Diferenças

Aqui você vê as diferenças entre duas revisões dessa página.

--- monit:instalacao [2021/10/17 18:40] – criada asadelta
+++ monit:instalacao [2021/10/17 19:34] (atual) – asadelta
@@ Linha 12: / Linha 12: @@
 ===== Configuração =====
+Por padrão o monit não consegue executar com o certificado do site utilizando o certbot.
+[[https://www.awsmonster.com/2019/04/cwp-how-to-add-lets-encrypt-ssl-to.html|Site de referencia para a configuração do certificado]]
+<code>
+# cp /etc/letsencrypt/live/server_fqdn/fullchain.pem /etc/ssl/certs/monit.pem
+# cat /etc/letsencrypt/live/server_fqdn/privkey.pem >> /etc/ssl/certs/monit.pem
+</code>
+Gere os parâmetros Diffie-Hellman, levará tempo
+<code>
+# openssl dhparam -2 2048 >> /etc/ssl/certs/monit.pem
+</code>
+Definir proprietário e permissões nesse arquivo
+<code>
+# chmod 0600 /etc/ssl/certs/monit.pem
+# chown root:root  /etc/ssl/certs/monit.pem
+</code>
 Antes de iniciar o monit devemos configurar algumas coisas para deixar o mesmo mais seguro.
@@ Linha 18: / Linha 42: @@
 </code>
+<code>
   set daemon 60            # check services at 2-minute intervals
+</code>
 <code>
-# set httpd port 2812 and
+  check process apache with pidfile /run/apache2/apache2.pid
+    start program = "systemctl restart apache2" with timeout 60 seconds
+    stop program  = "systemctl stop apache2"
+</code>
+<code>
+ set httpd port 2832 and
 #     use address localhost  # only accept connection from localhost (drop if you use M/Monit)
-#     allow localhost        # allow localhost to connect to the server and
+      allow 0.0.0.0/0.0.0.0        # allow localhost to connect to the server and
-#     allow admin:monit      # require user 'admin' with password 'monit'
+      allow "usuario":"senha"      # require user 'admin' with password 'monit'
-#     #with ssl {            # enable SSL/TLS and set path to server certificate
-#     #    pemfile: /etc/ssl/certs/monit.pem
-#     #}
 </code>
@@ Linha 35: / Linha 66: @@
 </code>
+<code>
+# cd /etc/monit/conf.d
+</code>
+==== MariDB ====
 <code>
- set httpd port 2832 and
+check process mysqld with pidfile /run/mysqld/mysqld.pid
-#     use address localhost  # only accept connection from localhost (drop if you use M/Monit)
+    start program = "systemctl start mariadb start"
-      allow 0.0.0.0/0.0.0.0        # allow localhost to connect to the server and
+    stop program = "systemctl stop mariadb"
-      allow "asadelta":"DA8860_23@RAYSS@"      # require user 'admin' with password 'monit'
+    if failed unixsocket /var/run/mysqld/mysqld.sock then restart
+</code>
+==== Verificar / ====
+<code>
+check filesystem rootfs with path /
+    if space usage > 90% then alert
+</code>
+==== sshd ====
+<code>
+check process sshd with pidfile /run/sshd.pid
+   start program  = "systemctl start sshd"
+   stop program = "systemctl stop sshd"
+   if failed port 2228 protocol ssh then restart
 </code>