Server - ycTIN

Setup Asterisk server for telephone validation and cleaning

October 3, 2020October 3, 2020 Timmy Tin Leave a comment

Prepare a computer with PCI slot

Consider the cost and compatibility, normally I will use Dell desktop or server.

Install telephony interface cards into your computer

Telephony interface cards are PCI or PCI Express expansion cards that connect computers running Asterisk directly to legacy phone lines, phones and phone systems. The cards convert the legacy signaling and media into Asterisk’s internal formats.

I chosen Digium cards, because Asterisk is provided by Digium. A lot of cheaper alternative cards, I just don’t want to facing compatible issue.

More details for telephony interface cards:
http://www.asterisk.org/products/telephony-interface-cards

Digium telephony interface cards products:
https://www.digium.com/products/telephony-cards

Download and install AsteriskNOW

Simple, just refer to this link:
https://wiki.asterisk.org/wiki/display/AST/Installing+AsteriskNOW

Configuration

Login FreePBX Administration via http://<server-ip>
Update Connectivity > DAHDi Config > Global Settings
- Select Language: <your preferred language>
- Enable Busy Detect: Yes
- Other Global Dahdi Settings: callprogress = yes
Update Connectivity > DAHDi Config > System Settings
- Tone Region: <select your country or compatible>
Update Connectivity > DAHDi Config > Modprobe Settings
- Opermode: enable, <select your country or compatible>
Click save config andRestart Dahai and asterisk
Update Settings > Advanced Settings
1. Country Indication Tones: <select your country or compatible>

Test Asterisk Manager

Default Asterisk Manager User: admin
Default Asterisk Manager Password: amp111

http://www.voip-info.org/wiki/view/Asterisk+Manager+API+Action+Originate

Dialplan for Asterisk Manager

File: /etc/asterisk/extensions_custom.conf

[macro-hangup]]
include => ext-local
exten => s,1,Answer()
;exten => s,n,Background("hello")
;exten => s,n,Wait(5)
exten => s,n,HangUp()

[macro-recording-10]
include => ext-local
;exten => s,1,Answer()
exten => s,1,MixMonitor(/var/www/html/autodial/recording_new/${CALLERID(num)}.wav,W(4))
;exten => s,n,Record(autodial/%d.wav,0,10,q)
;exten => s,n,Playback(hello-world)
exten => s,n,Wait(10)
exten => s,n,HangUp()

[macro-hangup]]

include => ext-local

exten => s,1,Answer()

;exten => s,n,Background("hello")

;exten => s,n,Wait(5)

exten => s,n,HangUp()

[macro-recording-10]

include => ext-local

;exten => s,1,Answer()

exten => s,1,MixMonitor(/var/www/html/autodial/recording_new/${CALLERID(num)}.wav,W(4))

;exten => s,n,Record(autodial/%d.wav,0,10,q)

;exten => s,n,Playback(hello-world)

exten => s,n,Wait(10)

exten => s,n,HangUp()

How to Install NGINX and PHP 7.3 with PHP-FPM on RHEL/CentOS 7

August 7, 2019November 3, 2020 Timmy Tin Leave a comment

Basic Server Setup

# update system
sudo yum install -y http://rpms.remirepo.net/enterprise/remi-release-7.rpm
sudo yum install -y epel-release yum-utils 
sudo yum update -y

# update system

sudo yum install -y http://rpms.remirepo.net/enterprise/remi-release-7.rpm

sudo yum install -y epel-release yum-utils

sudo yum update -y

# temporary switches off SELinux enforcing 
sudo setenforce 0

1 2	# temporary switches off SELinux enforcing sudo setenforce 0

# setup timezone
sudo rm /etc/localtime
sudo ln -s /usr/share/zoneinfo/Hongkong /etc/localtime

# setup ntp service
sudo yum -y install ntp
sudo ntpdate pool.ntp.org
sudo systemctl enable ntpd
sudo systemctl start ntpd

# setup timezone

sudo rm /etc/localtime

sudo ln -s /usr/share/zoneinfo/Hongkong /etc/localtime

# setup ntp service

sudo yum -y install ntp

sudo ntpdate pool.ntp.org

sudo systemctl enable ntpd

sudo systemctl start ntpd

Setup Default PHP Version

## Install PHP 7.3 
yum --enablerepo=remi-php73 install php php-mbstring php-gd php-bcmath php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel

