmod
-------------------------------------------------------------
  To list available YUM Updates type:
-------------------------------------------------------------
  yum list updates --disableplugin=priorities --enablerepo=remi

-------------------------------------------------------------
  To update type:
-------------------------------------------------------------
  yum update --disableplugin=priorities --enablerepo=remi

-------------------------------------------------------------
 Centmin Mod local code is up to date at /usr/local/src/centminmod
 no available updates at this time...
-------------------------------------------------------------

example of when you log into Centmin Mod 123.09beta01 server when no Centmin Mod code updates in /usr/local/src/centminmod are available

Code (Text):

===============================================================================
 Centmin Mod local code is up to date at /usr/local/src/centminmod
 no available updates at this time...
===============================================================================

when updates are available

Code (Text):

===============================================================================
 Centmin Mod code updates available for /usr/local/src/centminmod
 to update re-run centmin.sh menu option 23 submenu option 2
===============================================================================

if updates for Centmin Mod code available can use centmin.sh menu option 23 submenu option 2 or just git pull from command line as both do same thing i.e.

Code (Text):

cd /usr/local/src/centminmod
git stash
git pull

For Pure-ftpd see Pure-FTPD Virtual FTP Users - CentminMod.com LEMP Nginx web stack for CentOS

For CSF Firewall, I highly recommend you do not disable it for security reasons and for the fact that Centmin Mod manages and auto configures it's installed software for proper CSF Firewall whitelisting and setup. Otherwise, you would end up having to manually configure your replacement firewall software for proper whitelisting and ports for Centmin Mod installed software.

 

Good and useful questions and answers also deserve a place in Centmin Mod Insights forum so posted a copy at https://community.centminmod.com/threads/how-to-keep-informed-of-centmin-mod-related-updates.11443/

 

FYI, CSF Firewall is just a wrapper that interfaces with underlying iptables, so you can still use iptables with CSF Firewall running. You can even setup iptables rules to load before CSF Firewall does via /etc/csf/csfpre.sh script setup i.e. OVH - OVH ICMP Ping Whitelist for CSF Firewall

just list the existing iptables rules CSF Firewall already sets up so that you don't duplicate and overlap before doing so

Code (Text):

iptables -L

and

Code (Text):

csf -l

both list iptable rules