#I’d need two hours and a redis connection
Explore tagged Tumblr posts
Text
Spent a few hours today fixing some configurations and all I have to say is if you told the me from six years ago that she would have such a thorough understanding of This Specific Thing and all its convoluted moving parts, she’d probably faint
#(it just feels so GOOD to finally understand this stuff)#don't mind me having a moment#THIS SPECIFIC THING used to be one of the biggest black boxes we had#I only knew what it did but not how and was warned that Bad Stuff would happen#if things went out of whack with it#so I was always super terrified of anything that could impact This Specific Thing in any way#and now if this thing did go out of whack#I’d need two hours and a redis connection
0 notes
Link
Site Admin demo • Source
16 years ago I stumbled into hosting with Ensim WEBppliance, which was a clusterfuck of a control panel necessitating a bunch of bugfixes. Those bugfixes spawned a control panel, apnscp (Apis Networks Control Panel), that I’ve continued to develop to this day. v3 is the first public release of apnscp and to celebrate I’m giving away 400 free lifetime licenses on r/webhosting each good for 1 server.
Visit apnscp.com/activate/webhosting-lt to get started customizing the installer. Database + PHP are vendor agnostic. apnscp supports any-version Node/Ruby/Python/Go. I’m interested in feedback, if not bugs then certainly ideas for improvement.
apnscp ships with integrated Route 53/CF DNS support in addition to Linode, DO, and Vultr. Additional providers are easy to create. apnscp includes 1-click install/updates for WordPress, Drupal, Laravel, Ghost, Discourse, and Magento. Enabling Passenger, provided you have at least 2 GB memory, opens the door to use any-version Ruby, Node, and Python on your server.
Minimum requirements
2 GB RAM
20 GB disk
CentOS 7.4
xfs or ext4 filesystem
Containers not supported (OpenVZ, Virtuozzo)
Features
100% self-hosted, no third-party agents required
1-click installs/automatic updates for WordPress, Drupal, Ghost, Discourse, Laravel, Magento
Let’s Encrypt issuance, automatic renewals
Resource enforcement via cgroups
Read-only roles for PHP
Integrated DNS for AWS, CF, Digital Ocean, Linode, and Vultr
Multi-tenancy, each account exists in a synthetic root
Any-version Node, Ruby, Python, Go
Automatic system/panel updates
OS checksums, perform integrity checks without RPM hell
Push monitoring for services
SMTP policy controls with rspamd
Firewall, brute-force restrictions on all services including HTTP with a rate-limiting sieve
Malware scrubbing
Multi-server support
apnscp won’t fix all of your woes; you still need to be smart about whom you host and what you host, but it is a step in the right direction. apnscp is not a replacement for a qualified system administrator. It is however a much better alternative to emerging panels in this market.
Installation
Use apnscp Customizer to configure your server as you’d like. See INSTALL.md for installation + usage.
Monitoring installation apnscp will provision your server and this takes around 45 minutes to 2 hours to complete the first time. You can monitor installation real-time from the terminal:
tail -f /root/apnscp-bootstrapper.log
Post Install If you entered an email address while customizing (apnscp_admin_email) and the server isn’t in a RBL, then you will receive an email with your login information. If you don’t get an email after 2 hours, log into the server and check the status:
tail -n30 /root/apnscp-bootstrapper.log
The last line should be similar to: 2019-01-30 18:39:02,923 p=3534 u=root | localhost : ok=3116 changed=1051 unreachable=0 failed=0
If failed=0, everything is set! You can reset the password and refer back to the login information to access the panel or reset your credentials. Post-install will welcome you with a list of helpful commands to get started as well. You may want to change -n30 to -n50!
If failed=n where n > 0, send me a PM, email ([email protected]), get in touch on the forums, or Discord.
Shoot me a PM if you have a question or hop on Discord chat. Either way feedback makes this process tick. Enjoy!
Installation FAQ
Is a system hostname necessary?
No. It can be set at a later date with cpcmd config_set net.hostname new.host.name. A valid hostname is necessary for mail to reliably relay and valid SSL issuance. apnscp can operate without either.
Do you support Ubuntu?
No. This is a highly specialized platform. Red Hat has a proven track record of honoring its 10 year OS lifecycles, which from experience businesses like to move every 5-7 years. Moreover certain facilities like tuned, used to dynamically optimize your server, are unique to Red Hat and its derivatives. As an aside, apnscp also provides a migration facility for seamless zero downtime migrations.
