{"id":325639,"date":"2021-06-29T03:00:27","date_gmt":"2021-06-29T03:00:27","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=325639"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=325639","title":{"rendered":"\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 Ispconfig3 \u043d\u0430 ubuntu 20.04 (nginx+php-fpm+mysql)"},"content":{"rendered":"\n
\n

ISPConfig — \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u042d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043b\u0443\u0447\u0448\u0438\u0445 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u0435\u0431-\u0441\u0442\u0443\u0434\u0438\u0439, \u0445\u043e\u0441\u0442\u0438\u043d\u0433-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0430 \u0442\u0430\u043a \u0436\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445, \u043a\u0442\u043e \u0438\u0449\u0435\u0442 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0443\u044e \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c. <\/p>\n

\u0412 \u0441\u0435\u0442\u0438 \u0435\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u043d\u0430 OpenSuSe, Fedora, CentOS, Debian \u0438 Ubuntu \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043d\u043e\u0432\u043e\u0439 \u041e\u0421 \u0438\u0437 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442, \u043d\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e\u0434 ubuntu 20.04 \u0441 nginx \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0432\u044b\u043f\u0430\u043b\u0430 \u0438\u0437 \u0447\u0438\u0441\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445. \u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c.<\/p>\n

\u0423\u0431\u0435\u0434\u0438\u043c\u0441\u044f, \u0447\u0442\u043e \u043d\u0430\u0448\u0430 \u041e\u0421 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 <\/h2>\n

\u0423\u0431\u0435\u0434\u0438\u043c\u0441\u044f, \u0447\u0442\u043e \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0432\u0441\u0435\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d ssh \u043a\u043b\u0438\u0435\u043d\u0442 \u0438 vim (\u0438\u043b\u0438 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0432\u0430\u043c \u0431\u0443\u0434\u0435\u0442 \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c), \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0441\u0442\u0430\u0442\u0438\u0447\u043d\u044b\u0439 ip, hosts, hostname \u0438 \u043b\u043e\u043a\u0430\u043b\u0438. <\/p>\n

\u0414\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, ssh \u0438 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u044b:
sudo -s
apt update && apt upgrade -y && apt autoremove -y && apt install -y ssh openssh-server nano vim-nox<\/em><\/strong><\/p>\n

\u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u043d\u044b\u0439 ip, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0443\u043a\u0430\u0436\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438:
<\/em>vi \/etc\/netplan\/00-installer-config.yaml<\/strong><\/p>\n

\n\/etc\/netplan\/00-installer-config.yaml<\/summary>\n
\n

network:
  version: 2
  renderer: networkd
  ethernets:
    eth0:
      dhcp4: no
      addresses: [185.104.112.249\/24]
      gateway4: 185.104.112.1
      nameservers:
        addresses: [8.8.8.8, 8.8.4.4]<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439
netplan try 
<\/em><\/strong>\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u0432\u0441\u0435 \u0445\u043e\u0440\u043e\u0448\u043e \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0432\u0435\u0440\u043d\u0430, \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u043d\u0430\u0434\u043f\u0438\u0441\u044c \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0436\u0430\u0442\u044c \u043a\u043b\u0430\u0432\u0438\u0448\u0443 ENTER,<\/em> \u0435\u0441\u043b\u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0438 120 \u0441\u0435\u043a\u0443\u043d\u0434 \u043c\u044b \u043d\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u043c\u0441\u044f — \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f:<\/p>\n

\nnetplan try<\/summary>\n
\n

root@host:~# netplan try
Warning: Stopping systemd-networkd.service, but it can still be activated by:
  systemd-networkd.socket
Do you want to keep these settings?
Press ENTER before the timeout to accept the new configuration
Changes will revert in 116 seconds<\/em><\/p>\n<\/div>\n<\/details>\n

\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043c\u043e\u0436\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b 
netplan apply<\/em><\/strong>
\u041e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b hosts \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439
vi \/etc\/hosts
<\/strong>\u0438 \u0443\u0431\u0435\u0434\u0438\u043c\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0441\u0442\u0440\u043e\u043a\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043d\u0430\u0448 \u0441\u0435\u0440\u0432\u0435\u0440, \u043a\u0430\u043a \u043f\u043e \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430,  \u0442\u0430\u043a \u043f\u043e \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430 \u0438 \u0434\u043e\u043c\u0435\u043d\u0443 (ispnginx — \u0438\u043c\u044f \u0445\u043e\u0441\u0442\u0430, \u0441at-a.ru<\/a> — \u0434\u043e\u043c\u0435\u043d\u0430):<\/p>\n

\n\/etc\/hosts<\/summary>\n
\n

127.0.0.1       localhost.localdomain   localhost
185.104.112.249 <\/em>ispnginx.cat-a.ru<\/em><\/a> ispnginx
::1             localhost6.localdomain6 localhost6
# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts<\/em><\/p>\n<\/div>\n<\/details>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u0445\u043e\u0441\u0442\u043d\u0435\u0439\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u044b:
echo ispnginx > \/etc\/hostname && hostname ispnginx
<\/em><\/strong>\u0438\u043b\u0438
hostnamectl set-hostname ispnginx
<\/em><\/strong>\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c, \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0441\u044f \u043b\u0438 hostname \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438: 
hostname 
hostname -f<\/em><\/strong><\/p>\n

\n\u0412\u044b\u0432\u043e\u0434 \u0434\u043e\u043b\u0436\u0435\u043d \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a<\/summary>\n
\n

root@host:~# hostname
ispnginx
root@host:~# hostname -f
ispnginx.cat-a.ru<\/em><\/p>\n<\/div>\n<\/details>\n

\u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u043b\u043e\u043a\u0430\u043b\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432:
dpkg-reconfigure locales
<\/em><\/strong>\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 en_US.UTF-8 \u0438 ru_RU.UTF-8, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440 — \u043e\u043d \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Ispconfig<\/p>\n

\u0418\u0437\u043c\u0435\u043d\u0438\u043c \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e<\/h2>\n

\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \/bin\/sh — \u0441\u0438\u043c\u043b\u0438\u043d\u043a \/bin\/dash, \u043d\u043e \u043d\u0430\u043c \u043d\u0443\u0436\u043d\u043e \/bin\/bash, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043c:
dpkg-reconfigure dash
<\/em><\/strong>\u0412 \u043e\u0442\u043a\u0440\u044b\u0432\u0448\u0435\u043c\u0441\u044f \u043e\u043a\u043d\u0435 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c «No»<\/p>\n

