Blog zipruz

PEM SSL BUNDLE

2021-03-07T00:38:00.001+07:00

cat /etc/letsencrypt/live/tableauristekbrin.comnets.id/privkey.pem /etc/letsencrypt/live/tableauristekbrin.comnets.id/fullchain.pem > /etc/letsencrypt/live/tableauristekbrin.comnets.id/courier.pem

Install Mod Evasive On Centos Web Panel

2019-10-21T14:17:00.000+07:00

git clone https://github.com/shivaas/mod_evasive.git
cd mod_evasive
/usr/local/apache/bin/apxs -i -a -c mod_evasive24.c

apxs:Error: /usr/bin/apr-1-config not found!.
apxs:Error: /usr/bin/apu-1-config not found!.

yum group install "Development Tools"
yum install openssl-devel apr-devel
yum install apr-util-devel

CWP form login blank No Loader is installed. Please contact support.

2019-07-04T15:28:00.003+07:00

No Loader is installed, please try to run this command or contact support: sh /scripts/update_ioncube

1. Alternatif 1
sh /scripts/update_ioncube
/usr/local/cwp/php71/bin/php -v
service cwpsrv reload

echo "zend_extension = /usr/local/ioncube/ioncube_loader_lin_7.0.so" >> /usr/local/cwp/php71/php.ini

service cwpsrv reload

2. Alternatif 2

yum -y install wget

yum -y update

reboot

Narasumber Kegiatan Himasisko

2019-04-21T15:53:00.004+07:00

SSH User gagal login

2019-04-02T10:39:00.003+07:00

Error dan Gagal akses SSH Server

PuTTY fatal error: Server refused to start a shell/command
failed to execute /bin/bash: Resource temporarily unavailable
-bash: fork: retry: Resource temporarily unavailable

Gagal login user ssh di server redhat dan centos

https://access.redhat.com/solutions/543503

Edit File
/etc/security/limits.d/90-nproc.conf
atau /etc/security/limits.d/<user>.conf

<user>       -          nproc     2048      <<<----[ Only for "<user>" user ]
*          -          nproc     2048      <<<----[ For all user's ]

Perintah ProxySQL di Centos

2018-06-22T10:48:00.001+07:00

Melihat Koneksi dan Grup yang digunakan

select * from stats_mysql_connection_pool;

Menambah Anggota Cluster

mysql> insert into mysql_servers(hostgroup_id, hostname, port) values (0,'192.168.56.102',3316);
Query OK, 1 row affected (0.00 sec)
 
mysql> insert into mysql_servers(hostgroup_id, hostname, port) values (1,'192.168.56.103',3316);
Query OK, 1 row affected (0.01 sec)
 
mysql> select * from mysql_servers;
3 rows in set (0.01 sec)
 
mysql> save mysql servers to disk;
Query OK, 0 rows affected (0.00 sec)
 
mysql> select * from disk.mysql_servers;
3 rows in set (0.00 sec)
 
mysql> load mysql servers to runtime;
Query OK, 0 rows affected (0.00 sec)

Menghapus Anggota Cluster

mysql> delete from mysql_servers where hostgroup_id=1 and hostname='192.168.56.102';
Query OK, 1 row affected (0.00 sec)

Mengload Perubahan ProxySQL
mysql> load mysql servers to runtime;
Query OK, 0 rows affected (0.01 sec)

Melihat Anggota Cluster
mysql> select * from mysql_servers;

Time Zone Centos 7

2018-05-30T12:37:00.001+07:00

timedatectl set-timezone Asia/Jakarta

Install MySQLdb Module Mysql Database di Python

2018-05-29T15:16:00.001+07:00

You need to use one of the following commands. Which one depends on what OS and software you have and use.

easy_install mysql-python (mix os)
pip install mysql-python (mix os/ python 2)
pip install mysqlclient (mix os/ python 3)
apt-get install python-mysqldb (Linux Ubuntu, ...)
cd /usr/ports/databases/py-MySQLdb && make install clean (FreeBSD)
yum install MySQL-python (Linux Fedora, CentOS ...)

FTP Client Console Linux Centos

2017-07-10T20:26:00.001+07:00

You can use ncftpput. Do the following:

Install ncftp:

Yum install ncftp

Alternatively:

apt-get install ncftp

Execute the following command:

ncftpput -R -v -u "ftp-username" ftp.website.com ftp-upload-path local-path/*

Troubleshoot Postgres

2017-07-08T04:04:00.001+07:00

##Backup Seluruh Database
$ pg_dumpall > all.backup.out
OR
$ pg_dumpall | gzip -c > all.backup.out.gz

#Import file dump postgres
psql -U postgres -f backup.out zipruz

#Melihat error pada saat proses import
psql -U postgres -f backup.out zipruz -v ON_ERROR_STOP=1

#CWP postgres
yum install postgresql-contrib

Troubleshooting Galera

2017-04-22T07:00:00.000+07:00

cd /var/lib/mysql

cd /var/lib/mysql

sudo mv  grastate.bat    grastate.bat.bck

sudo mv  gvwstate.bat   gvwstate.bat.bck

Clear Memory di Linux

2017-03-18T10:05:00.003+07:00

Pada sistem operasi linux terdapat 3 cara untuk menghapus memori yang digunakan oleh aplikasi
1. Clear PageCache only.

