Cómo instalar Blacklistd en FreeBSD 11.1
Introducción Cualquier servicio que esté conectado a Internet es un objetivo potencial para ataques de fuerza bruta o acceso injustificado. Hay herramientas como fail2ba
Anchor CMS is a super-simple and extremely lightweight, free and open source Content Management System (CMS) Blog Engine that supports editing content in Markdown or HTML, and is fully i18n compatible out of the box. Creating and modifying themes is as easy as writing some very simple PHP and HTML/CSS, so there are no new templating languages to learn. Anchor CMS weighs in at only 250KB (compressed) so it is the perfect solution for web developers and bloggers who are tired of bloatware and just want a simple and minimalist blogging engine that gets the job done without any extra complications.
In this tutorial we are going to install Anchor CMS on a FreeBSD 11 FAMP VPS using Apache web server, PHP 7.1, and a MariaDB database.
We will start by adding a new sudo
user.
First, log into your server as root
:
ssh root@YOUR_VULTR_IP_ADDRESS
The sudo
command isn't installed by default in the Vultr FreeBSD 11 server instance, so we will first install sudo
:
pkg install sudo
Now add a new user called user1
(or your preferred username):
adduser user1
The adduser
command will prompt you for lots of details for the user account, so simply select the defaults for most of them when it makes sense to do so. When you are asked whether to Invite user1 into any other groups?
, you should enter wheel
to add user1
to the wheel
group.
Now check the /etc/sudoers
file to make sure that the sudoers
group is enabled:
visudo
Look for a section like this:
# %wheel ALL=(ALL) ALL
This line tells us that users who are members of the wheel
group can use the sudo
command to gain root
privileges. It will be commented out by default so you will need to uncomment it and then save and exit the file.
We can verify the user1
group membership with the groups
command:
groups user1
If user1
is not a member of the wheel
group, you can use this command to update the user1
group membership:
pw group mod wheel -m user1
Now use the su
command to switch to the new sudo user user1
account:
su - user1
The command prompt will update to indicate that you are now logged into the user1
account. You can verify this with the whoami
command:
whoami
Now restart the sshd
service so that you can login via ssh
with the new non-root sudo user account you have just created:
sudo /etc/rc.d/sshd restart
Exit the user1
account:
exit
Exit the root
account (which will disconnect your ssh
session):
exit
You can now ssh
into the server instance from your local host using the new non-root sudo user user1
account:
ssh user1@YOUR_VULTR_IP_ADDRESS
If you want to execute sudo without having to type a password every time, then open the /etc/sudoers
file again, using visudo
:
sudo visudo
Edit the section for the wheel
group so that it looks like this:
%wheel ALL=(ALL) NOPASSWD: ALL
Please note: Disabling the password requirement for the sudo user is not a recommended practice, but it is included here as it can make server configuration much more convenient and less frustrating, especially during longer systems administration sessions. If you are concerned about the security implications, you can always revert the configuration change to the original after you finish your administration tasks.
Whenever you want to log into the root
user account from within the sudo
user account, you can use one of the following commands:
sudo -i
sudo su -
You can exit the root
account and return back to your sudo
user account any time by simply typing the following:
exit
Before installing any packages on the FreeBSD server instance, we will first update the system.
Make sure you are logged in to the server using a non-root sudo user and run the following commands:
sudo freebsd-update fetch
sudo freebsd-update install
sudo pkg update
sudo pkg upgrade
Install the Apache web server:
sudo pkg install apache24
Enter y
when prompted.
Now use the sysrc
command to enable the Apache service to execute automatically at boot time:
sudo sysrc apache24_enable=yes
The sysrc
command updates the /etc/rc.conf
configuration file, so if you want to verify the configuration update manually you can simply open the /etc/rc.conf
file with your favourite terminal editor:
vi /etc/rc.conf
Now start the Apache service:
sudo service apache24 start
You can quickly check that apache is running by visiting the IP address or domain of the server instance in your browser:
http://YOUR_VULTR_IP_ADDRESS/
You will see the default FreeBSD Apache page displaying the text:
It works!
Check your Apache default configuration file to ensure that the DocumentRoot
directive points to the correct directory:
sudo vi /usr/local/etc/apache24/httpd.conf
The DocumentRoot
configuration option will look like this:
DocumentRoot "/usr/local/www/apache24/data"
We now need to enable the mod_rewrite
Apache module. We can do this by searching the default Apache configuration file for the term mod_rewrite
.
