Cómo instalar Blacklistd en FreeBSD 11.1
Introducción Cualquier servicio que esté conectado a Internet es un objetivo potencial para ataques de fuerza bruta o acceso injustificado. Hay herramientas como fail2ba
Tiny Tiny RSS Reader is a free and open source self-hosted web-based news feed (RSS/Atom) reader and aggregator, designed to allow you to read news from any location, while feeling as close as possible to a real desktop application. Tiny Tiny RSS Reader supports feed aggregation and syndication, OPML import and export, social sharing, internationalization, duplicate article detection, flexible article filtering, plugins and themes, a JSON API, and much more!
In this tutorial, we are going to install Tiny Tiny RSS Reader 17.4 on a FreeBSD 11 FAMP VPS using Apache web server, PHP 7.1, and a MariaDB database.
We will start by adding a new sudo
user.
First, log into your server as root
:
ssh root@YOUR_VULTR_IP_ADDRESS
The sudo
command isn't installed by default in the Vultr FreeBSD 11 server instance, so we will first install sudo
:
pkg install sudo
Add a new user called user1
(or your preferred username):
adduser user1
The adduser
command will prompt you for lots of details for the user account, so simply select the defaults for most of them when it makes sense to do so. When you are asked whether to Invite user1 into any other groups?
, you should enter wheel
to add user1
to the wheel
group.
Now check the /etc/sudoers
file to make sure that the sudoers
group is enabled:
visudo
Look for a section like this:
# %wheel ALL=(ALL) ALL
This line tells us that users who are members of the wheel
group can use the sudo
command to gain root
privileges. It will be commented out by default so you will need to uncomment it and then save and exit the file.
We can verify the user1
group membership with the groups
command:
groups user1
If user1
is not a member of the wheel
group, you can use this command to update the user1
group membership:
pw group mod wheel -m user1
Now use the su
command to switch to the new sudo user user1
account:
su - user1
The command prompt will update to indicate that you are now logged into the user1
account. You can verify this with the whoami
command:
whoami
Now, restart the sshd
service so that you can login via ssh
with the new non-root sudo user account you have just created:
sudo /etc/rc.d/sshd restart
Exit the user1
account:
exit
Exit the root
account (which will disconnect your ssh
session).
exit
You can now ssh
into the server instance from your local host using the new non-root sudo user user1
account:
ssh user1@YOUR_VULTR_IP_ADDRESS
If you want to execute sudo without having to type a password every time, then open the /etc/sudoers
file again, using visudo
:
sudo visudo
Edit the section for the wheel
group so that it looks like this:
%wheel ALL=(ALL) NOPASSWD: ALL
Please note: Disabling the password requirement for the sudo user is not a recommended practice, but it is included here as it can make server configuration much more convenient and less frustrating, especially during longer systems administration sessions. If you are concerned about the security implications, you can always revert the configuration change to the original after you finish your administration tasks.
Whenever you want to log into the root
user account from within the sudo
user account, you can use one of the following commands:
sudo -i
sudo su -
You can exit the root
account and return back to your sudo
user account any time by simply typing:
exit
Before installing any packages on the FreeBSD server instance, we will first update the system.
Make sure you are logged into the server using a non-root sudo user and run the following commands:
sudo freebsd-update fetch
sudo freebsd-update install
sudo pkg update
sudo pkg upgrade
Install the Apache 2.4 web server:
sudo pkg install apache24
Enter y
when prompted.
Now use the sysrc
command to enable the Apache service to execute automatically at boot time.
sudo sysrc apache24_enable=yes
The sysrc
command updates the /etc/rc.conf
configuration file, so if you want to verify the configuration update manually you can simply open the /etc/rc.conf
file with your favourite terminal editor.
vi /etc/rc.conf
Now start the Apache service:
sudo service apache24 start
You can quickly check that Apache is running by visiting the IP address or domain of the server instance in your browser:
http://YOUR_VULTR_IP_ADDRESS/
You should see the default FreeBSD Apache page displaying the text:
It works!
Check your Apache default configuration file to ensure that the DocumentRoot
directive points to the correct directory.
sudo vi /usr/local/etc/apache24/httpd.conf
The DocumentRoot
configuration option should look like this:
DocumentRoot "/usr/local/www/apache24/data"
We now need to enable the mod_rewrite
Apache module. We can do this by searching the default Apache configuration file for the term mod_rewrite
.