<\/figcaption><\/figure>\n

\u0412\u044b\u043a\u043b\u044e\u0447\u0438\u043c \u0438 \u0443\u0434\u0430\u043b\u0438\u043c apparmor<\/h2>\n

service apparmor stop && update-rc.d -f apparmor remove && apt-get remove apparmor apparmor-utils<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c ntp <\/h2>\n

apt install -y ntp ntpdate<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Postfix, Dovecot, MySQL, phpMyAdmin, rkhunter, Binutils<\/h2>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Postfix, Dovecot, MySQL, rkhunter \u0438 binutils \u0441 \u043f\u043e\u043c\u043e\u0448\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b:
apt install -y postfix postfix-mysql postfix-doc mysql-client mysql-server openssl getmail4 rkhunter binutils dovecot-imapd dovecot-pop3d dovecot-mysql dovecot-sieve dovecot-lmtpd  sudo patch<\/em><\/strong><\/p>\n

\u041a\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u0430\u043a\u0443\u044e \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c Internet Site, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 System mail name \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c hostname
General type of mail configuration: <\/em><— Internet Site
<\/em><\/strong>System mail name: <— <\/em>server1.example.com<\/em><\/strong>
\u041e\u0442\u043a\u0440\u043e\u0435\u043c<\/em> TLS\/SSL \u0438 submission \u043f\u043e\u0440\u0442\u044b \u0432 Postfix, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/postfix\/master.cf<\/em>
vi \/etc\/postfix\/master.cf
<\/em><\/strong>\u0438 \u0440\u0430\u0441\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u043c \u0441\u0435\u043a\u0446\u0438\u0438 submission,  smtps, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e \u043f\u0435\u0440\u0432\u044b\u0435 3 \u0441\u0442\u0440\u043e\u0447\u043a\u0438 \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0441\u0435\u043a\u0446\u0438\u0438 \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043a \u043e\u0431\u0435\u0438\u043c  \u0441\u0435\u043a\u0446\u0438\u044f\u043c \u0441\u0442\u0440\u043e\u043a\u0443 (\u043d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c 2 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438): 
-o smtpd_client_restrictions=permit_sasl_authenticated,reject<\/p>\n

\n\/etc\/postfix\/master.cf \u0434\u043e\u043b\u0436\u0435\u043d \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u0442\u0430\u043a:<\/summary>\n
\n

smtp      inet  n       —       y       —       —       smtpd
#smtp      inet  n       —       y       —       1       postscreen
#smtpd     pass  —       —       y       —       —       smtpd
#dnsblog   unix  —       —       y       —       0       dnsblog
#tlsproxy  unix  —       —       y       —       0       tlsproxy
submission inet n       —       y       —       —       smtpd
  -o syslog_name=postfix\/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_tls_auth_only=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       —       y       —       —       smtpd
  -o syslog_name=postfix\/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING<\/em><\/p>\n<\/div>\n<\/details>\n

\u0412\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 postfix 
service postfix restart
<\/em><\/strong>\u0427\u0442\u043e\u0431\u044b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043e \u043e\u0442\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/mysql\/mysql.conf.d\/mysqld.cnf \u0438 \u0437\u0430\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u043c \u0441\u0442\u043e\u043a\u0438: 
bind-address           = 127.0.0.1
mysqlx-bind-address    = 127.0.0.1
\u041d\u0438\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u0441\u0442\u0440\u043e\u043a\u0443:
mysqlx=OFF<\/p>\n

vi \/etc\/mysql\/mysql.conf.d\/mysqld.cnf<\/em><\/strong><\/p>\n

\n\/etc\/mysql\/mysql.conf.d\/mysqld.cnf<\/summary>\n
\n

[mysqld]
#
# * Basic Settings
#
user            = mysql
# pid-file      = \/var\/run\/mysqld\/mysqld.pid
# socket        = \/var\/run\/mysqld\/mysqld.sock
# port          = 3306
# datadir       = \/var\/lib\/mysql
# If MySQL is running as a replication slave, this should be
# changed. Ref https:\/\/dev.mysql.com\/doc\/refman\/8.0\/en\/server-system-variables.html#sysvar_tmpdir
# tmpdir                = \/tmp
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
#bind-address           = 127.0.0.1
#mysqlx-bind-address    = 127.0.0.1
mysqlx=OFF<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043c mysql \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043c, \u0447\u0442\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a mysql \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439:
service mysql restart && netstat -tap | grep mysql<\/em><\/strong><\/p>\n

\n\u0412\u044b\u0432\u043e\u0434 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d \u0434\u0430\u043d\u043d\u043e\u043c\u0443:<\/summary>\n
\n

root@ispnginx:~# netstat -tap | grep mysql
tcp6       0      0 [::]:mysql              [::]:*                  LISTEN      18513\/mysqld
root@ispnginx:~#<\/em><\/p>\n<\/div>\n<\/details>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Amavisd-new, SpamAssassin, and Clamav<\/h2>\n

\u0412\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439:
apt install -y amavisd-new spamassassin clamav clamav-daemon unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl postgrey
<\/em><\/strong>\u0442.\u043a. amavisd, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0444\u0438\u043b\u044c\u0442\u0440\u044b SpamAssassin, \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c SpamAssassin \u0434\u043b\u044f \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438
service spamassassin stop
update-rc.d -f spamassassin remove
<\/em><\/strong>\u0417\u0430\u043f\u0443\u0441\u0442\u0438\u043c ClamAV 
freshclam
service clamav-daemon start<\/em><\/strong><\/p>\n

\n\u041e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u043c<\/summary>\n
\n

root@ispnginx:~# service spamassassin stop
root@ispnginx:~# update-rc.d -f spamassassin remove
root@ispnginx:~# freshclam
WARNING: Ignoring deprecated option SafeBrowsing at \/etc\/clamav\/freshclam.conf:22
ERROR: \/var\/log\/clamav\/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = \/var\/log\/clamav\/freshclam.log).
ERROR: initialize: libfreshclam init failed.
ERROR: Initialization error!
root@ispnginx:~# service clamav-daemon start
root@ispnginx:~#<\/em><\/p>\n<\/div>\n<\/details>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Nginx, PHP 7.4 (PHP-FPM), and Fcgiwrap<\/h2>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c nginx
apt-get install nginx<\/em><\/strong><\/p>\n

