Perfect Ubuntu 20 Nginx Web Server

[simplysexyboy]

Hey Folks,

This thread was created for special requests from Babiato family members. We had a giveaway for Perfect Ubuntu 20 Nginx web server installation. This thread created for them when facing issues will post here, so not only for them also for babiato Community, who wants to run their own server, can see and study.

Winner :
Silva
gwdwdw
vijihel
rozbeh1212
tegek
guguk
bichthao
die2mrw007
mainone
actnow
Akash Golder
Ayobami
cybercliff
ChintanBhat
swa413
jhaycy17
Cyanide
wibuthemes
hellearth
rika_angelica
abaeakili
billasilvan
runtah17
tuwes29
johnwick2614
Linust
lara007
latestdown
Hygine
Aceee
jong07
Chicano
prodsan
flux88
GodDevil
luffy101
ultimator
sashikanta
flux88
underwater
panthchristian4990
jong07


Giveaway Link: FINISHED !!!

https://babia.to/threads/giveway-fr...and-hand-over-to-you.40531/page-3#post-423133

Installation after the server will look like this. Check out the speed: HERE, there is no minification or boosting plugins or js something.

APP will be installed:

• Nginx (with HTTP/2 enabled) 1.18
• PHP-FPM 7.2/7.3/7.4?
• MySQL 8.0 or MariaDB 10.4 (depending on what you choose when you provision the server)
• Redis 5.0
• Git
• Composer
• WP-CLI
• Certbot (for Let’s Encrypt TLS/SSL certificates)
• UFW (firewall)
• Fail2ban

Configuration and Tweaks:

• PHP, PHP FPM, opcache
• Nginx General Boost Conf
• Fast CGI Cache Boost
• Redis Boost
• MariaDB MySQL Tuner ( Boost )
• WordPress Config Tweak
• Real Cron Job, Disable WP Cron!
• Server-side Webp Serve ( With EWWW plugins )

FastCGI Cache Will be exclude :

• Validation date: 7 days caching

1. wp-.*.php
2. /feed/
3. index.php
4. sitemap(_index)?.xml
5. wp-comments-popup.php
6. wp-links-opml.php
7. wp-locations.php
8. /cart.*
9. /basket.*
10. /checkout.*
11. /my-account.*
12. /offer.*
13. /order-received.*
14. /order-confirmed.*
15. /.well-know.*
16. /store.*
17. /addons.*

Server Side Protection

1. XMLRPC,
2. WPlogin Limitation
3. Spam
4. SQL Injection
5. Bad Agent Blocking
6. Nginx Server Harding
7. Redis ( closing outside port )
8. PHP hardening
9. Extra directory protections.

DO NOT INSTALL PLUGINS :

1. SSL
2. Limit Login
3. ANY CACHING PLUGIN

Install this plugin:

1. Query Monitor
2. Server IP & Memory Usage Display
3. WP Control
4. WP OPcache

Disclaimer: READY CAREFULLY

1. I don't promise to answer questions.
2. I could be lately answer questions.
3. IF you have installed another package or app to your server, I don't promise to answer questions. Since the installed package, I don't know I can not give the right answer.
4. If you don't have Amazon credits or a google account, I can not spin up an instance, so please get or do not send me a PM.
5. All the installation will be together, so I can not do it another time. If you are not yet ready, I'm sorry you lost your chance.
6. I do not answer the WP question since many people uploading many plugins and page builders can make your website slow like the turtle and be hacked too...
7. After I have transferred to all your credentials, you should change all your passwords. I do not respond. Once I have handover to you, I will no longer behave access.
8. It would be best if you kept an eye on your server updates. I will set a cron job, making an update for only security updates.

 

[simplysexyboy]

All Server, App and WP
Configuration Files

Spoiler: password

babiato2021

 

[ChintanBhat]

So, What to do now? Should I send you my google account?

 

[simplysexyboy]

Yes, all the other information with I have mention in giveaway thread

you create new email address from google.

 

[simplysexyboy]

Important notice

I highly suggest after the installation do not install those software to your server

control panel
Phpmyadmin
Memcached or memcache
Any daemon
Netstat or any performance matrix
Just leave at is it

 

[simplysexyboy]

Please be sure before contact with me you get 300$ credits from Google or Amazon 350$.