## Install PHP 7.2 
yum --enablerepo=remi-php72 install php php-mbstring php-gd php-bcmath php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel

## Install PHP 7.1 
yum --enablerepo=remi-php71 install php php-mbstring php-gd php-bcmath php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel

## Install PHP 7.3

yum --enablerepo=remi-php73 install php php-mbstring php-gd php-bcmath php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel

## Install PHP 7.2

yum --enablerepo=remi-php72 install php php-mbstring php-gd php-bcmath php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel

## Install PHP 7.1

yum --enablerepo=remi-php71 install php php-mbstring php-gd php-bcmath php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel

Setup NGINX and PHP-FPM

# install NGINX and PHP with PHP-FPM
sudo yum install -y vim nginx php-fpm
sudo systemctl enable nginx php-fpm
sudo systemctl start nginx php-fpm

# install NGINX and PHP with PHP-FPM

sudo yum install -y vim nginx php-fpm

sudo systemctl enable nginx php-fpm

sudo systemctl start nginx php-fpm

Update Configuration

# update PHP configuration
sudo vi /etc/php.ini
:%s#;date.timezone =#date.timezone = Asia/Hong_Kong#
:%s#expose_php = On#expose_php = Off#
:wq

# update PHP configuration

sudo vi /etc/php.ini

:%s#;date.timezone =#date.timezone = Asia/Hong_Kong#

:%s#expose_php = On#expose_php = Off#

:wq

# update php-fpm configuration
sed -i 's/^user =.*$/user = nginx/g' /etc/php-fpm.d/www.conf
sed -i 's/^group =.*$/group = nginx/g' /etc/php-fpm.d/www.conf
cat /etc/php-fpm.d/www.conf

# update php-fpm configuration

sed -i 's/^user =.*$/user = nginx/g' /etc/php-fpm.d/www.conf

sed -i 's/^group =.*$/group = nginx/g' /etc/php-fpm.d/www.conf

cat /etc/php-fpm.d/www.conf

# update NGINX configuration
sudo cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak
sudo tac /etc/nginx/nginx.conf.bak | awk '!p && /}/{print "\n}\n    include /etc/nginx/vhosts/*.conf;";p=1;next} 1' | tac \
| awk '!p && /server {/{print "    index index.php index.html index.htm;\n";p=1} 1' \
| awk '!p && /root/{print "        root         /var/www/html;";p=1;next} 1' \
| sudo tee /etc/nginx/nginx.conf

# update NGINX configuration

sudo cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak

sudo tac /etc/nginx/nginx.conf.bak | awk '!p && /}/{print "\n}\n include /etc/nginx/vhosts/*.conf;";p=1;next} 1' | tac \

| awk '!p && /server {/{print " index index.php index.html index.htm;\n";p=1} 1' \

| awk '!p && /root/{print " root /var/www/html;";p=1;next} 1' \

| sudo tee /etc/nginx/nginx.conf

# create folders and update permission
sudo mkdir -p /etc/nginx/vhosts/
sudo mkdir -p /var/www/html/
sudo mkdir -p /var/www/vhosts/
sudo chown nginx:nginx /var/www/html/ -R
sudo chown nginx:nginx /var/www/vhosts/ -R

# create folders and update permission

sudo mkdir -p /etc/nginx/vhosts/

sudo mkdir -p /var/www/html/

sudo mkdir -p /var/www/vhosts/

sudo chown nginx:nginx /var/www/html/ -R

sudo chown nginx:nginx /var/www/vhosts/ -R

Create Virtual Hosts

# create dummy virtual host
sudo cat > /etc/nginx/vhosts/example.com.conf <<- "EOF"

# redirect to www
##server {
##    listen       80;
##    server_name  example.com;
##    return       301 http://www.example.com$request_uri;
##}

server {
    listen       80;
    server_name  www.example.com;
    root         /var/www/vhosts/example.com/www;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ .php$ {
        #fastcgi_pass unix:/var/run/php-fpm.sock;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index /index.php;
        include /etc/nginx/fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_read_timeout 300;
    }
}

