Tom Scott-Malden valguss
valguss
/ apache.conf
Created
November 17, 2010 11:15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ## Securecentos.com DirectAdmin.conf for Monit (Updated 12082009) | |
| check process httpd with pidfile /var/run/httpd.pid | |
| group apache | |
| start program "/etc/init.d/httpd start" | |
| stop program "/etc/init.d/httpd stop" | |
| if failed host localhost port 80 protocol http | |
| and request "/" then alert | |
| if cpu is greater than 60% for 2 cycles then alert | |
| if cpu > 80% for 5 cycles then restart | |
| if children > 250 then restart |
valguss
/ mysql.conf
Created
November 17, 2010 11:17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ## Securecentos.com mysql.cfg for Monit (Updated 12082009) | |
| check process mysql with pidfile /var/run/mysqld/mysqld.pid | |
| group mysql | |
| start program = "/etc/init.d/mysql start" | |
| stop program = "/etc/init.d/mysql stop" | |
| if failed host 127.0.0.1 port 3306 protocol mysql then restart | |
| if 5 restarts within 5 cycles then timeout | |
| if failed unixsocket /var/run/mysqld/mysqld.sock protocol mysql then alert |
valguss
/ denyhosts.conf
Created
November 17, 2010 11:18
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| check process denyhosts with pidfile /var/lock/subsys/denyhosts | |
| group denyhosts | |
| start program = "/etc/init.d/denyhosts start" | |
| stop program = "/etc/init.d/denyhosts stop" | |
| depends on denyhosts_rc | |
| depends on denyhosts_bin | |
| check file denyhosts_rc with path /etc/init.d/denyhosts | |
| group denyhosts | |
| if failed checksum then unmonitor |
valguss
/ denyhosts.conf
Created
November 17, 2010 11:24
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| SYNC_SERVER = http://xmlrpc.denyhosts.net:9911 | |
| SYNC_INTERVAL = 1d | |
| SYNC_UPLOAD = no | |
| SYNC_DOWNLOAD = yes | |
| SYNC_DOWNLOAD_THRESHOLD = 3 | |
| RESET_ON_SUCCESS = yes | |
| LOCK_FILE = /var/run/denyhosts.pid |
valguss
/ hosts.allow
Created
November 17, 2010 11:31
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| sshd: 78.105.0.112 94.195.193.160 |
valguss
/ httpd.conf
Created
November 17, 2010 11:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| TraceEnable Off | |
| ServerTokens Prod | |
| KeepAlive On | |
| KeepAliveTimeout 5 | |
| Listen 80 |
valguss
/ default.conf
Created
November 17, 2010 11:44
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| NameVirtualHost *:80 | |
| <VirtualHost *:80> | |
| ServerAdmin tom@skywire.co.uk | |
| DocumentRoot /var/www/html/CLIENTNAME | |
| ServerName SERVERNAMEHERE | |
| ErrorLog /var/www/logs/SERVERNAME-error_log | |
| CustomLog /var/www/logs/SERVERNAME-access_log common | |
| </VirtualHost> |
valguss
/ modsecurity_crs_10_config.conf
Created
November 17, 2010 11:55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| SecDataDir /var/www/logs/msa |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| CHECK_ONLY=yes |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| skip-innodb | |
| skip-bdb #mayneed to be disabled if mysqld version is >= 5.1 | |
| thread_cache_size = 8 | |
| table_cache = 64 | |
| join_buffer_size = 153600 | |
| query_cache_size = 8192000 |