OpenSUSE15.6_en

OpenSUSE15.6_en

openSUSE15.x ; Zabbix7 Install

Installation of open source integrated monitoring software "Zabbix7". Zabbix is an open source integrated monitoring software for centralized monitoring of servers, networks and applications. It provides monitoring, fault detection and notification functions required for integrated monitoring. With Zabbix agent and SNMP support for many platforms, you can monitor your entire system with a single Zabbix. To run Zabbix, you will need the PHP programming language, MySQL/MariaDB as a database server, and a web server such as Apache or Nginx. In this case, we will assume that all of the following conditions have already been configured. This time we will install Zabbix 7.0 LTS released on 06/04/2024 in the following environment. openSUSE15.6 (IP 192.168.11.83) Apache/2.4.58 (Linux/SUSE) 10.11.8-MariaDB PHP 8.2.20 (cli) PHP 8.2.20 (fpm-fcgi)
OpenSUSE15.6_en

OpenSUSE15.6 ; OS Install

OpenSUSE OpenSUSE is a Linux distribution that is community-based, free to the public, and active in adopting the latest technologies. It is sponsored by Novell and developed by the community. Originally, SUSE Linux was developed by SUSE, but after the acquisition of SUSE by Novell in 2003, Novell shifted the development structure to community-based by the OpenSUSE project as a distribution aiming for 100% open source, and changed the name from SUSE Linux to OpenSUSE Linux The name was changed to the current name. openSUSE is available as Leap, the stable version, and Tumbleweed, which uses a rolling-release model and is also the basis for the paid-for version of SUSE Linux Enterprise. Leap 15.6 will be released on June 12, 2024 and will provide up-to-date support for the latest hardware with improved YaST functionality and improved installers
OpenSUSE15.6_en

OpenSUSE15.6 ; Various settings after OS installation

1.Using su command Not required if root password is set at the time of installation If you set a root password, set it as follows Log in as a general user 2. Modernize the system To modernize the system, enter the following command 3.locate Install The find command is used to search for a specific file on the entire Linux system, but find's options are somewhat confusing. In such cases, it is useful to have the locate command available, which can extract all files with a given filename
OpenSUSE15.6_en

OpenSUSE15.6 ; Firewall , SSH、NTP Server

1. Setting up remote connection by SSH SSH is a service for connecting remotely to a server and is basically running immediately after the OS is installed, but the default settings are somewhat insecure. Here we will configure the default settings to increase the security of ssh connections. 1.1 SSH service configuration file changes Modify the configuration file to change the SSH service settings. The SSH service configuration file is "/etc/ssh/sshd_config".
OpenSUSE15.6_en

OpenSUSE15.6 ; SSH connection with public key

Create a private key for the client and a public key for the server to allow login with key pair authentication 1.key pair creation Create a public/private key pair for a user connecting to the Linux server using OpenSSH. Use ssh-keygen to create key pairs. Creation of public/private key pairs is performed with remote login user privileges. If you do not specify the creation destination and file name, id_ed25519 and id_ed25519.pub will be created in /home/huong/.ssh/. On the way, also enter the password for the key.
OpenSUSE15.6_en

OpenSUSE15.6 ; FTP Server

1. Vsftpd 1.1vsftpd Install It is already installed at the time of openSUSE installation. If not, you can install it with the following command
OpenSUSE15.6_en

OpenSUSE15.6 ; WEB Server (Apache) Install

1. Web Server (Apache) 1.1 apache2 Install 2. Apache2 : Using Perl Scripts  Configure Perl scripts to be used as CGI 3. Apache2 : Virtual Host Settings Configure both domains sample1.korodes.com sample2.korodes.com to be displayed on one server 4. Apache2 : Using PHP Scripts Install and configure PHP so that PHP scripts are available
OpenSUSE15.6_en

OpenSUSE15.6 ; Clamav , Mail Server

1. Clamav ( anti-virus software ) 1.1 Clamav Install 2.  Mail server Install 2.1 Postfix Install ①Install Postfix and build an SMTP server 3. Mail Server: Postfix + Clamav + Amavisd Set up Postfix and Clamav to work together to scan incoming and outgoing mail in real time.
OpenSUSE15.6_en

OpenSUSE15.6 ; MariaDB , WordPress Install

1. MariaDB Install Update the server package 1.2 phpMyAdmin Install Installed phpMyAdmin and configured it to operate MariaDB via web browser 2. Wordpress Install 2.1 Required library installation
OpenSUSE15.6_en

OpenSUSE15.6 ; Obtain SSL Certificate (Let's Encrypt) 、Web Server SSL

1.Obtain an SSL Certificate (Let's Encrypt) Preparation Enable mod_ssl 1.1Certificate Installation 2. Web server SSL conversion 2.1 SSL Configuration
OpenSUSE15.6_en

OpenSUSE15.6 ; Suricata , SNORT2 Install

Suricata SURICATA IDS/IPS is an open source IDS that monitors communications on the network and detects suspicious traffic. The basic mechanism is signature-based, so it can detect predefined unauthorized communications. Suricata is also characterized by its ability to provide protection as well as detection. SNORT2 Snort is a network-based IDS (Intrusion Detection System). It captures packets flowing over a network and detects suspicious packets. The source file is used directly from https://snort.org/.
OpenSUSE15.6_en

OpenSUSE15.6 ; Tripwire, Logwatch Install

1. Tripwire Tripwire is a host-based intrusion detection system (IDS) that monitors files and directories and notifies you when changes are made. 1.1 Install and configuration ①Install 2. Logwatch ①Logwatch install
OpenSUSE15.6_en

OpenSUSE15.6 ; Server backup and restore

1. Server Backup 1.1 Backup under /srv/www/ ①Create backup script file 1.2. MariaDB Database Backup ①Create backup script file 2.Data Restore 2.1 Restore backup files under www ① Save backup files used for restore to the "/ (root)" directory of the server 2.2 Restore MariaDB data ① Save the database backup file to any directory Extract data