 

[simplysexyboy]

Do not Install Any Rate Limit Plugins, I have added manual Configuration to the Nginx Server Block
it means who is trying to login more then 4 to 9 times it will redirect to 444.

try my website login page brute force : https://easyecommerce.tools/wp-login.php

Code:
###
# Rate Limit for wp-login.php
###

location = /wp-login.php {
limit_req zone=one burst=2 nodelay;
limit_req_status 444;
include fastcgi.conf;
fastcgi_pass unix:/run/php/php7.4-idealrx.sock;
include sites-available/idealrx.biz/location/*;
}

 

[simplysexyboy]

Your server configurated nginx Server block serving for WEBP images.

Now you can use the EWWW plugin directly no Configuration needed.

Code:
# WEbp Handler for EWWW

location ~* ^.+\.(png|jpe?g)$ {
  add_header Vary Accept;
  try_files $uri$webp_suffix $uri =404;
}

 

[FADLI-BATAM]

All Server, App and WP
Configuration Files

The file you requested has been deleted

 

[simplysexyboy]

The file you requested has been deleted

i updated the link

 

[simplysexyboy]

PLEASE WATCH THOSE COURSES:

https://babia.to/threads/nginx-fundamentals-high-performance-servers-from-scratch.41192/

https://babia.to/threads/amazon-ec2-master-class-with-auto-scaling-load-balancer.41190/

https://babia.to/threads/the-perfect-nginx-server-ubuntu-edition.41167/

https://babia.to/threads/secure-vps-in-ubuntu-18-04-with-letsencrypt-nginx-php-mysql.41195/

 

[simplysexyboy]

For CDN, please use WP Offload Media,
WP offload media working with EWWW Flawlessly.


Your Server APP Configured.

Redis :
Memory Ram increased to 256 MB
ALL FYU: meaning is start from the oldest data deletes if acceded 256MB.

PHP:
Memory incrested to 256 MB
Opcache Enabled
Opcache Memory 212MB
Opcache String 32MB

FPM:
Pools are configured Automatically
If your site traffic spikes will automatically increase the PHP FPM worker.

WP:
WordPress debugging mode enabled
WP Memory increased to 256



I don't suggest to increase those numbers. Its not like more is better not working this way.

 

[jong07]

@simplysexyboy Sir do I need to configure first my NGINX with my domain to show it in my IP, not in the AWS ec2 server?

 

[GodDevil]

@simplysexyboy Thanks for the win. I did not get any notification from Babiato as my name was tagged above. Just saw this post. Sending you the details.

 

[simplysexyboy]

@simplysexyboy Sir, do I need to configure first my NGINX with my domain to show it in my IP, not in the AWS ec2 server?

Could you please stop calling me a Sir?

Sorry, I didn't follow what you are saying? Do you want to add another domain? Or you want to show your Domain name as a default web server domain name?

 

[jong07]

Could you please stop calling me a Sir?

Sorry, I didn't follow what you are saying? Do you want to add another domain? Or you want to show your Domain name as a default web server domain name?

okie hehe, i want the 1st picture to be 2nd picture what step im lacking? how do i connect my domain to my server, do it really need domain to show?

 

[simplysexyboy]

the second picture already binded correctly. You just need to symlink your site folder.

Your site folder under the Sudo user root folder call Sites

By the way, please watch the Courses inside everything has.

 

[jong07]

@simplysexyboy please see my steps to see why my result is refused to connect.

1) in the EC2 instance
I set up my server ubuntu
*security group ssh, HTTP, HTTPS : 0.0.0.0/0

2) Putty login using ssh keys

sudo ufw status
sudo apt install ufw
sudo ufw allow ssh
allow ufw HTTP
allow ufw HTTPS
sudo ufw enable

sudo apt update
sudo apt upgrade
sudo apt install Nginx libnginx-mod--HTTP-headers-more-filter

The next step opens the browser then HTTPS/server IP address but then it's refused to connect.

 

[zackaz]

All Server, App and WP
Configuration Files

Spoiler: password

babiato2021

File deleted, can you reupload

 

[simplysexyboy]

@simplysexyboy please see my steps to see why my result is refused to connect.

1) in the EC2 instance
I set up my server ubuntu
*security group ssh, HTTP, HTTPS : 0.0.0.0/0

2) Putty login using ssh keys

sudo ufw status
sudo apt install ufw
sudo ufw allow ssh
allow ufw HTTP
allow ufw HTTPS
sudo ufw enable

sudo apt update
sudo apt upgrade
sudo apt install Nginx libnginx-mod--HTTP-headers-more-filter

The next step opens the browser then HTTPS/server IP address but then it's refused to connect.

Please do not share your public ip next time.

The reason port did not open correctly,
Go back to your AWS Panel.
Security Group
Click your attached Security Policies.
Then Go Down
Right side add new HTTP, add new HTTPS
Save
go back to dashboard of EC2
Restart your ec2
try to ssh again.