業務用エアコン関連の技術情報、エラーコード、環境問題対策に関する別サイト「エアコンの安全な修理・適切なフロン回収」

nuy

FreeBSD13.3_en

FreeBSD13.3 ; Web Server SSL、Webmin

1. FreeBSD13.2 ; Web Server SSL、Webmin1.1 Installing the Certbot tool for Let's EncryptRun the following command to install the Certbot package# pkg install py39-certbot2. Webmin InstallWebmin is a web browser-based tool for configuring Unix-like operating systems (OS) such as Linux. It allows users to make numerous changes to internal OS settings such as user and disk usage limits, services, configuration files, etc., and to modify and control many open source applications such as Apache, PHP, MySQL, and others.Webmin is built primarily in Perl and runs as its own process and web server. By default, it communicates on TCP port 10000.
FreeBSD13.3_en

FreeBSD13.3 ; Mail Server(Postfix,Dovecot) , SSL/TLS

1. Obtaining a certificate for the mail serverObtain a certificate for the mail server to convert the mail server to SSL/TLS.Use the certbot that was used when the web server was converted to SSL.Stop the web server and execute the following command
Rocky Linux9.2_en

Rocky Linux9.2 ; OS Install

Rocky Linux9.2The Rocky Release Engineering team announced the latest version of Rocky Linux 9.0 on July 14, 2022.Rocky Linux is a Linux distribution compatible with Red Hat Enterprise Linux; Rocky Linux 9 is a compatible release with RHEL 9 released in May and will be supported until the end of May 2032.This time we will install Rocky Linux 9.2, released May 16, 2023, which is the same as 9.0 9.1.
Slackware 15.0_en

Slackware15.0 : OS image download, boot

About SlackwareSlackware is one of the Linux distributions.However, in the early days of Linux, it was one of the two major distributions so commonly used that it was said that Linux was either Slackware or Red Hat Linux.Launched in 1992, Slackware celebrates its 31st anniversary this year.The latest version is 15.0, released on February 4, 2022.Forte・High stability・Secure with few bugs and security holes・It is capable of high operating speeds. Slackware is fast because it installs only the components that users need.・Highly compliant with standards and suitable for servers・Slackware is simple to use, and if you can master it, you can create your own environment.・SlackBuilds, which automates the installation of apps, is available, and the SlackBuilds site has a database of scripts for creating various packages on your own. Furthermore, if you install sbopkg, you can browse the Slackbuilds database with a single command and automatically download, generate, and install packages.・Slackware allows you to use emacs, vim, and gimp, which are standard Linux applications.
Slackware 15.0_en

Slackware 15.0 ; Disk partitioning

PartitioningFirst, basic partitioning divides the disk space into two parts: / (root) and a partition for swap. The partition for swap must be prepared.1.Using gdisk commandsWhen gdisk is invoked, the following is displayed.gdisk always requires a device file name as an argument
Slackware 15.0_en

Slackware 15.0 ; Disk partition format

Partition formatting and directory mapping1.Launch Slackware...
Slackware 15.0_en

Slackware15.0 ; Installing packages

Installing packagesSelect installation media and other insta...
Slackware 15.0_en

Slackware15.0 ; Various settings during installation

Creating BootstickTo create an emergency Bootstick, insert a USB stick, select Create, and press Enter.Select Skip since you will not create it this time.Install Boot ManagerELILO InstallationIf installed on a machine with a UEFI boot PC or motherboard, the following screen will appearPCs running on UEFI firmware will not work with LILO, so proceed to install ELILO designed for EFI/UEFI systemsSelect skip and press Enter to continue
Slackware 15.0_en

Slackware15.0 ; FTP (Vsftpd) server installation

Vsftpd ConfigurationSlackware has "vsftpd" installed by default, but it is not activated.  Edit the "vsftpd" configuration file to activate it.# vi /etc/vsftpd.confChange to line 12 NO.anonymous_enable=NOChange line 113 to YESlisten=YESAdd to last lineuse_localtime=YESEnable ftp as "inetd" is in charge of startup
Slackware 15.0_en

Slackware15.0 ; WEB server (Apache) , PHP , MariaDB installation

WEB server (Apache)Apache Installation①system update➁httpd i...
Slackware 15.0_en

Slackware15.0 ; Mail Server Install

Postfix Installation①Edit postfix configuration fileTo prevent unauthorized mail relay, configure Postfix to require authentication for outgoing mail as well, using Dovecot's SASL function.
Debian12.5_en

Debian12.5 ; SSH , Firewall Setting

1. SSH Service Security SettingsThe SSH service allows the root user to log in by default, and since the root user already knows the user name and can log in to the server with administrative privileges once the password is known, we will deny this setting.1.1 Creating a General UserIf you have created a general user when installing Debian, this procedure is not necessary.If the only user created on the server is root, remote login via SSH will not be possible, so if a user has not been created during OS installation, a user must be created in advance.Users can be created with the "useradd" command. The "-m" option creates a home directory and the "-p" option specifies the password.For example, to set "debianuser" as the user account name and "123456" as the password, execute the following
Debian12.5_en

Debian12.5 ; WEB Server(Apache)

Web server Apache2 installationAllow http:80 and https:443 ports in UFW before installation3.  Apache2; Using Perl ScriptsEnable CGI to make Perl scripts available①Install Perl4 Apache2 : Using PHP Scripts①Install PHP5. Virtual Host SettingsCopy the default configuration file (file name is arbitrary, in this case vhost-yourdomain.conf as an example) and configure the virtual host6. Digest authentication with Apache2Since Basic Authentication, a well-known authentication authorization method for http, sends authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.On the other hand, Digest Authentication encrypts and transmits authentication information, so there is almost no risk of information leakage.
Debian12.5_en

Debian12.5 ; Anti-virus(Clamav) 、Mail Server

1.Antivirus software Clamav installedInstall Clam AntiVirus, a free anti-virus software for Linux, as an anti-virus measure.By installing this anti-virus software, you can not only scan the entire server for viruses, but also scan incoming and outgoing mail for viruses if you build and configure a mail server.2. Mail server installationPostfix was developed as a Mail Transport Agent (MTA) to replace sendmail, and is a mail server that is highly compatible with sendmail, secure, easy to maintain, and fast.In addition, since Postfix only functions as an SMTP server for sending mail, the POP server Dovecot for receiving mail will be installed separately in the latter half.3 Applied ClamAV to mail server PostfixSet up Postfix and Clamav to work together to scan incoming and outgoing mail in real time.4 Apply spam checks to the mail server4.1 Spam checking using spamassassin and procmail①spamassassin and procmail installation
Debian12.5_en

Debian12.5 ; Let's Encrypt, WEB/Mail Server SSL

1. Obtain a certificate (Let's Encrypt)1.1 advance preparation①Enable mod_ssl# a2enmod ssl2. SSL/TLS (Let's Encrypt) configuration for Apache2①Edit Apache2 SSL-related configuration files3. SSL/TLS (Let's Encrypt) settings on the mail server3.1 Obtaining a certificate for the mail serverObtain a certificate for the mail server, but it cannot be obtained in the same way as above, so the following with the "--standalone" option fails.