配置用户

添加一个非 root 用户用于管理，并且禁用默认的 root 用户（适用于阿里云）

sudo useradd -mk /home/ubuntu -s /bin/bash ubuntu
sudo adduser ubuntu adm
sudo adduser ubuntu cdrom
sudo adduser ubuntu sudo
sudo adduser ubuntu dip
sudo adduser ubuntu plugdev

禁用（锁定） root 用户

sudo passwd root -l

配置包管理

编辑 sources.list 列表，加快安装速度（将美国的ubuntu官方源换成国内搜狐源）

如果是阿里云，AWS机器不用配置

sudo vi /etc/apt/sources.list
sudo echo "# Sohu" >>/etc/apt/sources.list
sudo echo "deb http://mirrors.sohu.com/ubuntu/ trusty main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb http://mirrors.sohu.com/ubuntu/ trusty-security main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb http://mirrors.sohu.com/ubuntu/ trusty-updates main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb http://mirrors.sohu.com/ubuntu/ trusty-proposed main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb http://mirrors.sohu.com/ubuntu/ trusty-backports main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb-src http://mirrors.sohu.com/ubuntu/ trusty main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb-src http://mirrors.sohu.com/ubuntu/ trusty-security main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb-src http://mirrors.sohu.com/ubuntu/ trusty-updates main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb-src http://mirrors.sohu.com/ubuntu/ trusty-proposed main restricted universe multiverse" >>/etc/apt/sources.list
sudo echo "deb-src http://mirrors.sohu.com/ubuntu/ trusty-backports main restricted universe multiverse" >>/etc/apt/sources.list

更新 apt-get 源信息（从上面的网站拉去包信息，该命令需要定期执行）

sudo apt-get update

安装包

清理原来的vim

sudo apt-get purge vim-common -y

安装新的vim并且安装服务器管理工具，ssh，ftp，pptp，openssl

sudo apt-get install vim openssh-server vsftpd zip unzip pptpd openssl -y

安装应用需要的环境，Apache2，MysqL，Redis，Sendmail，PHP5，PHP5相关库

sudo apt-get install apache2 MysqL-server MysqL-client redis-server sendmail PHP5 PHP5-MysqL PHP5-gd PHP5-mcrypt PHP5-redis -y

配置包

配置 Apache2

启用模块 SSL，Rewrite

sudo a2enmod ssl rewrite

启用默认的SSL网站

sudo a2ensite default-ssl

新建网站目录并且配置目录权限

sudo mkdir /var/www/www.wudew.com/
sudo chown -R ubuntu /var/www/www.wudew.com

或者可以这样

mkdir /home/ubuntu/www/www.wudew.com

sudo mount -B /var/www/www.wonld.com /home/ubuntu/www/www.wudew.com

创建HTTP配置文件并且进行配置

sudo touch /etc/apache2/sites-available/www.wudew.com.conf

以下文件内容是通过/etc/apache2/sites-available/000-default.conf修改而来，具体可以查看原文件

sudo echo "<VirtualHost *:80>" >>/etc/apache2/sites-available/www.wudew.com.conf
sudo echo " ServerName www.wudew.com" >>/etc/apache2/sites-available/www.wudew.com.conf
sudo echo " ServerAdmin webmaster@wudew.com" >>/etc/apache2/sites-available/www.wudew.com.conf
sudo echo " DocumentRoot /var/www/www.wudew.com" >>/etc/apache2/sites-available/www.wudew.com.conf
sudo echo " ErrorLog ${APACHE_LOG_DIR}/error-www.wudew.com.log" >>/etc/apache2/sites-available/www.wudew.com.conf
sudo echo " CustomLog ${APACHE_LOG_DIR}/access-www.wudew.com.log combined" >>/etc/apache2/sites-available/www.wudew.com.conf
sudo echo "" >>/etc/apache2/sites-available/www.wudew.com.conf
sudo echo "# vim: Syntax=apache ts=4 sw=4 sts=4 sr noet" >>/etc/apache2/sites-available/www.wudew.com.conf

