Webserver

curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | sudo gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg

curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | sudo tee /etc/apt/sources.list.d/caddy-stable.list

sudo apt update

sudo apt install -y caddy

caddy version

sudo systemctl status caddy --no-pager

sudo mkdir -p /var/www/example

echo '<h1>Caddy läuft</h1>' | sudo tee /var/www/example/index.html

sudo chown -R www-data:www-data /var/www/example

example.de {
    root * /var/www/example
    file_server
}

sudo caddy fmt --overwrite /etc/caddy/Caddyfile

sudo caddy validate --config /etc/caddy/Caddyfile

sudo systemctl reload caddy

sudo apt install -y php-fpm php-cli php-mysql php-curl php-mbstring php-xml php-zip php-gd php-intl php-bcmath php-imagick php-opcache

find /run/php -maxdepth 1 -type s -name 'php*-fpm.sock'

example.de {
    root * /var/www/example/public

    encode zstd gzip
    php_fastcgi unix//run/php/php8.5-fpm.sock
    file_server
}

api.example.de {
    reverse_proxy 127.0.0.1:3000
}

sudo apt update

sudo apt install -y apache2 php-fpm php-cli php-mysql php-curl php-mbstring php-xml php-zip php-gd php-intl php-bcmath php-imagick php-opcache

sudo a2enmod proxy_fcgi setenvif rewrite headers expires ssl http2

sudo a2enconf php8.5-fpm

sudo systemctl restart apache2

sudo mkdir -p /var/www/example/public

sudo chown -R www-data:www-data /var/www/example

sudo find /var/www/example -type d -exec chmod 755 {} \;

sudo find /var/www/example -type f -exec chmod 644 {} \;

sudo nano /etc/apache2/sites-available/example.conf

<VirtualHost *:80>
    ServerName example.de
    ServerAlias www.example.de
    DocumentRoot /var/www/example/public

    <Directory /var/www/example/public>
        Options FollowSymLinks
        AllowOverride All
        Require all granted
    </Directory>

    ErrorLog ${APACHE_LOG_DIR}/example-error.log
    CustomLog ${APACHE_LOG_DIR}/example-access.log combined
</VirtualHost>

sudo a2ensite example.conf

sudo a2dissite 000-default.conf

sudo apache2ctl configtest

sudo systemctl reload apache2

sudo apt install -y certbot python3-certbot-apache

sudo certbot --apache -d example.de -d www.example.de

sudo systemctl status apache2 --no-pager

sudo ss -lntp | grep -E ':80|:443'

sudo journalctl -u apache2 -n 100 --no-pager

sudo apt update

sudo apt install -y nginx php-fpm php-cli php-mysql php-curl php-mbstring php-xml php-zip php-gd php-intl php-bcmath php-imagick php-opcache

find /run/php -maxdepth 1 -type s -name 'php*-fpm.sock'

systemctl list-units --type=service | grep php.*fpm

sudo mkdir -p /var/www/example/public

sudo chown -R www-data:www-data /var/www/example

sudo find /var/www/example -type d -exec chmod 755 {} \;

sudo find /var/www/example -type f -exec chmod 644 {} \;

server {
    listen 80;
    listen [::]:80;

    server_name example.de www.example.de;
    root /var/www/example/public;
    index index.php index.html;

    client_max_body_size 64M;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.5-fpm.sock;
    }

    location ~ /\. {
        deny all;
    }

    location = /xmlrpc.php {
        deny all;
    }

    access_log /var/log/nginx/example-access.log;
    error_log /var/log/nginx/example-error.log;
}

sudo nano /etc/nginx/sites-available/example

sudo ln -s /etc/nginx/sites-available/example /etc/nginx/sites-enabled/example

sudo rm -f /etc/nginx/sites-enabled/default

sudo nginx -t

sudo systemctl reload nginx

sudo apt install -y certbot python3-certbot-nginx

sudo certbot --nginx -d example.de -d www.example.de

sudo systemctl status nginx --no-pager

sudo nginx -t

sudo journalctl -u nginx -n 100 --no-pager

sudo apt install -y software-properties-common

sudo add-apt-repository -y ppa:ondrej/php

sudo apt update

apt-cache search '^php[0-9]\.[0-9]-fpm$'

sudo apt install -y php8.3-fpm php8.3-cli

dpkg -l 'php8.5-*' | awk '/^ii/{print $2}'

sudo apt install -y $(dpkg -l 'php8.5-*' | awk '/^ii/{print $2}' | sed 's/^php8\.5-/php8.3-/' | tr '\n' ' ')

sudo update-alternatives --config php

sudo apt install -y php-fpm php-cli php-mysql php-curl php-mbstring php-xml php-zip php-gd php-intl php-bcmath php-imagick php-opcache

php -v

php -m

php --ini

sudo systemctl restart php8.5-fpm

sudo systemctl status php8.5-fpm --no-pager

memory_limit = 256M
upload_max_filesize = 64M
post_max_size = 64M
max_execution_time = 120
max_input_vars = 3000
expose_php = Off
display_errors = Off
log_errors = On

sudo apt install -y mariadb-server

sudo systemctl enable --now mariadb

sudo mariadb-secure-installation

sudo mariadb

CREATE DATABASE wordpress
  CHARACTER SET utf8mb4
  COLLATE utf8mb4_unicode_ci;

CREATE USER 'wordpress'@'localhost'
  IDENTIFIED BY 'EIN_SEHR_STARKES_PASSWORT';

GRANT ALL PRIVILEGES ON wordpress.* TO 'wordpress'@'localhost';

FLUSH PRIVILEGES;
EXIT;

sudo ss -lntp | grep 3306

cd /tmp

curl -O https://wordpress.org/latest.tar.gz

tar -xzf latest.tar.gz

sudo rsync -a wordpress/ /var/www/example/public/

sudo chown -R www-data:www-data /var/www/example/public

sudo find /var/www/example/public -type d -exec chmod 755 {} \;

sudo find /var/www/example/public -type f -exec chmod 644 {} \;

cd /var/www/example/public

sudo -u www-data cp wp-config-sample.php wp-config.php

sudo -u www-data nano wp-config.php

define( 'DB_NAME', 'wordpress' );
define( 'DB_USER', 'wordpress' );
define( 'DB_PASSWORD', 'EIN_SEHR_STARKES_PASSWORT' );
define( 'DB_HOST', 'localhost' );
define( 'DB_CHARSET', 'utf8mb4' );

curl -s https://api.wordpress.org/secret-key/1.1/salt/

sudo apt install -y ufw

sudo ufw default deny incoming

sudo ufw default allow outgoing

sudo ufw allow OpenSSH

sudo ufw allow 80/tcp

sudo ufw allow 443/tcp

sudo ufw enable

sudo ufw status verbose

sudo usermod -aG www-data USERNAME

sudo chown -R USERNAME:www-data /var/www/example

sudo find /var/www/example -type d -exec chmod g+s {} \;

echo 'umask 002' | sudo -u USERNAME tee -a /home/USERNAME/.bashrc

sudo apt install -y unattended-upgrades

sudo dpkg-reconfigure --priority=low unattended-upgrades

sudo ss -lntp | grep -E ':80|:443|:3306'

systemctl --type=service --state=running | grep -E 'caddy|apache2|nginx|php.*fpm|mariadb|mysql'

sudo caddy validate --config /etc/caddy/Caddyfile

sudo apache2ctl configtest

sudo nginx -t

sudo journalctl -fu caddy

sudo journalctl -fu apache2

sudo journalctl -fu nginx

sudo journalctl -fu php8.5-fpm

sudo journalctl -fu mariadb