# sync; echo 1 > /proc/sys/vm/drop_caches

2. Clear dentries and inodes.

# sync; echo 2 > /proc/sys/vm/drop_caches

3. Clear PageCache, dentries and inodes.

# sync; echo 3 > /proc/sys/vm/drop_caches

Python SMTP Client Pada Google

2017-03-09T08:21:00.000+07:00

First, you'll want to allow less secure apps to access your account. For detailed instructions on how to do this, you should check out this page:

Allowing less secure apps to access your account

Go to the "Less secure apps" section in My Account.
Next to "Access for less secure apps," select Turn on. (Note to G Suite users: This setting is hidden if your administrator has locked less secure app account access.)

If you have 2-step verification enabled on your account, then you'll need to create an app-specific password for less secure apps like this. In that case, you'll need to follow the instructions here:

And finally, if you're still getting an SMTPAuthenticationError with an error code of 534, then you'll need to do yet another step for this to work.

Display Unlock Captcha

I haven't had to do this last step for my own accounts, but I've read that it doesn't actually work right away. Apparently after you enable less secure apps, you may need to wait a few minutes before trying the 'Display Unlock Captcha' link. If you run in to this problem and find a good way around it, please let us know in the comments!

Gluster FS Install on Centos

2016-06-05T18:49:00.001+07:00

gluster volume create DFS-DATA replica 2 transport tcp dfs-master:/DATA dfs-node:/DATA

gluster volume start distribute
gluster volume info
gluster volume delete dist-volume

umount -t glusterfs dfs-master:/DFS-DATA
mount -t glusterfs dfs-master:/DFS-DATA/ok /mnt/test/

gluster volume create test replica 2 transport tcp dfs-master:/DATA/DFS-103.241.5.100-1 dfs-node:/DATA/DFS-103.241.5.100-1

mount -t glusterfs dfs-master:/DFS-103.241.5.100 /gluster

###INI JIKA VOLUME ALREADY
setfattr -x trusted.glusterfs.volume-id $brick-path
setfattr -x trusted.gfid $brick-path
rm -rf $brick-path/.glusterfs

Raspberry Pi, Error Compile Asterisk

2016-04-27T21:10:00.002+07:00

Makefile:50: recipe for target 'gsm/lib/libgsm.a' failed
make[1]: *** [gsm/lib/libgsm.a] Error 2

Buka file makeopts setelah melakukan ./configure pada source code asterisk

Replace armv6l dengan armv6 (ada 3 bagian)

CWP Firewall Error

2016-04-05T21:09:00.000+07:00

Firewall pada CWPterdisable dan menggalami kegagalan untuk running pada saat Firewal di triger untuk bekerja

FIle log dari csf dan lfd mengalamai

#csf -u
Can't locate object method "ssl_opts" via package "LWP::UserAgent" at /usr/local/csf/lib/ConfigServer/URLGet.pm line 142.

Solusi

# sed -i "s/\$ua->ssl_opts/#\$ua->ssl_opts/" /usr/local/csf/lib/ConfigServer/URLGet.pm
# csf -u

Access to Centos Web Panel not working with SSL / https

2016-04-04T22:22:00.002+07:00

vi /usr/local/cwpsrv/conf.d/cwp-ssl.conf

Listen 2031
<VirtualHost 123.456.789.012:2031>
ServerName 123.456.789.012
SSLEngine on
SSLCertificateKeyFile /etc/pki/tls/cwp-123.456.789.012.key
SSLCertificateFile /etc/pki/tls/cwp-123.456.789.012.cert
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>

change to:

Listen 2031
<VirtualHost *:2031>
ServerName *
SSLEngine on
SSLCertificateKeyFile /etc/pki/tls/cwp-123.456.789.012.key
SSLCertificateFile /etc/pki/tls/cwp-123.456.789.012.cert
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>

service cwpsrv restart

Now it works fine with https.

