Responsitory
Tambahkan responsitory di
/etc/apt/source-list
deb http://deb.debian.org/debian
bullseye main
deb-src http://deb.debian.org/debian
bullseye main
deb http://security.debian.org/debian-security
bullseye-security main
deb-src
http://security.debian.org/debian-security bullseye-security main
deb http://deb.debian.org/debian
bullseye-updates main
deb-src http://deb.debian.org/debian
bullseye-updates main
deb http://deb.debian.org/debian
bullseye-backports main
deb-src http://deb.debian.org/debian
bullseye-backports main
Web server
nano /etc/network/interface
auto enp0s3
iface enp0s3 inet static
address 192.168.200.1
netmask 255.255.255.0
auto enp0s8
iface enp0s8 inet dhcp
/etc/init.d/networking restart
apt update
apt install apache2 -y
dns
apt install bind9 -y
cd /etc/bind/
cp db.local musa.com
nano musa.com
nano named.conf.local
zone”musa.com”{
type master;
file”/etc/bind/musa.com”;
};
systemctl restart bind9
nslookup musa.com
nslookup www.musa.com
cd /etc/apache2/sites-aviable
cp 000-deffault.conf musa.com.conf
nano musa.com.conf
servername musa.com
cp 000-deffault.conf www.musa.com.conf
nano www.musa.com.conf
servername www.musa.com
a2ensite musa.com.conf
a2ensite www.musa.com.conf
systemctl reload apache2
ssh
nano /etc/ssh/sshd-config
tambah/ubah
port 22
permit root login yes
ssl
apt-get install openssl
mkdir /etc/ssl/apache
cd /etc/ssl/apache/
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -out apache.crt -keyout apache.key
Country Name (2 letter code) [AU]:ID
State or Province Name (full name) [Some-State]:Jawa Barat
Locality Name (eg, city) []:Bekasi
Organization Name (eg, company) [Internet Widgits Pty Ltd]:SMK
Organizational Unit Name (eg, section) []:TKJ
Common Name (e.g. server FQDN or YOUR name) []:www.server1.xyz
Email Address []:fathin@server1.xyz
a2enmod ssl
cp default-ssl www_secure
SSLCertificateFile /etc/ssl/apache/apache.crt
SSLCertificateKeyFile /etc/ssl/apache/apache.key
systemctl reload apache2
a2enmod ssl
ftp
apt update
apt upgrade
apt install proftpd -y
cacti
apt install snmp snmpd php-snmp rrdtool librrds-perl unzip
curl git gnupg2 -y
apt install php php-mysql libapache2-mod-php php-xml
php-ldap php-mbstring php-gd php-gmp php-intl -y
nano /etc/php/*/apache2/php.ini
memory_limit = 512M
max_execution_time = 60
date.timezone = Asia/Jakarta
nano /etc/php/*/cli/php.ini
memory_limit = 512M
max_execution_time = 60
date.timezone = Asia/Jakarta
systemctl restart apache2
apt install mariadb-server -y
systemctl start mariadb
systemctl enable mariadb
mysql
CREATE DATABASE cactidb DEFAULT
CHARACTER SET utf8 COLLATE utf8_unicode_ci;
GRANT ALL PRIVILEGES ON cactidb.* TO 'cacti_user'@'localhost' IDENTIFIED BY 'password';
ALTER DATABASE cactidb
CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
flush privileges;
exit;
mysql mysql <
/usr/share/mysql/mysql_test_data_timezone.sql
mysql
GRANT SELECT ON mysql.time_zone_name TO
cacti_user@localhost;
flush privileges;
exit;
nano /etc/mysql/mariadb.conf.d/50-server.cnf
#collation-server
= utf8mb4_general_ci
#character-set-server = utf8mb4
collation-server = utf8mb4_unicode_ci
character-set-server=utf8mb4
max_heap_table_size = 128M
tmp_table_size = 128M
join_buffer_size = 128M
innodb_file_format = Barracuda
innodb_large_prefix = 1
innodb_buffer_pool_size = 1G
innodb_flush_log_at_timeout = 3
innodb_read_io_threads = 32
innodb_write_io_threads = 16
innodb_io_capacity = 5000
innodb_io_capacity_max = 10000
innodb_doublewrite = 0
systemctl restart mariadb
wget https://www.cacti.net/downloads/cacti-latest.tar.gz
tar -zxvf cacti-latest.tar.gz
mv cacti-1* /var/www/html/cacti
mysql cactidb < /var/www/html/cacti/cacti.sql
cd /var/www/html/cacti/include/
cp config.php.dist config.php
nano config.php
$database_type
= 'mysql';
$database_default = 'cactidb';
$database_hostname = 'localhost';
$database_username = 'cacti_user';
$database_password = 'password';
$database_port = '3306';
chown -R www-data:www-data /var/www/html/cacti/
chmod -R 775 /var/www/html/cacti/
nano /etc/cron.d/cacti
*/5 * * * * www-data php /var/www/html/cacti/poller.php > /dev/null 2>&1
nano /etc/apache2/sites-available/cacti.conf
Alias /cacti /var/www/html/cacti
<Directory /var/www/html/cacti>
Options +FollowSymLinks
AllowOverride None
<IfVersion >= 2.3>
Require all granted
</IfVersion>
<IfVersion < 2.3>
Order Allow,Deny
Allow from all
</IfVersion>
AddType application/x-httpd-php .php
<IfModule mod_php.c>
php_flag magic_quotes_gpc Off
php_flag short_open_tag On
php_flag register_globals Off
php_flag register_argc_argv On
php_flag track_vars On
# this setting is necessary for some locales
php_value mbstring.func_overload 0
php_value include_path .
