Acordeon para instalar, configurar y operar nuestro servidor CentOS 6.x
Configuracion basica
emacs /root/.bashrc /root/.emacs
cp /etc/sysconfig/network /etc/sysconfig/network.orig
emacs /etc/sysconfig/network
cp /etc/sysconfig/clock /etc/sysconfig/clock.orig
emacs /etc/sysconfig/clock
cp /usr/share/zoneinfo/Mexico/General /etc/localtime
Utilerias y editores de texto
yum install yum-utils.x86_64 screen.x86_64 emacs-nox.x86_64 vim-minimal.x86_64
Depositos EPEL y REMI
wget http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.noarch.rpm
wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
rpm -Uvh remi-release-6*.rpm epel-release-6*.rpm
cp /etc/yum.repos.d/remi.repo /etc/yum.repos.d/remi.repo.orig
emacs /etc/yum.repos.d/remi.repo
Actualizar sistema
yum update
Firewall
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
iptables -A INPUT -p tcp --dport 21 -j ACCEPT
iptables -A INPUT -p tcp --dport 22 -j ACCEPT
iptables -A INPUT -p tcp --dport 25 -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 8000:8999 -j ACCEPT
iptables -A INPUT -p tcp --dport 30000:50000 -j ACCEPT
iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT
/etc/init.d/iptables save
OpenSSH
cp /etc/ssh/sshd_config /etc/ssh/sshd_config.orig
emacs /etc/ssh/sshd_config
/etc/init.d/sshd restart
Postfix
cp /etc/postfix/main.cf /etc/postfix/main.cf.orig
emacs /etc/postfix/main.cf
mv /etc/postfix/virtual /etc/postfix/virtual.orig
emacs /etc/postfix/virtual
postmap /etc/postfix/virtual
chkconfig postfix on
/etc/init.d/postfix start
PostgreSQL y PostGIS
wget http://yum.postgresql.org/9.3/redhat/rhel-6-x86_64/pgdg-centos93-9.3-1.noarch.rpm
rpm -Uvh pgdg-centos93-*.rpm
yum install postgis2_93.x86_64 postgresql93-server.x86_64 postgresql93-devel.x86_64 postgresql93.x86_64
service postgresql-9.3 initdb
chkconfig postgresql-9.3 on
/etc/init.d/postgresql-9.3 start
Configuración PostgreSQL
su - postgres -c psql
\password
\q
cp /var/lib/pgsql/9.3/data/pg_hba.conf /var/lib/pgsql/9.3/data/pg_hba.conf.orig
emacs /var/lib/pgsql/9.3/data/pg_hba.conf
/etc/init.d/postgresql-9.3 restart
Agregar GIS a una base de datos
CREATE EXTENSION postgis;
Parametros de configuración de Nginx (./configure)
--prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx --group=nginx --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-mail --with-mail_ssl_module --with-file-aio --with-ipv6 --with-cc-opt='-O2 -g -pipe -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic'
Nginx y PHP-FPM
emacs /etc/yum.repos.d/nginx.repo
yum install nginx.x86_64 php-fpm.x86_64
cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.orig
emacs /etc/nginx/nginx.conf
cp /etc/php-fpm.d/www.conf /etc/php-fpm.d/www.conf.orig
emacs /etc/php-fpm.d/www.conf
cp /etc/php.ini /etc/php.ini.orig
emacs /etc/php.ini
mkdir /var/lib/php/session
chown nginx:nginx /var/lib/php/session /var/log/nginx
chkconfig nginx on
/etc/init.d/nginx start
chkconfig php-fpm on
/etc/init.d/php-fpm start
Extensiones PHP
yum install php-pear.noarch php-devel.x86_64 make.x86_64
yum install php-pgsql.x86_64 php-mysql.x86_64 php-dba.x86_64
yum install php-mcrypt.x86_64 php-intl.x86_64 php-mbstring.x86_64 php-gd.x86_64
pecl install oauth
PHP Tesseract-OCR
curl https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/utils/download_sources.sh | bash
cd ~/rpmbuild/SPECS
wget https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/specs/leptonica.spec
yum-builddep leptonica.spec
rpmbuild -ba leptonica.spec
yum install ~/rpmbuild/RPMS/$(uname -m)/leptonica{,-devel}-1.69-*.rpm
cd ~/rpmbuild/SPECS
wget https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/specs/tesseract.spec
wget https://raw.githubusercontent.com/grossws/tesseract-ocr-specs/master/specs/tesseract-langpack.spec
yum-builddep tesseract.spec
