Installing Cockpit

For installing this web server please ise the following command

apt install cockpit -y

Start the Cockpit service using the systemctl utility. To run the service Cockpit you can use the systemctl utility

systemctl start cockpit

For checking the Cockpit servise work you can use the following commang

systemctl status cockpit

Further configuration: working with the Firewall

The next important step is to configure the UFW to enable the Cockpit web interface (TCP port is designated 9090). This can be done with the following command:

ufw allow 9090/tcp

Then you need to open access to the Cockpit web console. To do this, you need to open the web console in your browser and then make changes to example_IP to your IP address of the virtual server

http://example.com:9090

This completes the Cockpit setup and installation.

To connect to the server, use login credentials from your personal account. On your server order page, you’ll find the link to the server and authorization data.

Open your personal account and input authorization credentials

If you click on the link to panel, you’ll be directed to the panel as shown below:

Input login and password and proceed to Configuration page in McMyAdmin panel. Game server is turned off by default.

To start the game, open menu by clicking on Status button and press StartServer. Server starting can take about a minute.
After a successful start, you’ll see the following:

Then, you can open Minecraft

Press Multiplayer then Direct Connect (или Add Server) input your server’s IP (for example,185.186.244.192) and get connected

If you see the error “Failed to login: Invalid session (Try restarting your game and the launcher)”

Authorize in the server via SSH connection (here you can see how to use Putty (here you can see how to use Putty here).
After successful authorization, open the file using the following commands:

# su mcmyadmin
# cd ~/McMyAdmin/
# vim Minecraft/server.properties

Press INSERT button and proceed to the line with online-mode where you need to select false variables as shown in the picture

To quit the panel, press ESC and type :wq
Restart the server by clicking Restart Server. on the panel

To connect to the server, use login credentials from your personal account and select SSH connection. PUTTY is a perfect client program for establishing SSH connection (it can be uploaded here: https://www.putty.org/). To Install this, you need the following actions:

Open your personal account and find the necessary VPS service

Open Putty and select IP

Type in your root login and password. Please, note that when you type your password, letters and symbols aren’t displayed: it’s standard SSH protection, just continue typing and press ENTER. Otherwise, you can copy and paste the password, make CLICK RIGHT on console display and press ENTER

Input the following commands after successful authorization:

# su mcserver
# cd ~
# ./mcserver

To restart the server, use the following command:

 # ./mcserver restart

Then you can open Minecraft

Press Multiplayer, then DirectConnect (or AddServer) and input your server’s IP (for example, 185.186.244.152) and get connected

If you see the error “Failed to login: Invalid session (Try restarting your game and the launcher)”

Open the file using the following command:

# vim serverfiles/server.properties

Press INSERT button and proceed to the line with online-mode where you need to select false variables as shown in the picture

To quit the panel, press ESC and type :wq

Restart the server using the following command:

# ./mcserver restart

To begin upgrading the kernel to 4.19 on Debian 8, you must have an active instance of HOSTRY VPS. To install, you need to insert the following lines in the SSH or PuTTY client window, or use a VNC connection. Log in and press Enter. This will automatically install all the necessary packages that are needed for this update, as well as the gpg, kernel key and headers. Then the old core will be removed from your virtual server. After that, use the program to reboot the server and you will switch to a new kernel.

echo '
#!/bin/bash

# Add GPG Key
wget -O - -q https://debian.choopalabs.com/debian.choopalabs.com.gpg.key | apt-key add - 

# Add Vultr Kernel Repo
echo deb http://debian.choopalabs.com/repo/ jessie main >> /etc/apt/sources.list

# Install Vultr 4.19 Kernel
apt-get install -t jessie linux-image
apt-get install -t jessie linux-headers

# Remove old kernel
apt-get autoremove -y
rm -f /root/install-kernel.sh
' > /root/install-kernel.sh
chmod +x /root/install-kernel.sh
/root/install-kernel.sh

• VPS, with the installed operating system Ubuntu 18.04;
• The static IP address of your vps (primary IP);
• Root access user

Download and Install Ajenti

First you need to add the repo key, it will serve to check the packages that you will install later

wget http://repo.ajenti.org/debian/key -O- | sudo apt-key add -

Then add the real repo to your list of sources.

echo "deb http://repo.ajenti.org/ng/debian main main ubuntu" | sudo tee -a /etc/apt/sources.list

Now update your packages and start the installation

sudo apt-get update && sudo apt-get install ajenti

After the installation is complete, need to start the Ajenti server

sudo service ajenti restart

If you followed the steps above correctly, your console will contain * started

Ajenti Opening

Open Ajenti in your browser by going to https://192.0.2.0:8000. If the browser shows privacy error using this link, then this is completely normal and safe, go to your site.

