xXx

Hexid M1n1 5h3ll MobiLe

proc/2574525/task/2574525/root/opt/cpinst/old_cpinst/_[ Not.Writable ]

File://proc/2574525/task/2574525/root/opt/cpinst/old_cpinst/install_openresty

#!/bin/bash
# install openresty in cpanel
# Copyright Yuah Jhen Info., Co., Ltd.
# https://host.com.tw
COLOR_GREEN='\e[0;32m';
COLOR_REST='\e[0m'
echo -e "${COLOR_GREEN}!! Install Openresty !!${COLOR_REST}"

yum install unzip git pcre-devel -y

echo -e "${COLOR_GREEN}!! Changing Apache Port !!${COLOR_REST}"
#apache_port=0.0.0.0:28080
#apache_ssl_port=0.0.0.0:28443

sed -i 's/apache_port=.*$/apache_port=0.0.0.0:28080/' /var/cpanel/cpanel.config
sed -i 's/apache_ssl_port=.*$/apache_ssl_port=0.0.0.0:28443/' /var/cpanel/cpanel.config
/usr/local/cpanel/whostmgr/bin/whostmgr2 --updatetweaksettings
echo '!! Wait for 10 seconds to take effect !!'
sleep 10

cd /usr/local/src/
rm -rf nginx*
rm -rf ngx_openresty*
rm -rf openresty-*
rm -rf openssl-*
wget https://www.openssl.org/source/openssl-1.0.2l.tar.gz
tar zxf openssl-*.tar.gz
wget https://openresty.org/download/openresty-1.11.2.3.tar.gz
tar -zxf openresty-*.tar.gz
cd openresty-*
./configure --prefix=/usr/local/openresty --with-http_stub_status_module --with-http_realip_module --with-ipv6 --with-http_ssl_module --with-openssl=../openssl-1.0.2l --with-http_v2_module --with-http_secure_link_module
gmake
gmake install

# install resty-http ( lua lib ) - https://github.com/pintsized/lua-resty-http
cd /usr/local/src
rm -rf lua-resty-http-master*
git clone https://github.com/pintsized/lua-resty-http.git
cp lua-resty-http/lib/resty/*.lua /usr/local/openresty/lualib/resty/

cd /opt
git clone git@git.twnoc.net:twnoc/openresty-lua-release.git
cd /usr/local/openresty/nginx/conf
mv nginx.conf nginx.conf_bak
ln -s /opt/openresty-lua-release/nginx.conf
ln -s /opt/openresty-lua-release/ddos.conf
mkdir /usr/local/openresty/nginx/lua
mkdir /usr/local/openresty/nginx/ssl
cd /usr/local/openresty/nginx/lua
ln -s /opt/openresty-lua-release/init.luac
ln -s /opt/openresty-lua-release/ssl.luac
ln -s /opt/openresty-lua-release/purgesslcache.luac
ln -s /opt/openresty-lua-release/retry502.luac
cd /usr/local/openresty/nginx/ssl
ln -s /opt/openresty-lua-release/selfsign.key
ln -s /opt/openresty-lua-release/selfsign.pem
ln -s /opt/openresty-lua-release/dhparam.pem

echo -e "${COLOR_GREEN}!! Restart Apache !!${COLOR_REST}"
service httpd restart
sleep 2
service httpd restart

echo -e "${COLOR_GREEN}!! Testing Openresty !!${COLOR_REST}"
/usr/local/openresty/nginx/sbin/nginx -t

# If CentOS 6
if [ ! -e /usr/bin/systemctl ]; then
	cd /opt
	git clone git@git.twnoc.net:twnoc/cpinst.git
	cp /opt/cpinst/openrestyinstall/openresty_init /etc/init.d/nginx
	chmod 0750 /etc/init.d/nginx
	/etc/init.d/nginx stop
	/etc/init.d/nginx start
	/sbin/chkconfig nginx on
else
	# CentOS 7
	cd /opt
	git clone git@git.twnoc.net:twnoc/cpinst.git
	cp /opt/cpinst/openrestyinstall/openresty_service /usr/lib/systemd/system/openresty.service
	systemctl enable openresty.service
	systemctl start openresty.service
fi

echo -e "${COLOR_GREEN}!! Clean up !!${COLOR_REST}"
rm -rf /usr/local/src/nginx*
rm -rf /usr/local/src/ngx_openresty*
rm -rf /usr/local/src/openresty*
rm -rf /usr/local/src/lua-resty-http-master*

# /bin/bash /opt/openresty-lua-release/ssl_init.sh
# echo '/opt/openresty-lua-release/ssl_init.sh' >> /etc/rc.local

if [ -e /etc/csf/csf.pignore ]; then
	if ! grep -q openresty /etc/csf/csf.pignore; then
	    echo 'exe:/usr/local/openresty/nginx/sbin/nginx' >> /etc/csf/csf.pignore
	fi
fi

echo "iptables -I OUTPUT -d 127.0.0.1 -p tcp --dport 6379 --syn -j DROP" >> /etc/csf/csfpost.sh
echo "iptables -I OUTPUT -d 127.0.0.1 -p tcp --dport 6379 --syn -m owner --uid-owner nobody -j ACCEPT" >> /etc/csf/csfpost.sh
echo "iptables -I OUTPUT -d 127.0.0.1 -p tcp --dport 6379 --syn -m owner --uid-owner nagios -j ACCEPT" >> /etc/csf/csfpost.sh
echo "iptables -I OUTPUT -d 127.0.0.1 -p tcp --dport 6379 --syn -m owner --uid-owner root -j ACCEPT" >> /etc/csf/csfpost.sh

csf -r

echo -e "${COLOR_GREEN}!! Done !!${COLOR_REST}"
echo -e "==========================="
netstat -tplanu|grep LIST|grep 80
echo -e "==========================="
netstat -tplanu|grep LIST|grep 443

Your Access Expired	Date. in : 16-09-2025
Regist : 09-12-2024	Expired : 01-12-2027