\u041e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440\u0443 \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0447\u0435\u0440\u0435\u0437 PHP-FPM (FastCGI Process Manager), \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u0435\u0433\u043e:
apt-get -y install php7.4-fpm<\/em><\/strong><\/p>\n

\u041f\u043e\u0438\u0449\u0435\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 php:
apt-cache search php7.4<\/em><\/strong><\/p>\n

\u0412\u044b\u0431\u0435\u0440\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c:
apt install -y php7.4-common php7.4 php7.4-gd php7.4-mysql php7.4-imap php7.4-cli php7.4-cgi php7.4-curl php7.4-pspell php7.4-intl php7.4-sqlite3 php7.4-tidy php7.4-xml php7.4-xmlrpc php7.4-zip php7.4-xsl php7.4-mbstring php7.4-soap php-pear mcrypt imagemagick libruby memcached php-memcache php-imagick php-soap php-apcu<\/em><\/strong><\/p>\n

\u041e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b 
vi \/etc\/php\/7.4\/fpm\/php.ini
<\/strong>\u0418 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c cgi.fix_pathinfo=0, your timezone, short_open_tag= On<\/p>\n

\n\/etc\/php\/7.4\/fpm\/php.ini<\/summary>\n
\n

[…]
cgi.fix_pathinfo=<\/em>0
<\/em><\/strong>[…]
date.timezone=»Europe\/Moscow»
[…]
short_open_tag = On
[…]<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043c PHP-FPM:
service php7.4-fpm reload
<\/em><\/strong>\u0427\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 CGI \u0432 nginx, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Fcgiwrap:
apt-get -y install fcgiwrap<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c phpmyadmin<\/h2>\n

apt-get -y install phpmyadmin php-mbstring 
<\/em><\/strong>\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0441\u043f\u0440\u043e\u0441\u0438\u0442 \u043f\u043e\u0434 \u043a\u0430\u043a\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c pma, \u043d\u043e \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0442\u043e\u043b\u044c\u043a\u043e apache \u0438 lighthttpd, \u043f\u043e\u0442\u043e\u043c\u0443 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c :<\/p>\n

<\/figcaption><\/figure>\n

\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u043f\u0430\u0440\u043e\u043b\u044f MySQL application password for phpmyadmin: <— Press Enter<\/p>\n

<\/figcaption><\/figure>\n

\u0414\u0430\u043b\u0435\u0435 \u0441\u043e\u0433\u043b\u0430\u0448\u0430\u0435\u043c\u0441\u044f 
Configure database for phpmyadmin with dbconfig-common? <— Yes<\/strong><\/p>\n

<\/figcaption><\/figure>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Let’s Encrypt, PureFTPd \u0438 Quota<\/h2>\n

apt install -y certbot pure-ftpd-common pure-ftpd-mysql quota quotatool<\/em><\/strong><\/p>\n

\u041e\u0442\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/default\/pure-ftpd-common <\/em>\u0438 \u0443\u0431\u0435\u0434\u0438\u043c\u0441\u044f, \u0447\u0442\u043e start mode = standalone<\/em> \u0438 VIRTUALCHROOT=true<\/em>
vi \/etc\/default\/pure-ftpd-common
<\/em><\/strong>\u0412\u043a\u043b\u044e\u0447\u0438\u043c FTPS \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439
echo 1 > \/etc\/pure-ftpd\/conf\/TLS
<\/em><\/strong>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0434\u043b\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432
mkdir -p \/etc\/ssl\/private\/
<\/em><\/strong>\u0418 \u0441\u0435\u0433\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u0441\u0430\u043c SSL \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442
openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/pure-ftpd.pem -out \/etc\/ssl\/private\/pure-ftpd.pem
<\/em><\/strong>\u041f\u043e\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0444\u0430\u0439\u043b:
chmod 600 \/etc\/ssl\/private\/pure-ftpd.pem
<\/em><\/strong>\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043c PureFTPd:
service pure-ftpd-mysql restart<\/em><\/strong><\/p>\n

\u041e\u0442\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/fstab. \u041c\u043e\u0439 \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a (\u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c ,usrjquota=quota.user,grpjquota=quota.group,jqfmt=vfsv0 \u043a \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f):
vi<\/strong> \/etc\/fstab<\/strong><\/p>\n

\n\/etc\/fstab<\/summary>\n
\n

# \/etc\/fstab: static file system information.
#
# Use ‘blkid’ to print the universally unique identifier for a
# device; this may be used with UUID= as a more robust way to name devices
# that works even if disks are added and removed. See fstab(5).
#
# <file system> <mount point>   <type>  <options>       <dump>  <pass>
# \/ was on \/dev\/vda1 during curtin installation
\/dev\/disk\/by-uuid\/1ea0d83c-2954-45aa-9e4d-3a80d5fa031f \/ ext4 defaults,usrjquota=quota.user,grpjquota=quota.group,jqfmt=vfsv0 0 0
\/swap.img       none    swap    sw      0       0<\/p>\n<\/div>\n<\/details>\n

\u0412\u043a\u043b\u044e\u0447\u0430\u0435\u043c quota:
mount -o remount \/
quotacheck -avugm
quotaon -avug<\/em><\/strong><\/p>\n