Next, log in by entering your personal user data

Username: root
Password: admin

Customizing and Configuring Ajenti

Then please Click the Password button in the sidebar. Then enter admin under the old password and select a new, secure password. In the console, restart Ajenti, then log in with the new password

sudo service ajenti restart

Agenti Home – Ajenti Dashboard. It can be configured to display information about your server and uptime. You can further add more widgets by clicking Add Widget at the top

user@localhost: ~ sudo apt update

Optionally:

user@localhost: ~ sudo apt upgrade

To install the latest version for your distribution you will use the command:

user@localhost: ~ sudo apt install squid

Check if it is running:

user@localhost: ~ systemctl status squid

Access configuration

Configuration file /etc/squid/squid.conf, and also the line ‘include /etc/squid/conf.d/*’ will pull up all the files in the /etc/squid/conf.d/ directory. Subnets from which will be posible access are defined by strings that starts with the keywords “http_access allow …” If there is a line “http_access allow localnet” then the localnet definishion should be above.

...
acl localnet src 10.0.0.0/8
acl localnet src 172.16.0.0/12
...

Each such line will add its entry to the list of localnet networks

To prohibit downloading files by extension *.exe, *.bat, *.cmd, *.avi for connections not protected with https. To the /etc/squid/squid.conf file add a string like this:

acl my_blacklist url_regex "/etc/squid/ext_blacklist"

http_access deny my_blacklist

Create file /etc/squid/ext_blacklist:

user@localhost: ~ sudo nano /etc/squid/ext_blacklist

Add regular expressions:

\.[Ee][Xx][Ee]$
\.[Bb][Aa][Tt]$
\.[Cc][Mm][Dd]$
\.[Aa][Vv][Ii]

To access from our subnet we need to open port 3128in the firewall <MY_LOCAL_NET> (for example: 192.168.1.0/24 ). In case of firewalld we need to execute commands:

user@localhost: ~ sudo firewall-cmd --zone work -add-source <MY_LOCAL_NET>
user@localhost: ~ sudo firewall-cmd --zone work --add-port=3128/tcp
user@localhost: ~ sudo firewall-cmd --runtime-to-permanent

For iptables before prohibited rules you need to insert a line: (Strongly depends on existing rules, and before adding review already existing rules using the following command: iptables -nvL –line ):

user@localhost: ~ sudo iptables -I INPUT 3 -s <MY_LOCAL_NET> -p tcp --dport 3128 -j ACCEPT

For nftables you need to insert in the /etc/nftables.conf file before prohibited rules line like this:

ip saddr <<MY_LOCAL_NET> tcp dport 3128 accept

Important:

If you are logged in as root superuser then the command sudo (temporary acquisition of the superuser rights) will not be needed

Installation

In order to install Ansible, you first need to install the EPEL repository. This can be done using a special command:

yum install epel-release

Then we advise you to update the packages on your CentOS distribution

yum -y update

After updating the packages, install Ansible with the yum extension using a special command:

yum -y install ansible

For correct and competent administration of severs on Windows, you need to install the following packages: python-pip, pywinrm and also pip itself.

The next step is to install the Python packages. This can be done using a special command:

yum -y install python-pip pip

In order to work with Ansible in the future, you need to check the installation. By entering the command:

ansible --version

Setup Ansible

First of all, it is recommended to update the packages on your CentOS:

yum -y update

Then go to the Ansible directory

cd /etc/ansible

Edit the hosts file in your favorite text editor

nano hosts

To configure Windows and its further use, it is necessary to do the following:

[windows]
server1.domain.local
server1.domain.local

Next, you need to create an encrypted vault that will contain access identifiers for the Windows server. To accomplish this, it is recommended that you create a new encrypted yml file. The file name must match the host group to which it will apply. In our case, the created windows group is called, which means that there will be a windows.yml file

mkdir group_vars
cd group_vars
ansible-vault create windows.yml

In the finish, you need to add the following parameters to your yml file

ansible_ssh_user: _your_ssh_user_
ansible_ssh_pass: _your_ssh_pass_
ansible_ssh_port: 5986
ansible_connection: winrm
ansible_winrm_server_cert_validation: ignore

