basebuntu icon indicating copy to clipboard operation
basebuntu copied to clipboard

Published 20 hours ago • verified publisher icon marshallford
→

Metadata

Bash script for configuring an Ubuntu LTS web server

Basebuntu

License Status License Status

This script is specifically designed for budget boxes running the latest version of Ubuntu Server LTS (currently 14.04). This will run great on a Linode 1GB VPS or Digital Ocean 512MB VPS.

Features

  • Removes excess packages
  • Nginx (web server with https/SPDY support)
  • Pagespeed (Ngnix module for reducing page load time)
  • PHP-FPM (alternative to mod_php)
  • UFW (firewall)
  • MariaDB (database)
  • Ruby environment using RVM
  • Commands for easy administration
  • Custom Nginx commands for working with website configs

Install

Warning! This script will overwrite previous configs during re-installation. While I have included some checks to prevent overwriting, be aware that things may break if you run a main option command more than once on a box.

cd ~; apt-get update; apt-get install git -y; git clone https://github.com/marshallford/basebuntu .basebuntu
chmod +x ~/.basebuntu/basebuntu.sh; bash ~/.basebuntu/basebuntu.sh setup; source ~/.bashrc

Main options

Note: You must run setup before any other command. Setup installs/configures a base install.

bb ufw [ssh port]
bb nginx
bb mariadb
bb ruby

Extra options and other commands

Harden openSSH

Hardens openSSH with PermitRoot and PasswordAuthentication

bb harden-ssh [option #]

  1. All users including root can only login via SSH-keys.

  2. Normal users can login via SSH-keys, root can't login at all.

  3. Root can't login, normal users can use SSH-keys or plain passwords.

  4. Normal users can login with SSH-keys or plain passwords, root can only login via SSH-keys.

Fail2ban (bruteforce/DOS firewall)

Installs a firewall to protect against bruteforce attacks on ssh and http(s) ports.

bb fail2ban
Info on Operating System, version and Architecture
bb info
External IP

To get the server's external IP address.

bb ip
Updater

Runs a full update and upgrade of packages and then cleans up. This command will not upgrade to a newer release cycles. Ex: 12.04 LTS > 12.10.

bb updater
basebuntu Updater

Updates basebuntu script and keeps current config file.

bb update-bb
Fixing locale on some OpenVZ Ubuntu templates
bb locale
Classic Disk I/O and Network test

Run the classic Disk IO (dd) & Classic Network (cachefly) Test

bb test

Nginx commands

Restart

Restarts PHP-FPM and Nginx

bb restart
Permissions

Sets the proper permissions for /sites. This sets the owner and group to the user deploy. This allows the deployment user to push websites to the server.

bb permissions

To set the owner and group of /sites to someone other than deploy use the permissions command followed by the name of the user.

bb www-permissions [user name]
Add Website

Create folder structure and empty site config for a new website.

bb add-site [website name]
Remove Website

Deletes website config and files.

bb remove-site [website name]
Enable Website

Enables/activates website.

bb enable-site [website name]
Disable Website

Disables/Deactivates website.

bb disable-site [website name]
Edit Website

Opens website config in nano.

bb edit-site [website name]
Edit Nginx Config

Opens Nginx config in nano.

bb nginx-config

After installation

  • Use ufw status to get information on your firewall status
  • Run htop to see RAM and CPU usage
  • Reboot to test that everything is working ok after a boot cycle
  • To enable Pagespeed on a virtualhost, include /etc/ngnix/pagespeed.conf
  • To enable PHP-FPM on a virtualhost, include /etc/ngnix/enable-php.conf

Credits

Orginal

Additional Credits from LET

Great Companies/People

People that have helped along the way

Software Used

← Metadata

15
Stars
9
Forks
Watchers

Owner

verified publisher icon marshallford

Metadata

Bash script for configuring an Ubuntu LTS web server

Back