</IfModule>
DirectoryIndex index.php
</Directory>
a2ensite cacti.conf
systemctl restart apache2
web mail
apt install postfix dovecot-imapd dovecot-pop3d
inetrnet site
musa.com
dpkg-reconfigure postfix
1
musa.id, musa.id, debian,
localhost.localdomain, localhost
no
Tamabh 0.0.0.0/0
0
+
Ipv4
nano /etc/postfix/main.cf
tamabah
home_mailbox = Maildir/
cd /etc/dovecod/
nano dovecod.conf
listen = *
cd conf.d/
nano 10-auth.conf
disable_plaintext_auth = no
nano 10-mail.conf
mail_location = maildir:~/Maildir
cd ..
service postfix restart
service dovecot restart
adduser user1
adduser user2
maildirmake.dovecot /etc/skel/maildir
service postfix restart
service dovecot restart
telnet localhost 25
mail from: user1
rcpt to: user2
data
hallo usr2
.
Quit
telnet localhost 110
user user2
pass 1
stat
retr 1
Quit
apt install phpmyadmin -y
Yes
1
1
D pkg reconfigure phpmyadmin
Yes
Tcp
BUAT DATABASE
mysql -u root –p
Masukan password
CREATE DATABASE roundcube;
GRANT ALL ON roundcube.* TO
'roundcube'@'localhost' IDENTIFIED BY 'r4H@siaku';
flush privileges;
exit;
systemctl restart mariadb
buka phpmyadmin
user account
add usr account
usr roundcube
local
r4H@siaku
r4H@siaku
check all
go
apt install roundcube -y
yes
r4H@siaku
r4H@siaku
cd /etc/roundcube/
nano config.inc.php
$config['default_host'] = 'musa.id';
$config['smtp_server'] = 'localhost';
$config['smtp_port'] = 25;
$config['smtp_user'] = '';
$config['smtp_pass'] = '';
cd /etc/apache2/apache2.conf
copy ngarah /var/liib/roundcube/
cek domain
Vpn
apt install pptpd -y
nano /etc/ppp/pptpd-options
ms-dns 8.8.8.8
ms-dns 8.8.4.4
nano /etc/ppp/chap-secrets
namauser1 pptpd
passworduser1 *
namauser2 pptpd
passworduser2 *
nano /etc/pptpd.conf
localip 10.0.0.1
remoteip 10.0.0.100-200
nano /etc/sysctl.conf
net.ipv4.ip_forward = 1
sysctl -p
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
ip address
systemctl start pptpd
systemctl enable pptpd
LDAP
apt install slapd ldap-utils
dpkg-reconfigure slapd
no
ldap.musa.com
ldap.musa.com
1
1
Mbd
No
Yes
No
nano /etc/ldap/ldap.conf
BASE
dc=subdomain,dc=your-domain,dc=com
URI
ldap://localhost
ldapsearch -x
apt install ldap-account-manager
nano /etc/apache2/sites-available/ldap-account-manager.conf
<VirtualHost *:80>
ServerName ldap.musa.com
DocumentRoot /usr/share/ldap-account-manager
ErrorLog ${APACHE_LOG_DIR}/ldap-account-manager_error.log
CustomLog ${APACHE_LOG_DIR}/ldap-account-manager_access.log combined
Alias /lam /usr/share/ldap-account-manager
<Directory />
Options FollowSymLinks
AllowOverride All
Require all granted
DirectoryIndex index.html
</Directory>
<Directory /var/lib/ldap-account-manager/tmp>
Options -Indexes
</Directory>
<Directory /var/lib/ldap-account-manager/tmp/internal>
Options -Indexes
Require all denied
</Directory>
<Directory /var/lib/ldap-account-manager/sess>
Options -Indexes
Require all denied
</Directory>
<Directory /var/lib/ldap-account-manager/config>
Options -Indexes
Require all denied
</Directory>
<Directory /usr/share/ldap-account-manager/lib>
Options -Indexes
Require all denied
</Directory>
<Directory /usr/share/ldap-account-manager/help>
Options -Indexes
Require all denied
</Directory>
<Directory /usr/share/ldap-account-manager/locale>
Options -Indexes
Require all denied
</Directory>
</VirtualHost>
a2ensite ldap-account-manager.conf
systemctl reload apache2
SETTING DHCP
https://rinosafrizal.com/konfigurasi-dhcp-server/
/et
nano /etc/dhcp/dhcpd.conf
hilangkan tanda pagar pada :
# A slightly different configuration for
an internal subnet.
Simpan
nano /etc/default/isc-dhcp-server
tambahkan interface pada :
NTERFACESv4="ens34"
systemctl restart isc-dhcp-server.service
SETTING ROUTING
https://portalgtkberbagi.blogspot.com/2021/01/konfigurasi-routing-pada-debian-router.html
apt install net-tools dnsutils
nano /etc/sysctl.conf
hilangkan tanda pagar pada :
net.ipv4.ip_forward=1
simpan lalu jalankan
sysctl –p
install ip tables
apt install iptables iptables-persistent
tambahkan table routing
iptables -t nat -A POSTROUTING -o ens33 -j MASQUERADE
netfilter-persistent save
netfilter-persistent reload
catatan ens33 interface sumber internet
reboot system
monitoring snmp
snmp print
snmp set
enabled=yes
ip