Git

Push with specific key

ssh-agent bash -c 'ssh-add /home/support/lmr/.ssh/id_rsa; git push origin master'

Logs

Max requests per IP

cat /var/log/nginx/access.log|cut -f 1 -d ' '|sort|uniq -c|sort -nr|less

MySQL

ADD GRANTS

GRANT ALL PRIVILEGES ON database.* TO user@`localhost` IDENTIFIED BY 'password';

MAKE DUMP dbname to dbname.sql

mysqldump --routines --events --lock-tables dbname > dbname.sql mysqldump --routines --events --single-transaction dbname > dbname.sql

Files

find and unlink

find . -type l -exec unlink {} \;

setfacl usage

find ./ -type d -exec setfacl -m u:apache:rwx {} \;

find ./ -type f -exec setfacl -m u:apache:rw {} \;

SNIPETS

check private and pub keys

openssl x509 -noout -modulus -in ../pub.crt | openssl md5 #pub

openssl rsa -noout -modulus -in ../private.key | openssl md5 #private

nginx acme location(avoid anoying redirects)

location /.well-known/acme-challenge/ {
        root /home/user/domain.com/www;
        

default_type "text/plain";
        try_files $uri =404;
                break;

    }

nginx limits per ip

...
geo $limit {
 default 1;
192.168.1.1 0;
192.168.1.2 0;
192.168.1.3 0;
}
}

map $limit $limit_ips {
 0 '';
 1 $binary_remote_addr;
}

server {
...
limit_req_zone $limit_ips zone=peraddr:10m rate=100r/m;
...
}

Limit to uri from ip

..
geo $ip_allow {
192.168.1.1 1;
192.168.1.2 1;
default 0;
}
...
}

server {
...
   set $check '';
  
   if ( $ip_allow = 0  ) {
      set $check "A";
   }

    if ( $request_uri ~* ((asm_admin\.php.*|wp-login\.php.*|xmlrpc\.php.*|admin\/login\/.*|wp-json.*)$)) {
      set $check "${check}B";
   }

   if ( $check = "AB" ) {
      return 403;
      }
...
}

httpd prefork

<IfModule prefork.c>
ServerLimit (Full RAM in MB - RAM consumption by other services like MySQL) / RAM consumption by 1 httpd process $(ps aux | grep 'httpd' | awk '{print $6/1024;}')
StartServers 30% of MaxClients
MinSpareServers 5% MaxClients
MaxSpareServers 10% MaxClients
MaxClients (Full RAM in MB - RAM consumption by other services like MySQL) / RAM consumption by 1 httpd process $(ps aux | grep 'httpd' | awk '{print $6/1024;}')
MaxRequestsPerChild 10000
</IfModule>

pm.max.children php-fpm

Далее, возьмем за основу формулу для расчета pm.max_children (источник), и проведем расчет на примере:

Total Max Processes = (Total Ram - (Used Ram + Buffer)) / (Memory per php process)

Всего ОЗУ: 4Гб
Используется ОЗУ: 1000Мб
Буфер безопасности: 400Мб
Память на один дочерний php-fpm процесс (в среднем): 30Мб

Максимально возможное кол-во процессов = (4096 - (1000 + 400)) / 30 = 89
Четное количество: 89 округлили в меньшую сторону до 80

crontab for all users

for user in $(cut -d':' -f1 /etc/passwd); do crontab -u $user -l; done

push file fix.sh to host 192.168.1.199 port 60000

cat file.sh | nc -l 60000 < file.sh #on source

nc 192.168.1.199 60000 | cat > file.sh #on target

useful tricks

mysqldump --master-data=2 --flush-logs --quick --single-transaction --routines database | gzip -c | nc -l 60000 < database.sql

nc 192.168.1.199 60000 | gunzip | mysql database < database.sql