VPS操作步骤

yum update

# 加固ssh安全
vi /etc/ssh/sshd_config
Port 9186
Protocol 2
PermitRootLogin no
PermitEmptyPasswords no
X11Forwarding no
UsePAM no
UseDNS no
AllowUsers huxuanhui
Banner /etc/issue

# 添加用户
useradd huxuanhui
passwd huxuanhui
passwd root   

# 安装配置nginx php mysql
rpm -Uvh http://centos.alt.ru/repository/centos/6/i386/centalt-release-6-1.noarch.rpm
yum update
yum install nginx-stable php-fpm mysql-server php-mysqlnd

service mysqld start
mysqladmin -uroot password

vi /etc/php-fpm.d/www.conf

user = nginx
group = nginx

service php-fpm start

vi /etc/nginx/nginx.conf

删除 root html 行

fastcgi_param  SCRIPT_FILENAME  /usr/share/nginx/html$fastcgi_script_name;

service nginx start

# 其他配置
cp /etc/securetty /etc/securetty.sav
vi /etc/securetty
只保留 tty1

vi /etc/issue
vi /etc/init/start-ttys.conf

# 删除一些用户
cp /etc/passwd /etc/passwd.sav
cp /etc/group /etc/group.sav
userdel games
groupdel floppy games

# 设定启动的服务
chkconfig ip6tables off
chkconfig mysqld on
chkconfig netfs off
chkconfig php-fpm on


# 防火墙设定
iptables -F
iptables -A INPUT -i lo -j ACCEPT
iptables -A INPUT -i lo ! -d 127.0.0.0/8 -j REJECT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A OUTPUT -j ACCEPT
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j ACCEPT
iptables -A INPUT -p tcp -m state --state NEW --dport 9186 -j ACCEPT
iptables -A INPUT -p icmp -m icmp --icmp-type 8 -j ACCEPT
iptables -A INPUT -j REJECT
iptables -A FORWARD -j REJECT

转载于:https://my.oschina.net/huxuanhui/blog/56734