By default, the mod_rewrite
Apache module will be commented out (which means it is disabled). The configuration line on a clean Vultr FreeBSD 11 instance will look like this:
#LoadModule rewrite_module libexec/apache24/mod_rewrite.so
Simply remove the hash symbol to uncomment the line and load the module. This, of course, applies to any other required Apache modules too.
LoadModule rewrite_module libexec/apache24/mod_rewrite.so
We now need to edit the Directory
Apache directive in the same configuration file so that mod_rewrite
will work correctly with Tiny Tiny RSS.
Find the section of the configuration file that starts with <Directory "/usr/local/www/apache24/data">
and change AllowOverride none
to AllowOverride All
. The end result (with all comments removed) should look something like this:
<Directory "/var/www/html">
Options Indexes FollowSymLinks
AllowOverride All
Require all granted
</Directory>
Now save and exit the Apache configuration file.
We will restart Apache at the end of this tutorial, but restarting Apache regularly during installation and configuration is certainly a good habit, so let's do it now.
sudo service apache24 restart
We can now install PHP 7.1 along with all of the necessary PHP modules required by Tiny Tiny RSS.
sudo pkg install php71 mod_php71 php71-gd php71-mbstring php71-mysqli php71-xml php71-curl php71-ctype php71-tokenizer php71-simplexml php71-dom php71-session php71-iconv php71-hash php71-json php71-fileinfo php71-pdo php71-pdo_mysql php71-zlib php71-openssl php71-zip php71-phar
FreeBSD 11 gives us the option to use a development php.ini
or a production php.ini
. Since we are going to install Tiny Tiny RSS on a public web server, we'll use the production version. First, back up php.ini-production
:
sudo cp /usr/local/etc/php.ini-production /usr/local/etc/php.ini-production.backup
And then soft-link php.ini-production
to php.ini
.
sudo ln -s /usr/local/etc/php.ini-production /usr/local/etc/php.ini
We need to configure Apache to actually use PHP, so let's create a new file called php.conf
in the Apache Includes
directory:
sudo vi /usr/local/etc/apache24/Includes/php.conf
Enter the following text into the newly created file:
<IfModule dir_module>
DirectoryIndex index.php index.html
<FilesMatch "\.php$">
SetHandler application/x-httpd-php
</FilesMatch>
<FilesMatch "\.phps$">
SetHandler application/x-httpd-php-source
</FilesMatch>
</IfModule>
And save and exit the file.
Now let's restart Apache so that it can reload the configuration changes:
sudo service apache24 restart
FreeBSD 11 defaults to using MariaDB database server, which is an enhanced, fully open source, community developed, drop-in replacement for MySQL server.
Install the latest version of MariaDB database server:
sudo pkg install mariadb102-server mariadb102-client
And start and enable MariaDB server to execute automatically at boot time.
sudo sysrc mysql_enable="yes"
sudo service mysql-server start
Secure your MariaDB server installation:
sudo mysql_secure_installation
When prompted to create a MariaDB/MySQL root
user, select "Y" (for yes) and then enter a secure root
password. Simply answer "Y" to all of the other yes/no questions as the default suggestions are the most secure options.
Log into the MariaDB shell as the MariaDB root
user by running the following command:
sudo mysql -u root -p
To access the MariaDB command prompt, simply enter the MySQL root
password when prompted.
Run the following queries to create a MySQL database and database user for Tiny Tiny RSS.
CREATE DATABASE tiny_db CHARACTER SET utf8 COLLATE utf8_general_ci;
CREATE USER 'tiny_user'@'localhost' IDENTIFIED BY 'UltraSecurePassword';
GRANT ALL PRIVILEGES ON tiny_db.* TO 'tiny_user'@'localhost';
FLUSH PRIVILEGES;
EXIT;
You can replace the database name tiny_db
and username tiny_user
with something more to your liking, if you prefer. Also, make sure that you replace "UltraSecurePassword" with an actually secure password.
