• 4x vCPU Cores
• 5 GB RAM
• 100 GB SSD
• 10 TB Bandwidth

Price: $54.99/Year

/usr/local/bin/wp plugin update --all --path=/home/your-name/public_html > /dev/null 2>&1

OR

/usr/local/bin/wp plugin update --all --quiet --path=/home/your-name/public_html

You only need the base haveagitgat/tdarr container, as it includes the node. It just needs an environment variable set for it to be activated.

Do the advanced setup, and add a new variable:

variable: internalNode and set the value to be: true This will create the node within the main Tdarr container.

You may also have to go to Storage and add a “bind mount host path”, this will be your QNAP storage location, you can add the same value for each field.

This handy command will change the permissions on all “.htaccess” files under “/home/” so they can’t be read by a browser.

find /home/ -name .htaccess | xargs chmod 0600

Install PHP 8.2

sudo apt install php8.2 -y

Install common extensions

sudo apt install php8.2-cli php8.2-common php8.2-fpm php8.2-mysql php8.2-zip php8.2-gd php8.2-mbstring php8.2-curl php8.2-xml php8.2-bcmath php8.2-intl php8.2-imagick

Install SQLite extension

sudo apt-get install php8.2-sqlite

Virtualmin is a rock-solid web hosting control panel I have used for 10+ years. There are free and paid tiers.

This is a simple list I created of steps I take from a bare Ubuntu VPS to a production ready web server. Note that use CloudFlare for all my websites, so everything in this guide is setup this way. I also don’t use mail for domains either, so I have mostly disabled incoming mail, etc. Mail can be sent out of course.

Virtualmin Install

Fresh Install of a supported version of Ubuntu per the virtualmin grade A supported OS list.

SSH into the server, login as root.

Set the hostname on the server:
hostnamectl set-hostname server.hostname.com

Set the timezone: sudo timedatectl set-timezone America/Detroit

Update the system: sudo apt update && sudo apt upgrade -y

Install virtualmin. see the simple instructions here: https://www.virtualmin.com/download/

Optional to use NGNIX instead of Apache: sudo sh virtualmin-install.sh –bundle LEMP

Install has a few questions along the way, but is mostly quiet.

Once Webmin/Virtualmin is installed it will provide a web link to login to the web interface. https://yourservername.some:10000

Login to the fresh new web interface as root.

Run through the initial configuration steps.

Disable Quotas. Virtualmin -> System Settings -> Virtualmin Configuration -> Disk Quotas

Optionally:  Webmin > System > Disk and Network Filesystems -> Root file system -> Use Quotas Drop-down  = NO

Misc

Virtualmin -> Server Settings -> Server Templates ->Website for Domain

Don’t create Apache Redirects for webmail or admin.

Remove mail subdomain from Apache. Virtualmin -> Server Settings -> Server Templates ->Website for Domain

This is needed to automatically sync your time.

sudo apt-get install ntp

Remove Unneeded Modules

Delete unused modules. Webmin -> Webmin Configuration -> Webmin Modules -> Click on the “Delete” tab.

Here are the modules I removed which I know will not use. (these can easily be added back if needed)

I want my system to run as lean as possible to maximize speed and performance for the websites, so I never run anything extra like AWStats or ClamAV, etc.

• ADSL Client
• AWStats Reporting
• BIND DNS Server
• Cluster Change Passwords
• Cluster Copy Files
• Cluster Cron Jobs
• Cluster Shell Commands
• Cluster Software Packages
• Cluster Usermin Servers
• Cluster Users and Groups
• Cluster Webmin Servers
• DHCP Server
• FirewallD
• iSCSI Client
• iSCSI Server
• iSCSI Target
• iSCSI TGTd
• Jabber IM Server
• PostgreSQL Database Server
• PPP Dialin Server
• PPP Dialup Client
• PPTP VPN Client
• PPTP VPN Server
• Printer Administration
• ProFTPD Server
• Ruby GEMS
• Shorewall Firewall
• Shorewall6 Firewall
• SpamAssassin Mail Filter
• Squid Proxy Server
• Squid Report Generator
• Voicemail Server
• Webalizer Logfile Analysis
• WU-FTP Server

Remove Clam AV:

sudo apt-get remove clamav
sudo apt-get autoremove clamav

System -> Bootup and Shutdown -> set both clamav-daemon and clamav-freshclam to not start on boot.

Firewall

Install CSF (https://download.configserver.com/csf/readme.txt)

1. Open a SSH terminal
2. cd /usr/src
3. wget https://download.configserver.com/csf.tgz
4. tar -xzf csf.tgz
5. cd csf
6. sh install.sh

Then setup Webmin Interface:

In “Webmin Configuration” select “Webmin Modules, install from local file: /usr/local/csf/csfwebmin.tgz

Setting: Firewall Allow IPs,  make sure to put my current IP, and any others that might be needed.