How do I update the panel?
It will update automatically unless disabled. cpcmd config_set apnscp.update-policy major will set the panel to update up to major version changes. cpcmd config_set system.update-policy default will set the OS to update packages as they’re delivered. These are the default panel settings. Supported Web Apps will update within 24 hours of a major version release and every Wednesday/Sunday for asset updates (themes/plugins). An email is sent to the contact assigned for each site (siteinfo,email service variable).
If your update policy is set to “false” in apnscp-vars.yml, then you can manually update the panel by running upcp and OS via yum update -y. If you’ve opted out of 1-click updates, then caveat emptor.
Mail won’t submit from the server on 25/587 via TCP.
This is by design. Use sendmail to inject into the mail queue via binary or authenticate with a user account to ensure ESMTPA is used. Before disabling, and as one victimized by StealRat, I’d urge caution. Sockets are opaque: it’s impossible to discern the UID or PID on the other end.
To disable:
cpcmd config_set apnscp.bootstrapper postfix_relay_mynetworks true
upcp -sb mail/configure-postfix
config_set manages configuration scopes. Scopes are discussed externally. upcp is a wrapper to update the panel, reset the panel (--reset), run integrity checks (-b) with optional tags. -s skips migrations that are otherwise compulsory if present during a panel update; you wouldn’t want an incomplete platform!
My connection is firewalled and I can’t send mail directly!
apnscp provides simple smart host support via configuration scope.
How do I uninstall MySQL or PostgreSQL?
Removing either would render the platform inoperable. Do not do this. PostgreSQL handles mail, long-term statistics, and backup account metadata journaling. MySQL for everything else, including panel data.
Oof. apnscp is taking up 1.5 GB of memory!
There are two important tunables, has_low_memory and clamav_enabled. has_low_memory is a macro that disables several components including:
clamav_enabled => false
passenger_enabled => false
variety of rspamd performance enhancements (redis, proxy worker, neural) => false
MAKEFLAGS=-j1 (non-parallelized build)
dovecot_secure_mode => false (High-security mode)
Switches multi-threaded job daemon Horizon to singular “queue”
clamav_enabled disables ClamAV as well as upload scrubbing and virus checks via Web > Web Apps. This is more of a final line of defense. So long as you are the only custodian of sites on your server, it’s safe to disable.
Resources
apnscp documentation
v3 release notes
Adding sites, logging in
Customizing apnscp
CLI helpers
Knowledgebase – focused for end-users. Administration is covered under hq.apnscp.com
Scopes – simplify complex tasks
License information
Licenses are tied to the server but may be transferred to a new server. Once transferred from the server apnscp will become deactivated on the server, which means your sites will continue to operate but apnscp can no longer help you manage your server, as well as deploy automatic updates. A copy of the license can be made either by copying /usr/local/apnscp/config/license.pem or License > <u>Download License</u> in the top-right corner. Likewise to install the license on a new machine just replace config/license.pem with your original copy.
Submitted February 17, 2019 at 05:14PM by tsammons https://www.reddit.com/r/webhosting/comments/arqya9/built_a_control_panel_over_16_years_free_lifetime/?utm_source=ifttt
from Blogger http://webdesignersolutions1.blogspot.com/2019/02/built-control-panel-over-16-years-free.html via IFTTT
0 notes
Text
Built a control panel over 16 years, free lifetime release
Site Admin demo • Source
16 years ago I stumbled into hosting with Ensim WEBppliance, which was a clusterfuck of a control panel necessitating a bunch of bugfixes. Those bugfixes spawned a control panel, apnscp (Apis Networks Control Panel), that I've continued to develop to this day. v3 is the first public release of apnscp and to celebrate I'm giving away 400 free lifetime licenses on r/webhosting each good for 1 server.
Visit apnscp.com/activate/webhosting-lt to get started customizing the installer. Database + PHP are vendor agnostic. apnscp supports any-version Node/Ruby/Python/Go. I'm interested in feedback, if not bugs then certainly ideas for improvement.
apnscp ships with integrated Route 53/CF DNS support in addition to Linode, DO, and Vultr. Additional providers are easy to create. apnscp includes 1-click install/updates for Wordpress, Drupal, Laravel, Ghost, Discourse, and Magento. Enabling Passenger, provided you have at least 2 GB memory, opens the door to use any-version Ruby, Node, and Python on your server.
