FirstVDS База знаний

https://firstvds.ru/technology/
Admin
FirstVDS is a provider of virtual private servers (VDS) and related hosting services, offering a...
Tokens:215,488
Snippets:984
Trust Score:10
Update:1 year ago
Show doc for...
Tokens:
Raw
### 1C-Bitrix Setup Guide

Source: https://firstvds.ru/technology/bitrix-recipes-first-steps

A guide for users starting with 1C-Bitrix: Site Management and 1C-Bitrix GT after an automatic installation from a recipe. This section is part of the knowledge base and focuses on initial setup procedures.

```en
Начало работы с 1C-Битрикс: Управление сайтом и 1С-Битрикс GT после автоматической установки из рецепта
```

--------------------------------

### OpenVPN Server Setup

Source: https://firstvds.ru/technology/index

Detailed guide on installing and configuring an OpenVPN server on Linux, along with client setup instructions for establishing VPN connections.

```bash
OpenVPN Server Installation (Ubuntu):
sudo apt update
sudo apt install openvpn easy-rsa

# Follow Easy-RSA steps to generate certificates and keys.
# Configure server.conf file in /etc/openvpn/.
```

--------------------------------

### ISPmanager CMS Installation Guide

Source: https://firstvds.ru/technology/index

Instructions on how to install Content Management Systems (CMS) using the ISPmanager control panel. This guide likely covers selecting a CMS, configuring database settings, and completing the installation process.

```en
To install a CMS in ISPmanager:
1. Navigate to the 'Applications' section.
2. Select the desired CMS (e.g., WordPress, Joomla).
3. Configure database and site settings.
4. Click 'Install' and follow the on-screen prompts.
```

--------------------------------

### Install and Start Apache Web Server

Source: https://firstvds.ru/technology/1c-linux-server

Installs the Apache web server and starts its service, preparing the Linux server to host web applications.

```bash
apt-get install apache2 && service apache2 start
```

--------------------------------

### CMS Installation Guides

Source: https://firstvds.ru/technology/index

Provides instructions for installing popular Content Management Systems (CMS) on a virtual server, including '1С-Битрикс', phpBB, Drupal, WordPress, Joomla!, and Opencart.

```bash
WordPress Installation Example:
# Download WordPress
cd /var/www/html
wp core download

# Create database and user (MySQL example)
mysql -u root -p
CREATE DATABASE wordpress_db;
CREATE USER 'wp_user'@'localhost' IDENTIFIED BY 'password';
GRANT ALL PRIVILEGES ON wordpress_db.* TO 'wp_user'@'localhost';
FLUSH PRIVILEGES;
EXIT;

# Configure wp-config.php
cp wp-config-sample.php wp-config.php
# Edit wp-config.php with database details.
```

--------------------------------

### VPN Server Setup Guides

Source: https://firstvds.ru/technology/chto-takoe-vpn-i-kak-vybrat

This section compiles guides for setting up various personal VPN servers, including Amnezia, WireGuard, and OpenVPN. It covers installation, configuration, and client setup for connecting to these VPNs.

```ru
Настройка личного VPN сервера Amnezia
Установка и настройка WireGuard (VPN) на виртуальном сервере
Установка OpenVPN сервера на Linux и настройка клиента для подключения к нему
Как создать и настроить свой VPN на сервере
Для чего использовать OpenVPN
Настройка VPN на виртуальном сервере
```

--------------------------------

### Проверка версии Java

Source: https://firstvds.ru/technology/apache-tomcat

Команда для проверки установленной версии Java в системе.

```bash
# java -version
```

--------------------------------

### LAMP Stack Deployment Guide

Source: https://firstvds.ru/technology/index

Instructions for setting up a LAMP stack (Linux, Apache, MySQL, PHP) on a server. This guide covers the installation and configuration of each component.

```en
LAMP stack installation:
1. Install Apache: `sudo apt update && sudo apt install apache2`
2. Install MySQL/MariaDB: `sudo apt install mariadb-server`
3. Install PHP and extensions: `sudo apt install php libapache2-mod-php php-mysql`
4. Ensure Apache is configured to process PHP files.
```

--------------------------------

### Скачивание Apache Tomcat

Source: https://firstvds.ru/technology/apache-tomcat

Загружает архив Apache Tomcat с официального зеркала.

```bash
# wget https://dlcdn.apache.org/tomcat/tomcat-10/v10.1.18/bin/apache-tomcat-10.1.18.tar.gz
```

--------------------------------

### Создание пользователя Tomcat

Source: https://firstvds.ru/technology/apache-tomcat

Создает пользователя 'tomcat' с оболочкой /bin/false, домашним каталогом /opt/tomcat и монтирует каталог.

```bash
# useradd tomcat -U -s /bin/false -d /opt/tomcat -m
```