To follow all the instructions in this article, you will need a busy copy of Hostry Vps. It will be designated under IP 185.186.xxxx.xxxx

System update

Before starting, update the system to the last stable available version with this command:

yum update -y

Install ArangoBD

Before installing, you will need to create a yum repository file. To do this, change the directory to /etc/yum.repos.d and create it arangodb.repo using the following command:

cd /etc/yum.repos.d
sudo nano /etc/yum.repos.d/arangodb.repo

Add the following text:

[arangodb]
name=ArangoDB Project
type=rpm-md
baseurl=https://strato1.arangodb.com/repositories/arangodb3/CentOS_7/
gpgcheck=1
gpgkey=https://strato1.arangodb.com/repositories/arangodb3/CentOS_7/repodata/repomd.xml.key
enabled=1

Save the file and update the system using this command:

sudo yum update -y

Then install ArangoDB with the following command:

sudo yum install arangodb3 -y

After installation is complete, start the ArangoDB service:

sudo systemctl start arangodb3

The status of ArangoDB can be checked as follows:

sudo systemctl status arangodb3

If everything went well, you should see the following output:

  ● arangodb3.service - SYSV: ArangoDB Server
   Loaded: loaded (/etc/rc.d/init.d/arangodb3)
   Active: active (running) since Tue 2016-11-01 21:40:43 IST; 2min 30s ago
     Docs: man:systemd-sysv-generator(8)
  Process: 2766 ExecStart=/etc/rc.d/init.d/arangodb3 start (code=exited, status=0/SUCCESS)
   CGroup: /system.slice/arangodb3.service
       ├─2810 /usr/sbin/arangod --uid arangodb --gid arangodb --log.foreground-tty false --pid-file /var/run/arangodb/arangod.pid --temp.path ...
       └─2811 /usr/sbin/arangod --uid arangodb --gid arangodb --log.foreground-tty false --pid-file /var/run/arangodb/arangod.pid --temp.path ...

Nov 01 21:40:31 centOS-7 systemd[1]: Starting SYSV: ArangoDB Server...
Nov 01 21:40:43 centOS-7 arangodb3[2766]: Starting /usr/sbin/arangod:  starting up in daemon mode
Nov 01 21:40:43 centOS-7 systemd[1]: Started SYSV: ArangoDB Server.
Nov 01 21:40:43 centOS-7 arangodb3[2766]: changed working directory for child process to '/var/tmp'

Access ArangoDB CLI

ArangoDB comes with arangosh command-line utility for accessing the database. You can run this utility with the following command:

arangosh

When prompted for a password, enter the root password. You will see the following output:

                                     _     
  __ _ _ __ __ _ _ __   __ _  ___  ___| |__  
 / _` | '__/ _` | '_ \ / _` |/ _ \/ __| '_ \ 
| (_| | | | (_| | | | | (_| | (_) \__ \ | | |
 \__,_|_|  \__,_|_| |_|\__, |\___/|___/_| |_|
                       |___/                 

arangosh (ArangoDB 3.0.10 [linux] 64bit, using VPack 0.1.30, ICU 54.1, V8 5.0.71.39, OpenSSL 1.0.1e-fips 11 Feb 2013)
Copyright (c) ArangoDB GmbH

Pretty printing values.
Could not connect to endpoint 'http+tcp://127.0.0.1:8529', database: '_system', username: 'root'
Error message: '401: Unauthorized'

Type 'tutorial' for a tutorial or 'help' to see common examples
127.0.0.1:8529@_system> 

Allow ArangoDB through the firewall

By default, ArangoDB runs on port 8529, so you will need to enable this port through a firewall. You can do this by running the following command:

sudo firewall-cmd --permanent --add-port=8529/tcp

Next, you need to restart the firewall service so that these changes are saved and work. This can be done as follows:

sudo firewall-cmd --reload

Installation

Update the packages that are installed on your system

yum update -y

Download the installer to the /root directory

cd ~
wget -O installer.sh https://cyberpanel.net/install.sh

Next, restore the permissions and run the installer:

chmod 755 installer.sh
sh installer.sh

If everything went well, you can see the following output:

     CyberPanel Installer v2.0

  1. Install CyberPanel.

  2. Install Addons.

  3. Exit.


Please enter the number[1-3]: 

Type 1 then press ENTER

Further in the console you can see the following:

