budiantoip

# Prevent MIME-type sniffing<br>
add_header X-Content-Type-Options nosniff always;

# Enforce HTTPS for 1 year + subdomains<br>
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;

# Protect against clickjacking attacks<br>
add_header X-Frame-Options SAMEORIGIN always;

budiantoip

References:

• Upgrade OpenSSH Server on your Ubuntu Distro manually (tested omn 22.04 LTS)
• Releases

Step 1: Download the Latest Version

wget https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-9.9p2.tar.gz

Step 2: Remove the Existing Installation

budiantoip

Add ondrej/php repository

sudo add-apt-repository ppa:ondrej/php

Update apt metadata

sudo apt update

budiantoip

Create a bash script to gracefully reboot the Ubuntu server upon package upgrades

1. Login as root
2. Create a bash script file

   vim /root/check-reboot.sh
   

3. And put these:

   #!/bin/bash
   

budiantoip

HTTP2 Support

Enable

plesk bin http2_pref enable

Disable

plesk bin http2_pref disable

budiantoip

Implement rate-limiting rule for non asset-file requests

# Define the rate limit zone
limit_req_zone $binary_remote_addr zone=one:10m rate=10r/s;

server {
    # Exclude CSS, JS, and image files from rate limiting
    location ~* \.(css|js|jpg|jpeg|png|gif|webp|svg|ico)$ {
        # No rate limiting applied for these file types
 # You can put other configurations here if necessary

budiantoip

Installation

sudo apt-get install -y monit

How to set up monit on domain.com

vim /etc/monit/monitrc

set daemon  30

budiantoip

sudo yum install yum-utils -y
sudo yum-config-manager --disable remi-php74
sudo yum-config-manager --enable remi-php82
sudo yum install php php-cli php-fpm php-json php-common php-mysqlnd php-xml php-gd php-mbstring php-intl php-opcache -y

budiantoip

#! /bin/sh
# set -x

stress --cpu 8 --io 4 --vm 2 --vm-bytes 128M --timeout 360s

budiantoip

CentOS 7

/etc/yum.repos.d/CentOS-Base.repo

[base]
name=CentOS-$releasever - Base
baseurl=http://vault.centos.org/centos/$releasever/os/$basearch
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-7