--------------------------------

### Postfix Mail Server Setup Guide (File-based Passwords)

Source: https://firstvds.ru/technology/index

A guide for installing and configuring the Postfix mail server with email passwords stored in a file. This covers server setup and security considerations.

```en
Setting up Postfix with file-based passwords:
1. Install Postfix and related packages (e.g., Dovecot).
2. Configure `main.cf` and `master.cf` for Postfix.
3. Create a password file and set permissions.
4. Configure Dovecot for IMAP/POP3 access.
```

--------------------------------

### Распаковка архива Tomcat

Source: https://firstvds.ru/technology/apache-tomcat

Распаковывает скачанный архив Tomcat в каталог /opt/tomcat, удаляя лишние компоненты.

```bash
# tar zxvf apache-tomcat-*.tar.gz -C /opt/tomcat --strip-components 1
```

--------------------------------

### Install Linux Malware Detect (LMD)

Source: https://firstvds.ru/technology/antivirus-linux-malware-detect-ustanovka-i-skanirovanie

This snippet shows how to download, install, and configure LMD on a Linux system. It includes steps for updating the signature database and performing initial setup.

```bash
wget https://www.rfxn.com/downloads/maldetect-current.tar.gz
tar -xzvf maldetect-current.tar.gz
cd maldetect-*
./install.sh

# Update signature database
/usr/local/maldetect/maldet --update-ver

# Perform initial configuration (optional, defaults are usually fine)
# nano /usr/local/maldetect/config
```

--------------------------------

### Изменение прав доступа к каталогу Tomcat

Source: https://firstvds.ru/technology/apache-tomcat

Назначает владельцем и группой каталога /opt/tomcat пользователя и группу 'tomcat'.

```bash
# chown -R tomcat:tomcat /opt/tomcat
```

--------------------------------

### Install Cyber Backup Agent on Linux

Source: https://firstvds.ru/technology/podrobnee-ob-usluge-kiber-bekap-ex-acronis

Instructions for installing the Cyber Backup (formerly Acronis) agent on Linux systems. This guide covers the necessary steps and potential considerations for a successful installation.

```bash
sudo apt update
sudo apt install cyber-backup-agent
```

--------------------------------

### ISPmanager SSL Certificate Installation Guide

Source: https://firstvds.ru/technology/index

Instructions for installing SSL certificates on a server managed by ISPmanager 6. This guide covers obtaining and applying SSL certificates to secure websites.

```en
Installing SSL certificates with ISPmanager 6:
1. Navigate to 'SSL Certificates'.
2. Click 'Install Certificate'.
3. Provide certificate details (private key, certificate, CA bundle).
4. Assign the certificate to a domain.
```

--------------------------------

### Create Directories and Files

Source: https://firstvds.ru/technology/primery-sinhronizacii-rsync-v-linux

Creates two directories, test1 and test2, and then populates test1 with ten empty files. This is a setup step for demonstrating rsync functionality.

```bash
cd ~ && mkdir test{1,2}
touch test1/file{1..10}
```

--------------------------------

### LEMP Stack Deployment Guide

Source: https://firstvds.ru/technology/index

Instructions for setting up a LEMP stack (Linux, Nginx, MySQL, PHP) on a server. This guide covers the installation and configuration of each component.

```en
LEMP stack installation:
1. Install Nginx: `sudo apt update && sudo apt install nginx`
2. Install MySQL/MariaDB: `sudo apt install mariadb-server`
3. Install PHP and extensions: `sudo apt install php-fpm php-mysql`
4. Configure Nginx to serve PHP files via PHP-FPM.
```

--------------------------------

### ISPmanager Software Installation Guide

Source: https://firstvds.ru/technology/index

General instructions for installing various software packages through the ISPmanager control panel. This includes web servers, mail servers, and other essential applications.

```en
Installing software in ISPmanager:
1. Navigate to the 'Applications' or 'Software' section.
2. Browse or search for the desired software.
3. Follow the installation wizard, providing necessary configurations.
```

--------------------------------

### Create Tomcat User

Source: https://firstvds.ru/technology/apache-tomcat

This snippet demonstrates how to create a dedicated user for running Apache Tomcat. This is a crucial preliminary step before installing Tomcat to ensure proper system security and resource management.

```bash
useradd --system --shell /bin/false --home-dir /opt/tomcat tomcat
```

--------------------------------

### Управление службой Tomcat

Source: https://firstvds.ru/technology/apache-tomcat

Команды для перезагрузки демона systemd, запуска службы Tomcat, проверки статуса и настройки автозапуска.

```bash
# systemctl daemon-reload
# systemctl start tomcat
# systemctl status tomcat
# systemctl enable tomcat
```

--------------------------------

### Start Rsync Daemon Service

Source: https://firstvds.ru/technology/primery-sinhronizacii-rsync-v-linux

Command to start the rsync daemon service using systemctl.

```bash
sudo systemctl start rsyncd
```

--------------------------------

### Install Cyber Backup Agent on Windows

Source: https://firstvds.ru/technology/podrobnee-ob-usluge-kiber-bekap-ex-acronis

