Fa'apipi'iina o le Pule i le HestiaCP: Setiina Fa'aautomatika o le Puipuiga + Fa'aleleia atili o le Pulega o Fa'amaumauga

O le taʻiala atoatoa lata mai i le faʻapipiʻiina o le Adminer i luga o le HestiaCP e aofia ai le faʻapipiʻiina i le kiliki e tasi, faʻamalosia le saogalemu, ma laʻasaga faʻatulagaina otometi. E aʻoaʻoina oe i lea laʻasaga ma lea laʻasaga i le faʻapipiʻiina o meafaigaluega e pulea ai faʻamaumauga ma puipuia lau 'auʻaunaga, e mafai ai e oʻo lava i ē amata ona amata vave ma foia faigata o le faʻagaioiga ma le tausiga o le HestiaCP + Adminer.

Afai o loʻo e faʻaaogaina pea meafaigaluega e pulea ai faʻamaumauga e aunoa ma se puipuiga, ua e tuʻuina atu ki i tagata faomea.

Aiseā e filifili ai le Pule nai lo le... phpMyAdmin?

O le Pule e aofia ai se faila PHP e tasi e itiiti ifo i le 1MB, ma e faigofie ai, vave ai, ma fa'aaogā lelei ai punaoa ona o le fa'atinoina.

E sili atu le talafeagai o le Adminer mo VPS, uepisaite laiti, ma galuega faatino a le tagata lava ia pe a faatusatusa i le fausaga faigata o le phpMyAdmin.

Laasaga e faʻapipiʻi ai le Pule i le HestiaCP

1. La'u mai le faila a le Pule

Alu i le Upega Tafaʻilagi Aloaʻia a le Pule La'u mai le lomiga aupito lata mai adminer.php.

La'u i luga le faila i le fa'asinomaga o le upega tafa'ilagi a HestiaCP, mo se fa'ata'ita'iga:

/home/username/web/adminer.domain.com/public_html/adminer.php

2. Fausia se subdomain ma fa'agaoioia le SSL.

Fa'aopoopo se vaega i lalo ole laiga i le paneli HestiaCP adminer.domain.comFa'agaoioia le Let's Encrypt SSL e fa'amautinoa ai le saogalemu o le fa'asalalauga.

3. Fa'atulaga le puipuiga o upu fa'alilolilo a le Nginx

Fa'aopoopo mea nei i le faila fa'atulagaina o le Nginx mo le subdomain:

location / {
    auth_basic "Restricted Area";
    auth_basic_user_file /etc/nginx/.htpasswd;

    root /home/username/web/adminer.domain.com/public_html;
    index index.php adminer.php;
}

Fausia se faila upu faataga:

sudo apt-get install apache2-utils
sudo htpasswd -c /etc/nginx/.htpasswd adminuser

A e ulufale i le Pule, o le a aliali mai se pusa talanoaga o le upu faataga, ma e na'o le ulufale i totonu e mafai ona e ulufale ai e ala i le ulufaleina o le igoa ole tagata fa'aoga ma le upu faataga sa'o.

Fa'afou otometi faila a le Pule

Ina ia ʻalofia tulaga lamatia o le saogalemu e fesoʻotaʻi ma le faʻaaogaina o lomiga tuai, e mafai ona faʻatinoina faʻafouga otometi e ala i le faʻaaogaina o tusitusiga o le shell ma galuega faʻatulagaina a le Cron.

Fa'ata'ita'iga o le tusitusiga fa'afou

#!/bin/bash
URL="https://www.adminer.org/latest.php"
TARGET="/home/username/web/adminer.domain.com/public_html/adminer.php"

wget -q -O "$TARGET" "$URL"
chown username:username "$TARGET"
chmod 644 "$TARGET"

Seivi e pei o /usr/local/bin/update-adminer.shMa faʻaopoopo se galuega faʻatulagaina:

crontab -e
0 3 * * 1 /usr/local/bin/update-adminer.sh

O le auala lea, o le faila a le Pule o le a otometi lava ona faʻafouina i Aso Gafua uma i le 3 i le taeao.

FaiOsofa'iga fa'asaga i le malosi fa'amalosi a le l2Ban

E faigofie ona a'afia le Simple Basic Auth i osofa'iga fa'amalosi, ae e mafai e le Fail2Ban ona poloka otometi IP leaga.

Fa'atulagaga o le faamama

pepa:/etc/fail2ban/filter.d/nginx-adminer.conf

[Definition]
failregex = ^<HOST> - .* "GET /adminer.php HTTP/.*" 401
ignoreregex =

Fa'atulagaga o le falepuipui (umi fa'ateleina o le fa'asā)

pepa:/etc/fail2ban/jail.local

[nginx-adminer]
enabled  = true
filter   = nginx-adminer
port     = http,https
logpath  = /var/log/nginx/access.log
maxretry = 3
findtime = 600

bantime.increment = true
bantime.rndtime   = 60
bantime.factor    = 2
bantime           = 600

A'afiaga: O le fa'asā muamua e mo le 10 minute, o le lona lua mo le 20 minute, o le lona tolu mo le 40 minute, ma isi mea fa'apena. O le a fa'asāina i latou o lo'o faia pea osofa'iga mo se vaitaimi umi atu.

Fa'atumu le tusitusiga fa'atulagaina i le kiliki e tasi

Seivi e pei o /usr/local/bin/setup-fail2ban-adminer.sh:

#!/bin/bash
FILTER_PATH="/etc/fail2ban/filter.d/nginx-adminer.conf"
JAIL_PATH="/etc/fail2ban/jail.local"

cat > $FILTER_PATH << 'EOF'
[Definition]
failregex = ^<HOST> - .* "GET /adminer.php HTTP/.*" 401
ignoreregex =
EOF

cat >> $JAIL_PATH << 'EOF'

[nginx-adminer]
enabled  = true
filter   = nginx-adminer
port     = http,https
logpath  = /var/log/nginx/access.log
maxretry = 3
findtime = 600

bantime.increment = true
bantime.rndtime   = 60
bantime.factor    = 2
bantime           = 600
EOF

systemctl restart fail2ban
fail2ban-client status nginx-adminer

执行：

sudo chmod +x /usr/local/bin/setup-fail2ban-adminer.sh
sudo /usr/local/bin/setup-fail2ban-adminer.sh

Faaiuga: Faapaleniina o le Saogalemu ma le Lelei

Ou te talitonu maumaututu o meafaigaluega e pulea ai faʻamaumauga e lē o se mea e mafai ona e tuʻua naʻo luga o le initaneti lautele ma faʻaaoga ma le filemu o le mafaufau. E manaia le mamanu mama a le Pule, ae e tatau ona faʻafetaui lelei fuafuaga saogalemu. O le puipuiga o upu faʻalilolilo o le laina muamua lea o le puipuiga, o faʻafouga otometi e maua ai le puipuiga faifai pea, ma o le Fail2Ban e ofoina atu ni auala atamai e teteʻe atu ai. Naʻo le tuʻufaʻatasia o nei elemene e tolu e mafai ai ona e fatuina se siosiomaga e pulea ai faʻamaumauga e lelei ma saogalemu.

O se matai moni e lē gata o se tasi e iloa le auala e fau ai meafaigaluega, ae o se tasi foʻi e iloa le auala e puipui ai.