EOF

# create dummy virtual host

sudo cat > /etc/nginx/vhosts/example.com.conf <<- "EOF"

# redirect to www

##server {

## listen 80;

## server_name example.com;

## return 301 http://www.example.com$request_uri;

##}

server {

listen 80;

server_name www.example.com;

root /var/www/vhosts/example.com/www;

location / {

try_files $uri $uri/ /index.php?$args;

}

location ~ .php$ {

#fastcgi_pass unix:/var/run/php-fpm.sock;

fastcgi_pass 127.0.0.1:9000;

fastcgi_index /index.php;

include /etc/nginx/fastcgi_params;

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

fastcgi_read_timeout 300;

}

EOF

# create ip vhost from dummy virtual host 
cat /etc/nginx/vhosts/example.com.conf | sed '/^#/ d' | sed "s/[www.]*example.com/10.0.6.29/" | sudo tee /etc/nginx/vhosts/10.0.6.29.conf
sudo mkdir -p /var/www/vhosts/10.0.6.29/www/
echo "<?php phpinfo();" | sudo tee /var/www/vhosts/10.0.6.29/www/index.php
sudo nginx -s reload

# create ip vhost from dummy virtual host

cat /etc/nginx/vhosts/example.com.conf | sed '/^#/ d' | sed "s/[www.]*example.com/10.0.6.29/" | sudo tee /etc/nginx/vhosts/10.0.6.29.conf

sudo mkdir -p /var/www/vhosts/10.0.6.29/www/

echo "<?php phpinfo();" | sudo tee /var/www/vhosts/10.0.6.29/www/index.php

sudo nginx -s reload

# create www vhost from dummy virtual host 
cat /etc/nginx/vhosts/example.com.conf | sed "s/example.com/yctin.com/" | sed "s/##//" | sudo tee /etc/nginx/vhosts/yctin.com.conf
sudo mkdir -p /var/www/vhosts/yctin.com/www/
echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/www/index.php
sudo nginx -s reload

# create www vhost from dummy virtual host

cat /etc/nginx/vhosts/example.com.conf | sed "s/example.com/yctin.com/" | sed "s/##//" | sudo tee /etc/nginx/vhosts/yctin.com.conf

sudo mkdir -p /var/www/vhosts/yctin.com/www/

echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/www/index.php

sudo nginx -s reload

# create subdomain vhost from dummy virtual host 
cat /etc/nginx/vhosts/example.com.conf | sed '/^#/ d' | sed "s/example.com/yctin.com/g" | sed "s/www\./demo\./g" | sed "s/www;/demo;/g" | sudo tee /etc/nginx/vhosts/yctin.com.conf
sudo mkdir -p /var/www/vhosts/yctin.com/demo/
echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/demo/index.php
sudo nginx -s reload

# create subdomain vhost from dummy virtual host

sudo mkdir -p /var/www/vhosts/yctin.com/demo/

echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/demo/index.php

sudo nginx -s reload

Setup Firewall (Optional)

# setup firewall
sudo yum install firewalld -y
sudo systemctl enable firewalld
sudo systemctl start firewalld
sudo firewall-cmd --add-service=http --permanent
sudo firewall-cmd --add-service=https --permanent
sudo systemctl restart firewalld

# setup firewall

sudo yum install firewalld -y

sudo systemctl enable firewalld

sudo systemctl start firewalld

sudo firewall-cmd --add-service=http --permanent

sudo firewall-cmd --add-service=https --permanent

sudo systemctl restart firewalld

SELinux Settings (Optional for SELinux enabled)

# update selinux policy, required for selinux enabled (p.s. not best practice)
sudo setsebool -P httpd_anon_write 1
sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/html -R
sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/vhosts/ -R