rpmbuild -ba tesseract.spec
yum install ~/rpmbuild/RPMS/$(uname -m)/tesseract{,-devel}-3.02-*.rpm
rpmbuild -ba tesseract-langpack.spec
Pendiente langpack
NodeJS y NPM
yum install nodejs.x86_64 npm.noarch
Git
yum install git.x86_64
mkdir /srv/repos
Ruby con RVM
groupadd rvm
curl -L https://get.rvm.io | sudo bash -s stable
source /etc/profile.d/rvm.sh
source ~/.bashrc
usermod -a -G rvm usuario
rvm install 2.0.0
Rails con RVM
gem install rails bundler
Nginx y Passenger
gem install passenger
rvmsudo passenger-install-nginx-module
Sudo
cp /etc/sudoers /etc/sudoers.orig
visudo
SFTP con chroot
Agregar grupo sftp y carpeta para usuarios:
groupadd sftp
mkdir /srv/sftp
Tocar en /etc/ssh/sshd_config:
Subsystem sftp internal-sftp
Match Group sftp
ChrootDirectory /srv/sftp
ForceCommand internal-sftp
AllowTcpForwarding no
Reiniciar sshd:
/etc/init.d/sshd restart
Sitio codigo.labplc.mx
mkdir /srv/sites/codigo.labplc.mx
mkdir /srv/sites/codigo.labplc.mx/web
mkdir /srv/sites/codigo.labplc.mx/web/htdocs
mv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.orig
emacs /etc/nginx/conf.d/default.conf
echo 'codigo.labplc.mx' > /srv/sites/codigo.labplc.mx/web/htdocs/index.html
echo '<?php phpinfo(); ?>' > /srv/sites/codigo.labplc.mx/web/htdocs/phpinfo.php
/etc/init.d/nginx restart
Instalar soporte para UUID postgresql
sudo yum install postgresql93-contrib
En sql editor:
CREATE EXTENSION "uuid-ossp";
Crear usuario de shell
useradd -u 100 -g 100 -G wheel -s /bin/bash -m manuel
passwd manuel
Crear carpeta publica en usuario de shell
chmod 711 /home/manuel
mkdir /home/manuel/public_html
Crear rol en PostgreSQL para usuario
createuser -U postgres -s -P manuel
Nuevo host virtual
mkdir /srv/sites/acopia.me
mkdir /srv/sites/acopia.me/web
mkdir /srv/sites/acopia.me/web/htdocs
Crear rol en PostgreSQL para aplicación web
createuser -U postgres -I -P acopiame
Crear base de datos para aplicación web
createdb -U postgres acopiame -O acopiame
Aplicaciones Rails/Laravel
mkdir /srv/sites/dev.codigo.labplc.mx
mkdir /srv/sites/dev.codigo.labplc.mx/web
mkdir /srv/sites/dev.codigo.labplc.mx/web/htdocs
emacs /etc/nginx/conf.d/dev.conf
Crear deposito de Git local
groupadd -g 502 datos
usermod -a -G 502 manuel
mkdir /srv/repos/datos.git
git init --bare /srv/repos/datos.git --shared=group
chgrp -R datos /srv/repos/datos.git
Clonar deposito de datos en usuario de shell
git config --global user.name 'suNombre'
git config --global user.email 'suCorreo'
git clone /srv/repos/datos.git/
chmod 777 -R datos/web/views/_compile/ datos/web/cache/* datos/web/config/rate_limit/
En la carpeta datos se encuentra el deposito de usuario.dev
Usuario de SFTP
useradd -g sftp -d /srv/sftp/sivev -s /sbin/nologin sivev
passwd usuario
Instalación de MYSQL
yum install mysql-server
chkconfig mysqld on
/etc/init.d/mysqld start
Establecer password de ROOT:
mysqladmin -u root password 'new-password'
mysqladmin -u root -h codigo.labplc.mx password 'new-password'
Instalacion Pure-FTPd
yum install pure-ftpd
cp /etc/pure-ftpd/pure-ftpd.conf /etc/pure-ftpd/pure-ftpd.conf.orig
emacs /etc/pure-ftpd/pure-ftpd.conf
chkconfig pure-ftpd on
/etc/init.d/pure-ftpd start
Crear usuario:
pure-pw useradd usuario -u ftp -d ruta -m
chown ftp:ftp ruta
Elasticsearch
Agregar repo a yum:
rpm --import http://packages.elasticsearch.org/GPG-KEY-elasticsearch
Agregar en /etc/yum.repos.d/elasticsearch.repo:
[elasticsearch-1.2]
name=Elasticsearch repository for 1.2.x packages
baseurl=http://packages.elasticsearch.org/elasticsearch/1.2/centos
gpgcheck=1
gpgkey=http://packages.elasticsearch.org/GPG-KEY-elasticsearch
enabled=1
Instalar Elasticsearch:
yum install java-1.7.0-openjdk elasticsearch
Agregar al inicio:
chkconfig elasticsearch on
Iniciar:
/etc/init.d/elasticsearch start