Intelligent Stack Scripts for CentOS Linux See http://drewsymo.com/web-servers/baller-nginx-php-fpm-apc-mysql-install-script/ for more information.

Pinch is a pinch to install, simply execute the following commands to get started:

$ yum install -y git
$ git clone git://github.com/drewsymo/Pinch.git
$ cd Pinch/vanilla-lemp && bash install.sh

If you're on Linode, you can simply rebuild your instance with the Pinch-installer stackscript.

• Installs a LEMP stack (PHP-FPM, MariaDB, APC, Nging) via Yum
• Sets your hostname, timezone and installs essential tools
• Uses GoogleDNS with Level3 tertiary resolver
• Intelligentelly configures Nginx based on CPU cores
• Retrieves MariaDB server.cnf based on total memory
• Sets MariaDB root password and removes testing user / tables
• Creates a daily cron with email notifications for available Yum updates
• Secures your system via the following methods:
  • Creates privledged sudo user
  • Disable SSH root logins
  • Disables UseDNS
  • Change default SSH port
  • Enables SElinux
  • Firewall via CSF / iptables
  • Sets common network security parameters
  • Disables IPv6
  • Creates unprivledged www-data user for lemp components

You can find an example default.conf file in the root of this repository.

The locations for each of the Pinch components are as follows:

• Nginx: /etc/nginx
• PHP-FPM: /etc/php-fpm.d/
• MariaDB: /etc/my.cnf.d/

Pinch creates a new privledged user for your system and disables root SSH logins for security. Additionally, it will set a root password for your MariaDB server.

• Hostname Option: host.domain.com
• Timezone Option: Australia/NSW
• New SSH Port: 3636
• New Root Username: sudoninja
• New Root Password: sudoninjapassword
• MariaDB Root Password: mariadbpassword

For example, you can now login using ssh -p 3636 [email protected] with the password sudoninjapassword.

You can adjust the defaults by modifying the parameters in the install.sh script, located in the vanilla-lemp folder. Alternatively, if you are using the Linode stack-script, you will be prompted to enter these options on rebuild.

Drew Morris

• Blog