PEM SSL BUNDLE

 cat /etc/letsencrypt/live/tableauristekbrin.comnets.id/privkey.pem /etc/letsencrypt/live/tableauristekbrin.comnets.id/fullchain.pem > /etc/letsencrypt/live/tableauristekbrin.comnets.id/courier.pem 

Install Mod Evasive On Centos Web Panel

git clone https://github.com/shivaas/mod_evasive.git
cd mod_evasive
/usr/local/apache/bin/apxs -i -a -c mod_evasive24.c


apxs:Error: /usr/bin/apr-1-config not found!.
apxs:Error: /usr/bin/apu-1-config not found!.

yum group install "Development Tools"
yum install openssl-devel apr-devel
yum install apr-util-devel

CWP form login blank No Loader is installed. Please contact support.

No Loader is installed, please try to run this command or contact support: sh /scripts/update_ioncube

1.  Alternatif 1
sh /scripts/update_ioncube
/usr/local/cwp/php71/bin/php -v
service cwpsrv reload

echo "zend_extension = /usr/local/ioncube/ioncube_loader_lin_7.0.so" >> /usr/local/cwp/php71/php.ini

service cwpsrv reload

2.  Alternatif 2

yum -y install wget

yum -y update

reboot

Narasumber Kegiatan Himasisko

SSH User gagal login

Error dan Gagal akses SSH Server

1. PuTTY fatal error: Server refused to start a shell/command
2. failed to execute /bin/bash: Resource temporarily unavailable
3. -bash: fork: retry: Resource temporarily unavailable

Gagal login user ssh di server redhat dan centos

https://access.redhat.com/solutions/543503

Edit File
/etc/security/limits.d/90-nproc.conf
atau /etc/security/limits.d/<user>.conf

<user>       -          nproc     2048      <<<----[ Only for "<user>" user ]
*          -          nproc     2048      <<<----[ For all user's ]

Perintah ProxySQL di Centos

Melihat Koneksi dan Grup yang digunakan

select * from stats_mysql_connection_pool;

Menambah Anggota Cluster

mysql> insert into mysql_servers(hostgroup_id, hostname, port) values (0,'192.168.56.102',3316);
Query OK, 1 row affected (0.00 sec)
 
mysql> insert into mysql_servers(hostgroup_id, hostname, port) values (1,'192.168.56.103',3316);
Query OK, 1 row affected (0.01 sec)
 
mysql> select * from mysql_servers;
3 rows in set (0.01 sec)
 
mysql> save mysql servers to disk;
Query OK, 0 rows affected (0.00 sec)
 
mysql> select * from disk.mysql_servers;
3 rows in set (0.00 sec)
 
mysql> load mysql servers to runtime;
Query OK, 0 rows affected (0.00 sec)

Menghapus Anggota Cluster 

mysql> delete from mysql_servers where hostgroup_id=1 and hostname='192.168.56.102';
Query OK, 1 row affected (0.00 sec)

Mengload Perubahan ProxySQL
mysql> load mysql servers to runtime;
Query OK, 0 rows affected (0.01 sec)
 

Melihat Anggota Cluster
mysql> select * from mysql_servers;

Time Zone Centos 7

timedatectl set-timezone Asia/Jakarta

Install MySQLdb Module Mysql Database di Python

You need to use one of the following commands. Which one depends on what OS and software you have and use.

1. easy_install mysql-python (mix os)
2. pip install mysql-python (mix os/ python 2)
3. pip install mysqlclient (mix os/ python 3)
4. apt-get install python-mysqldb (Linux Ubuntu, ...)
5. cd /usr/ports/databases/py-MySQLdb && make install clean (FreeBSD)
6. yum install MySQL-python (Linux Fedora, CentOS ...)

FTP Client Console Linux Centos

You can use ncftpput. Do the following:

1. Install ncftp:

   Yum install ncftp
   

   Alternatively:

   apt-get install ncftp
   

2. Execute the following command:

   ncftpput -R -v -u "ftp-username" ftp.website.com ftp-upload-path local-path/*

Troubleshoot Postgres

##Backup Seluruh Database
$ pg_dumpall > all.backup.out
OR
$ pg_dumpall | gzip -c > all.backup.out.gz

#Import file dump postgres
psql -U postgres -f backup.out zipruz

#Melihat error pada saat proses import
psql -U postgres -f backup.out zipruz -v ON_ERROR_STOP=1


#CWP postgres
yum install postgresql-contrib

Troubleshooting Galera

cd /var/lib/mysql

cd /var/lib/mysql

sudo mv  grastate.bat    grastate.bat.bck

sudo mv  gvwstate.bat   gvwstate.bat.bck

Clear Memory di Linux

Pada sistem operasi linux terdapat 3 cara untuk menghapus memori yang digunakan oleh aplikasi
1. Clear PageCache only.

# sync; echo 1 > /proc/sys/vm/drop_caches

2. Clear dentries and inodes.

# sync; echo 2 > /proc/sys/vm/drop_caches

3. Clear PageCache, dentries and inodes.

# sync; echo 3 > /proc/sys/vm/drop_caches

Python SMTP Client Pada Google

First, you'll want to allow less secure apps to access your account. For detailed instructions on how to do this, you should check out this page:

Allowing less secure apps to access your account

1. Go to the "Less secure apps" section in My Account.
2. Next to "Access for less secure apps," select Turn on. (Note to G Suite users: This setting is hidden if your administrator has locked less secure app account access.)

