Tutorial: CentOS 6: Instalar Nginx, PHP-FPM, Vsftpd, BIND, MariaDB y phpMyAdmin

yum remove http* httpd* php* mysql* mysqld* bind* mail* sendmail* postfix* dovecot* selinux* firewall* -y

yum install wget nano epel-release -y

yum upgrade -y

echo 'ns.ejemplo.com' > /etc/hostname 
hostname ns.ejemplo.com

yum install nano -y 
nano /etc/sysconfig/network

NETWORKING=yes 
HOSTNAME=ns.ejemplo.com

service network restart

hostname

nano /etc/yum.repos.d/MariaDB.repo

[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.0/centos6-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1

yum upgrade -y

yum install perl bind nginx php php-mysql php-fpm  MariaDB-server MariaDB-client -y

chkconfig nginx on
chkconfig named on
service nginx start
service named start

chkconfig mysql on
service mysql start

mysql_secure_installation

service mysql restart

nano /etc/php.ini

date.timezone = America/Santo_domingo

nano /etc/php-fpm.d/www.conf

user = nginx 
group = nginx

chown -R nginx:nginx /var/lib/php/session

chkconfig php-fpm on 
service php-fpm start

rm -rf /etc/nginx/nginx.conf.default

useradd -m USUARIO -s /sbin/nologin

passwd usuario (ponlo primero y luego enter)

rm -rf  /etc/nginx/nginx.conf 
nano /etc/nginx/nginx.conf

user  nginx;
worker_processes  16;
pid /var/run/nginx.pid;
events {
worker_connections  2048;
}
http {
include /etc/nginx/mime.types;
default_type application/octet-stream;
log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for"';
sendfile on;
keepalive_timeout 15;
gzip on;
client_max_body_size 100M;
server_names_hash_bucket_size 64;
server {
listen 80;
listen 443 ssl;
server_name *.ejemplo.com ns.ejemplo.com ns1.ejemplo.com ns2.ejemplo.com localhost;
ssl off;
return 301 $scheme://www.ejemplo.com;
location / {
root   /home/usuario;
}
}

server {
listen 80;
listen 443 ssl;
server_name www.ejemplo.com ejemplo.com;
ssl off;
location / {
root /home/usuario;
index index.php index.html index.htm;
error_page 404 $scheme://www.ejemplo.com;
#include /home/usuario/*.conf;
}
location ~ \.php$ {
root /home/usuario;
try_files $uri =404;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
error_page 404 $scheme://www.ejemplo.com;
}
}
}

service nginx restart

nano /etc/hosts

0.0.0.0 ejemplo.com 
0.0.0.0 ns1.ejemplo.com 
0.0.0.0 ns2.ejemplo.com

127.0.1.1 ns.ejemplo.com ns.ejemplo.com 
127.0.0.1 localhost 
0.0.0.0 ejemplo.com 
0.0.0.0 ns1.ejemplo.com 
0.0.0.0 ns2.ejemplo.com

service named restart

rm -rf /etc/named.conf 
nano /etc/named.conf

options { 
listen-on port 53 { 127.0.0.1; 0.0.0.0; }; 
        listen-on-v6 port 53 { ::1; }; 
        directory "/var/named"; 
        dump-file "/var/named/data/cache_dump.db"; 
        allow-query     { any; }; 
        allow-transfer  { none; }; 
        version none; 
        recursion no; 
        dnssec-enable yes; 
        dnssec-validation yes; 
        dnssec-lookaside auto; 
        bindkeys-file "/etc/named.iscdlv.key"; 
        managed-keys-directory "/var/named/dynamic"; 
        pid-file "/run/named/named.pid"; 
        session-keyfile "/run/named/session.key"; 
}; 
logging { 
        channel default_debug { 
                file "data/named.run"; 
                severity dynamic; 
        }; 
}; 
zone "." IN { 
type hint; 
        file "named.ca"; 
}; 
zone "ns.ejemplo.com" IN { 
        type master; 
        file "ns.ejemplo.com.db"; 
        allow-update { none; }; 
}; 
zone "ns1.ejemplo.com" IN { 
        type master; 
        file "ns1.ejemplo.com.db"; 
        allow-update { none; }; 
}; 
zone "ns2.ejemplo.com" IN { 
        type master; 
        file "ns2.ejemplo.com.db"; 
        allow-update { none; }; 
}; 
zone "ejemplo.com" IN { 
        type master; 
        file "ejemplo.com.db"; 
        allow-update { none; }; 
}; 
include "/etc/named.rfc1912.zones"; 
include "/etc/named.root.key";

$TTL 30 
@ 30 IN SOA ns1.ejemplo.com. correo.gmail.com. ( 
2014120104; 
2000; 
300; 
1209600; 
300); 
ns.ejemplo.com. 30 IN NS ns1.ejemplo.com. 
ns.ejemplo.com. 30 IN NS ns2.ejemplo.com. 
ns.ejemplo.com. 30 IN A 0.0.0.0 
ns.ejemplo.com. IN MX 0 ns.ejemplo.com. 
ns.ejemplo.com. IN TXT "v=spf1 +a +mx +ip4:0.0.0.0 ~all" 
ns.ejemplo.com. IN TXT "v=DMARC1; p=none; rua=mailto:correo@gmail.com"