By default, the mod_rewrite
Apache module will be commented out (which means it is disabled). The configuration line on a clean Vultr FreeBSD 11 instance will look like this:
#LoadModule rewrite_module libexec/apache24/mod_rewrite.so
Simply remove the hash symbol to uncomment the line and load the module. This, of course, applies to any other required Apache modules too:
LoadModule rewrite_module libexec/apache24/mod_rewrite.so
We now need to edit The Directory
Apache directive in the same configuration file so that mod_rewrite
will work correctly with Anchor CMS.
Find the section of the configuration file that starts with <Directory "/usr/local/www/apache24/data">
and change AllowOverride none
to AllowOverride All
. The end result (with all comments removed) will look something like this:
<Directory "/var/www/html">
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
</Directory>
Now save and exit the Apache configuration file.
We will restart Apache at the end of this tutorial, but restarting Apache regularly during installation and configuration is certainly a good habit, so let's do it now:
sudo service apache24 restart
We can now install PHP 7.1 along with all of the necessary PHP modules required by Anchor CMS:
sudo pkg install php71 mod_php71 php71-gd php71-mbstring php71-mysqli php71-xml php71-curl php71-ctype php71-tokenizer php71-simplexml php71-dom php71-session php71-iconv php71-hash php71-json php71-fileinfo php71-pdo php71-pdo_mysql php71-zlib php71-openssl php71-zip php71-phar
FreeBSD 11 gives us the option to use a development php.ini
or a production php.ini
. Since we are going to install Anchor on a public web server, we'll use the production version. First, back up php.ini-production
:
sudo cp /usr/local/etc/php.ini-production /usr/local/etc/php.ini-production.backup
Then soft-link php.ini-production
to php.ini
:
sudo ln -s /usr/local/etc/php.ini-production /usr/local/etc/php.ini
We need to configure Apache to actually use PHP, so let's create a new file called php.conf
in the Apache Includes
directory:
sudo vi /usr/local/etc/apache24/Includes/php.conf
Enter the following text into the newly created file:
<IfModule dir_module>
DirectoryIndex index.php index.html
<FilesMatch "\.php$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch "\.phps$">
SetHandler application/x-httpd-php-source
</FilesMatch>
</IfModule>
Save and exit the file.
Now let's restart Apache so that it can reload the configuration changes:
sudo service apache24 restart
FreeBSD 11 defaults to using MariaDB database server, which is an enhanced, fully open source, community developed, drop-in replacement for MySQL server.
Install the latest version of MariaDB database server:
sudo pkg install mariadb102-server mariadb102-client
Start and enable MariaDB server to execute automatically at boot time:
sudo sysrc mysql_enable="yes"
sudo service mysql-server start
Secure your MariaDB server installation:
sudo mysql_secure_installation
When prompted to create a MariaDB/MySQL root
user, select "Y" (for yes) and then enter a secure root
password. Simply answer "Y" to all of the other yes/no questions as the default suggestions are the most secure options.
Log into the MariaDB shell as the MariaDB root
user by running the following command:
sudo mysql -u root -p
To access the MariaDB command prompt, simply enter the MariaDB root
password when prompted.
Run the following queries to create a MariaDB database and database user for Anchor CMS:
CREATE DATABASE anchor_db CHARACTER SET utf8 COLLATE utf8_general_ci;
CREATE USER 'anchor_user'@'localhost' IDENTIFIED BY 'UltraSecurePassword';
GRANT ALL PRIVILEGES ON anchor_db.* TO 'anchor_user'@'localhost';
FLUSH PRIVILEGES;
EXIT;
You can replace the database name anchor_db
and username anchor_user
with something more to your liking, if you prefer. Also, make sure that you replace "UltraSecurePassword" with an actually secure password.
Change your current working directory to the default web directory:
cd /usr/local/www/apache24/data
Your current working directory will now be: /usr/local/www/apache24/data
. You can check this with the pwd
(print working directory) command:
pwd
Now use wget
to download the Anchor CMS installation package:
sudo wget https://github.com/anchorcms/anchor-cms/archive/0.12.3a.zip
Please note: You should definitely check for the most recent version by visiting the Anchor CMS download page.
