ISPConfig Miscellaneous

Can’t create folder or change permissions as root

Za kreiranje baza iz komandne linije za ispconfig, interesantno: remoting_client/cli

SSL on ISPConfig itself

I would recommend the following procedure: Create a website in ISPConfig that has the hostname that the ISPConfig panel uses and activate LE for this site. Then symlink the cert, bundle and key files to the /usr/local/ispconfig/interface/ssl/ files.

[SOLVED] Create SSL certificate for ISPConfig’s web interface with support for auto renewal | Howtoforge - Linux Howtos and Tutorials

Securing ISPConfig 3 Control Panel (Port 8080) With Let’s Encrypt Free SSL | Page 17 | Howtoforge - Linux Howtos and Tutorials Securing ISPConfig 3.1 With a Free Let’s Encrypt SSL Certificate Hostibox/ISPConfig-Let-s-Encrypt-Securing: Secure ISPConfig and its services with Let’s Encrypt certificate

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16

cd /usr/local/ispconfig/interface/ssl/

# make a backup
# .csr file is certificate request and we don't need it anymore
#
mv ispserver.crt ispserver.crt-$(date +"%y%m%d%H%M%S").bak
mv ispserver.key ispserver.key-$(date +"%y%m%d%H%M%S").bak
mv ispserver.csr ispserver.csr-$(date +"%y%m%d%H%M%S").bak

# symlinks
D=savioko.com
ln -sf /etc/letsencrypt/live/$D/fullchain.pem ispserver.crt
ln -sf /etc/letsencrypt/live/$D/privkey.pem ispserver.key

# must reboot

Greylisting in ISPConfig

For ispconfig 3.1, you just install postgrey before you install ispconfig. If you installed it afterwards, then you have to run an update and choose “reconfigure services = yes” during update.

Renew all Certificates in ISPConfig

Even in ISPConfig, you can easily renew all certificates that need renewal with

sudo certbot renew

Even better - just test if it will work, but do not do anything actually.

sudo certbot renew --dry-run

Speedup FTP by opening ports in firewall

How to set PassivePortRange and PassiveIP in pure-ftpd on Debian and Ubuntu Linux Enable Passive FTP in ISPConfig – ServerOK

cat /etc/pure-ftpd/conf/PassivePortRange
echo "40110 40210" > /etc/pure-ftpd/conf/PassivePortRange

U Web UI na ISPconfig dodaj: 40110:40210

https://www.lautenbacher.io/en/lamp-en/plesk-with-firewall-ftp-entering-passive-mode-is-slow-and-takes-a-long-time/

Setup a firewall with ISPConfig – schaal @it UG

Installing Multiple Versions of PHP for ISPConfig 3

Installation of commonly used PHP modules:

apt install -y php8.2-{bcmath,fpm,xml,mysql,zip,intl,ldap,gd,cli,bz2,curl,mbstring,pgsql,opcache,soap,cgi,apcu}

Fixing “502 Bad Gateway” error on ISPConfig3 app

After an upgrade, the ISPConfig3 Control Panel is displaying a “502 Bad Gateway” error, but other hosted sites are working normally.

The error message in /var/log/nginx/error.log is:

...connect() to unix:/var/lib/php8.1-fpm/ispconfig.sock failed (13: Permission denied) while connecting to upstream,

To fix this issue, make sure to check permissions not only on the file, but also on the parent folders of that file. The easiest way to do this is to type ll /var/lib/php* -d and, if any discrepancies are found, set them to chmod 755 /var/lib/php8*.

Extract MySQL root pass from ISPConfig3

cat /usr/local/ispconfig/server/lib/mysql_clientdb.conf

Migrate Sites To Another ISPConfig3 Server

mkdir /_backup
cd /_backup

# compress folder `/var/www`
tar -pczf var-www.tar.gz /var/www

# all databases
mysqldump -u root -pMyPassword --all-databases | gzip > databases.sql.gz

# config files
tar -pczf etc.tar.gz /etc
tar -pczf logs.tar.gz /var/log
tar -pczf etc-selections.tar.gz /etc/{php/,passwd,group,shadow,postfix/,dovecot/,nginx/}

# home folders
tar -pczf homes.tar.gz /home/
tar -pczf homes-root.tar.gz /root/

Restore

tar xvfz var-www.tar.gz
gzip -d databases.sql.gz
mysql -u root -pMyPassword < databases.sql

https://www.zvonimir-buzanic.from.hr/migration-of-ispconfig-3-to-new-server

ISPConfig 3 script to move installation from one server to another Migrate ISPConfig3 [Unix Server Tech Knowledge Base]

ISPConfig Migration Toolkit

The ISPConfig Migration Toolkit is the simplest way to migrate websites. The ISPConfig Migration Toolkit is capable of migrating single websites, mail domains or clients.

You can use it to migrate from ISPConfig 2, ISPConfig 3.x, Confixx, CPanel or Plesk to ISPConfig 3.2 on a single server. For detailed instructions, refer to the tutorial How To Migrate ISPConfig 2, ISPConfig 3.x, Confixx, CPanel or Plesk to ISPConfig 3.2 (single server).