# Allow PHP connect network
setsebool -P httpd_can_network_connect 1

# Allow PHP connect remote database
setsebool -P httpd_can_network_connect_db 1

# update selinux policy, required for selinux enabled (p.s. not best practice)

sudo setsebool -P httpd_anon_write 1

sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/html -R

sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/vhosts/ -R

# Allow PHP connect network

setsebool -P httpd_can_network_connect 1

# Allow PHP connect remote database

setsebool -P httpd_can_network_connect_db 1

Reboot after Setup

sudo reboot

1	sudo reboot

How to Install MySQL 8.0 on RHEL/CentOS 7

August 7, 2019August 7, 2019 Timmy Tin Leave a comment

Basic Server Setup

# update system
sudo yum install epel-release -y
sudo yum update -y

# update system

sudo yum install epel-release -y

sudo yum update -y

# temporary switches off SELinux enforcing 
sudo setenforce 0

1 2	# temporary switches off SELinux enforcing sudo setenforce 0

# setup timezone
sudo rm /etc/localtime
sudo ln -s /usr/share/zoneinfo/Hongkong /etc/localtime

# setup ntp service
sudo yum -y install ntp
sudo ntpdate pool.ntp.org
sudo systemctl enable ntpd
sudo systemctl start ntpd

# setup timezone

sudo rm /etc/localtime

sudo ln -s /usr/share/zoneinfo/Hongkong /etc/localtime

# setup ntp service

sudo yum -y install ntp

sudo ntpdate pool.ntp.org

sudo systemctl enable ntpd

sudo systemctl start ntpd

Setup MySQL 8.0

# adding the MySQL Yum Repository
sudo rpm -Uvh http://dev.mysql.com/get/mysql80-community-release-el7-3.noarch.rpm

# setup mysql server
sudo yum install mysql-server -y
sudo systemctl enable mysqld
sudo systemctl start mysqld

# adding the MySQL Yum Repository

sudo rpm -Uvh http://dev.mysql.com/get/mysql80-community-release-el7-3.noarch.rpm

# setup mysql server

sudo yum install mysql-server -y

sudo systemctl enable mysqld

sudo systemctl start mysqld

# get temporary root password
sudo cat /var/log/mysqld.log | grep "temporary password"
# 2016-10-22T06:14:44.222048Z 1 [Note] A temporary password is 
# generated for root@localhost: [TEMPORARY ROOT PASSWORD]

# config mysql server
mysql_secure_installation

# Securing the MySQL server deployment.
# Enter password for user root: [TEMPORARY ROOT PASSWORD]
# The existing password for the user account root has expired. Please set a new password.
# New password: [NEW PASSWORD]
# Re-enter new password: [NEW PASSWORD]
# Change the password for root ? : N
# Remove anonymous users? : Y
# Disallow root login remotely? : Y
# Remove test database and access to it? : Y
# Reload privilege tables now? : Y

# get temporary root password

sudo cat /var/log/mysqld.log | grep "temporary password"

# 2016-10-22T06:14:44.222048Z 1 [Note] A temporary password is

# generated for root@localhost: [TEMPORARY ROOT PASSWORD]

# config mysql server

mysql_secure_installation

# Securing the MySQL server deployment.

# Enter password for user root: [TEMPORARY ROOT PASSWORD]

# The existing password for the user account root has expired. Please set a new password.

# New password: [NEW PASSWORD]

# Re-enter new password: [NEW PASSWORD]

# Change the password for root ? : N

# Remove anonymous users? : Y

# Disallow root login remotely? : Y

# Remove test database and access to it? : Y

# Reload privilege tables now? : Y

Setup Firewall (Optional)

# setup firewall
sudo yum install firewalld -y
sudo systemctl enable firewalld
sudo systemctl start firewalld
sudo firewall-cmd --add-service=mysql --permanent

# setup firewall

sudo yum install firewalld -y

sudo systemctl enable firewalld

sudo systemctl start firewalld

sudo firewall-cmd --add-service=mysql --permanent

Reboot after Setup

reboot

reboot

Optional Settings for MySQL 8.0

Disable MySQL Strict Mode

# disable MySQL strict mode
vi /etc/my.cnf
sql-mode=
sudo systemctl restart mysqld

# disable MySQL strict mode

vi /etc/my.cnf

sql-mode=

sudo systemctl restart mysqld

Reference: https://dev.mysql.com/doc/refman/5.7/en/sql-mode.html

Fix MySQL Password Expired

To establish a global policy such that passwords never expire.