REVERSE PROXY APACHE HTTP DAN HTTPS

2016-04-03T18:42:00.001+07:00

========================================

MODE 1

========================================

<VirtualHost *:*>
    ProxyPreserveHost On

    # Servers to proxy the connection, or;
    # List of application servers:
    # Usage:
    # ProxyPass / http://[IP Addr.]:[port]/
    # ProxyPassReverse / http://[IP Addr.]:[port]/
    # Example: 
    ProxyPass / http://0.0.0.0:8080/
    ProxyPassReverse / http://0.0.0.0:8080/

    ServerName localhost
</VirtualHost>

=====================================

MODE 2

=====================================

<Proxy balancer://mycluster>
    # Define back-end servers:

    # Server 1
    BalancerMember http://0.0.0.0:8080/

    # Server 2
    BalancerMember http://0.0.0.0:8081/
</Proxy>

<VirtualHost *:*>
    # Apply VH settings as desired
    # However, configure ProxyPass argument to
    # use "mycluster" to balance the load

    ProxyPass / balancer://mycluster
</VirtualHost>

=========================================

MODE 3 - SSL ON

========================================

Listen 443

NameVirtualHost *:443
<VirtualHost *:443>

    SSLEngine On

    # Set the path to SSL certificate
    # Usage: SSLCertificateFile /path/to/cert.pem
    SSLCertificateFile /etc/apache2/ssl/file.pem


    # Servers to proxy the connection, or;
    # List of application servers:
    # Usage:
    # ProxyPass / http://[IP Addr.]:[port]/
    # ProxyPassReverse / http://[IP Addr.]:[port]/
    # Example: 
    ProxyPass / http://0.0.0.0:8080/
    ProxyPassReverse / http://0.0.0.0:8080/

    # Or, balance the load:
    # ProxyPass / balancer://balancer_cluster_name

</VirtualHost>

PAT Pada Mikrotik

2016-04-03T00:50:00.001+07:00

ip firewall nat add chain=dstnat src-address=0.0.0.0/0 dst-address=103.241.5.99 protocol=udp port=22221 action=dst-nat to-addresses=172.16.222.2 to-ports=22

Port Address Translation (PAT) Pada Centos

2016-04-02T12:02:00.002+07:00

iptables -t nat -A PREROUTING -p tcp --dport 2222 -j DNAT --to-destination 172.16.121.2:22

Mengganti Nama Interface Centos

2016-04-01T19:28:00.002+07:00

/sbin/ip link set eth0 down
/sbin/ip link set eth0 name publik
/sbin/ip link set publik up

Edit the file /etc/udev/rules.d/70-persistent-net.rules to change the interface name of a network device.

# PCI device 0x11ab:0x4363 (sky2)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*",
ATTR{address}=="00:00:00:00:00:00",ATTR{dev_id}=="0x0", ATTR{type}=="1",
KERNEL=="eth*", NAME="eth0"

Disable Rule Mod Security

2016-02-25T20:33:00.003+07:00

Disable rule pada mod security apache

#<IfModule security2_module>
#        SecRuleEngine Off
#</IfModule>

<IfModule mod_security2.c>
 SecRuleRemoveById ######
</IfModule>

service httpd graceful

Backup SQL Server Remote

2016-02-02T17:51:00.000+07:00

sqlbackup <Host> <User> <Password> <DB> <TUJUAN> <KOMENTAR>

################# BASH BACKUP SQL ########################
serverdb=$1
userdb=$2
passwd=$3
namadb=$4
tujuan=$5
komen=$6

DATE=`date +%Y-%m-%d_%H_%M_%S`

#echo "$serverdb,$userdb,$passwd,$namadb"

mysqldump --opt --lock-tables=false --host $serverdb -P 3306 -u $userdb -p"$passwd" $namadb > $tujuan/$namadb.sql+$serverdb+$userdb+$DATE+$komen
################# BASH BACKUP SQL ########################

Zotero Plugin Extention

2015-03-30T17:14:00.000+07:00

http://mirror.ufs.ac.za/zotero/

Python Send Mail HTML

2015-03-07T12:44:00.000+07:00

import smtplib
from email.MIMEMultipart import MIMEMultipart
from email.MIMEImage import MIMEImage
from email.MIMEText import MIMEText
# Specifying the from and to addresses
fromaddr = 'kick_noreplay@zipruz.com'
toaddrs = 'hery@zipruz.com'
# Gmail Login
username = 'kick_noreplay@zipruz.com'
password = 'password'
# Sending the mail
msg2= MIMEMultipart('alternative')
msg2.add_header('Subject', 'INI DATA BARU')
msg2.attach(MIMEText('some code'))
msg2.attach(MIMEText('<html><body><a href="http://zipruz.com">ZIPRUZ MAIL</a></body></html>', 'html'))
server = smtplib.SMTP('smtp.gmail.com:587')
server.starttls()
server.login(username,password)
server.sendmail(fromaddr, toaddrs.split(","), msg2.as_string())
server.quit()