List the current directory to check that you have successfully downloaded the file:
ls -la
Remove index.html
:
sudo rm index.html
Now uncompress the zip archive:
sudo unzip 0.12.3a.zip
Move all of the installation files to the web root directory:
sudo mv anchor-cms-0.12.3a/* /usr/local/www/apache24/data
Change ownership of the web files to avoid any permissions problems:
sudo chown -R www:www * ./
Restart Apache again:
sudo service apache24 restart
Anchor CMS requires us to use composer
to download some plugins so we first need to install composer
. Unfortunately, the version of the pre-built binary version of composer in the FreeBSD package repositories is not compatible with PHP 7.1. So instead of installing composer
with the pkg
command, we will instead compile it from source.
First, let's configure the FreeBSD 11 system to compile PHP software using PHP version 7.1 instead of the default 5.6.
Create a new file in the /etc/
directory called make.conf
:
sudo vi /etc/make.conf
Enter the following text into the file:
DEFAULT_VERSIONS+= php=7.1
Now save and close the file.
Next we need to download the FreeBSD ports collection using the portsnap
command:
sudo portsnap fetch extract update
Once the portsnap
command completes, change into the php-composer
source code directory:
cd /usr/ports/devel/php-composer/
Now start the php-composer
compilation and installation using the make
command:
sudo make install clean
If you are not used to compiling software the screen may look a bit daunting to you. You will see lots of text scrolling by and will occassionally be asked to select some compilation settings. Simply accept the default values and select OK
to continue compiling.
Note: Compiling software can take a considerable amount of time, but be sure to keep an eye on the screen as you may need to confirm details during the compilation.
When the compilation is completed, change into the webroot directory:
cd /usr/local/www/apache24/data
Run composer using the www
user:
sudo -u www composer install -d /usr/local/www/apache24/data
You should see some warning messages from composer
about not being able to write to the cache, but don't worry too much about that as everything should still install just fine.
We're now ready to move on to the final step.
It's time to visit the IP address of your server instance in your browser, or if you've already configured your Vultr DNS settings (and given it enough time to propagate) you can simply visit your domain instead.
To access the Anchor CMS installation page, enter your Vultr instance IP address into your browser address bar, followed by /install/
:
http://YOUR_VULTR_IP_ADDRESS/install/
Most of the installation options are self explanatory, but here are a few pointers to help you along:
On the Anchor CMS landing page, simply click on the Run the installer
button to start the installation process.
Select your Language
and Timezone
and click on the Next Step
button.
On the Database Details
page, enter the following database values:
Database Host: localhost
Port: 3306
Username: anchor_user
Password: UltraSecurePassword
Database Name: anchor_db
Table Prefix: anchor_
Collation: utf8_unicode_ci
Click Next Step
to continue.
On the Site metadata
page, enter the following details:
Site Name: <your site name>
Site Description: <a site description>
Site Path: /
Click Next Step
to continue.
Next enter appropriate admin login details:
Username: admin
Email Address: <admin email address>
Password: <admin password>
Click on the Complete
button to finalize the installation.
You will see a bright green page with the message Install complete!
.
To access the admin section simply click on the Visit your admin panel
button and enter your username and password. If you aren't redirected to the admin login page, you can enter the admin address manually:
http://YOUR_VULTR_IP_ADDRESS/admin/panel
For security reasons, make sure you delete the /install/
directory from the webroot directory:
sudo rm -rf ./install/
You are now ready to start adding your content and configuring the look and feel of your site. Make sure you check out the Anchor CMS documentation for more information about how to build and configure your site.