Instructions for installing the Cyber Backup (formerly Acronis) agent on Windows systems. This guide covers the necessary steps and potential considerations for a successful installation.

```powershell
Invoke-WebRequest -Uri https://download.cyber.ru/backup/agent/windows/64bit/CyberBackupAgentInstaller.exe -OutFile .CyberBackupAgentInstaller.exe
.CyberBackupAgentInstaller.exe /SILENT
```

--------------------------------

### Roundcube Webmail Installation Guide (without ISPmanager)

Source: https://firstvds.ru/technology/index

Instructions for installing and configuring the Roundcube webmail client on a server without ISPmanager. This involves web server setup and database configuration.

```en
Installing Roundcube webmail:
1. Ensure a web server (e.g., Apache, Nginx) and PHP are installed.
2. Create a database for Roundcube.
3. Download and extract Roundcube to your web directory.
4. Configure Roundcube's `config.inc.php` with database and IMAP/SMTP settings.
```

--------------------------------

### Настройка systemd для Tomcat (Ubuntu/Debian)

Source: https://firstvds.ru/technology/apache-tomcat

Создает файл службы systemd для управления Tomcat на Ubuntu/Debian. Включает настройку переменных окружения Java.

```APIDOC
[Unit]
Description=Apache Tomcat Server
After=network.target

[Service]
Type=forking
User=tomcat
Group=tomcat
Environment="JAVA_HOME=/usr/lib/jvm/java-1.11.0-openjdk-amd64"
Environment="JAVA_OPTS=-Djava.security.egd=file:///dev/urandom -Djava.awt.headless=true"
Environment="CATALINA_BASE=/opt/tomcat"
Environment="CATALINA_HOME=/opt/tomcat"
Environment="CATALINA_PID=/opt/tomcat/temp/tomcat.pid"
Environment="CATALINA_OPTS=-Xms512M -Xmx1024M -server -XX:+UseParallelGC"
ExecStart=/opt/tomcat/bin/startup.sh
ExecStop=/opt/tomcat/bin/shutdown.sh
Restart=on-failure
RestartSec=10

[Install]
WantedBy=multi-user.target
```

--------------------------------

### Настройка systemd для Tomcat (CentOS/AlmaLinux/RockyLinux)

Source: https://firstvds.ru/technology/apache-tomcat

Создает файл службы systemd для управления Tomcat на CentOS, AlmaLinux и RockyLinux. Отличается от Ubuntu/Debian отсутствием явного указания JAVA_HOME.

```APIDOC
[Unit]
Description=Apache Tomcat Server
After=syslog.target network.target

[Service]
Type=forking
User=tomcat
Group=tomcat
Environment=CATALINA_PID=/opt/tomcat/tomcat.pid
Environment=CATALINA_HOME=/opt/tomcat
Environment=CATALINA_BASE=/opt/tomcat
ExecStart=/opt/tomcat/bin/startup.sh
ExecStop=/opt/tomcat/bin/shutdown.sh
Restart=on-failure
RestartSec=10


[Install]
WantedBy=multi-user.target
```

--------------------------------

### Scan for Malware with LMD

Source: https://firstvds.ru/technology/antivirus-linux-malware-detect-ustanovka-i-skanirovanie

This snippet demonstrates how to initiate a full system scan using LMD. It covers the command to start the scan and how to monitor its progress.

```bash
# Perform a full system scan
/usr/local/maldetect/maldet -b -r /home

# Scan a specific directory
/usr/local/maldetect/maldet -b -r /var/www
```

--------------------------------

### Настройка Firewall для Tomcat

Source: https://firstvds.ru/technology/apache-tomcat

Открывает порт 8080 в брандмауэре для обеспечения доступа к Tomcat на CentOS, AlmaLinux и RockyLinux.

```bash
# firewall-cmd --permanent --add-port=8080/tcp
# firewall-cmd --reload
```

--------------------------------

### DNS Server Setup Guide (without ISPmanager)

Source: https://firstvds.ru/technology/index

A guide on setting up a Domain Name System (DNS) server on a VDS without ISPmanager. This involves configuring BIND or another DNS server software.

```en
Setting up a DNS server (e.g., BIND):
1. Install BIND (`named`).
2. Configure `named.conf` with zone definitions.
3. Create zone files for your domains.
4. Ensure proper firewall rules for DNS traffic (port 53 UDP/TCP).
```

--------------------------------

### Bash Scripting Fundamentals

Source: https://firstvds.ru/technology/bash-skripty-linux

Covers the basics of Bash scripting, including variables, comments, user input, and essential commands. This is a foundational guide for anyone starting with shell scripting.

```bash
# This is a comment

# Get user input
read -p "Enter your name: " name

# Display a message
echo "Hello, $name!"
```

