web server drupal

Router //
#Routing
tambah eth1
nano /etc/sysctl.conf > hapus pagar net.ipv4.ip_forward=1
nano /etc/rc.local > tambah iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
retart




//WEB SERVER
#install awal
apt-get install net-tools ssh proftpd unzip

#install php7.0 butuh koneksi internet
echo "deb http://ftp.de.debian.org/debian stretch main" >> /etc/apt/sources.list
apt-get update
apt-get install postgresql php7.0-pgsql php7.0-gd php7.0-fpm php7.0-xml php7.0-cli nginx

#konfigurasi nginx
nano /etc/nginx/sites-available/default
>tambah index.php
>hapus semua # dibagian location ~\.php$ KECUALI fastcgi_pass 127.0.0.1:9000

#konfigurasi php5-fpm
>ctrw+w cari cgi.fix_path
>hapus ; & hapus 0

#restart nginx & php5.6-fpm
service nginx restart
service php5.6-fpm restart

#beri akses penuh /var/www/html/
chmod 777 /var/www/html/

#buat database
su postgres
createuser -P felix		#membuat user
createdb -O felix drupal 	#membuat database O < o kapital
exit

#installasi drupal
>copy drupal.zip ke /var/www/html/
cd /var/www/html/
unzip drupal.zip
cd drupal/sites/default
mkdir files
chmod 777 files
cp default.settings.php settings.php
chmod 777 settings.php




//DNS
//instal dns
apt-get install bind9
>atur seperti biasa
nano named.conf.options > forwarders
nano /etc/resolv.conf > ip server
>restart bind
>tambahkan ip di nano /etc/resolv.conf
>restart network



//SSL
//install openvpn
apt-get install openvpn
cp -R /usr/share/easy-rsa/ /etc/nginx/
cd /etc/nginx/easy-rsa/
nano vars
> export KEY_CONFIG=`$EASY_RSA/whichopensslcnf $EASY_RSA` ubah menjadi
export KEY_CONFIG=/etc/nginx/easy-rsa/openssl-1.0.0.cnf
source vars
./clean-all
./build-ca
./build-dh
cd keys
cp ca.* dh2048.pem /etc/nginx
nano /etc/nginx/sites-available/default
>hapus pagar di depan listen 443
>tambahkan
ssl_certificate ca.crt;
ssl_certificate_key ca.key;


//Virtual Host
atur dns tambahkan sub domain
cd /etc/nginx/sites-available/
cp default web
listen 80 hilangkan default server
ssl hilangkan default server
root /var/www/html/drupal
server_name subdomain
chmod 777 web
ln -s /etc/nginx/sites-available/web /etc/nginx/sites-enabled
service nginx restart