Turn off Test Mode, and set RESTRICT_SYSLOG to “3”

Firewall Setup: IP V4 and IP V6

Allow incoming only: 80, 443 (I don’t run mail server on my installs)

Whitelisted IP’s are not restricted, so as long as you are whitelisted you can SSH and SFTP (22) and Webmin (10000) without problems.

IGNORE_ALLOW to ON

**MORE coming soon on setting of LFD and ignoring certain processes**

Postfix

Servers -> Postfix ->Edit Config Files -> main.cf

Postfix main.cf set: inet_protocols = ipv4

Forward mail to “root” by creating a “.forward” file containing an email address into root’s home directory.

Customize the Virtualmin Interface:

I like to customize the theme with unique colors and my own logo. This is useful since I usually have a number of virtualmin servers, so I can easily tell which interface is being used.

Apache / PHP Configuration

I use SQLite as my go to database.

sudo apt install sqlite3

sudo apt-get install php-sqlite3

This is useful if you use CloudFlare,  allows the real IP to be seen in your logs.

sudo a2enmod remoteip && systemctl restart apache2

These to repositories are added in order to get the latest PHP and Apache versions.

sudo apt-get install software-properties-common

sudo add-apt-repository ppa:ondrej/php

sudo add-apt-repository ppa:ondrej/apache2

Install CURL for php
sudo apt-get install php8.1-curl

Install php-zip

sudo apt-get install php-zip

Install Internationalization extension

apt-get install -y php-intl

Install imagick
sudo apt-get install php-imagick -y

I use PHP-FPM with Apache mpm-event provides the most efficient performance.

Servers -> Apache Webserver -> Global Configuration tab -> Configure Apache Modules

Apache: Use MPM-Event

I add the expires and the headers module.

More information on PHP-FMP

**More coming on setting up CloudFlare**

Now using the LEMP stack (Nginx instead of Apache), will update soon…

Install the WordPress Plugin https://wordpress.org/plugins/redis-cache/

Activate the plugin, then click to enable the object cache.

Optionally install: sudo apt-get install php-redis

WordPress should support any major database, especially with the divergence of MySQL and MariaDB. WordPress will eventually have to choose between them if they are to continue down the path of a single database technology.

SQLite should be the default database of WordPress. It would likely improve performance and easy of 95% of all WordPress self-installs.

In order to get the PHP-FPM process to parse files other than PHP, I followed these steps below.

Edit the Apache Conf file for the website in question as follows:
REMOVE the line below in red (best way is just put # in front of the line, so it’s still there)

<FilesMatch \.php>

Change the top line as follows:

<FilesMatch \.(php|phar|htm)
     SetHandler proxy:fcgi://localhost:8006 
</FilesMatch>

Next, you need to edit the PHP-FPM conf file for the website specifically.

I was using Virtualmin on Ubuntu 20.04, so that file was located here:
/etc/php/8.1/fpm/pool.d/

Inside that folder were individual .conf files for each website. If you are using Virtualmin, this will be your “<domain ID>.conf”
(or Virtualmin domain -> services ->php-fpm configuration.)

I added the following line to the end of this file. My goal was “.htm” files to be read as PHP.

security.limit_extensions = .php .php3 .php4 .php5 .php7 .htm

My “1640832995142367.conf” looks like below:

[1640832995142367]
user = example
group = example
listen = localhost:8006
pm = dynamic
pm.max_children = 20
pm.start_servers = 1
pm.min_spare_servers = 1
pm.max_spare_servers = 5
php_admin_value[upload_tmp_dir] = /home/example/tmp
php_admin_value[session.save_path] = /home/example/tmp
security.limit_extensions = .php .php3 .php4 .php5 .php7 .htm

Remember to restart your PHP-FPM service!

WordPress site health nags for a backup theme… easy to fix

wp theme install twentytwentyone

Run Yoast SEO index, runs much faster from command line

wp yoast index

Install BBQ Firewall

wp plugin install block-bad-queries
wp plugin activate block-bad-queries
OR in a single line

wp plugin install block-bad-queries --activate

Export WordPress database as an SQL file

wp db export

Test WordPress Cron

wp cron test

Search and Replace WordPress database: change to https

wp search-replace 'http://example.com' 'https://example.com'

Using the Uniform Server to run Apache on Windows. Here is a simple way to implement log rotation using a batch file with Robocopy.

The script creates a date-named folder, then stops Apache, moves all the log files to the new folder, then restarts Apache.

I wanted to keep it simple, so there is no compression or purging of old logs, just a simple system to keep the log files from getting large. It is run once a week from a scheduled task.

set folder=%date:~10,4%_%date:~4,2%_%date:~7,2%
mkdir D:\data\rotatelogs\%folder%
net stop us_apache_1
robocopy D:\data\UniServerZ\core\apache2\logs\ D:\data\rotatelogs\%folder%\ *.log /MOV
net start us_apache_1