Minimum requirements
2 GB RAM
20 GB disk
CentOS 7.4
xfs or ext4 filesystem
Containers not supported (OpenVZ, Virtuozzo)
Features
100% self-hosted, no third-party agents required
1-click installs/automatic updates for Wordpress, Drupal, Ghost, Discourse, Laravel, Magento
Let's Encrypt issuance, automatic renewals
Resource enforcement via cgroups
Read-only roles for PHP
Integrated DNS for AWS, CF, Digital Ocean, Linode, and Vultr
Multi-tenancy, each account exists in a synthetic root
Any-version Node, Ruby, Python, Go
Automatic system/panel updates
OS checksums, perform integrity checks without RPM hell
Push monitoring for services
SMTP policy controls with rspamd
Firewall, brute-force restrictions on all services including HTTP with a rate-limiting sieve
Malware scrubbing
Multi-server support
apnscp won't fix all of your woes; you still need to be smart about whom you host and what you host, but it is a step in the right direction. apnscp is not a replacement for a qualified system administrator. It is however a much better alternative to emerging panels in this market.
Installation
Use apnscp Customizer to configure your server as you'd like. See INSTALL.md for installation + usage.
Monitoring installation apnscp will provision your server and this takes around 45 minutes to 2 hours to complete the first time. You can monitor installation real-time from the terminal:
tail -f /root/apnscp-bootstrapper.log
Post Install If you entered an email address while customizing (apnscp_admin_email) and the server isn't in a RBL, then you will receive an email with your login information. If you don't get an email after 2 hours, log into the server and check the status:
tail -n30 /root/apnscp-bootstrapper.log
The last line should be similar to: 2019-01-30 18:39:02,923 p=3534 u=root | localhost : ok=3116 changed=1051 unreachable=0 failed=0
If failed=0, everything is set! You can reset the password and refer back to the login information to access the panel or reset your credentials. Post-install will welcome you with a list of helpful commands to get started as well. You may want to change -n30 to -n50!
If failed=n where n > 0, send me a PM, email ([email protected]), get in touch on the forums, or Discord.
Shoot me a PM if you have a question or hop on Discord chat. Either way feedback makes this process tick. Enjoy!
Installation FAQ
Is a system hostname necessary?
No. It can be set at a later date with cpcmd config_set net.hostname new.host.name. A valid hostname is necessary for mail to reliably relay and valid SSL issuance. apnscp can operate without either.
Do you support Ubuntu?
No. This is a highly specialized platform. Red Hat has a proven track record of honoring its 10 year OS lifecycles, which from experience businesses like to move every 5-7 years. Moreover certain facilities like tuned, used to dynamically optimize your server, are unique to Red Hat and its derivatives. As an aside, apnscp also provides a migration facility for seamless zero downtime migrations.
How do I update the panel?
It will update automatically unless disabled. cpcmd config_set apnscp.update-policy major will set the panel to update up to major version changes. cpcmd config_set system.update-policy default will set the OS to update packages as they're delivered. These are the default panel settings. Supported Web Apps will update within 24 hours of a major version release and every Wednesday/Sunday for asset updates (themes/plugins). An email is sent to the contact assigned for each site (siteinfo,email service variable).
If your update policy is set to "false" in apnscp-vars.yml, then you can manually update the panel by running upcp and OS via yum update -y. If you've opted out of 1-click updates, then caveat emptor.
Mail won't submit from the server on 25/587 via TCP.
This is by design. Use sendmail to inject into the mail queue via binary or authenticate with a user account to ensure ESMTPA is used. Before disabling, and as one victimized by StealRat, I'd urge caution. Sockets are opaque: it's impossible to discern the UID or PID on the other end.
To disable:
cpcmd config_set apnscp.bootstrapper postfix_relay_mynetworks true
upcp -sb mail/configure-postfix
config_set manages configuration scopes. Scopes are discussed externally. upcp is a wrapper to update the panel, reset the panel (--reset), run integrity checks (-b) with optional tags. -s skips migrations that are otherwise compulsory if present during a panel update; you wouldn't want an incomplete platform!
My connection is firewalled and I can't send mail directly!
apnscp provides simple smart host support via configuration scope.
How do I uninstall MySQL or PostgreSQL?
Removing either would render the platform inoperable. Do not do this. PostgreSQL handles mail, long-term statistics, and backup account metadata journaling. MySQL for everything else, including panel data.
