daily

Author: szepeviktor

Onboarding-HU.md

@@ -43,7 +43,7 @@ Kategóriánként **egy** szolgáltató.
    **[Cheapsslsecurity.com](https://cheapsslsecurity.com/rapidssl/rapidsslcertificate.html),
    [SSLMate](https://sslmate.com/),
    DigiCert,
-   Certum :eu:
+   Certum :eu:**
 1. CDN (fájl kiszolgáló hálózat) szolgáltató:
    **AWS, KeyCDN :eu:, Akamai from Selectel**
 1. Tranzakciós email kiküldő:

Onboarding.md

@@ -36,7 +36,7 @@ One per category.
    **[Cheapsslsecurity.com](https://cheapsslsecurity.com/rapidssl/rapidsslcertificate.html),
    [SSLMate](https://sslmate.com/),
    DigiCert,
-   Certum :eu:
+   Certum :eu:**
 1. CDN provider:
    **AWS, KeyCDN :eu:, Akamai from Selectel**
 1. Transactional email provider:

monitoring/syslog-errors-infrequent.sh

@@ -21,7 +21,7 @@ Filter_failures()
 |alert|unknown|unable|miss[^y]|except|disable|invalid|[^e]fault|cannot|denied\
 |broken|exceed|too big|too many|unsafe|unsolicited|limit reach|unhandled|traps\
 |\\bbad\\b|corrupt|but got status|oom-killer|false|unreach|[^c]oops|ignor[ei]\
-|prohibit|timeout|blocked|unavailable|over quota|unconfigured"
+|prohibit|timeout|blocked|unavailable|over quota|unconfigured|wrong"
 }
 
 LOG_EXCERPT="$(mktemp --suffix=.syslog)"

monitoring/syslog-errors.sh

@@ -21,7 +21,7 @@ Filter_failures()
 |alert|unknown|unable|miss[^y]|except|disable|invalid|[^e]fault|cannot|denied\
 |broken|exceed|too big|too many|unsafe|unsolicited|limit reach|unhandled|traps\
 |\\bbad\\b|corrupt|but got status|oom-killer|false|unreach|[^c]oops|ignor[ei]\
-|prohibit|timeout|blocked|unavailable|over quota|unconfigured"
+|prohibit|timeout|blocked|unavailable|over quota|unconfigured|wrong"
 }
 
 LOG_EXCERPT="$(mktemp --suffix=.syslog)"

mysql/SQL-Performance.md

@@ -20,6 +20,15 @@ innodb_flush_method         = O_DIRECT
 innodb_thread_concurrency   = {CPU CORES - 1}
 ```
 
+```sql
+-- Recommended innodb_buffer_pool_size
+SELECT CEILING(Total_InnoDB_Bytes*1.6/POWER(1024, 3)) RIBPS
+FROM
+  (SELECT SUM(data_length+index_length) Total_InnoDB_Bytes
+   FROM information_schema.tables
+   WHERE ENGINE='InnoDB') A;
+```
+
 ### Slow log analysis
 
 - Install Percona Tools: `apt-get install percona-toolkit`

webserver/CloudFlare.md

@@ -96,7 +96,7 @@ RewriteCond "%{HTTP:X-Forwarded-Proto}" "!=https" [OR]
 
 Restrict access
 
-- In Apache `RemoteIPTrustedProxyList`
+- In Apache `RemoteIPTrustedProxyList` and `Require expr "%{REMOTE_ADDR} != %{CONN_REMOTE_ADDR}"`
 - In Linux firewall on port 80 and 443 using an ipset
 
 SSL encryption toward Cloudflare edges

webserver/wp-install/wp-cron-cli.sh

@@ -79,6 +79,7 @@ export REMOTE_ADDR="127.0.0.1"
 #export SERVER_SOFTWARE="Apache"
 #export SERVER_SOFTWARE="nginx"
 #export SERVER_NAME="<DOMAIN>"
+export SERVER_PORT="443"
 
 # Request data
 export REQUEST_METHOD="GET"