--------------------------------

### BitNinja CLI Usage

Source: https://firstvds.ru/technology/index

This guide provides instructions on how to manually install and operate BitNinja, a comprehensive server security solution, using its command-line interface (CLI).

```apidoc
BitNinja CLI Usage:

Purpose: BitNinja is a server security solution that provides protection against malware, intrusions, brute-force attacks, and more. This guide focuses on its command-line interface for manual operations.

Installation (Manual):
  - Typically, BitNinja is installed via a script provided by their service.
  - Check the official BitNinja documentation for the latest installation commands.
  - Example (conceptual):
    `curl -s https://get.bitninja.io/ | bash`

Core CLI Command: `bncli`

Common Operations:
  - Get BitNinja status:
    `sudo bncli --status`

  - View BitNinja version:
    `sudo bncli --version`

  - List active modules:
    `sudo bncli --modules`

  - Enable a module (e.g., Firewall):
    `sudo bncli --enable firewall`

  - Disable a module (e.g., Malware Scanner):
    `sudo bncli --disable malware`

  - Update BitNinja definitions and software:
    `sudo bncli --update`

  - View BitNinja logs:
    `sudo bncli --log`
    `sudo bncli --log --module firewall`

  - View blocked IPs:
    `sudo bncli --list --blocked-ips`

  - Unblock an IP address:
    `sudo bncli --unblock <IP_ADDRESS>`

  - View detected malware:
    `sudo bncli --list --malware`

  - Clean detected malware (use with caution):
    `sudo bncli --clean --malware <MALWARE_ID>`

  - View brute-force attacks:
    `sudo bncli --list --bruteforce`

  - Whitelist an IP address:
    `sudo bncli --whitelist --add <IP_ADDRESS>`

  - Remove an IP from whitelist:
    `sudo bncli --whitelist --remove <IP_ADDRESS>`

  - View whitelisted IPs:
    `sudo bncli --whitelist --list`

  - Restart BitNinja service:
    `sudo bncli --restart`

  - Get help for specific commands:
    `sudo bncli --help`
    `sudo bncli --help --module firewall`

Example Workflow:
  1. Check status: `sudo bncli --status`
  2. Update definitions: `sudo bncli --update`
  3. View blocked IPs: `sudo bncli --list --blocked-ips`
  4. If a legitimate IP is blocked, unblock it: `sudo bncli --unblock 1.2.3.4`
  5. If needed, whitelist the IP: `sudo bncli --whitelist --add 1.2.3.4`
```

--------------------------------

### Bash Scripting Guides

Source: https://firstvds.ru/technology/bash-skripty-linux

Provides guides and tutorials for Bash scripting, a powerful command-line shell and scripting language. These guides are useful for system administration and automation tasks.

```bash
# Example Bash script snippet
echo "Hello, World!"
ls -l
```

--------------------------------

### Install 1C Enterprise .deb Packages

Source: https://firstvds.ru/technology/1c-linux-server

Demonstrates how to install 1C:Enterprise components using .deb packages via the terminal. This is an alternative to graphical package installation.

```bash
Dpkg -i имя_пакета.deb
```

--------------------------------

### Rsync Synchronization Examples

Source: https://firstvds.ru/technology/primery-sinhronizacii-rsync-v-linux

Demonstrates common Rsync commands for synchronizing data, including backup and mirroring operations. These examples are useful for setting up automated backups or transferring files between servers.

```bash
### Синхронизация директорий с сохранением прав и владельцев
# Синхронизирует содержимое директории /source/ на локальном сервере
# с директорией /destination/ на удаленном сервере.
# -a (archive): Режим архива, включает рекурсивность, сохранение символических ссылок, прав доступа, времени модификации, владельца и группы.
# -v (verbose): Подробный вывод, показывает передаваемые файлы.
# -z (compress): Сжимает передаваемые данные для ускорения.
# --progress: Показывает прогресс передачи для каждого файла.
# --delete: Удаляет файлы в директории назначения, которых нет в источнике.
# user@remote_host: Имя пользователя и адрес удаленного сервера.
rsync -avz --progress --delete /source/ user@remote_host:/destination/

### Резервное копирование с созданием инкрементных бэкапов
# Создает инкрементное резервное копирование директории /data/ в директорию /backup/.
# --link-dest=/backup/current: Использует предыдущую полную копию (в /backup/current) для создания инкрементных ссылок, экономя место.
# --backup-dir=/backup/$(date +%Y-%m-%d_%H-%M-%S): Создает новую директорию для текущей полной копии.
# --exclude='*.log': Исключает файлы с расширением .log из копирования.
rsync -avz --delete --exclude='*.log' --link-dest=/backup/current /data/ /backup/$(date +%Y-%m-%d_%H-%M-%S)/
# После успешного копирования, обновляем символическую ссылку на последнюю копию
# rm -rf /backup/current && ln -s /backup/$(date +%Y-%m-%d_%H-%M-%S) /backup/current

### Синхронизация с удаленным сервером через SSH с указанием порта
# Синхронизирует директорию /local/data/ с /remote/data/ на удаленном сервере, используя SSH-порт 2222.
# -e 'ssh -p 2222': Указывает использовать SSH с портом 2222.
rsync -avz -e 'ssh -p 2222' /local/data/ user@remote_host:/remote/data/

### Зеркалирование директории (однонаправленное копирование)
# Полностью копирует содержимое /source/ в /destination/, удаляя лишние файлы в назначении.
# --mirror: Включает --delete и --delete-excluded, делая назначение точной копией источника.
rsync -avz --mirror /source/ /destination/

### Синхронизация только измененных файлов
# Копирует только те файлы, которые были изменены с момента последней синхронизации.
# --update: Пропускает файлы, которые новее в назначении.
rsync -avz --update /source/ /destination/