Oof. apnscp is taking up 1.5 GB of memory!
There are two important tunables, has_low_memory and clamav_enabled. has_low_memory is a macro that disables several components including:
clamav_enabled => false
passenger_enabled => false
variety of rspamd performance enhancements (redis, proxy worker, neural) => false
MAKEFLAGS=-j1 (non-parallelized build)
dovecot_secure_mode => false (High-security mode)
Switches multi-threaded job daemon Horizon to singular "queue"
clamav_enabled disables ClamAV as well as upload scrubbing and virus checks via Web > Web Apps. This is more of a final line of defense. So long as you are the only custodian of sites on your server, it's safe to disable.
Resources
apnscp documentation
v3 release notes
Adding sites, logging in
Customizing apnscp
CLI helpers
Knowledgebase - focused for end-users. Administration is covered under hq.apnscp.com
Scopes - simplify complex tasks
License information
Licenses are tied to the server but may be transferred to a new server. Once transferred from the server apnscp will become deactivated on the server, which means your sites will continue to operate but apnscp can no longer help you manage your server, as well as deploy automatic updates. A copy of the license can be made either by copying /usr/local/apnscp/config/license.pem or License > <u>Download License</u> in the top-right corner. Likewise to install the license on a new machine just replace config/license.pem with your original copy.
Submitted February 17, 2019 at 05:14PM by tsammons https://www.reddit.com/r/webhosting/comments/arqya9/built_a_control_panel_over_16_years_free_lifetime/?utm_source=ifttt from Blogger http://webdesignersolutions1.blogspot.com/2019/02/built-control-panel-over-16-years-free.html via IFTTT
0 notes
Text
Built a control panel over 16 years, free lifetime release via /r/webhosting
Built a control panel over 16 years, free lifetime release
Site Admin demo • Source
16 years ago I stumbled into hosting with Ensim WEBppliance, which was a clusterfuck of a control panel necessitating a bunch of bugfixes. Those bugfixes spawned a control panel, apnscp (Apis Networks Control Panel), that I've continued to develop to this day. v3 is the first public release of apnscp and to celebrate I'm giving away 400 free lifetime licenses on r/webhosting each good for 1 server.
Visit apnscp.com/activate/webhosting-lt to get started customizing the installer. Database + PHP are vendor agnostic. apnscp supports any-version Node/Ruby/Python/Go. I'm interested in feedback, if not bugs then certainly ideas for improvement.
apnscp ships with integrated Route 53/CF DNS support in addition to Linode, DO, and Vultr. Additional providers are easy to create. apnscp includes 1-click install/updates for Wordpress, Drupal, Laravel, Ghost, Discourse, and Magento. Enabling Passenger, provided you have at least 2 GB memory, opens the door to use any-version Ruby, Node, and Python on your server.
Minimum requirements
2 GB RAM
20 GB disk
CentOS 7.4
xfs or ext4 filesystem
Containers not supported (OpenVZ, Virtuozzo)
Features
100% self-hosted, no third-party agents required
1-click installs/automatic updates for Wordpress, Drupal, Ghost, Discourse, Laravel, Magento
Let's Encrypt issuance, automatic renewals
Resource enforcement via cgroups
Read-only roles for PHP
Integrated DNS for AWS, CF, Digital Ocean, Linode, and Vultr
Multi-tenancy, each account exists in a synthetic root
Any-version Node, Ruby, Python, Go
Automatic system/panel updates
OS checksums, perform integrity checks without RPM hell
Push monitoring for services
SMTP policy controls with rspamd
Firewall, brute-force restrictions on all services including HTTP with a rate-limiting sieve
Malware scrubbing
Multi-server support
apnscp won't fix all of your woes; you still need to be smart about whom you host and what you host, but it is a step in the right direction. apnscp is not a replacement for a qualified system administrator. It is however a much better alternative to emerging panels in this market.
Installation
Use apnscp Customizer to configure your server as you'd like. See INSTALL.md for installation + usage.
