Debian10.13_en Debian10.13 ; OS Install
1.Debian10.13 Download Installation Image Download site for ...
nuy
Debian10.13_en 
Debian10.13_en Debian10.13 ; Initialization
1. Install and configure vim editor Debian has "nano" as the...
Debian10.13_en Debian10.13 ; SSH , Firewall
1. SSH Service Security Settings The SSH service allows the ...
Debian10.13_en Debian10.13 ; SSH with public key
SSH connection with authentication using RSA public key cryp...
Debian10.13_en Debian10.13 ; Antivirus , Mail Server
1.Anti-virus Clamav installed 1.1 Install The clamav-related...
Debian10.13_en Debian10.13 ; Let's Encrypt WEB , Mail SSL
1. Obtaining a Certificate(Let's Encrypt) 1.1 advance prepar...
Debian10.13_en Debian10.13 ; MySQL8 , WordPress
1. MySQL 8 Install 1. 1 Update package index Install necessa...
Debian10.13_en Debian10.13 ; SNORT2 , Tripwire
1.SNORT2 Install Snort is an open source network intrusion d...
Debian10.13_en Debian10.13 ; logwatch ,Disk Usage Check Script
1. Disk Usage Check Script 1.1 Script Creation Contents of d...
Debian10.13_en Debian10.13 ; System Backup and Restore
1. System Backup 1.1 Backup under /var/www/html ① Create bac...
Debian10.13_en Debian10.13 ; NTP ,FTP Server
1. Install an NTP server that provides time synchronization ...
Rocky Linux9.1_en RockyLinux 9.1 ; System Backup and Restore
1.Website data backup
1-1.Backup under /var/www/html
①Create backup script file
# cd /var/www/system
# vi backup_html.sh
2.MySQL database backup
①Create backup script file
# cd /var/www/system
# vi db_my_backup.sh
3.Restore backup files under html
①Store HTML backup files in "/ (root)" directory
4.Restore Mysql backup file
①Save the database backup file to any directory and
（In the example, the directory is "/var/www/backup/db_bak".）Extracting data
Rocky Linux9.1_en RockyLinux 9.1 ; Suricata , Tripwire , Chkrootkit
Suricata
SURICATA IDS/IPS is an open source IDS that monitors communications on the network and detects suspicious traffic.
The basic mechanism is signature-based, so it can detect predefined unauthorized communications. Suricata is also characterized by its ability to provide protection as well as detection.
1.advance preparation
①Activate the EPEL Repository
# dnf -y install epel-release
Tripwire
1.Download and installation
# cd /usr/local/src
# wget https://rpmfind.net/linux/epel/9/Everything/x86_64/Packages/t/tripwire-2.4.3.7-13.el9.x86_64.rpm
# rpm -Uvh tripwire-2.4.3.7-13.el9.x86_64.rpm
Chkrootkit
①Download and install chkrootkit
# cd /usr/local/src
# wget https://launchpad.net/chkrootkit/main/0.55/+download/chkrootkit-0.55.tar.gz
# tar xvf chkrootkit-0.55.tar.gz
Rocky Linux9.1_en RockyLinux 9.1 ; MySQL8 , WordPress Install
Mysql8 Install
＃ dnf -y install mysql-server
charset.cnf Create a new one with the following contents
WordPress Install
1. Create database for Word Press
As an example, assume database [wp_db] database user [wp_user] password [?W123456]
Rocky Linux9.1_en RockyLinux 9.1 ; SSL Certificate Acquisition( Let's Encrypt ) , Apache SSL , Mail SSL/TLS
1.Obtain an SSL certificate ( Let's Encrypt )
Install the latest open ssl
# dnf install openssl-devel
1.1 advance preparation
1.Package management system Snappy installed
Since the SSL certificate issuing tool "certbot" of Let's Encrypt is recommended to be installed using "snap" after 2021, install Snapd first.(Can also be installed the traditional way with dnf or yum)
2. Converting Apache to https
Install the following just in case
# dnf -y install mod_ssl
3. SSL/TLS (Let's Encrypt) settings on the mail server
3.1 Obtaining a certificate for the mail server
Obtain a certificate for the mail server, but it cannot be obtained in the same way as above, so the following with the "--standalone" option fails.