启用网站

sudo a2ensite www.wudew.com

创建HTTPS配置文件并且进行配置

sudo touch /etc/apache2/sites-available/www.wudew.com-ssl.conf

以下文件内容是通过/etc/apache2/sites-available/default-ssl.conf修改而来，具体可以查看原文件

请先在/etc/ssl/certs/目录下正确放置文件

sudo echo "" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " <VirtualHost *:443>" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " ServerAdmin webmaster@wudew.com" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " ServerName www.wudew.com" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " DocumentRoot /var/www/www.wudew.com" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " LogLevel info ssl:warn" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " ErrorLog ${APACHE_LOG_DIR}/error-www.wudew.com-ssl.log" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " CustomLog ${APACHE_LOG_DIR}/access-www.wudew.com-ssl.log combined" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " SSLEngine on" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " SSLCertificateFile /etc/ssl/certs/www.wudew.com.crt" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " SSLCertificateKeyFile /etc/ssl/private/www.wudew.com.key" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " SSLCertificateChainFile /etc/ssl/certs/WoSignCACN.crt" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " <FilesMatch \".(cgi|shtml|phtml|php)$\">" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " SSLOptions +StdEnvVars" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " " >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " <Directory /usr/lib/cgi-bin>" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " SSLOptions +StdEnvVars" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " " >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " BrowserMatch \"MSIE [2-6]\" \" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " nokeepalive ssl-unclean-shutdown \" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " downgrade-1.0 force-response-1.0" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " BrowserMatch \"MSIE [17-9]\" ssl-unclean-shutdown" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo " " >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo "" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf
sudo echo "# vim: Syntax=apache ts=4 sw=4 sts=4 sr noet" >>/etc/apache2/sites-available/www.wudew.com-ssl.conf

启用网站

sudo a2ensite www.wudew.com-ssl

重新加载服务

sudo service apache2 reloadN wonld.* TO 'ubuntu'@'%';

配置VSFTP

允许写入

sudo sed -i "s/#write_enable=YES/write_enable=YES/g" /etc/vsftpd.conf

禁止用户访问主目录以外目录

sudo sed -i "s/#chroot_local_user=YES/chroot_local_user=YES/g" /etc/vsftpd.conf
sudo sed -i "s/#chroot_list_enable=YES/chroot_list_enable=YES/g" /etc/vsftpd.conf
sudo sed -i "s/#write_enable=YES/write_enable=YES/g" /etc/vsftpd.conf
sudo echo "allow_writeable_chroot=YES" >>/etc/vsftpd.conf

注：/etc/vsftpd.chroot_list 为例外用户列表

sudo service vsftpd restart

配置 MysqL

配置MysqL来允许远程访问，（这里tab被sublimetext转成空格了。。。。。）

sudo sed -i "s/bind-address = 127.0.0.1/bind-address = 0.0.0.0/g" /etc/MysqL/my.cnf

MysqL -u root

CREATE USER 'ubuntu'@'%' IDENTIFIED BY 'password';

CREATE USER 'wonld'@'localhost' IDENTIFIED BY 'password';

CREATE DATABASE wonld;

GRANT SELECT,DELETE ON wonld.* TO 'wonld'@'localhost';

GRANT ALL PRIVILEGES ON wonld.* TO 'wonld'@'localhost';

配置PPTP

sudo sed -i "s/#localip 192.168.0.1/localip 192.168.0.1/g" /etc/pptpd.conf
sudo sed -i "s/#remoteip 192.168.0.234-238,192.168.0.245/remoteip 192.168.0.234-238,192.168.0.245/g" /etc/pptpd.conf
sudo sed -i "s/#ms-dns 10.0.0.1/ms-dns 8.8.8.8/g" /etc/ppp/pptpd-options
sudo sed -i "s/#ms-dns 10.0.0.2/ms-dns 8.8.4.4/g" /etc/ppp/pptpd-options
sudo service pptpd restart
sudo vi /etc/sysctl.conf
sudo sed -i "s/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/g" /etc/ppp/pptpd-options
sudo sysctl -p
sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
sudo echo "sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE" >>/etc/rc.local
sudo vi /var/log/pptpd_record.log

Add

Type Username Time InterfaceName(Device) Tty LinkSpead LocalIP(VPNIP) PeerIP(AssignIP) ClientIP ConnectTime BytesSent BytesRcvd BytesSum AverageSpeed

sudo chown syslog:adm /var/log/pptpd_record.log
sudo vi /etc/ppp/ip-up

Add

echo "Connect $PEERNAME date -d today +%F_%T $1 $2 $3 $4 $5 $6 " >> /var/log/pptpd_record.log

sudo vi /etc/ppp/ip-down

Add

sum_bytes=$(($BYTES_SENT+$BYTES_RCVD))
sum=echo "scale=2;$sum_bytes/1024/1024"|bc
ave=echo "scale=2;$sum_bytes/1024/$CONNECT_TIME"|bc
echo "Disconnect $PEERNAME date -d today +%F_%T $1 $2 $3 $4 $5 $6 $CONNECT_TIME s $BYTES_SENT B $BYTES_RCVD B $sum MB $ave KB/s" >> /var/log/pptpd_record.log

sendmail

sudo vi /etc/mail/local-host-names

Delete ALL

Add wudew.com

sudo vi /etc/mail/sendmail.cf

Find #Dj$w.Foo.COM

Replace with Djwudew.com

sudo vi /etc/hosts

Find 127.0.0.1 localhost localhost.localdomain

Replace with 127.0.0.1 localhost localhost.localdomain wudew.com {HOSTNAME}

sudo service sendmail restart

PHPMyadmin

sudo ln -s /usr/share/PHPmyadmin /var/www/www.wudew.com/admin/tool/

Admin

System

ubuntu中管理用户和用户组