Update /etc/my.cnf

[mysqld]
default_password_lifetime=0

1 2	[mysqld] default_password_lifetime=0

Reference: https://dev.mysql.com/doc/refman/8.0/en/password-management.html#password-expiration-policy

Install and Secure Redis on CentOS 7

August 30, 2018August 30, 2018 Timmy Tin Leave a comment

Redis Installation

Add the EPEL repository, and update YUM

sudo yum install epel-release
sudo yum update -y

1 2	sudo yum install epel-release sudo yum update -y

Install Redis

sudo yum install redis -y

1	sudo yum install redis -y

Start Redis and setup automatically start Redis on boot

sudo systemctl start redis
sudo systemctl enable redis

1 2	sudo systemctl start redis sudo systemctl enable redis

Verify the Installation

redis-cli ping

1	redis-cli ping

If Redis is running, it will return: PONG

Redis Configuration

Password settings

sudo vi /etc/redis.conf
requirepass master_password

1 2	sudo vi /etc/redis.conf requirepass master_password

find and uncomment the requirepass line in the configuration file, and replace master_password with a secure password

Firewall settings

sudo yum install firewalld -y
sudo firewall-cmd --permanent --add-port=6379/tcp
sudo firewall-cmd --reload

sudo yum install firewalld -y

sudo firewall-cmd --permanent --add-port=6379/tcp

sudo firewall-cmd --reload

Local Benchmark Test

redis-benchmark -q -n 100000

1	redis-benchmark -q -n 100000

Check Redis Version

redis-server --version

1	redis-server --version

Setup PHP session to Redis

yum install php-pecl-redis
session.save_handler = redis
session.save_path = "tcp://<redis_server_ip>:6379?auth=<password>"

yum install php-pecl-redis

session.save_handler = redis

session.save_path = "tcp://<redis_server_ip>:6379?auth=<password>"

How to fix MySQL connection error: Authentication plugin ‘caching_sha2_password’ cannot be loaded: dlopen(/usr/local/mysql/lib/plugin/caching_sha2_password.so, 2): image not found

May 14, 2018May 14, 2018 Timmy Tin Leave a comment

The problem is some MySQL clients not yet support new password encryption method.

Just change the user password encryption back to legacy version, then problem will be fixed.

The following SQL update specific user to legacy encryption:

ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'newrootpassword';

1	ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'newrootpassword';

Also, you can change the default authentication plugin to legacy version.

Update /etc/my.cnf and add the following line after [mysqld]:

[mysqld]
default_authentication_plugin=mysql_native_password

1 2	[mysqld] default_authentication_plugin=mysql_native_password

Install wkhtmltopdf & wkhtmltoimage to CentOS with Chinese & Asian fonts support

April 9, 2018April 9, 2018 Timmy Tin Leave a comment

Install dependencies

sudo yum install -y libpng
sudo yum install -y libjpeg
sudo yum install -y openssl
sudo yum install -y icu
sudo yum install -y libX11
sudo yum install -y libXext
sudo yum install -y libXrender
sudo yum install -y xorg-x11-fonts-Type1
sudo yum install -y xorg-x11-fonts-75dpi
sudo yum install -y poppler-utils
sudo yum install -y wget

sudo yum install -y libpng

sudo yum install -y libjpeg

sudo yum install -y openssl

sudo yum install -y icu

sudo yum install -y libX11

sudo yum install -y libXext

sudo yum install -y libXrender

sudo yum install -y xorg-x11-fonts-Type1

sudo yum install -y xorg-x11-fonts-75dpi

sudo yum install -y poppler-utils

sudo yum install -y wget

Install wkhtmltopdf and wkhtmltoimage

cd /tmp
wget https://github.com/wkhtmltopdf/wkhtmltopdf/releases/download/0.12.4/wkhtmltox-0.12.4_linux-generic-amd64.tar.xz
unxz wkhtmltox-0.12.4_linux-generic-amd64.tar.xz
tar -xvf wkhtmltox-0.12.4_linux-generic-amd64.tar
# mv wkhtmltox/bin/* /usr/local/bin/
mv wkhtmltox/bin/* /usr/bin/
rm -rf wkhtmltox
rm -f wkhtmltox-0.12.4_linux-generic-amd64.tar