$TTL 30 
@ 30 IN SOA ns1.ejemplo.com. correo.gmail.com. ( 
2014120104; 
2000; 
300; 
1209600; 
300); 
ns1.ejemplo.com. 30 IN NS ns1.ejemplo.com. 
ns1.ejemplo.com. 30 IN NS ns2.ejemplo.com. 
ns1.ejemplo.com. 30 IN A 0.0.0.0 
ns1.ejemplo.com. IN MX 0 ns.ejemplo.com. 
ns1.ejemplo.com. IN TXT "v=spf1 +a +mx +ip4:0.0.0.0 ~all" 
ns1.ejemplo.com. IN TXT "v=DMARC1; p=none; rua=mailto:correo@gmail.com"

$TTL 30 
@ 30 IN SOA ns1.ejemplo.com. correo.gmail.com. ( 
2014120104; 
2000; 
300; 
1209600; 
300); 
ns2.ejemplo.com. 30 IN NS ns1.ejemplo.com. 
ns2.ejemplo.com. 30 IN NS ns2.ejemplo.com. 
ns2.ejemplo.com. 30 IN A 0.0.0.0 
ns2.ejemplo.com. IN MX 0 ns.ejemplo.com. 
ns2.ejemplo.com. IN TXT "v=spf1 +a +mx +ip4:0.0.0.0 ~all" 
ns2.ejemplo.com. IN TXT "v=DMARC1; p=none; rua=mailto:correo@gmail.com"

$TTL 30 
@ 30 IN SOA ns1.ejemplo.com. correo.gmail.com. ( 
2014120104; 
2000; 
300; 
1209600; 
300); 
ejemplo.com. 30 IN NS ns1.ejemplo.com. 
ejemplo.com. 30 IN NS ns2.ejemplo.com. 
ejemplo.com. 30 IN A 0.0.0.0 
ejemplo.com. IN MX 0 ns.ejemplo.com. 
www 30 IN A  0.0.0.0 
ejemplo.com. IN TXT "v=spf1 +a +mx +ip4:0.0.0.0 ~all" 
ejemplo.com. IN TXT "v=DMARC1; p=none; rua=mailto:correo@gmail.com"

service named restart

yum install php-xml php-xmlrpc php-pdo php-gd gd zip unzip php-zip php-unzip php-soap php-cli php-imap php-ldap php-odbc php-pecl-apc php-magickwand php-mbstring php-mcrypt php-snmp php-tidy -y

yum upgrade -y  
yum install vsftpd -y 
rm -rf /etc/vsftpd/vsftpd.conf

nano /etc/vsftpd/vsftpd.conf

anonymous_enable=NO
local_enable=YES
write_enable=YES
local_umask=022
anon_upload_enable=NO
anon_mkdir_write_enable=NO
dirmessage_enable=YES
xferlog_enable=NO
connect_from_port_20=NO
xferlog_std_format=NO
idle_session_timeout=120
data_connection_timeout=120
ascii_upload_enable=YES
ascii_download_enable=YES
ftpd_banner=Funcionando
ls_recurse_enable=YES
listen=YES
listen_ipv6=NO
pam_service_name=vsftpd
userlist_enable=YES
tcp_wrappers=YES
ssl_enable=NO
allow_anon_ssl=NO
force_local_data_ssl=NO
force_local_logins_ssl=NO
require_ssl_reuse=NO
pasv_enable=YES
listen_port=4040

service vsftpd start 
chkconfig vsftpd on

yum install phpmyadmin -y

ln -s /usr/share/phpMyAdmin /home/usuario

cd /home/usuario 
mv phpMyAdmin EJEMPLO

cd /home/usuario 
mv phpMyAdmin phpmadm4040

ejemplo.com/phpmadm4040

service php-fpm restart

rm -rf /usr/share/phpMyAdmin/setup

rm -rf /etc/httpd/conf.d/phpMyAdmin.conf

chmod 777 -R /etc/phpMyAdmin
chmod 777 -R /usr/share/phpMyAdmin
cd /etc/phpMyAdmin
chmod 775 config.inc.php

rm -rf /etc/ssh/sshd_config 
nano /etc/ssh/sshd_config

Port 4444
Protocol 2
SyslogFacility AUTHPRIV
PermitRootLogin yes
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication yes
ChallengeResponseAuthentication no
GSSAPIAuthentication no
GSSAPICleanupCredentials yes
UsePAM yes
X11Forwarding yes
UseDNS no
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS
Subsystem sftp    /usr/libexec/openssh/sftp-server

service sshd restart

cd /etc/phpMyAdmin
chmod 777 config.inc.php

cd /
wget http://rpms.famillecollet.com/enterprise/remi-release-7.rpm
rpm -Uvh remi-release-7.rpm
rm -rf remi-release-7.rpm
yum upgrade -y

cd /
wget http://rpms.famillecollet.com/enterprise/remi-release-6.rpm
rpm -Uvh remi-release-6.rpm
rm -rf remi-release-6.rpm
yum upgrade -y

 yum --enablerepo=remi install php -y

chown nginx:nginx -R  /var/lib/php/session/
chmod 777 /var/lib/php/session/

options {
        listen-on port 53 { any; };
        listen-on-v6 port 53 { any; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { any; };
        allow-transfer  { any; };
        version none;
        recursion no;