Use the power, Luke!

Put in /etc/fail2ban/jail.conf

[nginx-ddos] # Based on apache-badbots but a simple IP check (any IP requesting more than # 240 pages in 60 seconds, or 4p/s average, is suspicious) # Block for two full days. # @author Yannick Warnier enabled = true port = http,https filter = nginx-ddos logpath = /var/log/nginx*/*access*.log findtime = 60 bantime = 172800 maxretry = 240 [nginx-auth] enabled = true port = http,https filter = nginx-auth logpath = /var/log/nginx*/*error*.log bantime = 600 # 10 minutes maxretry = 6 [nginx-badbots] enabled  = true port = http,https filter = apache-badbots logpath = /var/log/nginx*/*access*.log bantime = 86400 # 1 day maxretry = 1 [nginx-proxy] enabled = true port = http,https filter = nginx-proxy logpath = /var/log/nginx*/*access*.log maxretry = 0 bantime  = 86400 # 1 day

Create files /etc/fail2ban/filter.d/nginx-ddos.conf

# Fail2Ban configuration file # # Generated on Fri Jun 08 12:09:15 EST 2012 by BeezNest # # Author: Yannick Warnir # # $Revision: 1 $ # [Definition] # Option: failregex # Notes.: Regexp to catch a generic call from an IP address. # Values: TEXT # failregex = ^ -.*"(GET|POST).*HTTP.*"$ # Option: ignoreregex # Notes.: regex to ignore. If this regex matches, the line is ignored. # Values: TEXT # ignoreregex =

/etc/fail2ban/filter.d/nginx-proxy.conf

# Proxy filter /etc/fail2ban/filter.d/proxy.conf: # # Block IPs trying to use server as proxy. # # Matches e.g. # 192.168.1.1 - - "GET http://www.something.com/ # [Definition] failregex = ^ -.*GET http.* ignoreregex =

/etc/fail2ban/filter.d/nginx-auth.conf

Got it myself! when new jobs are inserted into /etc/init then the update is not noticed until the next check. Myscript is at lot faster then check frenquence so the update needs to be initiation ny hand:

I often find it hard to find good examples of Drupal 7 dynamic queries – especially when you are joining on to dynamically created tables so have put this up here for reference:

ssh-add Could not open a connection to your authentication agent.

Не мытьем, так катаньем

Missing dependency Cache::Cache

Делаем

apt-get install libwww-perl libcache-cache-perl

После чего включаем и конфигурируем плагины

munin-node-configure --suggest 2>/dev/null |grep mysql

Например такими

locale: Cannot set LC_CTYPE to default locale: No such file or directory locale: Cannot set LC_MESSAGES to default locale: No such file or directory locale: Cannot set LC_ALL to default locale: No such file or directory

Полечим строчкой

in/sh echo -n "MySQL username: " ; read username echo -n "MySQL password: " ; stty -echo ; read password ; stty echo ; echo mysql -u $username -p"$password" -NBe "SHOW DATABASES;" | grep -v 'lost+found' | while read database ; do mysql -u $username -p"$password" -NBe "SHOW TABLE STATUS;" $database | while read name engine version rowformat rows avgrowlength datalength maxdatalength indexlength datafree autoincrement createtime updatetime checktime collation checksum createoptions comment ; do if [ "$datafree" -gt 0 ] ; then fragmentation=$(($datafree * 100 / $datalength)) echo "$database.$name is $fragmentation% fragmented." mysql -u "$username" -p"$password" -NBe "OPTIMIZE TABLE $name;" "$database" fi done done

Yep. But,

mysqlcheck -o –all-databases

Всего-то нужно дописать в /etc/sysctl.conf

vm.swappiness = 0

И применить без перезагрузки

sysctl vm.swappiness=0

Посмотреть текущий можно командой

Чтобы добавить второй монитор как продолжение первого пропишем в автозапуск

Если apache упорно отдаёт Drupal вместо статуса, нужно добавить следующую строку

RewriteCond %{REQUEST_URI} !=/server-status

в .htaccess, в блок