查看“︁Linux server setup”︁的源代码

Ubuntu server setup (for new VPS onboarding)

=System settings =
Add admin user:
<syntaxhighlight lang="bash">
adduser sammy
usermod -aG sudo sammy
su - sammy
</syntaxhighlight>
== Update system ==
<syntaxhighlight lang="bash">
sudo apt update
sudo apt upgrade
do-release-upgrade

reboot
</syntaxhighlight>

== hostname  ==

<syntaxhighlight lang="bash">
vim /etc/hostname
</syntaxhighlight>

== user ==
<syntaxhighlight lang="bash">
adduser ubuntu
usermod -aG sudo ubuntu
</syntaxhighlight>

== ssh config ==

<syntaxhighlight lang="bash">
ssh-copy-id -p 50000 ubuntu@12.98.23.12

# vim /etc/ssh/sshd_config
Port 54194
PermitRootLogin no
PasswordAuthentication no
PubkeyAuthentication yes

service ssh restart
ssh -p 50000 ubuntu@12.98.23.12
</syntaxhighlight>

Note: for Ubuntu 24.04+ with systemd socket
<syntaxhighlight lang="bash">
# To change the port
sudo vim /lib/systemd/system/ssh.socket
[Socket]
ListenStream=0.0.0.0:54194
ListenStream=[::]:54194

sudo systemctl daemon-reload
sudo systemctl stop ssh.socket
sudo systemctl restart ssh
netstat -anp | grep 54194
(No info could be read for "-p": geteuid()=1000 but you should be root.)
tcp        0      0 0.0.0.0:54194           0.0.0.0:*               LISTEN      -
tcp6       0      0 :::54194                :::*                    LISTEN      -
</syntaxhighlight>

== ufw==
<syntaxhighlight lang="bash">
sudo ufw enable
sudo ufw allow 80
sudo ufw allow 443
sudo ufw allow 50000
sudo ufw status numbered
</syntaxhighlight>

== V2ray ==

[[V2Ray global proxy]]

= Web server =
== Ngnix ==
<syntaxhighlight lang="bash">
$ sudo apt install nginx
$ sudo systemctl status nginx

</syntaxhighlight>

== Certbot ==
Install via pip<ref>https://certbot.eff.org/instructions?ws=nginx&os=pip&commit=%3E</ref>
<syntaxhighlight lang="bash">
sudo apt install certbot
sudo apt install python3 python3-dev python3-venv libaugeas-dev gcc
sudo python3 -m venv /opt/certbot/
sudo /opt/certbot/bin/pip install --upgrade pip
sudo /opt/certbot/bin/pip install certbot certbot-nginx
sudo ln -s /opt/certbot/bin/certbot /usr/bin/certbot
sudo certbot --nginx
sudo nginx -s reload
</syntaxhighlight>

[[Category:Linux/Unix]]