cd /tmp

wget https://github.com/wkhtmltopdf/wkhtmltopdf/releases/download/0.12.4/wkhtmltox-0.12.4_linux-generic-amd64.tar.xz

unxz wkhtmltox-0.12.4_linux-generic-amd64.tar.xz

tar -xvf wkhtmltox-0.12.4_linux-generic-amd64.tar

# mv wkhtmltox/bin/* /usr/local/bin/

mv wkhtmltox/bin/* /usr/bin/

rm -rf wkhtmltox

rm -f wkhtmltox-0.12.4_linux-generic-amd64.tar

p.s. you can find more versions in the following link:

https://github.com/wkhtmltopdf/wkhtmltopdf/releases

Install Chinese & Asian fonts support

sudo yum groupinstall -y "fonts"

1	sudo yum groupinstall -y "fonts"

References

https://wkhtmltopdf.org/

MySQL ERROR 1366 (HY000): Incorrect integer value: ” for column ‘id’ at row 1 Problem & Fix

March 12, 2017March 12, 2017 Timmy Tin Leave a comment

Problem:

MySQL throw the following error message on insert or update statement executed

ERROR 1366 (HY000): Incorrect integer value: '' for column 'id' at row 1

1	ERROR 1366 (HY000): Incorrect integer value: '' for column 'id' at row 1

Why?

Try to update string value into integer column, and strict sql mode is enabled.

Mainly occurred on MySQL 5.x or above.

How to Fix:

1. Disable strict sql mode

Update /etc/my.cnf , and remove STRICT_TRANS_TABLES from sql-mode

#sql-mode="STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"
to
sql-mode="NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

#sql-mode="STRICT_TRANS_TABLES,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

sql-mode="NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION"

References:

https://dev.mysql.com/doc/refman/5.7/en/sql-mode.html#sqlmode_strict_trans_tables

Too many process sidekiq 4.2.7 gitlab-rails [0 of 25 busy]

February 15, 2017March 15, 2017 Timmy Tin Leave a comment

I am running a small GitLab server for my personal use, but GitLab default concurrency settings up to 25.

So I try to update the max concurrency to free server resource.

Update Configuration

vi /etc/gitlab/gitlab.rb

1	vi /etc/gitlab/gitlab.rb

Add or update the value

##################
# GitLab Sidekiq #
##################

sidekiq['concurrency'] = 5

##################

# GitLab Sidekiq #

##################

sidekiq['concurrency'] = 5

Restart the Service

gitlab-ctl reconfigure 
gitlab-ctl restart sidekiq

1 2	gitlab-ctl reconfigure gitlab-ctl restart sidekiq

Most Simple and Fastest Way to Backup and Restore a MySQL Database (mysqldump & mysql client)

February 8, 2017March 12, 2017 Timmy Tin Leave a comment

How to mysqldump and mysql to backup and restore a database:

Backup to .sql file

mysqldump -u DATABASE_USER –p DATABASE_NAME > DATABASE_NAME.sql

1	mysqldump -u DATABASE_USER –p DATABASE_NAME > DATABASE_NAME.sql

Restore from .sql file

mysql -u DATABASE_USER –p DATABASE_NAME < DATABASE_NAME.sql

1	mysql -u DATABASE_USER –p DATABASE_NAME < DATABASE_NAME.sql

Suggested to run the command in database server to get the fastest speed.

References:

https://dev.mysql.com/doc/refman/5.7/en/mysqldump.html

How to Install NGINX and PHP-FPM on RHEL/CentOS 7

January 5, 2017April 9, 2018 Timmy Tin Leave a comment

Basic Server Setup

# update system
sudo yum install epel-release -y
sudo yum update -y

# update system

sudo yum install epel-release -y

sudo yum update -y

# temporary switches off SELinux enforcing 
sudo setenforce 0

1 2	# temporary switches off SELinux enforcing sudo setenforce 0

# setup timezone
sudo rm /etc/localtime
sudo ln -s /usr/share/zoneinfo/Hongkong /etc/localtime

# setup ntp service
sudo yum -y install ntp
sudo ntpdate pool.ntp.org
sudo systemctl enable ntpd
sudo systemctl start ntpd