\nquota<\/summary>\n
\n

root@ispnginx:~# mount -o remount
quotacheck -avugm
quotacheck: Scanning \/dev\/vda1 [\/] done
quotacheck: Cannot stat old user quota file \/\/quota.user: No such file or directory. Usage will not be subtracted.
quotacheck: Cannot stat old group quota file \/\/quota.group: No such file or directory. Usage will not be subtracted.
quotacheck: Cannot stat old user quota file \/\/quota.user: No such file or directory. Usage will not be subtracted.
quotacheck: Cannot stat old group quota file \/\/quota.group: No such file or directory. Usage will not be subtracted.
quotacheck: Checked 13965 directories and 88306 files
quotacheck: Old file not found.
quotacheck: Old file not found.
root@ispnginx:~# quotaon -avug
\/dev\/vda1 [\/]: group quotas turned on
\/dev\/vda1 [\/]: user quotas turned on<\/em><\/p>\n<\/div>\n<\/details>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Vlogger, Webalizer, AWStats and GoAccess<\/h2>\n

apt install -y vlogger webalizer awstats geoip-database libclass-dbi-mysql-perl
<\/em><\/strong>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044e\u044e \u0432\u0435\u0440\u0441\u0438\u044e GoAccess \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430:
echo «deb https:\/\/deb.goaccess.io\/ $(lsb_release -cs) main» | tee -a \/etc\/apt\/sources.list.d\/goaccess.list
wget -O — https:\/\/deb.goaccess.io\/gnugpg.key | apt-key —keyring \/etc\/apt\/trusted.gpg.d\/goaccess.gpg add —
apt update
apt install goaccess
<\/em><\/strong>\u041e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/cron.d\/awstats 
vi \/etc\/cron.d\/awstats
<\/em><\/strong>\u0418 \u0437\u0430\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u043c \u0432\u0441\u0435 \u0435\u0433\u043e \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435<\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Jailkit fail2ban and UFW<\/h2>\n

apt install -y jailkit fail2ban
<\/em><\/strong>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u043d\u0430\u0431\u043e\u0440 \u043f\u0440\u0430\u0432\u0438\u043b
<\/em>vi \/etc\/fail2ban\/jail.local<\/em><\/strong><\/p>\n

\n\/etc\/fail2ban\/jail.local<\/summary>\n
\n

[pure-ftpd]
enabled  = true
port     = ftp
filter   = pure-ftpd
logpath  = \/var\/log\/syslog
maxretry = 3<\/em><\/p>\n

[dovecot]
enabled = true
filter = dovecot
action = iptables-multiport[name=dovecot-pop3imap, port=»pop3,pop3s,imap,imaps», protocol=tcp]
logpath = \/var\/log\/mail.log
maxretry = 5<\/em><\/p>\n

[postfix]
enabled  = true
port     = smtp
filter   = postfix
logpath  = \/var<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043c fail2ban:
service fail2ban restart
<\/em><\/strong>\u0414\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 UFW \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043c:
apt install -y ufw<\/em><\/strong><\/p>\n

\u041f\u043e\u0441\u0442\u0430\u0432\u0438\u043c Roundcube Webmail<\/h2>\n

apt install -y roundcube roundcube-core roundcube-mysql roundcube-plugins roundcube-plugins-extra javascript-common libjs-jquery-mousewheel php-net-sieve tinymce
<\/em><\/strong>\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0441\u043f\u0440\u043e\u0441\u0438\u0442:
Configure database for roundcube with dbconfig-common? <— Yes
MySQL application password for roundcube: <— Press enter<\/p>\n

\"Configure
Configure database for roundcube with dbconfig-common? <— Yes<\/figcaption><\/figure>\n
\"MySQL
MySQL application password for roundcube: <— Press enter<\/figcaption><\/figure>\n

\u041e\u0442\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e RoundCube config.inc.php:
vi \/etc\/roundcube\/config.inc.php
<\/em><\/strong>\u0418 \u043f\u043e\u043c\u0435\u043d\u044f\u0435\u043c the default host \u043d\u0430 localhost:
$config[‘default_host’] = ‘localhost’;
\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0441\u0441\u044b\u043b\u043a\u0443 \u0447\u0442\u043e\u0431\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e SquirrelMail configuration \u0432 ISPConfig \u0434\u043b\u044f Roundcube:
ln -s \/usr\/share\/roundcube \/usr\/share\/squirrelmail<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c ISPConfig 3.2<\/h2>\n

\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043c nginx
service nginx restart
<\/em><\/strong>\u0421\u043a\u0430\u0447\u0430\u0435\u043c \u0438 \u0437\u0430\u043f\u0443\u0441\u0442\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434:
cd \/tmp 
wget -O ispconfig.tar.gz https:\/\/www.ispconfig.org\/downloads\/ISPConfig-3-stable.tar.gz
tar xfz ispconfig.tar.gz
cd ispconfig3*\/install\/
php -q install.php<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u043e\u0434\u0441\u043a\u0430\u0437\u043a\u0430\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0430:<\/p>\n

