daily

Author: szepeviktor

.typos.toml

@@ -67,3 +67,6 @@ extend-ignore-re = [
 "Github" = "GitHub"
 "Wordpress" = "WordPress"
 "Automattic" = "Automattic"
+
+[type.py.extend-identifiers]
+"typ" = "typ"

debian-setup/debian-setup2.sh

@@ -38,6 +38,9 @@ packages/most
 # Manual checks
 packages/_check-system
 
+# Dump PCI device IDs
+lspci -n >"${HOME}/lspci.out"
+
 # Basic packages
 Pkg_install_quiet \
     localepurge unattended-upgrades apt-listchanges debsums \
@@ -334,9 +337,6 @@ adduser USER
 # TODO - server backup
 ./install.sh backup/system-backup.sh
 # TODO - monit/apache+php
-lspci -n >lspci.out
-monitoring/monit/monit-debian-setup.sh
-# TODO - Monitoring
 open https://github.com/szepeviktor/debian-server-tools/blob/master/monitoring/README.md
 
 EOT

debian-setup/packages/adduser

@@ -177,7 +177,7 @@ EOF
 
 # Add mc syntax highlights
 ROOT_MC_SYNTAX="/root/.local/share/mc/mcedit"
-ROOT_MC_SYNTAX_CONFIG="/root/.config/mc/mcedit"
+ROOT_MC_SYNTAX_CONFIG="/root/.local/share/mc/syntax"
 mkdir -p "$ROOT_MC_SYNTAX"
 wget -nv -P "$ROOT_MC_SYNTAX" https://github.com/szepeviktor/debian-server-tools/raw/master/input/mc/email.syntax
 wget -nv -P "$ROOT_MC_SYNTAX" https://github.com/szepeviktor/debian-server-tools/raw/master/input/mc/markdown.syntax

webserver/add-prg-site-auto.sh

@@ -46,6 +46,7 @@ makealiases
 
 # Website directories
 (
+    chmod 0750 "/home/${U}"
     cd /home/${U}/
     install -o ${U} -g ${U} -m 0550 -d website
     cd website/

webserver/add-prg-site-local-auto.sh

@@ -32,6 +32,7 @@ makealiases
 
 # Website directories
 (
+    chmod 0750 "/home/${U}"
     cd /home/${U}/
     install -o ${U} -g ${U} -m 0550 -d website
     cd website/

webserver/add-site-auto.sh

@@ -18,6 +18,7 @@ adduser --disabled-password --gecos "" "$U"
 adduser _web "$U"
 
 # Website directories
+chmod 0750 "/home/${U}"
 mkdir -v --mode=0750 "/home/${U}/website"
 mkdir -v "/home/${U}/website/"{session,tmp,code,pagespeed,backup}
 chmod 0555 "/home/${U}/website/code"

webserver/add-site.sh

@@ -32,6 +32,7 @@ editor "${S}/authorized_keys"
 echo "ssh://${U}@${DOMAIN}:SSH-PORT/home/${U}/dev.git"
 
 # Website directories
+chmod 0750 "/home/${U}"
 mkdir -v --mode=0750 "/home/${U}/website"
 #mkdir -v /home/${U}/website/{session,tmp,code,pagespeed,backup,fastcgicache}
 mkdir -v "/home/${U}/website/"{session,tmp,code,pagespeed,backup}

webserver/apache-conf-available/wordpress.inc.conf

@@ -35,7 +35,7 @@
     </LocationMatch>
 
     # Plugins and themes `*.php` (no root, no dollar sign)
-    <LocationMatch "/(mu-plugins|plugins|themes)/.*\.php">
+    <LocationMatch "/(languages|mu-plugins|plugins|themes)/.*\.php">
         Require all denied
     </LocationMatch>
     # Exclude custom entry points created by poorly written plugins and themes

webserver/apache-sites-available/_htaccess-snippets.conf

@@ -138,6 +138,11 @@ Header set Connection "Close" env=YANDEXBOT
 RewriteCond "%{HTTP_USER_AGENT}" "SitemapProbe"
 RewriteRule "trafficbasedsspsitemap\.xml" - [F]
 
+# TikTok bytedance.com
+RewriteCond "%{HTTP_USER_AGENT}" "Bytespider"
+# 429 Too Many Requests
+RewriteRule "^" - [R=429,L]
+
 # Fancybox for old IE
 <IfModule mod_rewrite.c>
     RewriteEngine On

webserver/php-fpm.sh

@@ -120,3 +120,6 @@ fi
 
 # Siteprotection
 Dinstall monitoring/siteprotection.sh
+
+# Compare enabled extensions
+for PHPV in $(update-alternatives --list php); do echo "$PHPV ..."; colordiff -u <(php7.4 -m) <($PHPV -m); done