    CyberPanel Installer v2.0

  RAM check : 71/487MB (14.58%) 

  Disk check : 1/20GB (7%) (Minimal 10GB free space)

  1. Install CyberPanel with OpenLiteSpeed.

  2. Install Cyberpanel with LiteSpeed Enterprise.

  3. Exit.


Please enter the number[1-3]: 

Again, repeat what you did in the previous step, namely: Type 1, and then press ENTER. After that, the installer will automatically prompt you to install MariaDB. Choosing MariaDB 1.0 you stop on it, because it is the only supported version with a panel. Next, you will see the following output: (note that you always need to specify “y“)

Mirror server network is optimized for Asia Pacific region...
If you experience very slow download speed during installation, please try use mirror server on clean system...
Use mirror server [y/N]: y

Replace JS/CSS files to JS Delivr?
This may improve panel loading speed in Asia Pacific region... 
Please select [y/N]: y

Install Memcached extension for PHP?
Please select [y/N]: y      

Install LiteSpeed Memcached?
Please select [y/N]: y

Install Redis extension for PHP?
Please select [y/N]: y

Install Redis?
Please select [y/N]: y

After your yes agreement, CyberPanel will be installed along with its extensions. After which, the installer will display your administrator data:

###################################################################
                CyberPanel Successfully Installed                  

                Current Disk usage : 3/20GB (16%)                        

                Current RAM  usage : 233/487MB (47.84%)                         

                Installation time  : 0 hrs 3 min 24 sec                      

                Visit: https://(YOUR_SERVER_IP):8090                    
                Panel username: admin                              
                Panel password: 1234567                          
                Mysql username: root                               
                Mysql password: iPe2cEiSh7wEn7                       

            Please change your default admin password              

          If you change mysql password, please  modify file in     
         /etc/cyberpanel/mysqlPassword with new password as well   

              Website : https://www.cyberpanel.net                 
              Forums  : https://forums.cyberpanel.net              
              Wikipage: https://docs.cyberpanel.net                

            Enjoy your accelerated Internet by                  
                CyberPanel & OpenLiteSpeed                                       
###################################################################

Configure CyberPanel

Now, you need to go to the setting, it will take a few more moments. Visit your server IP address on the CyberPanel port (YOUR_SERVER_IP): 8090. There you will see the administrator login. Enter your username and password, as described above.

Next, click on the user menu bar next to the name “Cyber ​​Pan”. Selecting “Edit Profile” click on “admin” and on the drop-down menu “Modify User“. Next, successfully change the first name, last name, your password and email address.

Install fail2ban packages from the epel repository

If the epel package is not installed, enter the commands

user @ localhost: ~ $ sudo yum -y install epel-release

Afrer install fail2ban itself

user @ localhost: ~ $ sudo yum -y install fail2ban

Activate sshd protection in fai2ban settings

Open the file /etc/fail2ban/jail.conf for editing, in the first lines we find the lines

# [sshd] # enabled = true

Then delete the first characters ‘#’, it should work

[sshd]

enabled = true

Restart the service

user@localhost:~$ sudo systemctl restart fail2ban

Check the general status

user@localhost:~$ sudo fail2ban-client status

You should be see something like

Status
|- Number of jail: 1
`- Jail list: sshd

user@localhost:~$ sudo fail2ban-client status sshd

Status for the jail: sshd
|- Filter
| |- Currently failed: 0
| |- Total failed: 15
| - Journal matches: _SYSTEMD_UNIT=sshd.service + _COMM=sshd - Actions
|- Currently banned: 0
|- Total banned: 0
`- Banned IP list:

Do not check how the blocking works from the same IP from which you are already connected via SSH and configure fail2ban, you may lose connection for a long time).

We try to enter the wrong password 4 times to our host from any IP (for example, from 11.12.13.14). If everything works correctly for 5-6 times an unsuccessful login, the password will no longer be requested and the connection will be refused

user@localhost:~$ sudo fail2ban-client status sshd

Status for the jail: sshd
|- Filter
| |- Currently failed: 0
| |- Total failed: 20
| - Journal matches: _SYSTEMD_UNIT=sshd.service + _COMM=sshd - Actions
|- Currently banned: 1
|- Total banned: 1
`- Banned IP list: 11.12.13.14

If you want to remove any IP address from the block list, you can enter the command

user@localhost:~$ sudo fail2ban-client set sshd unbanip <IP>