#!/bin/bash # /** # * @version 2.12 # * @package Engintron for cPanel/WHM # * @author Fotis Evangelou (https://kodeka.io) # * @url https://engintron.com # * @copyright Copyright (c) 2014 - 2026 Kodeka OÜ. All rights reserved. # * @license GNU/GPL license: https://www.gnu.org/copyleft/gpl.html # */ # Constants APP_PATH="/opt/engintron" APP_VERSION="2.12" APP_RELEASE_DATE="April 5th, 2026" CPANEL_PLG_PATH="/usr/local/cpanel/whostmgr/docroot/cgi" INITSYS=$(cat /proc/1/comm) if [ -f "/etc/redhat-release" ]; then DISTRO="el" RELEASE=$(rpm -q --qf %{version} `rpm -q --whatprovides redhat-release` | cut -c 1) else DISTRO="ubuntu" CODENAME=$(lsb_release -c -s) RELEASE=$(lsb_release -r -s) fi ############################# HELPER FUCTIONS [start] ############################# function install_basics { echo "=== Let's upgrade our system first & install any required packages (incl. useful utilities) ===" if [ "$RELEASE" -gt "7" ]; then dnf -y update dnf -y install epel-release dnf -y update dnf -y install bash-completion bc bmon bzip2 curl dmidecode ethtool git htop httpie ifstat iftop iotop iptraf iptraf-ng jpegoptim libwebp make multitail mutt nano ncdu net-tools nload nmon openssl-devel optipng pcre pcre-devel psmisc redhat-lsb redhat-lsb-core rsync screen siege smartmontools sudo tree unzip wget yum-utils zip zlib-devel dnf -y install memcached libmemcached dnf -y install ea4-experimental else yum -y update if [ "$RELEASE" = "6" ]; then if [ "$(arch)" = "x86_64" ]; then yum -y install https://archives.fedoraproject.org/pub/archive/epel/6/x86_64/epel-release-6-8.noarch.rpm else yum -y install https://archives.fedoraproject.org/pub/archive/epel/6/i386/epel-release-6-8.noarch.rpm fi fi yum -y install epel-release yum -y update yum -y install apr-util bash-completion bc bmon bzip2 curl dmidecode ethtool git htop httpie ifstat iftop iotop iptraf iptraf-ng jpegoptim libwebp make multitail mutt nano ncdu net-tools nload nmon openssl-devel optipng pcre pcre-devel psmisc redhat-lsb redhat-lsb-core rename rsync screen screenfetch siege smartmontools sudo tree unzip wget yum-utils zip zlib-devel yum -y install memcached memcached-devel libmemcached libmemcached-devel yum -y install ea4-experimental fi echo "" echo "" } function install_mod_remoteip { # Get system IPs SYSTEM_IPS=$(ip addr show | grep -o "inet [0-9]*\.[0-9]*\.[0-9]*\.[0-9]*" | grep -o "[0-9]*\.[0-9]*\.[0-9]*\.[0-9]*" | sed ':a;N;$!ba;s/\n/ /g'); if [[ ! $(echo $SYSTEM_IPS | grep "127.0.0.1") ]]; then SYSTEM_IPS="127.0.0.1 $SYSTEM_IPS" fi echo "=== Installing mod_remoteip for Apache ===" # EL7+ if [ -f /etc/apache2/conf/httpd.conf ]; then if [ "$RELEASE" -gt "7" ]; then dnf -y install ea-apache24-mod_remoteip else yum -y install ea-apache24-mod_remoteip fi if [ -f /etc/apache2/modules/mod_remoteip.so ]; then REMOTEIP_CONF=$(find /etc/apache2/conf.modules.d/ -iname "*_mod_remoteip.conf") if [ -f $REMOTEIP_CONF ]; then cat > $REMOTEIP_CONF < "/usr/local/apache/conf/includes/remoteip.conf" <> /var/cpanel/cpanel.config echo "apache_ssl_port=0.0.0.0:8443" >> /var/cpanel/cpanel.config fi /usr/local/cpanel/whostmgr/bin/whostmgr2 --updatetweaksettings fi echo "" echo "" echo "=== Distill changes in Apache's configuration and restart Apache ===" if [ ! -f /usr/local/cpanel/bin/whmapi1 ]; then /usr/local/cpanel/bin/apache_conf_distiller --update fi /scripts/rebuildhttpdconf /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd echo "" echo "" } function apache_revert_port { echo "=== Switch Apache back to ports 80 & 443 ===" if [ -f /usr/local/cpanel/bin/whmapi1 ]; then /usr/local/cpanel/bin/whmapi1 set_tweaksetting key=apache_port value=0.0.0.0:80 /usr/local/cpanel/bin/whmapi1 set_tweaksetting key=apache_ssl_port value=0.0.0.0:443 else if grep -Fxq "^apache_" /var/cpanel/cpanel.config; then sed -i 's/^apache_port=.