Ubuntu 20.04 Building a server

1. Set the root password and use the SU command In the default Ubuntu configuration, the root user is disabled because no password is set. By setting a password for the root user, the traditional [su] command can be used for transitions $ sudo passwd root [sudo] password for ← Current user's password Enter new UNIX password: ← Enter the root user password to be set Retype new UNIX password: ← Enter your password again passwd: password updated successfully Switch to root user $ su - Password: 2. Modernisation of the system

Instructions on how to get a certificate and apply it to apache, mail server, FTP server and convert to SSL with Let's Encrypt. 1. Get a certificate(Let's Encrypt) 1.1 Advance preparation ①Enable mod_ssl # a2enmod ssl ②Install a client tool to obtain a Let's Encrypt certificate

Download Ubuntu Server 20.04 installation image The Ubuntu Server installation image can be downloaded from the official website. You will need to create an installation CD/DVD from the downloaded iso file.(About 1.2G) If you are installing on a virtual machine using Vmware or similar, you can use the iso file itself. Download the iso file   :  Ubuntu official download site Ubuntu Server 20.04 installation Change the BIOS so that the PC can boot from the installation disc created above, and then boot the PC.

1. SSH service security settings The SSH service allows root user login by default. Since the root user already knows the username, if the password is known, he can log in to the server with administrator rights. 1.1 Creating a general user If you have created a general user during the installation of Ubuntu 20, this step is not necessary. If the only user created on the server is root, you will not be able to log in remotely via SSH, so if you have not created a user when you installed the OS, you will need to create one beforehand. To create a user, use the "useradd" command. The "-m" option is used to create a home directory and the "-p" option is used to specify a password. For example, to set "ubuntuuser" as the user account name and "123456" as the password, you would run

2. Install the FTP server vsftpd ①Install # apt install vsftpd ②Open PORT 21 at UFW # ufw allow ftp # ufw reload ③Configuration file changes 3. Apache2 installation First allow port http:80 and port https:443 on UFW # ufw allow http # ufw allow https # ufw reload 3.1 Install Apache 2

1. Introduction of Clamav anti-virus software 1.1 Install # apt install clamav clamav-daemon Clamav-related configuration files are installed in the /etc/clamav/ folder 1.2 Update your virus definitions # freshclam The above command will update the virus definitions, but if you get the following error, change the log settings and run it again

1. Install MySQL 8 1. Install # apt -y install mysql-server-8.0 2. MySQL server security settings Run the tool mysql_secure_installtion to configure security-related settings for your MySQL server. When you run it, you will be asked a series of questions to help you configure your security settings. You will first be asked if you want to use a password validation plugin, as shown below. Password validation means that you can check the password strength of users for MySQL and restrict them to accepting only passwords that are secure enough. For example, it should be at least a few characters long and always contain at least one symbol and one number. Type y if you like and press Enter

1. Install SNORT Snort is an open source network intrusion detection system that can perform real-time traffic analysis and packet logging over IP networks. It can perform "protocol analysis", "content search" and "matching" and can be used to detect a variety of attacks such as "buffer overflows", "stealth port scans", "CGI attacks", "SMB probes", "OS fingerprinting attempts", "semantic URL attacks" and "server message block probes".

1. Introduction of disk usage check scripts 1.1 Script creation # cd /opt/script/ # vi disk_capacity_check.sh Contents of disk_capacity_check.sh #!/bin/bash #Specify email address for notification MAIL=" "

1. System backup 1.1 Backup under /var/www/html ①Create the /var/www/system directory # mkdir /var/www/system ②Create a script "backup_all.sh" under /var/www/system # vi /var/www/system/backup_all.sh Contents of the "backup_all.sh" script #!/bin/bash #=========================================================== # : Environment initialization #=========================================================== #Date processing TODAY=`/bin/date +%Y%m%d` DAY_AGO=`/bin/date --date '7day ago' +%Y%m%d`