\n\u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438<\/summary>\n
\n

root@ispnginx:\/tmp\/ispconfig3_install\/install# php -q install.php
———————————————————————————
———————————————————————————
>> Initial configuration
Operating System: Ubuntu 20.04.2 LTS (Focal Fossa)
    Following will be a few questions for primary configuration so be careful.
    Default values are in [brackets] and can be accepted with <ENTER>.
    Tap in «quit» (without the quotes) to stop the installer.
Select language (en,de) [en]:
Installation mode (standard,expert) [standard]:
Full qualified hostname (FQDN) of the server, eg server1.domain.tld  [ispnginx.cat-a.ru]:
MySQL server hostname [localhost]:
MySQL server port [3306]:
MySQL root username [root]:
MySQL root password []:
MySQL database to create [dbispconfig]:
MySQL charset [utf8]:
Configuring Postgrey
Configuring Postfix
Generating a RSA private key
…………………++++
…………………………………………………………………………………………………………………………………………………………………………++++
writing new private key to ‘smtpd.key’
——
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.
——
Country Name (2 letter code) [AU]:RU
State or Province Name (full name) [Some-State]:Spb
Locality Name (eg, city) []:Spb
Organization Name (eg, company) [Internet Widgits Pty Ltd]:cat-a
Organizational Unit Name (eg, section) []:it
Common Name (e.g. server FQDN or YOUR name) []:ispnginx.cat-a.ru
Email Address []:admin@cat-a.ru
[INFO] service Mailman not detected
Configuring Dovecot
Creating new DHParams file, this takes several minutes. Do not interrupt the script.
Configuring Spamassassin
Configuring Amavisd
[INFO] service Rspamd not detected
Configuring Getmail
Configuring Jailkit
Configuring Pureftpd
[INFO] service BIND not detected
[INFO] service MyDNS not detected
Configuring nginx
[INFO] service OpenVZ not detected
Configuring Ubuntu Firewall
[INFO] service Metronome XMPP Server not detected
Configuring Fail2ban
Installing ISPConfig
ISPConfig Port [8080]:
Admin password [fb07e95d]:
Do you want a secure (SSL) connection to the ISPConfig web interface (y,n) [y]: y
Checking \/ creating certificate for ispnginx.cat-a.ru
Using certificate path \/etc\/letsencrypt\/live\/ispnginx.cat-a.ru
—2021-05-29 05:51:24—  https:\/\/get.acme.sh\/
Resolving get.acme.sh (get.acme.sh)… 104.21.34.62, 172.67.199.16, 2606:4700:3031::ac43:c710, …
Connecting to get.acme.sh (get.acme.sh)|104.21.34.62|:443… connected.
HTTP request sent, awaiting response… 200 OK
Length: unspecified [text\/html]
Saving to: \u2018STDOUT\u2019
—                                                               [ <=>                                                                                                                                     ]     937  —.-KB\/s    in 0s
2021-05-29 05:51:25 (3.73 MB\/s) — written to stdout [937]
Installed acme.sh and using it for certificate creation during install.
Using nginx for certificate validation
acme.sh is installed, overriding certificate path to use \/root\/.acme.sh\/ispnginx.cat-a.ru
Symlink ISPConfig SSL certs to Postfix? (y,n) [y]: y
Symlink ISPConfig SSL certs to Pure-FTPd? Creating dhparam file may take some time. (y,n) [y]: y
Generating DH parameters, 2048 bit long safe prime, generator 2
This is going to take a long time
…………………………………………..
Configuring Apps vhost
Configuring DBServer
Installing ISPConfig crontab
no crontab for getmail
Detect IP addresses
Restarting services …
Installation completed.
root@ispnginx:\/tmp\/ispconfig3_install\/install#<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u043e\u0441\u043b\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043d\u0430\u0448\u0430 \u043f\u0430\u043d\u0435\u043b\u044c \u0431\u0443\u0434\u0435\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u043d\u0430 8080 \u043f\u043e\u0440\u0442\u0443. \u0410\u0432\u0442\u043e\u0440\u0438\u0437\u0443\u0435\u043c\u0441\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u043e\u043b\u044c, \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0439 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435:<\/p>\n

<\/figcaption><\/figure>\n
<\/figcaption><\/figure>\n<\/div>\n

\u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 https:\/\/habr.com\/ru\/post\/565138\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"\n

\n

ISPConfig — \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0430\u044f \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u043c\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c\u0438 \u0438\u0437 \u043e\u0434\u043d\u043e\u0439 \u043f\u0430\u043d\u0435\u043b\u0438 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f. \u042d\u0442\u043e \u043e\u0434\u0438\u043d \u0438\u0437 \u043b\u0443\u0447\u0448\u0438\u0445 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u0432\u0435\u0431-\u0441\u0442\u0443\u0434\u0438\u0439, \u0445\u043e\u0441\u0442\u0438\u043d\u0433-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0430 \u0442\u0430\u043a \u0436\u0435 \u0434\u043b\u044f \u0432\u0441\u0435\u0445, \u043a\u0442\u043e \u0438\u0449\u0435\u0442 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u0443\u044e \u043f\u0430\u043d\u0435\u043b\u044c \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0445\u043e\u0441\u0442\u0438\u043d\u0433\u043e\u043c \u0441 \u0448\u0438\u0440\u043e\u043a\u0438\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u043e\u043c. <\/p>\n

\u0412 \u0441\u0435\u0442\u0438 \u0435\u0441\u0442\u044c \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u043d\u0430 OpenSuSe, Fedora, CentOS, Debian \u0438 Ubuntu \u0440\u0430\u0437\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439, \u0441 \u0432\u044b\u0445\u043e\u0434\u043e\u043c \u043d\u043e\u0432\u043e\u0439 \u041e\u0421 \u0438\u0437 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442, \u043d\u043e \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f \u043f\u043e\u0434 ubuntu 20.04 \u0441 nginx \u043f\u043e\u0447\u0435\u043c\u0443-\u0442\u043e \u0432\u044b\u043f\u0430\u043b\u0430 \u0438\u0437 \u0447\u0438\u0441\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445. \u0421\u0430\u043c\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u044d\u0442\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c.<\/p>\n

\u0423\u0431\u0435\u0434\u0438\u043c\u0441\u044f, \u0447\u0442\u043e \u043d\u0430\u0448\u0430 \u041e\u0421 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 <\/h2>\n

\u0423\u0431\u0435\u0434\u0438\u043c\u0441\u044f, \u0447\u0442\u043e \u043d\u0430 \u043d\u0430\u0448\u0435\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u0432\u0441\u0435\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d ssh \u043a\u043b\u0438\u0435\u043d\u0442 \u0438 vim (\u0438\u043b\u0438 \u043b\u044e\u0431\u043e\u0439 \u0434\u0440\u0443\u0433\u043e\u0439 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0432\u0430\u043c \u0431\u0443\u0434\u0435\u0442 \u0443\u0434\u043e\u0431\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c), \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043d \u0441\u0442\u0430\u0442\u0438\u0447\u043d\u044b\u0439 ip, hosts, hostname \u0438 \u043b\u043e\u043a\u0430\u043b\u0438. <\/p>\n

\u0414\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439, ssh \u0438 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u043a\u043e\u043c\u0430\u043d\u0434\u044b:
sudo -s
apt update && apt upgrade -y && apt autoremove -y && apt install -y ssh openssh-server nano vim-nox<\/em><\/strong><\/p>\n

\u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u043d\u044b\u0439 ip, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0443\u043a\u0430\u0436\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438:
<\/em>vi \/etc\/netplan\/00-installer-config.yaml<\/strong><\/p>\n

\n\/etc\/netplan\/00-installer-config.yaml<\/summary>\n
\n

network:
  version: 2
  renderer: networkd
  ethernets:
    eth0:
      dhcp4: no
      addresses: [185.104.112.249\/24]
      gateway4: 185.104.112.1
      nameservers:
        addresses: [8.8.8.8, 8.8.4.4]<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0441\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439
netplan try 
<\/em><\/strong>\u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0435\u0441\u043b\u0438 \u0432\u0441\u0435 \u0445\u043e\u0440\u043e\u0448\u043e \u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0432\u0435\u0440\u043d\u0430, \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u043d\u0430\u0434\u043f\u0438\u0441\u044c \u0441 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e, \u0434\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0436\u0430\u0442\u044c \u043a\u043b\u0430\u0432\u0438\u0448\u0443 ENTER,<\/em> \u0435\u0441\u043b\u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0438 120 \u0441\u0435\u043a\u0443\u043d\u0434 \u043c\u044b \u043d\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u0438\u043c\u0441\u044f — \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f:<\/p>\n