# setup timezone

sudo rm /etc/localtime

sudo ln -s /usr/share/zoneinfo/Hongkong /etc/localtime

# setup ntp service

sudo yum -y install ntp

sudo ntpdate pool.ntp.org

sudo systemctl enable ntpd

sudo systemctl start ntpd

Setup NGINX and PHP-FPM

# install NGINX and PHP with PHP-FPM
sudo yum install -y vim nginx php php-fpm php-mbstring php-gd php-bcmath php-mcrypt php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel
sudo systemctl enable nginx php-fpm
sudo systemctl start nginx php-fpm

# install NGINX and PHP with PHP-FPM

sudo yum install -y vim nginx php php-fpm php-mbstring php-gd php-bcmath php-mcrypt php-tidy php-xml php-xmlrpc php-soap php-mysql php-pdo php-devel

sudo systemctl enable nginx php-fpm

sudo systemctl start nginx php-fpm

Update Configuration

# update PHP configuration
sudo vi /etc/php.ini
:%s#;date.timezone =#date.timezone = Asia/Hong_Kong#
:%s#expose_php = On#expose_php = Off#
:wq

# update PHP configuration

sudo vi /etc/php.ini

:%s#;date.timezone =#date.timezone = Asia/Hong_Kong#

:%s#expose_php = On#expose_php = Off#

:wq

# update php-fpm configuration
sed -i 's/^user =.*$/user = nginx/g' /etc/php-fpm.d/www.conf
sed -i 's/^group =.*$/group = nginx/g' /etc/php-fpm.d/www.conf
cat /etc/php-fpm.d/www.conf

# update php-fpm configuration

sed -i 's/^user =.*$/user = nginx/g' /etc/php-fpm.d/www.conf

sed -i 's/^group =.*$/group = nginx/g' /etc/php-fpm.d/www.conf

cat /etc/php-fpm.d/www.conf

# update NGINX configuration
sudo cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak
sudo tac /etc/nginx/nginx.conf.bak | awk '!p && /}/{print "\n}\n    include /etc/nginx/vhosts/*.conf;";p=1;next} 1' | tac \
| awk '!p && /server {/{print "    index index.php index.html index.htm;\n";p=1} 1' \
| awk '!p && /root/{print "        root         /var/www/html;";p=1;next} 1' \
| sudo tee /etc/nginx/nginx.conf

# update NGINX configuration

sudo cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak

sudo tac /etc/nginx/nginx.conf.bak | awk '!p && /}/{print "\n}\n include /etc/nginx/vhosts/*.conf;";p=1;next} 1' | tac \

| awk '!p && /server {/{print " index index.php index.html index.htm;\n";p=1} 1' \

| awk '!p && /root/{print " root /var/www/html;";p=1;next} 1' \

| sudo tee /etc/nginx/nginx.conf

# create folders and update permission
sudo mkdir -p /etc/nginx/vhosts/
sudo mkdir -p /var/www/html/
sudo mkdir -p /var/www/vhosts/
sudo chown nginx:nginx /var/www/html/ -R
sudo chown nginx:nginx /var/www/vhosts/ -R

# create folders and update permission

sudo mkdir -p /etc/nginx/vhosts/

sudo mkdir -p /var/www/html/

sudo mkdir -p /var/www/vhosts/

sudo chown nginx:nginx /var/www/html/ -R

sudo chown nginx:nginx /var/www/vhosts/ -R

Create Virtual Hosts

# create dummy virtual host
sudo cat > /etc/nginx/vhosts/example.com.conf <<- "EOF"

# redirect to www
##server {
##    listen       80;
##    server_name  example.com;
##    return       301 http://www.example.com$request_uri;
##}

server {
    listen       80;
    server_name  www.example.com;
    root         /var/www/vhosts/example.com/www;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ .php$ {
        #fastcgi_pass unix:/var/run/php-fpm.sock;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index /index.php;
        include /etc/nginx/fastcgi_params;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_read_timeout 300;
    }
}

EOF

# create dummy virtual host

sudo cat > /etc/nginx/vhosts/example.com.conf <<- "EOF"