```

--------------------------------

### Help and Support Resources

Source: https://firstvds.ru/technology/bitrix-recipes-first-steps

Provides links to essential resources for users seeking assistance and information about FirstVDS services. This includes a knowledge base, support channels, payment information, company details, and contact information.

```en
1. База знаний
2. Служба поддержки
3. Способы оплаты
4. Отзывы
5. О компании
6. Контакты
```

--------------------------------

### ClamAV Installation and Scanning

Source: https://firstvds.ru/technology/index

This guide explains how to install and use ClamAV, an open-source antivirus engine for detecting trojans, viruses, malware, and other malicious threats.

```apidoc
ClamAV Installation and Scanning:

Purpose: ClamAV is a powerful, open-source antivirus engine used to detect viruses, malware, and other malicious threats on Linux systems.

Installation:
  - Debian/Ubuntu:
    `sudo apt update`
    `sudo apt install clamav clamav-daemon`
  - CentOS/RHEL:
    `sudo yum install epel-release`
    `sudo yum install clamav clamav-update`

Updating Virus Definitions:
  - It's crucial to keep the virus definitions up-to-date.
  - Run `freshclam` as root:
    `sudo freshclam`
  - You can schedule this command to run daily using cron.

Scanning Files and Directories:
  - Scan a specific file:
    `clamscan /path/to/file`
  - Scan a directory recursively:
    `clamscan -r /path/to/directory`
  - Scan and move infected files to a quarantine directory:
    `clamscan -r --move=/path/to/quarantine /path/to/directory`
  - Scan and remove infected files (use with caution):
    `clamscan -r --remove /path/to/directory`
  - Scan and log results to a file:
    `clamscan -r --log=/var/log/clamav/clamscan.log /path/to/directory`
  - Scan with verbose output:
    `clamscan -rv /path/to/directory`

Using ClamD (Daemon Mode):
  - ClamD is a background service that allows on-access scanning and faster scans.
  - Start the ClamD service:
    `sudo systemctl start clamav-daemon`
  - Enable it to start on boot:
    `sudo systemctl enable clamav-daemon`
  - Check status:
    `sudo systemctl status clamav-daemon`
  - Scan using ClamD:
    `clamdscan /path/to/file`
    `clamdscan -r /path/to/directory`

Configuration:
  - Main configuration file: `/etc/clamav/clamd.conf` (for ClamD)
  - FreshClam configuration file: `/etc/clamav/freshclam.conf`

Example Scan Command:
  `sudo clamscan -r --bell -i /home/user/downloads`
  (Scans the downloads directory, rings the bell for infected files, and only shows infected files.)

Example Quarantine Command:
  `sudo clamscan -r --move=/var/lib/clamav/quarantine /var/www/html`
```

--------------------------------

### Blog and Content Sections

Source: https://firstvds.ru/technology/bitrix-recipes-first-steps

Outlines the different sections available within the FirstVDS blog, catering to news, articles, and contributions from authors. It also includes a link to current promotions and job openings.

```en
1. Новости
2. Статьи
3. Авторам
4. Акции
5. Вакансии
```

--------------------------------

### ISPmanager Database Creation Guide

Source: https://firstvds.ru/technology/index

A guide on creating databases within the ISPmanager control panel. It explains the steps involved in setting up a new database, including naming conventions and user permissions.

```en
To create a database in ISPmanager:
1. Go to the 'Databases' section.
2. Click 'Create Database'.
3. Enter a database name, username, and password.
4. Assign necessary privileges and confirm.
```