If you have 2-step verification enabled on your account, then you'll need to create an app-specific password for less secure apps like this. In that case, you'll need to follow the instructions here:

Sign in using App Passwords

And finally, if you're still getting an SMTPAuthenticationError with an error code of 534, then you'll need to do yet another step for this to work.

Display Unlock Captcha

I haven't had to do this last step for my own accounts, but I've read that it doesn't actually work right away. Apparently after you enable less secure apps, you may need to wait a few minutes before trying the 'Display Unlock Captcha' link. If you run in to this problem and find a good way around it, please let us know in the comments!

Gluster FS Install on Centos

gluster volume create DFS-DATA replica 2 transport tcp dfs-master:/DATA dfs-node:/DATA

gluster volume start distribute                                                                                                                                 
gluster volume info                                                                                                                                             
gluster volume delete dist-volume 


umount -t glusterfs dfs-master:/DFS-DATA
mount -t glusterfs dfs-master:/DFS-DATA/ok /mnt/test/


gluster volume create test replica 2 transport tcp dfs-master:/DATA/DFS-103.241.5.100-1 dfs-node:/DATA/DFS-103.241.5.100-1

mount -t glusterfs dfs-master:/DFS-103.241.5.100 /gluster



###INI JIKA VOLUME ALREADY
setfattr -x trusted.glusterfs.volume-id $brick-path
setfattr -x trusted.gfid $brick-path
rm -rf $brick-path/.glusterfs

Raspberry Pi, Error Compile Asterisk


Makefile:50: recipe for target 'gsm/lib/libgsm.a' failed
make[1]: *** [gsm/lib/libgsm.a] Error 2

Buka file makeopts setelah melakukan ./configure pada source code asterisk

Replace armv6l dengan armv6 (ada 3 bagian)

CWP Firewall Error

Firewall pada CWPterdisable dan menggalami kegagalan untuk running pada saat Firewal di triger untuk bekerja

FIle log dari csf dan lfd mengalamai

#csf -u
Can't locate object method "ssl_opts" via package "LWP::UserAgent" at /usr/local/csf/lib/ConfigServer/URLGet.pm line 142.

Solusi

# sed -i "s/\$ua->ssl_opts/#\$ua->ssl_opts/" /usr/local/csf/lib/ConfigServer/URLGet.pm
# csf -u

Access to Centos Web Panel not working with SSL / https

vi /usr/local/cwpsrv/conf.d/cwp-ssl.conf

Listen 2031
<VirtualHost 123.456.789.012:2031>
        ServerName 123.456.789.012
        SSLEngine on
        SSLCertificateKeyFile /etc/pki/tls/cwp-123.456.789.012.key
        SSLCertificateFile /etc/pki/tls/cwp-123.456.789.012.cert
        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>

change to:

Listen 2031
<VirtualHost *:2031>
        ServerName *
        SSLEngine on
        SSLCertificateKeyFile /etc/pki/tls/cwp-123.456.789.012.key
        SSLCertificateFile /etc/pki/tls/cwp-123.456.789.012.cert
        SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>

service cwpsrv restart

Now it works fine with https.

REVERSE PROXY APACHE HTTP DAN HTTPS

========================================

MODE 1

======================================== 

<VirtualHost *:*>
    ProxyPreserveHost On

    # Servers to proxy the connection, or;
    # List of application servers:
    # Usage:
    # ProxyPass / http://[IP Addr.]:[port]/
    # ProxyPassReverse / http://[IP Addr.]:[port]/
    # Example: 
    ProxyPass / http://0.0.0.0:8080/
    ProxyPassReverse / http://0.0.0.0:8080/

    ServerName localhost
</VirtualHost> 

=====================================

MODE 2 

=====================================

<Proxy balancer://mycluster>
    # Define back-end servers:

    # Server 1
    BalancerMember http://0.0.0.0:8080/

    # Server 2
    BalancerMember http://0.0.0.0:8081/
</Proxy>

<VirtualHost *:*>
    # Apply VH settings as desired
    # However, configure ProxyPass argument to
    # use "mycluster" to balance the load

    ProxyPass / balancer://mycluster
</VirtualHost>

=========================================

MODE 3 - SSL ON

========================================

Listen 443

NameVirtualHost *:443
<VirtualHost *:443>

    SSLEngine On

    # Set the path to SSL certificate
    # Usage: SSLCertificateFile /path/to/cert.pem
    SSLCertificateFile /etc/apache2/ssl/file.pem


    # Servers to proxy the connection, or;
    # List of application servers:
    # Usage:
    # ProxyPass / http://[IP Addr.]:[port]/
    # ProxyPassReverse / http://[IP Addr.]:[port]/
    # Example: 
    ProxyPass / http://0.0.0.0:8080/
    ProxyPassReverse / http://0.0.0.0:8080/

    # Or, balance the load:
    # ProxyPass / balancer://balancer_cluster_name

</VirtualHost>
 

PAT Pada Mikrotik

ip firewall nat add chain=dstnat src-address=0.0.0.0/0 dst-address=103.241.5.99 protocol=udp port=22221 action=dst-nat to-addresses=172.16.222.2 to-ports=22

Port Address Translation (PAT) Pada Centos

iptables -t nat -A PREROUTING -p tcp --dport 2222 -j DNAT --to-destination 172.16.121.2:22