\nnetplan try<\/summary>\n
\n

root@host:~# netplan try
Warning: Stopping systemd-networkd.service, but it can still be activated by:
  systemd-networkd.socket
Do you want to keep these settings?
Press ENTER before the timeout to accept the new configuration
Changes will revert in 116 seconds<\/em><\/p>\n<\/div>\n<\/details>\n

\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043c\u043e\u0436\u043d\u043e \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b 
netplan apply<\/em><\/strong>
\u041e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b hosts \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439
vi \/etc\/hosts
<\/strong>\u0438 \u0443\u0431\u0435\u0434\u0438\u043c\u0441\u044f \u0432 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0441\u0442\u0440\u043e\u043a\u0438 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043d\u0430 \u043d\u0430\u0448 \u0441\u0435\u0440\u0432\u0435\u0440, \u043a\u0430\u043a \u043f\u043e \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430,  \u0442\u0430\u043a \u043f\u043e \u0438\u043c\u0435\u043d\u0438 \u0445\u043e\u0441\u0442\u0430 \u0438 \u0434\u043e\u043c\u0435\u043d\u0443 (ispnginx — \u0438\u043c\u044f \u0445\u043e\u0441\u0442\u0430, \u0441at-a.ru<\/a> — \u0434\u043e\u043c\u0435\u043d\u0430):<\/p>\n

\n\/etc\/hosts<\/summary>\n
\n

127.0.0.1       localhost.localdomain   localhost
185.104.112.249 <\/em>ispnginx.cat-a.ru<\/em><\/a> ispnginx
::1             localhost6.localdomain6 localhost6
# The following lines are desirable for IPv6 capable hosts
::1     localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts<\/em><\/p>\n<\/div>\n<\/details>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u0445\u043e\u0441\u0442\u043d\u0435\u0439\u043c, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432 \u043a\u043e\u043c\u0430\u043d\u0434\u044b:
echo ispnginx > \/etc\/hostname && hostname ispnginx
<\/em><\/strong>\u0438\u043b\u0438
hostnamectl set-hostname ispnginx
<\/em><\/strong>\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c, \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0441\u044f \u043b\u0438 hostname \u043a\u043e\u043c\u0430\u043d\u0434\u0430\u043c\u0438: 
hostname 
hostname -f<\/em><\/strong><\/p>\n

\n\u0412\u044b\u0432\u043e\u0434 \u0434\u043e\u043b\u0436\u0435\u043d \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e \u0442\u0430\u043a<\/summary>\n
\n

root@host:~# hostname
ispnginx
root@host:~# hostname -f
ispnginx.cat-a.ru<\/em><\/p>\n<\/div>\n<\/details>\n

\u041d\u0430\u0441\u0442\u0440\u043e\u0438\u043c \u043b\u043e\u043a\u0430\u043b\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0432:
dpkg-reconfigure locales
<\/em><\/strong>\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 en_US.UTF-8 \u0438 ru_RU.UTF-8, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440 — \u043e\u043d \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043a \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 Ispconfig<\/p>\n

\u0418\u0437\u043c\u0435\u043d\u0438\u043c \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0443 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e<\/h2>\n

\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \/bin\/sh — \u0441\u0438\u043c\u043b\u0438\u043d\u043a \/bin\/dash, \u043d\u043e \u043d\u0430\u043c \u043d\u0443\u0436\u043d\u043e \/bin\/bash, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u043c:
dpkg-reconfigure dash
<\/em><\/strong>\u0412 \u043e\u0442\u043a\u0440\u044b\u0432\u0448\u0435\u043c\u0441\u044f \u043e\u043a\u043d\u0435 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c «No»<\/p>\n

<\/figcaption><\/figure>\n

\u0412\u044b\u043a\u043b\u044e\u0447\u0438\u043c \u0438 \u0443\u0434\u0430\u043b\u0438\u043c apparmor<\/h2>\n

service apparmor stop && update-rc.d -f apparmor remove && apt-get remove apparmor apparmor-utils<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c ntp <\/h2>\n

apt install -y ntp ntpdate<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Postfix, Dovecot, MySQL, phpMyAdmin, rkhunter, Binutils<\/h2>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Postfix, Dovecot, MySQL, rkhunter \u0438 binutils \u0441 \u043f\u043e\u043c\u043e\u0448\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b:
apt install -y postfix postfix-mysql postfix-doc mysql-client mysql-server openssl getmail4 rkhunter binutils dovecot-imapd dovecot-pop3d dovecot-mysql dovecot-sieve dovecot-lmtpd  sudo patch<\/em><\/strong><\/p>\n

\u041a\u043e\u0433\u0434\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442 \u0443\u043a\u0430\u0437\u0430\u0442\u044c \u043a\u0430\u043a\u0443\u044e \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u0432\u044b\u0431\u0440\u0430\u0442\u044c \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c Internet Site, \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 System mail name \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c hostname
General type of mail configuration: <\/em><— Internet Site
<\/em><\/strong>System mail name: <— <\/em>server1.example.com<\/em><\/strong>
\u041e\u0442\u043a\u0440\u043e\u0435\u043c<\/em> TLS\/SSL \u0438 submission \u043f\u043e\u0440\u0442\u044b \u0432 Postfix, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u043e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/postfix\/master.cf<\/em>
vi \/etc\/postfix\/master.cf
<\/em><\/strong>\u0438 \u0440\u0430\u0441\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u043c \u0441\u0435\u043a\u0446\u0438\u0438 submission,  smtps, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e \u043f\u0435\u0440\u0432\u044b\u0435 3 \u0441\u0442\u0440\u043e\u0447\u043a\u0438 \u0432 \u043a\u0430\u0436\u0434\u043e\u0439 \u0441\u0435\u043a\u0446\u0438\u0438 \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043a \u043e\u0431\u0435\u0438\u043c  \u0441\u0435\u043a\u0446\u0438\u044f\u043c \u0441\u0442\u0440\u043e\u043a\u0443 (\u043d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c 2 \u043f\u0440\u043e\u0431\u0435\u043b\u0430 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u0441\u0442\u0440\u043e\u043a\u0438): 
-o smtpd_client_restrictions=permit_sasl_authenticated,reject<\/p>\n