Introducción Cualquier servicio que esté conectado a Internet es un objetivo potencial para ataques de fuerza bruta o acceso injustificado. Hay herramientas como fail2ba
Introduction A FAMP stack, which is comparable to a LAMP stack on Linux, is a collection of open-source software that is typically installed together t
Este tutorial le mostrará cómo configurar OpenBSD 5.6 con un disco completamente encriptado en su Vultr VPS. Una nota sobre la parte de cifrado: la mayoría de los centros de datos alrededor de
Usar un usuario sudo para acceder a un servidor y ejecutar comandos a nivel raíz es una práctica muy común entre Linux y Unix Systems Administrator. El uso de un sud
¿Usando un sistema diferente? osTicket es un sistema de tickets de soporte al cliente de código abierto. El código fuente de osTicket está alojado públicamente en Github. En este tutorial
Using a Different System? Osclass is an open source project that allows you to easily create a classified site without any technical knowledge. Its sourc
Using a Different System? Wiki.js is a free and open source, modern wiki app built on Node.js, MongoDB, Git and Markdown. Wiki.js source code is publicl
Using a Different System? Lychee 3.1 Photo Album is a simple and flexible, free and open source photo-management tool which runs on a VPS server. It install
Using a Different System? Fork is an open source CMS written in PHP. Forks source code is hosted on GitHub. This guide will show you how to install Fork CM
Fuera de la caja, los servidores Vultr FreeBSD no están configurados para incluir espacio de intercambio. Si su intención es una instancia de nube desechable, probablemente no necesite
El sistema operativo FreeBSD utiliza UFS (Sistema de archivos Unix) para su sistema de archivos de particiones raíz; también conocido como freebsd-ufs en caso de una actualización
Using a Different System? Selfoss RSS Reader is a free and open source self-hosted web-based multipurpose, live stream, mashup, news feed (RSS/Atom) reade
Using a Different System? Matomo (formerly Piwik) is an open source analytics platform, an open alternative to Google Analytics. Matomo source is hosted o
Using a Different System? TLS 1.3 is a version of the Transport Layer Security (TLS) protocol that was published in 2018 as a proposed standard in RFC 8446
Using a Different System? Introduction Craft CMS is an open source CMS written in PHP. Craft CMS source code is hosted on GitHub. This guide will show yo
¿Usando un sistema diferente? Backdrop CMS 1.8.0 es un sistema de administración de contenido (CMS) simple y flexible, amigable para dispositivos móviles, gratuito y de código abierto que nos permite
¿Usando un sistema diferente? ImpressPages CMS 5.0 es un sistema de gestión de contenido (CMS) simple y efectivo, gratuito y de código abierto, fácil de usar y basado en MVC
Using a Different System? NodeBB is a Node.js based forum software. It utilizes web sockets for instant interactions and real-time notifications. The NodeB
Using a Different System? ESpeak can generate text-to-speech (TTS) audio files. These can be useful for many reasons, such as creating your own Turin
¿Usando un sistema diferente? TaskWarrior es una herramienta de gestión de tiempo de código abierto que es una mejora en la aplicación Todo.txt y sus clones. Debido a th
ZPanel, un panel de control de alojamiento web popular, se bifurcó en 2014 a un nuevo proyecto llamado Sentora. Aprende a instalar Sentora en tu servidor con este tutorial.
Aprende cómo instalar Vtiger CRM, una aplicación de gestión de relaciones con el cliente, en CentOS 7 para aumentar tus ventas y mejorar el servicio al cliente.
Esta guía completa le mostrará cómo configurar un servidor Counter-Strike 1.6 en Linux, optimizando el rendimiento y la seguridad para el mejor juego. Aprende los pasos más recientes aquí.
Los ataques de ransomware van en aumento, pero ¿puede la IA ayudar a lidiar con el último virus informático? ¿Es la IA la respuesta? Lea aquí, sepa que la IA es una bendición o una perdición
ReactOS, un sistema operativo de código abierto y gratuito, está aquí con la última versión. ¿Puede satisfacer las necesidades de los usuarios de Windows de hoy en día y acabar con Microsoft? Averigüemos más sobre este estilo antiguo, pero una experiencia de sistema operativo más nueva.
Whatsapp finalmente lanzó la aplicación de escritorio para usuarios de Mac y Windows. Ahora puede acceder a Whatsapp desde Windows o Mac fácilmente. Disponible para Windows 8+ y Mac OS 10.9+
Lea esto para saber cómo la Inteligencia Artificial se está volviendo popular entre las empresas de pequeña escala y cómo está aumentando las probabilidades de hacerlas crecer y dar ventaja a sus competidores.
Recientemente, Apple lanzó macOS Catalina 10.15.4, una actualización complementaria para solucionar problemas, pero parece que la actualización está causando más problemas que conducen al bloqueo de las máquinas Mac. Lee este artículo para obtener más información
13 Herramientas comerciales de extracción de datos de Big Data
Nuestra computadora almacena todos los datos de una manera organizada conocida como sistema de archivos de diario. Es un método eficiente que permite a la computadora buscar y mostrar archivos tan pronto como presiona buscar.