--------------------------------

### Linux Malware Detect (LMD) Installation and Scanning

Source: https://firstvds.ru/technology/index

This guide covers the installation and usage of Linux Malware Detect (LMD), an open-source malware scanner for Linux.

```apidoc
Linux Malware Detect (LMD) Installation and Scanning:

Purpose: LMD is a malware scanner for Linux designed to detect malware, exploits, and other malicious threats.

Installation:
  1. Download the latest version from the official website or repository.
     `wget http://www.rfxn.com/downloads/maldet-current.tar.gz`
  2. Extract the archive:
     `tar xfz maldet-current.tar.gz`
  3. Run the installer script:
     `cd maldet-*`
     `sudo sh install.sh`

Configuration:
  - Configuration file: `/usr/local/maldetect/conf.maldet`
  - Key settings:
    - `email_alert_addr`: Email address for alerts.
    - `email_alert_cnt`: Number of alerts to send.
    - `scan_public_dirs`: Whether to scan public directories.
    - `scan_private_dirs`: Whether to scan private directories.
    - `scan_sysstat`: Whether to scan system statistics.
    - `scan_clamscan`: Use ClamAV for scanning (if installed).

Usage:
  - Scan a specific directory:
    `sudo maldet --scan /path/to/directory`
  - Scan all user-owned files:
    `sudo maldet --scan-all --user user1,user2`
  - Scan all files on the system:
    `sudo maldet --scan-all`
  - Monitor for new malware:
    `sudo maldet --monitor`
  - View scan results:
    `sudo maldet --log scanlog.txt`
  - Clean detected malware:
    `sudo maldet --clean SCAN_ID` (Replace SCAN_ID with the ID from scan results)
  - Quarantine detected malware:
    `sudo maldet --quarantine SCAN_ID`
  - View quarantine:
    `sudo maldet --quarantine-list`
  - Restore from quarantine:
    `sudo maldet --restore QUARANTINE_ID`
  - Update malware definitions:
    `sudo maldet --update`
  - Update LMD itself:
    `sudo maldet --update-ver`

Integration with ClamAV:
  - Ensure ClamAV is installed (`sudo apt install clamav` or `sudo yum install clamav`).
  - Update ClamAV definitions: `sudo freshclam`.
  - Enable ClamAV scanning in `conf.maldet` by setting `scan_clamscan=1`.

Scheduling Scans:
  - LMD includes a cron job for daily scans. You can customize its frequency via cron settings.

Example Scan Command:
  `sudo maldet --scan /var/www/html`

Example Clean Command:
  `sudo maldet --clean 1678886400.12345`
```

--------------------------------

### PostgreSQL Installation and Usage

Source: https://firstvds.ru/technology/index

Instructions for installing PostgreSQL on Ubuntu and basic usage guidelines for managing databases and executing SQL queries.

```bash
PostgreSQL Installation (Ubuntu):
sudo apt update
sudo apt install postgresql postgresql-contrib

# Access PostgreSQL prompt:
sudo -u postgres psql
```

--------------------------------

### Start Maldet Monitoring

Source: https://firstvds.ru/technology/antivirus-linux-malware-detect-ustanovka-i-skanirovanie

Starts the Maldet monitoring service for a specified directory. It will track file changes and new files within the given path.

```bash
maldet -m /var/www/html
```

--------------------------------

### Create and Manage User Directories in Linux

Source: https://firstvds.ru/technology/chto-takoe-ftp-protokol

These commands demonstrate how to add a new user, create a directory for them, and set ownership of that directory to the new user.

```bash
adduser new_user
sudo adduser new_user sudo
mkdir /path/to/user/directory
chown new_user /path/to/user/directory
```

--------------------------------

### ClamAV Log Entry Example

Source: https://firstvds.ru/technology/antivirus-clamav-ustanovka-i-skanirovanie

An example of a log entry from ClamAV, indicating that a specific file (an email) was scanned and found to contain a virus. It includes the timestamp, file path, virus name, and a unique identifier.

```text
Tue Jul 14 04:33:26 2020 -> /var/spool/exim4/scan/1jv9p0-00015H-AN/1jv9p0-00015H-AN.eml: Win.Test.EICAR_HDB-1(44d88612fea8a8f36de82e1278abb02f:68) FOUND
```

--------------------------------

### Restart Tomcat Service

Source: https://firstvds.ru/technology/apache-tomcat

Command to restart the Tomcat service on a system using systemd.

```bash
# systemctl restart tomcat
```

--------------------------------

### Combine Certificate and Chain

Source: https://firstvds.ru/technology/apache-tomcat

Concatenates the certificate file and the chain file into a single PEM-encoded file.

```bash
# cat файл_сертификата файл_цепочки > cert.pem
```

--------------------------------

### Convert Key to PEM Format

Source: https://firstvds.ru/technology/apache-tomcat

Moves the private key file to 'key.pem' for use with OpenSSL.

```bash
# mv файл_ключа key.pem
```

--------------------------------

### Maldet Command Reference

Source: https://firstvds.ru/technology/antivirus-linux-malware-detect-ustanovka-i-skanirovanie

Provides a summary of common Maldet commands for managing malware detection, monitoring, and file handling.

```APIDOC
Maldet Commands:

- maldet -m <directory|file>
  Starts monitoring for changes in the specified directory or file.

- maldet -scan <directory|file>
  Initiates a malware scan on the specified path.

- maldet -l
  Displays the Maldet log file, showing scan history and events.

- maldet -q <ID|file>
  Quarantines files associated with a scan ID or a specific file.

- maldet -n <ID|file>
  Attempts to clean (heal) infected files associated with a scan ID or a specific file.

- maldet -s <ID|file>
  Restores files from quarantine associated with a scan ID or a specific file.

- maldet -u
  Updates the virus signature database.

- maldet -d
  Updates the Maldet software version.

- maldet -k
  Stops the Maldet monitoring service.

- maldet -c <file>
  Submits a file for analysis to the Maldet team (requires mail server setup).
```