*/apache_port=0.0.0.0:80/' /var/cpanel/cpanel.config sed -i 's/^apache_ssl_port=.*/apache_ssl_port=0.0.0.0:443/' /var/cpanel/cpanel.config else echo "apache_port=0.0.0.0:80" >> /var/cpanel/cpanel.config echo "apache_ssl_port=0.0.0.0:443" >> /var/cpanel/cpanel.config fi /usr/local/cpanel/whostmgr/bin/whostmgr2 --updatetweaksettings fi echo "" echo "" echo "=== Distill changes in Apache's configuration and restart Apache ===" if [ ! -f /usr/local/cpanel/bin/whmapi1 ]; then /usr/local/cpanel/bin/apache_conf_distiller --update fi /scripts/rebuildhttpdconf /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd echo "" echo "" } function install_nginx { # Disable Nginx from the Amazon Linux repo if [ -f /etc/yum.repos.d/amzn-main.repo ]; then if ! grep -q "^exclude=nginx\*" /etc/yum.repos.d/amzn-main.repo\00; then if grep -Fq "#exclude=nginx*" /etc/yum.repos.d/amzn-main.repo; then sed -i "s/\#exclude=nginx\*/exclude=nginx\*/" /etc/yum.repos.d/amzn-main.repo else sed -i "s/enabled=1/enabled=1\nexclude=nginx\*/" /etc/yum.repos.d/amzn-main.repo fi fi fi # Disable Nginx from the EPEL repo if [ -f /etc/yum.repos.d/epel.repo ]; then if ! grep -q "^exclude=nginx\*" /etc/yum.repos.d/epel.repo\00; then if grep -Fq "#exclude=nginx*" /etc/yum.repos.d/epel.repo; then sed -i "s/\#exclude=nginx\*/exclude=nginx\*/" /etc/yum.repos.d/epel.repo else sed -i "s/enabled=1/enabled=1\nexclude=nginx\*/" /etc/yum.repos.d/epel.repo fi fi fi # Remove Nginx if it's not installed from the official (nginx.org) repo if rpm -q nginx &>/dev/null; then if ! rpm -q --queryformat '%{RELEASE}\n' nginx 2>/dev/null | grep -q '\.ngx$'; then echo "=== Removing Nginx (installed from a non-official repo) ===" if [ "$RELEASE" -gt "7" ]; then dnf -y remove nginx else yum -y remove nginx fi fi fi if [ ! -f /etc/yum.repos.d/nginx.repo ]; then touch /etc/yum.repos.d/nginx.repo fi # Allow switching from mainline to stable release if [[ ! $1 ]]; then if grep -iq "mainline" /etc/yum.repos.d/nginx.repo; then if [ "$RELEASE" -gt "7" ]; then dnf -y remove nginx else yum -y remove nginx fi fi fi # Setup Nginx repo RELEASE_VERSION="\$releasever" if grep -iq "Amazon Linux AMI" /etc/system-release; then RELEASE_VERSION=6 fi if grep -iq "Amazon Linux release 2" /etc/system-release; then RELEASE_VERSION=7 fi if [ "$1" = mainline ]; then echo "=== Install Nginx (mainline) from nginx.org ===" cat > "/etc/yum.repos.d/nginx.repo" < "/etc/yum.repos.d/nginx.repo" < /etc/nginx/overrides/readme.txt fi if [ ! -d /etc/nginx/utilities ]; then mkdir -p /etc/nginx/utilities fi cp -f $APP_PATH/nginx/utilities/https_vhosts.php /etc/nginx/utilities/ cp -f $APP_PATH/nginx/utilities/https_vhosts.sh /etc/nginx/utilities/ chmod +x /etc/nginx/utilities/* if [ ! -d /etc/ssl/engintron ]; then mkdir -p /etc/ssl/engintron fi if [ ! -d /var/cache/nginx ]; then mkdir -p /var/cache/nginx fi if [ -f /sbin/chkconfig ]; then /sbin/chkconfig nginx on else systemctl enable nginx fi if [ -f /usr/lib/systemd/system/nginx.service ]; then sed -i 's/PrivateTmp=true/PrivateTmp=false/' /usr/lib/systemd/system/nginx.service systemctl daemon-reload fi if [ "$(pstree | grep 'nginx')" ]; then service nginx stop fi # Adjust log rotation to 7 days if [ -f /etc/logrotate.d/nginx ]; then sed -i 's:rotate .