Change your current working directory to the default web directory.
cd /usr/local/www/apache24/data
Your current working directory will now be: /usr/local/www/apache24/data
. You can check this with the pwd
(print working directory) command:
pwd
Now use wget
to download the Tiny Tiny RSS installation package.
sudo wget --content-disposition https://git.tt-rss.org/git/tt-rss/archive/17.4.zip
Please note: The above Tiny Tiny RSS package URL was correct at the time of writing, but you should definitely check for the most recent version by visiting the Tiny Tiny RSS download page.
List the current directory to check that you have successfully downloaded the file.
ls -la
Remove index.html
:
sudo rm index.html
Now uncompress the zip archive.
sudo unzip tt-rss-17.4.zip
Move all of the installation files to the web root directory:
sudo mv -v tt-rss/* tt-rss/.* /usr/local/www/apache24/data 2>/dev/null
Change ownership of the web files to avoid any permissions problems.
sudo chown -R www:www * ./
Restart Apache once again.
sudo service apache24 restart
Now we're ready to move onto the final step.
It's now time to visit the IP address of your server instance in your browser, or if you've already configured your Vultr DNS settings (and given it enough time to propagate) you can simply visit your domain instead.
To access the Tiny Tiny RSS installation page, enter your Vultr instance IP address into your browser address bar, followed by /install/
:
http://YOUR_VULTR_IP_ADDRESS/install/
On the Database Settings
section of the Tiny Tiny RSS Installer
page, enter the following database values:
Database type: MySQL
Username: u1
Password: usecpass1
Database name: db1
Host name: localhost
Port: 3306
The Tiny Tiny RSS URL
field should be filled in with your URL automatically so you can leave it with the default value (which will be your IP address if you haven't set up your DNS yet). If you later decide to set up your Vultr DNS, you will be able to modify this value in the Tiny Tiny RSS configuration settings.
When you have filled in the correct details, simply click Test Configuration
to continue.
If everything went smoothly you will see two messages that say Configuration check succeeded
and Database test succeeded
. Simply click on the Initialize Databse
button to continue.
The installer will generate a configuration file for you using the values you have already entered. Click on Save Configuration
to save the file automatically.
You will see a message that says Successfully saved config.php
.
You can now access the admin section by clicking on the loading tt-rss now
link and entering the default username and password shown below:
Login: admin
Password: password
If you aren't redirected to the admin login page, you can enter the admin address manually:
http://YOUR_VULTR_IP_ADDRESS/
Once you have logged in, the first thing you must do is change the admin password from the default to something more secure, so click on Actions...
in the top right corner of the page and select Preferences...
.
Now click on the Users
tab and then click on the admin
user. A User editor
dialog box will pop up so simply enter you new password into the Change Password
field and click Save
If you haven't yet configured your Vultr DNS settings, you can do so using the Vultr DNS control panel.
It's also advisable to configure your site to use SSL as most modern browsers will give warnings when sites do not have SSL enabled and SSL certificates are now available for free.
In any case, you are now free to start exploring the many configuration settings for Tiny Tiny RSS and you can configure it according to your personal preferences. Make sure you check out the Tiny Tiny RSS wiki for more information about how to configure and optimize your reader.
I hope you enjoyed this tutorial, and I hope you have fun self-hosting your very own personalized RSS feed aggregator with Tiny Tiny RSS Reader!