--------------------------------

### Import PKCS12 to Java Keystore

Source: https://firstvds.ru/technology/apache-tomcat

Imports the generated PKCS12 file into a Java KeyStore (JKS) format, which Tomcat uses for SSL/TLS.

```bash
# keytool -importkeystore -deststorepass 'ПАРОЛЬ_МИН_6_ЗНАКОВ' -destkeypass 'ПАРОЛЬ_МИН_6_ЗНАКОВ' -destkeystore /tmp/domain.jks -srckeystore /tmp/cert_and_key.p12 -srcstoretype PKCS12 -srcstorepass 'ПАРОЛЬ_ИЗ_ПРЕДЫДУЩЕГО_ШАГА' -alias tomcat
```

--------------------------------

### Service Management

Source: https://firstvds.ru/technology/cheat-sheet

Illustrates how to start, restart, and stop services on Linux using '/etc/init.d/' scripts or the cross-platform 'service' command.

```bash
/etc/init.d/<service_name> start/restart/stop
```

```bash
service <service_name> start/restart/stop
```

--------------------------------

### MySQL Database Management

Source: https://firstvds.ru/technology/index

Covers the installation of MySQL on Ubuntu 22.04, remote connection setup, user creation, privilege management, and data types.

```sql
Create User and Grant Privileges:
CREATE USER 'new_user'@'localhost' IDENTIFIED BY 'strong_password';
GRANT SELECT, INSERT, UPDATE, DELETE ON database_name.* TO 'new_user'@'localhost';
FLUSH PRIVILEGES;

Remote Connection Example (my.cnf or my.ini):
[mysqld]
bind-address = 0.0.0.0

# Then restart MySQL service.
```

--------------------------------

### Первичная настройка 1С-Битрикс: Управление сайтом

Source: https://firstvds.ru/technology/bitrix-recipes-first-steps

После подключения к серверу по SSH, необходимо сменить пароль пользователя bitrix и запустить автонастройку системы. Введите '1' для перехода к настройке домена и введите имя домена.

```bash
1
```

--------------------------------

### Sshguard Configuration

Source: https://firstvds.ru/technology/index

This guide explains how to install and configure Sshguard, a tool that protects services from brute-force attacks by monitoring log files and blocking offending IPs.

```apidoc
Sshguard Configuration:

Purpose: Sshguard is a daemon that watches system logs for malicious activities (like brute-force login attempts) and updates firewall rules to block the offending IP addresses.

Installation:
  - Debian/Ubuntu:
    `sudo apt update`
    `sudo apt install sshguard`
  - CentOS/RHEL:
    `sudo yum install epel-release`
    `sudo yum install sshguard`

Configuration:
  - Main configuration file: `/etc/sshguard.conf`
  - Key configuration options:
    - `WHITE_IP_LIST`: A space-separated list of IP addresses or networks to never block.
      Example: `WHITE_IP_LIST=127.0.0.1 192.168.0.0/24`
    - `BLK_PERIOD`: Duration (in seconds) for which an IP address is blocked.
      Default: `3600` (1 hour)
    - `MAX_RETRIES`: Maximum number of failed attempts before blocking.
      Default: `5`
    - `FINDTIME`: Time window (in seconds) during which `MAX_RETRIES` must occur to trigger a block.
      Default: `600` (10 minutes)
    - `LOGFILE`: Path to the log file Sshguard monitors.
      Default: `/var/log/auth.log` (Debian/Ubuntu) or `/var/log/secure` (CentOS/RHEL)
    - `IPTABLE_CHAIN`: The iptables chain where Sshguard adds blocking rules.
      Default: `SSHGUARD`
    - `ENABLE_IMMU`: Enable immutable rules (requires specific kernel support).

Enabling and Starting Sshguard:
  - After installation, Sshguard usually starts automatically.
  - Check status:
    `sudo systemctl status sshguard`
  - Start service:
    `sudo systemctl start sshguard`
  - Enable on boot:
    `sudo systemctl enable sshguard`

Firewall Integration:
  - Sshguard typically integrates with `iptables` or `firewalld`.
  - Ensure your firewall is running and configured to allow Sshguard's rules.
  - If using `firewalld`, you might need to ensure the `sshguard` service is enabled or manually add rules.

Monitoring:
  - Check Sshguard logs for blocked IPs:
    `sudo tail -f /var/log/sshguard.log` (or the path specified in `LOGFILE`)
  - Check iptables rules:
    `sudo iptables -L`
    `sudo iptables -L SSHGUARD`

Example Configuration (`/etc/sshguard.conf`):
```
WHITE_IP_LIST=127.0.0.1 192.168.1.0/24
BLK_PERIOD=7200
MAX_RETRIES=4
FINDTIME=300
LOGFILE=/var/log/auth.log
IPTABLE_CHAIN=SSHGUARD
```

Restarting Sshguard after changes:
  `sudo systemctl restart sshguard`
```

--------------------------------

### Build and Install Nginx

Source: https://firstvds.ru/technology/dobavlenie-moduley-nginx-v-linux-debianubuntucentosalmalinux

Compiles the Nginx source code and installs it to the specified prefix. These commands are run after the configure script has successfully completed.

```bash
make
make install
```