Monitoring installation apnscp will provision your server and this takes around 45 minutes to 2 hours to complete the first time. You can monitor installation real-time from the terminal:
tail -f /root/apnscp-bootstrapper.log
Post Install If you entered an email address while customizing (apnscp_admin_email) and the server isn't in a RBL, then you will receive an email with your login information. If you don't get an email after 2 hours, log into the server and check the status:
tail -n30 /root/apnscp-bootstrapper.log
The last line should be similar to: 2019-01-30 18:39:02,923 p=3534 u=root | localhost : ok=3116 changed=1051 unreachable=0 failed=0
If failed=0, everything is set! You can reset the password and refer back to the login information to access the panel or reset your credentials. Post-install will welcome you with a list of helpful commands to get started as well. You may want to change -n30 to -n50!
If failed=n where n > 0, send me a PM, email ([email protected]), get in touch on the forums, or Discord.
Shoot me a PM if you have a question or hop on Discord chat. Either way feedback makes this process tick. Enjoy!
Installation FAQ
Is a system hostname necessary?
No. It can be set at a later date with cpcmd config_set net.hostname new.host.name. A valid hostname is necessary for mail to reliably relay and valid SSL issuance. apnscp can operate without either.
Do you support Ubuntu?
No. This is a highly specialized platform. Red Hat has a proven track record of honoring its 10 year OS lifecycles, which from experience businesses like to move every 5-7 years. Moreover certain facilities like tuned, used to dynamically optimize your server, are unique to Red Hat and its derivatives. As an aside, apnscp also provides a migration facility for seamless zero downtime migrations.
How do I update the panel?
It will update automatically unless disabled. cpcmd config_set apnscp.update-policy major will set the panel to update up to major version changes. cpcmd config_set system.update-policy default will set the OS to update packages as they're delivered. These are the default panel settings. Supported Web Apps will update within 24 hours of a major version release and every Wednesday/Sunday for asset updates (themes/plugins). An email is sent to the contact assigned for each site (siteinfo,email service variable).
If your update policy is set to "false" in apnscp-vars.yml, then you can manually update the panel by running upcp and OS via yum update -y. If you've opted out of 1-click updates, then caveat emptor.
Mail won't submit from the server on 25/587 via TCP.
This is by design. Use sendmail to inject into the mail queue via binary or authenticate with a user account to ensure ESMTPA is used. Before disabling, and as one victimized by StealRat, I'd urge caution. Sockets are opaque: it's impossible to discern the UID or PID on the other end.
To disable:
cpcmd config_set apnscp.bootstrapper postfix_relay_mynetworks true
upcp -sb mail/configure-postfix
config_set manages configuration scopes. Scopes are discussed externally. upcp is a wrapper to update the panel, reset the panel (--reset), run integrity checks (-b) with optional tags. -s skips migrations that are otherwise compulsory if present during a panel update; you wouldn't want an incomplete platform!
My connection is firewalled and I can't send mail directly!
apnscp provides simple smart host support via configuration scope.
How do I uninstall MySQL or PostgreSQL?
Removing either would render the platform inoperable. Do not do this. PostgreSQL handles mail, long-term statistics, and backup account metadata journaling. MySQL for everything else, including panel data.
Oof. apnscp is taking up 1.5 GB of memory!
There are two important tunables, has_low_memory and clamav_enabled. has_low_memory is a macro that disables several components including:
clamav_enabled => false
passenger_enabled => false
variety of rspamd performance enhancements (redis, proxy worker, neural) => false
MAKEFLAGS=-j1 (non-parallelized build)
dovecot_secure_mode => false (High-security mode)
Switches multi-threaded job daemon Horizon to singular "queue"
clamav_enabled disables ClamAV as well as upload scrubbing and virus checks via Web > Web Apps. This is more of a final line of defense. So long as you are the only custodian of sites on your server, it's safe to disable.
Resources
apnscp documentation
v3 release notes
Adding sites, logging in
Customizing apnscp
CLI helpers
Knowledgebase - focused for end-users. Administration is covered under hq.apnscp.com
Scopes - simplify complex tasks
License information
Licenses are tied to the server but may be transferred to a new server. Once transferred from the server apnscp will become deactivated on the server, which means your sites will continue to operate but apnscp can no longer help you manage your server, as well as deploy automatic updates. A copy of the license can be made either by copying /usr/local/apnscp/config/license.pem or License > <u>Download License</u> in the top-right corner. Likewise to install the license on a new machine just replace config/license.pem with your original copy.
Submitted February 17, 2019 at 05:14PM by tsammons via reddit https://www.reddit.com/r/webhosting/comments/arqya9/built_a_control_panel_over_16_years_free_lifetime/?utm_source=ifttt
0 notes