Introducción Cualquier servicio que esté conectado a Internet es un objetivo potencial para ataques de fuerza bruta o acceso injustificado. Hay herramientas como fail2ba
Introduction A FAMP stack, which is comparable to a LAMP stack on Linux, is a collection of open-source software that is typically installed together t
Este tutorial le mostrará cómo configurar OpenBSD 5.6 con un disco completamente encriptado en su Vultr VPS. Una nota sobre la parte de cifrado: la mayoría de los centros de datos alrededor de
Usar un usuario sudo para acceder a un servidor y ejecutar comandos a nivel raíz es una práctica muy común entre Linux y Unix Systems Administrator. El uso de un sud
¿Usando un sistema diferente? osTicket es un sistema de tickets de soporte al cliente de código abierto. El código fuente de osTicket está alojado públicamente en Github. En este tutorial
Using a Different System? Osclass is an open source project that allows you to easily create a classified site without any technical knowledge. Its sourc
Using a Different System? Wiki.js is a free and open source, modern wiki app built on Node.js, MongoDB, Git and Markdown. Wiki.js source code is publicl
Using a Different System? Lychee 3.1 Photo Album is a simple and flexible, free and open source photo-management tool which runs on a VPS server. It install
Using a Different System? Fork is an open source CMS written in PHP. Forks source code is hosted on GitHub. This guide will show you how to install Fork CM
Fuera de la caja, los servidores Vultr FreeBSD no están configurados para incluir espacio de intercambio. Si su intención es una instancia de nube desechable, probablemente no necesite
El sistema operativo FreeBSD utiliza UFS (Sistema de archivos Unix) para su sistema de archivos de particiones raíz; también conocido como freebsd-ufs en caso de una actualización
Using a Different System? Selfoss RSS Reader is a free and open source self-hosted web-based multipurpose, live stream, mashup, news feed (RSS/Atom) reade
Using a Different System? Matomo (formerly Piwik) is an open source analytics platform, an open alternative to Google Analytics. Matomo source is hosted o
Using a Different System? TLS 1.3 is a version of the Transport Layer Security (TLS) protocol that was published in 2018 as a proposed standard in RFC 8446
Using a Different System? Introduction Craft CMS is an open source CMS written in PHP. Craft CMS source code is hosted on GitHub. This guide will show yo
¿Usando un sistema diferente? Backdrop CMS 1.8.0 es un sistema de administración de contenido (CMS) simple y flexible, amigable para dispositivos móviles, gratuito y de código abierto que nos permite
¿Usando un sistema diferente? ImpressPages CMS 5.0 es un sistema de gestión de contenido (CMS) simple y efectivo, gratuito y de código abierto, fácil de usar y basado en MVC
Using a Different System? NodeBB is a Node.js based forum software. It utilizes web sockets for instant interactions and real-time notifications. The NodeB
Using a Different System? ESpeak can generate text-to-speech (TTS) audio files. These can be useful for many reasons, such as creating your own Turin
¿Usando un sistema diferente? TaskWarrior es una herramienta de gestión de tiempo de código abierto que es una mejora en la aplicación Todo.txt y sus clones. Debido a th
ZPanel, un panel de control de alojamiento web popular, se bifurcó en 2014 a un nuevo proyecto llamado Sentora. Aprende a instalar Sentora en tu servidor con este tutorial.
Aprende cómo instalar Vtiger CRM, una aplicación de gestión de relaciones con el cliente, en CentOS 7 para aumentar tus ventas y mejorar el servicio al cliente.
Esta guía completa le mostrará cómo configurar un servidor Counter-Strike 1.6 en Linux, optimizando el rendimiento y la seguridad para el mejor juego. Aprende los pasos más recientes aquí.
Los ataques de ransomware van en aumento, pero ¿puede la IA ayudar a lidiar con el último virus informático? ¿Es la IA la respuesta? Lea aquí, sepa que la IA es una bendición o una perdición
ReactOS, un sistema operativo de código abierto y gratuito, está aquí con la última versión. ¿Puede satisfacer las necesidades de los usuarios de Windows de hoy en día y acabar con Microsoft? Averigüemos más sobre este estilo antiguo, pero una experiencia de sistema operativo más nueva.
Whatsapp finalmente lanzó la aplicación de escritorio para usuarios de Mac y Windows. Ahora puede acceder a Whatsapp desde Windows o Mac fácilmente. Disponible para Windows 8+ y Mac OS 10.9+
Lea esto para saber cómo la Inteligencia Artificial se está volviendo popular entre las empresas de pequeña escala y cómo está aumentando las probabilidades de hacerlas crecer y dar ventaja a sus competidores.
Recientemente, Apple lanzó macOS Catalina 10.15.4, una actualización complementaria para solucionar problemas, pero parece que la actualización está causando más problemas que conducen al bloqueo de las máquinas Mac. Lee este artículo para obtener más información
13 Herramientas comerciales de extracción de datos de Big Data
Nuestra computadora almacena todos los datos de una manera organizada conocida como sistema de archivos de diario. Es un método eficiente que permite a la computadora buscar y mostrar archivos tan pronto como presiona buscar.