Difference between revisions of "CentOS Server Config"

From Colettapedia
Jump to navigation Jump to search
Line 27: Line 27:
 
** systemctl restart php-fpm
 
** systemctl restart php-fpm
 
* Make sure /var/lib/php/session directory is group is nginx
 
* Make sure /var/lib/php/session directory is group is nginx
 +
 +
==SELinux==
 +
* <code>ss -x -a -Z</code> - Get a list of all unix sockets and their contexts
 +
 
===firewalld===
 
===firewalld===
 
* [https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-firewalld-on-centos-7 Setting up firewall d on centos 7]
 
* [https://www.digitalocean.com/community/tutorials/how-to-set-up-a-firewall-using-firewalld-on-centos-7 Setting up firewall d on centos 7]

Revision as of 12:11, 7 October 2019

References

Components

Important files

  • TBD: set up a tmux that opens up all of these automatically

Config files

  • /etc/nginx/nginx.conf
  • /etc/php-fpm.d/www.conf
  • /etc/php.ini

Log files

  • /var/log/nginx/*.log
  • var/log/audit/audit.log - SELinux issues go here

Steps

  • Change the listen variables in /etc/php-fpm.d/www.conf to match with the nginx child processes users
    • systemctl restart php-fpm
  • Make sure /var/lib/php/session directory is group is nginx

SELinux

  • ss -x -a -Z - Get a list of all unix sockets and their contexts

firewalld

  • Setting up firewall d on centos 7
  • zones, from least trusted to most trusted
    1. drop
    2. block
    3. public
    4. external
    5. internal
    6. dmz
    7. work
    8. home
    9. trusted
  • firewall-cmd --state
  • firewall-cmd --get-default-zone
  • firewall-cmd --list-ports
  • firewall-cmd --permanent --zone=public --add-port=8001/tcp

Vue.js

  • npm install -g npm
  • npm install -g @vue/cli

Troubleshooting

  • systemctl status php-fpm