--------------------------------

### Configure Tomcat SSL Connector

Source: https://firstvds.ru/technology/apache-tomcat

This XML snippet configures the HTTPS connector for Tomcat, specifying the keystore file and password for SSL/TLS encryption.

```xml
<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
            maxThreads="150" SSLEnabled="true">
     <SSLHostConfig>
         <Certificate certificateKeystoreFile="conf/domain.jks"
                      certificateKeystorePassword="ПАРОЛЬ_МИН_6_ЗНАКОВ"
                      type="RSA" />
     </SSLHostConfig>
</Connector>
```

--------------------------------

### Backup Creation and Monitoring

Source: https://firstvds.ru/technology/vozmozhnosti-lichnogo-kabineta-kiber-bekap-ex-acronis

This section details how to create a backup, monitor its progress, and verify its completion. It covers initiating a backup manually and checking the status in the 'Devices' section.

```APIDOC
Create Backup:
  Action: Click 'Create backup' button.
  Selection: Choose the backup plan.

Monitor Backup:
  Location: 'Devices' -> 'All devices'.
  Status: Look for a green checkmark and 'OK' in the Status field upon completion.

Verify Backup:
  Location: 'Backup storage' section.
  Details: Check for device, backup plan name, and total backup size.
```

--------------------------------

### Generate PKCS12 Keystore

Source: https://firstvds.ru/technology/apache-tomcat

Creates a PKCS12 file containing the certificate and private key, which is a common format for Java applications like Tomcat.

```openssl
# openssl pkcs12 -export -out /tmp/cert_and_key.p12 -in cert.pem -inkey key.pem -name tomcat
```

--------------------------------

### Install and Configure s3cmd Client

Source: https://firstvds.ru/technology/avtomaticheskoe-rezervnoe-kopirovanie-kak-vosstanovit-bekap-na-servere-bez-ispmanager

Instructions for installing the s3cmd client on Ubuntu/Debian and CentOS systems, followed by creating a configuration file for S3 access.

```bash
# Ubuntu/Debian
apt install -y s3cmd

# CentOS
yum install -y s3cmd

s3cmd --access_key=ключ --secret_key=секрет --region=RegionOne --host=https://s3.hoztnode.net --host-bucket="https://s3.hoztnode.net/%(bucket)" --dump-config >~/.s3cfg
```

--------------------------------

### Example dig Query to Primary Nameserver

Source: https://firstvds.ru/technology/diagnostika-raboty-dns

Demonstrates how to query a domain directly from its primary nameserver to get authoritative DNS information. This is useful for verifying DNS configurations.

```bash
[root@dns ~]# dig firstvds.ru @188.120.241.90

; <<>> DiG 9.7.1-P2 <<>> firstvds.ru @188.120.241.90
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26391
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;firstvds.ru.            IN    A

;; ANSWER SECTION:
firstvds.ru.        3600    IN    A    188.120.241.90

;; AUTHORITY SECTION:
firstvds.ru.        3600    IN    NS    ns1.firstvds.ru.
firstvds.ru.        3600    IN    NS    ns2.firstvds.ru.

;; ADDITIONAL SECTION:
ns1.firstvds.ru.    3600    IN    A    82.146.43.2
ns2.firstvds.ru.    3600    IN    A    82.146.35.143

;; Query time: 71 msec
;; SERVER: 188.120.241.90#53(188.120.241.90)
;; WHEN: Thu Apr 14 15:12:51 2011
;; MSG SIZE  rcvd: 113

```

--------------------------------

### Восстановление резервной копии 1С-Битрикс

Source: https://firstvds.ru/technology/bitrix-recipes-first-steps

Инструкция по восстановлению резервной копии сайта на 1С-Битрикс. Включает создание полной резервной копии через админку сайта и загрузку архива на новый сервер.

```ru
Для разворачивания копии нажмите ссылку `«Восстановить копию»` в приветственном окне.
Откройте админку вашего сайта на текущем сервере, перейдите в раздел `Настройки` — `Инструменты` — `Резервное копирование` и создайте полную резервную копию.
Загрузите созданный бэкап на сервер одним из предложенных способов и следуйте подсказкам системы для разворачивания сайта.
```

--------------------------------

### Переименование, перемещение и копирование файлов в Linux

Source: https://firstvds.ru/technology/basic-linux-commands

Команды для управления файлами и директориями.

```bash
mv <old_name> <new_name>
cp <source> <destination>
mv <source> <destination>
```

--------------------------------

### Postfix Mail Server Setup Guide (DB-based Passwords)

Source: https://firstvds.ru/technology/index

Instructions for setting up Postfix with email passwords stored in a database. This involves database configuration and integration with Postfix and Dovecot.

```en
Setting up Postfix with database-based passwords:
1. Install Postfix, Dovecot, and a database (e.g., MySQL/MariaDB).
2. Create a database and table for user credentials.
3. Configure Postfix and Dovecot to authenticate against the database.
4. Ensure proper database connection and security.
```
Tokens:
Raw