\n\/etc\/postfix\/master.cf \u0434\u043e\u043b\u0436\u0435\u043d \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u0442\u044c \u0442\u0430\u043a:<\/summary>\n
\n

smtp      inet  n       —       y       —       —       smtpd
#smtp      inet  n       —       y       —       1       postscreen
#smtpd     pass  —       —       y       —       —       smtpd
#dnsblog   unix  —       —       y       —       0       dnsblog
#tlsproxy  unix  —       —       y       —       0       tlsproxy
submission inet n       —       y       —       —       smtpd
  -o syslog_name=postfix\/submission
  -o smtpd_tls_security_level=encrypt
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_tls_auth_only=yes
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING
smtps     inet  n       —       y       —       —       smtpd
  -o syslog_name=postfix\/smtps
  -o smtpd_tls_wrappermode=yes
  -o smtpd_sasl_auth_enable=yes
  -o smtpd_client_restrictions=permit_sasl_authenticated,reject
#  -o smtpd_reject_unlisted_recipient=no
#  -o smtpd_client_restrictions=$mua_client_restrictions
#  -o smtpd_helo_restrictions=$mua_helo_restrictions
#  -o smtpd_sender_restrictions=$mua_sender_restrictions
#  -o smtpd_recipient_restrictions=
#  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject
#  -o milter_macro_daemon_name=ORIGINATING<\/em><\/p>\n<\/div>\n<\/details>\n

\u0412\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 postfix 
service postfix restart
<\/em><\/strong>\u0427\u0442\u043e\u0431\u044b \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u044b\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0443\u0434\u0430\u043b\u0435\u043d\u043e \u043e\u0442\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/mysql\/mysql.conf.d\/mysqld.cnf \u0438 \u0437\u0430\u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0438\u0440\u0443\u0435\u043c \u0441\u0442\u043e\u043a\u0438: 
bind-address           = 127.0.0.1
mysqlx-bind-address    = 127.0.0.1
\u041d\u0438\u0436\u0435 \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u0441\u0442\u0440\u043e\u043a\u0443:
mysqlx=OFF<\/p>\n

vi \/etc\/mysql\/mysql.conf.d\/mysqld.cnf<\/em><\/strong><\/p>\n

\n\/etc\/mysql\/mysql.conf.d\/mysqld.cnf<\/summary>\n
\n

[mysqld]
#
# * Basic Settings
#
user            = mysql
# pid-file      = \/var\/run\/mysqld\/mysqld.pid
# socket        = \/var\/run\/mysqld\/mysqld.sock
# port          = 3306
# datadir       = \/var\/lib\/mysql
# If MySQL is running as a replication slave, this should be
# changed. Ref https:\/\/dev.mysql.com\/doc\/refman\/8.0\/en\/server-system-variables.html#sysvar_tmpdir
# tmpdir                = \/tmp
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
#bind-address           = 127.0.0.1
#mysqlx-bind-address    = 127.0.0.1
mysqlx=OFF<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043c mysql \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043c, \u0447\u0442\u043e \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a mysql \u0432\u043a\u043b\u044e\u0447\u0435\u043d \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439:
service mysql restart && netstat -tap | grep mysql<\/em><\/strong><\/p>\n

\n\u0412\u044b\u0432\u043e\u0434 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u0435\u043d \u0434\u0430\u043d\u043d\u043e\u043c\u0443:<\/summary>\n
\n

root@ispnginx:~# netstat -tap | grep mysql
tcp6       0      0 [::]:mysql              [::]:*                  LISTEN      18513\/mysqld
root@ispnginx:~#<\/em><\/p>\n<\/div>\n<\/details>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Amavisd-new, SpamAssassin, and Clamav<\/h2>\n

\u0412\u044b\u043f\u043e\u043b\u043d\u0438\u043c \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439:
apt install -y amavisd-new spamassassin clamav clamav-daemon unzip bzip2 arj nomarch lzop cabextract apt-listchanges libnet-ldap-perl libauthen-sasl-perl clamav-docs daemon libio-string-perl libio-socket-ssl-perl libnet-ident-perl zip libnet-dns-perl postgrey
<\/em><\/strong>\u0442.\u043a. amavisd, \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0435\u0442 \u0444\u0438\u043b\u044c\u0442\u0440\u044b SpamAssassin, \u043c\u044b \u043c\u043e\u0436\u0435\u043c \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c SpamAssassin \u0434\u043b\u044f \u044d\u043a\u043e\u043d\u043e\u043c\u0438\u0438 \u043f\u0430\u043c\u044f\u0442\u0438
service spamassassin stop
update-rc.d -f spamassassin remove
<\/em><\/strong>\u0417\u0430\u043f\u0443\u0441\u0442\u0438\u043c ClamAV 
freshclam
service clamav-daemon start<\/em><\/strong><\/p>\n

\n\u041e\u0448\u0438\u0431\u043a\u0443 \u043f\u0440\u0438 \u043f\u0435\u0440\u0432\u043e\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u0435\u043c<\/summary>\n
\n

root@ispnginx:~# service spamassassin stop
root@ispnginx:~# update-rc.d -f spamassassin remove
root@ispnginx:~# freshclam
WARNING: Ignoring deprecated option SafeBrowsing at \/etc\/clamav\/freshclam.conf:22
ERROR: \/var\/log\/clamav\/freshclam.log is locked by another process
ERROR: Problem with internal logger (UpdateLogFile = \/var\/log\/clamav\/freshclam.log).
ERROR: initialize: libfreshclam init failed.
ERROR: Initialization error!
root@ispnginx:~# service clamav-daemon start
root@ispnginx:~#<\/em><\/p>\n<\/div>\n<\/details>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Nginx, PHP 7.4 (PHP-FPM), and Fcgiwrap<\/h2>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c nginx
apt-get install nginx<\/em><\/strong><\/p>\n