# redirect to www

##server {

## listen 80;

## server_name example.com;

## return 301 http://www.example.com$request_uri;

##}

server {

listen 80;

server_name www.example.com;

root /var/www/vhosts/example.com/www;

location / {

try_files $uri $uri/ /index.php?$args;

}

location ~ .php$ {

#fastcgi_pass unix:/var/run/php-fpm.sock;

fastcgi_pass 127.0.0.1:9000;

fastcgi_index /index.php;

include /etc/nginx/fastcgi_params;

fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

fastcgi_read_timeout 300;

}

EOF

# create ip vhost from dummy virtual host 
cat /etc/nginx/vhosts/example.com.conf | sed '/^#/ d' | sed "s/[www.]*example.com/10.0.6.29/" | sudo tee /etc/nginx/vhosts/10.0.6.29.conf
sudo mkdir -p /var/www/vhosts/10.0.6.29/www/
echo "<?php phpinfo();" | sudo tee /var/www/vhosts/10.0.6.29/www/index.php
sudo nginx -s reload

# create ip vhost from dummy virtual host

cat /etc/nginx/vhosts/example.com.conf | sed '/^#/ d' | sed "s/[www.]*example.com/10.0.6.29/" | sudo tee /etc/nginx/vhosts/10.0.6.29.conf

sudo mkdir -p /var/www/vhosts/10.0.6.29/www/

echo "<?php phpinfo();" | sudo tee /var/www/vhosts/10.0.6.29/www/index.php

sudo nginx -s reload

# create www vhost from dummy virtual host 
cat /etc/nginx/vhosts/example.com.conf | sed "s/example.com/yctin.com/" | sed "s/##//" | sudo tee /etc/nginx/vhosts/yctin.com.conf
sudo mkdir -p /var/www/vhosts/yctin.com/www/
echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/www/index.php
sudo nginx -s reload

# create www vhost from dummy virtual host

cat /etc/nginx/vhosts/example.com.conf | sed "s/example.com/yctin.com/" | sed "s/##//" | sudo tee /etc/nginx/vhosts/yctin.com.conf

sudo mkdir -p /var/www/vhosts/yctin.com/www/

echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/www/index.php

sudo nginx -s reload

# create subdomain vhost from dummy virtual host 
cat /etc/nginx/vhosts/example.com.conf | sed '/^#/ d' | sed "s/example.com/yctin.com/g" | sed "s/www\./demo\./g" | sed "s/www;/demo;/g" | sudo tee /etc/nginx/vhosts/yctin.com.conf
sudo mkdir -p /var/www/vhosts/yctin.com/demo/
echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/demo/index.php
sudo nginx -s reload

# create subdomain vhost from dummy virtual host

sudo mkdir -p /var/www/vhosts/yctin.com/demo/

echo "<?php phpinfo();" | sudo tee /var/www/vhosts/yctin.com/demo/index.php

sudo nginx -s reload

Setup Firewall (Optional)

# setup firewall
sudo yum install firewalld -y
sudo systemctl enable firewalld
sudo systemctl start firewalld
sudo firewall-cmd --add-service=http --permanent
sudo firewall-cmd --add-service=https --permanent
sudo systemctl restart firewalld

# setup firewall

sudo yum install firewalld -y

sudo systemctl enable firewalld

sudo systemctl start firewalld

sudo firewall-cmd --add-service=http --permanent

sudo firewall-cmd --add-service=https --permanent

sudo systemctl restart firewalld

SELinux Settings (Optional for SELinux enabled)

# update selinux policy, required for selinux enabled (p.s. not best practice)
sudo setsebool -P httpd_anon_write 1
sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/html -R
sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/vhosts/ -R

# Allow PHP connect network
setsebool -P httpd_can_network_connect 1

# Allow PHP connect remote database
setsebool -P httpd_can_network_connect_db 1

# update selinux policy, required for selinux enabled (p.s. not best practice)

sudo setsebool -P httpd_anon_write 1

sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/html -R

sudo chcon -u system_u -t httpd_sys_rw_content_t /var/www/vhosts/ -R

# Allow PHP connect network

setsebool -P httpd_can_network_connect 1

# Allow PHP connect remote database

setsebool -P httpd_can_network_connect_db 1

Reboot after Setup

sudo reboot

1	sudo reboot