\u041e\u0431\u0440\u0430\u0449\u0430\u0442\u044c\u0441\u044f \u043a \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0430\u0442\u043e\u0440\u0443 \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0447\u0435\u0440\u0435\u0437 PHP-FPM (FastCGI Process Manager), \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c \u0435\u0433\u043e:
apt-get -y install php7.4-fpm<\/em><\/strong><\/p>\n

\u041f\u043e\u0438\u0449\u0435\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043c\u043e\u0434\u0443\u043b\u0438 php:
apt-cache search php7.4<\/em><\/strong><\/p>\n

\u0412\u044b\u0431\u0435\u0440\u0435\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c:
apt install -y php7.4-common php7.4 php7.4-gd php7.4-mysql php7.4-imap php7.4-cli php7.4-cgi php7.4-curl php7.4-pspell php7.4-intl php7.4-sqlite3 php7.4-tidy php7.4-xml php7.4-xmlrpc php7.4-zip php7.4-xsl php7.4-mbstring php7.4-soap php-pear mcrypt imagemagick libruby memcached php-memcache php-imagick php-soap php-apcu<\/em><\/strong><\/p>\n

\u041e\u0442\u043a\u0440\u043e\u0435\u043c \u0444\u0430\u0439\u043b 
vi \/etc\/php\/7.4\/fpm\/php.ini
<\/strong>\u0418 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c cgi.fix_pathinfo=0, your timezone, short_open_tag= On<\/p>\n

\n\/etc\/php\/7.4\/fpm\/php.ini<\/summary>\n
\n

[…]
cgi.fix_pathinfo=<\/em>0
<\/em><\/strong>[…]
date.timezone=»Europe\/Moscow»
[…]
short_open_tag = On
[…]<\/em><\/p>\n<\/div>\n<\/details>\n

\u041f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u0438\u043c PHP-FPM:
service php7.4-fpm reload
<\/em><\/strong>\u0427\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 CGI \u0432 nginx, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Fcgiwrap:
apt-get -y install fcgiwrap<\/em><\/strong><\/p>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c phpmyadmin<\/h2>\n

apt-get -y install phpmyadmin php-mbstring 
<\/em><\/strong>\u0412 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a \u0441\u043f\u0440\u043e\u0441\u0438\u0442 \u043f\u043e\u0434 \u043a\u0430\u043a\u043e\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c pma, \u043d\u043e \u0438\u0437 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0442\u043e\u043b\u044c\u043a\u043e apache \u0438 lighthttpd, \u043f\u043e\u0442\u043e\u043c\u0443 \u043d\u0438\u0447\u0435\u0433\u043e \u043d\u0435 \u0432\u044b\u0431\u0438\u0440\u0430\u0435\u043c :<\/p>\n

<\/figcaption><\/figure>\n

\u0422\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u043c \u0432\u043e\u043f\u0440\u043e\u0441 \u043e\u0431 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 \u043f\u0430\u0440\u043e\u043b\u044f MySQL application password for phpmyadmin: <— Press Enter<\/p>\n

<\/figcaption><\/figure>\n

\u0414\u0430\u043b\u0435\u0435 \u0441\u043e\u0433\u043b\u0430\u0448\u0430\u0435\u043c\u0441\u044f 
Configure database for phpmyadmin with dbconfig-common? <— Yes<\/strong><\/p>\n

<\/figcaption><\/figure>\n

\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043c Let’s Encrypt, PureFTPd \u0438 Quota<\/h2>\n

apt install -y certbot pure-ftpd-common pure-ftpd-mysql quota quotatool<\/em><\/strong><\/p>\n

\u041e\u0442\u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c \u0444\u0430\u0439\u043b \/etc\/default\/pure-ftpd-common <\/em>\u0438 \u0443\u0431\u0435\u0434\u0438\u043c\u0441\u044f, \u0447\u0442\u043e start mode = standalone<\/em> \u0438 VIRTUALCHROOT=true<\/em>
vi \/etc\/default\/pure-ftpd-common
<\/em><\/strong>\u0412\u043a\u043b\u044e\u0447\u0438\u043c FTPS \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439
echo 1 > \/etc\/pure-ftpd\/conf\/TLS
<\/em><\/strong>\u0421\u043e\u0437\u0434\u0430\u0434\u0438\u043c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u044e \u0434\u043b\u044f \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432
mkdir -p \/etc\/ssl\/private\/
<\/em><\/strong>\u0418 \u0441\u0435\u0433\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c \u0441\u0430\u043c SSL \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442
openssl req -x509 -nodes -days 7300 -newkey rsa:2048 -keyout \/etc\/ssl\/private\/pure-ftpd.pem -out \/etc\/ssl\/private\/pure-ftpd.pem
<\/em><\/strong>\u041f\u043e\u043c\u0435\u043d\u044f\u0435\u043c \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0444\u0430\u0439\u043b:
chmod 600<\/em><\/strong><\/br><\/strong><\/br><\/strong><\/br><\/strong><\/br><\/strong><\/br><\/p>\n<\/p>\n

<\/strong><\/br><\/p>\n

<\/em><\/strong><\/em><\/p>\n<\/div>\n<\/details>\n

<\/br><\/p>\n<\/p>\n<\/p>\n

<\/br><\/br><\/br><\/br><\/br><\/em><\/p>\n<\/div>\n<\/details>\n

<\/br><\/em><\/strong><\/br><\/strong><\/br><\/p>\n<\/div>\n<\/details>\n

<\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/em><\/p>\n<\/div>\n<\/details>\n

<\/br><\/br><\/br><\/strong><\/br><\/p>\n

<\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/br><\/em><\/p>\n<\/div>\n<\/details>\n

<\/strong><\/br><\/em><\/strong><\/br><\/p>\n<\/p>\n

<\/br><\/p>\n

<\/br><\/p>\n<\/p>\n<\/div>\n<\/details>\n

<\/br><\/strong><\/br><\/strong><\/br><\/p>\n

<\/br><\/br><\/br><\/em><\/em><\/p>\n<\/div>\n<\/details>\n

<\/br><\/br><\/br><\/p>\n

<\/br><\/em><\/p>\n<\/div>\n<\/details>\n

<\/br><\/p>\n

<\/br><\/br><\/br><\/br><\/br><\/em><\/p>\n<\/div>\n<\/details>\n

<\/br><\/p>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-325639","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/325639","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=325639"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/325639\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=325639"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=325639"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=325639"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}