*:rotate 7:' /etc/logrotate.d/nginx\00 fi echo "" echo "" } function remove_nginx { echo "=== Removing Nginx... ===" if [ -f /sbin/chkconfig ]; then /sbin/chkconfig nginx off else systemctl disable nginx fi if [ "$RELEASE" -gt "7" ]; then systemctl stop nginx dnf -y remove nginx else service nginx stop yum -y remove nginx fi rm -rf /etc/nginx/* rm -f /etc/yum.repos.d/nginx.repo rm -rf /etc/ssl/engintron/* # Enable Nginx from the EPEL repo if [ -f /etc/yum.repos.d/epel.repo ]; then sed -i "s/^exclude=nginx\*/#exclude=nginx\*/" /etc/yum.repos.d/epel.repo fi # Enable Nginx from the Amazon Linux repo if [ -f /etc/yum.repos.d/amzn-main.repo ]; then sed -i "s/^exclude=nginx\*/#exclude=nginx\*/" /etc/yum.repos.d/amzn-main.repo fi echo "" echo "" } function install_engintron_ui { echo "=== Installing Engintron WHM plugin files... ===" # Cleanup older installations from the obsolete addon_engintron.cgi file if [ -f $CPANEL_PLG_PATH/addon_engintron.cgi ]; then rm -f $CPANEL_PLG_PATH/addon_engintron.cgi fi ln -sf /opt/engintron/app/engintron.php $CPANEL_PLG_PATH/ chmod +x $CPANEL_PLG_PATH/engintron.php echo "" echo "=== Register Engintron as a cPanel app ===" /usr/local/cpanel/bin/register_appconfig $APP_PATH/app/engintron.conf echo "" echo "" } function remove_engintron_ui { echo "=== Removing Engintron WHM plugin files... ===" rm -f $CPANEL_PLG_PATH/engintron.php echo "" echo "=== Unregister Engintron as a cPanel app ===" /usr/local/cpanel/bin/unregister_appconfig engintron echo "" echo "" } function install_munin_patch { if [ -f /etc/munin/plugin-conf.d/cpanel.conf ]; then echo "=== Updating Munin's configuration for Apache ===" if grep -q "\[apache_status\]" /etc/munin/plugin-conf.d/cpanel.conf; then echo "Munin configuration already updated, nothing to do here" else cat >> "/etc/munin/plugin-conf.d/cpanel.conf" <> /etc/csf/csf.pignore csf -r service lfd restart fi echo "" echo "" fi } function csf_pignore_remove { if [ -f /etc/csf/csf.pignore ]; then echo "" echo "=== Removing Nginx from CSF's process ignore list ===" if grep -q "exe\:\/usr\/sbin\/nginx" /etc/csf/csf.pignore; then sed -i 's:^exe\:\/usr\/sbin\/nginx::' /etc/csf/csf.pignore csf -r service lfd restart fi echo "" echo "" fi } function cron_for_https_vhosts_add { if [ -f /etc/crontab ]; then if grep -q "https_vhosts\.sh" /etc/crontab; then echo "=== Skip adding cron job to generate Nginx's HTTPS vhosts ===" else echo "" echo "=== Adding cron job to generate Nginx's HTTPS vhosts ===" cat >> "/etc/crontab" < /dev/null 2>&1 EOF fi echo "" echo "" fi } function cron_for_https_vhosts_remove { if [ -f /etc/crontab ]; then echo "" echo "=== Removing cron job used for generating Nginx's HTTPS vhosts ===" sed -i 's:* * * * * root /etc/nginx/utilities/https_vhosts.sh >> /dev/null 2>&1::' /etc/crontab sed -i 's:* * * * * root /etc/nginx/utilities/https_vhosts.sh > /dev/null 2>&1::' /etc/crontab echo "" echo "" fi } function chkserv_nginx_on { if [ -f /etc/chkserv.d/httpd ]; then echo "" echo "=== Enable TailWatch chkservd driver for Nginx ===" sed -i 's:service\[httpd\]=80,:service[httpd]=8080,:' /etc/chkserv.d/httpd echo "nginx:1" >> /etc/chkserv.d/chkservd.conf if [ ! -f /etc/chkserv.d/nginx ]; then touch /etc/chkserv.d/nginx fi echo "service[nginx]=80,GET / HTTP/1.0,HTTP/1..,killall -TERM nginx;sleep 2;killall -9 nginx;service nginx stop;service nginx start" > /etc/chkserv.d/nginx /scripts/restartsrv apache_php_fpm /scripts/restartsrv_chkservd echo "" echo "" fi } function chkserv_nginx_off { if [ -f /etc/chkserv.d/httpd ]; then echo "" echo "=== Disable TailWatch chkservd driver for Nginx ===" sed -i 's:service\[httpd\]=8080,:service[httpd]=80,:' /etc/chkserv.d/httpd sed -i 's:^nginx\:1::' /etc/chkserv.d/chkservd.conf if [ -f /etc/chkserv.d/nginx ]; then rm -f /etc/chkserv.d/nginx fi /scripts/restartsrv apache_php_fpm /scripts/restartsrv_chkservd echo "" echo "" fi } ############################# HELPER FUCTIONS [end] ############################# ### Define actions ### case $1 in install|update) clear echo "**************************************" echo "* Installing Engintron *" echo "**************************************" echo "" echo "" # Cleanup Engintron v1.x installation location if [ -f /engintron.sh ]; then rm -f /engintron.sh fi if [ -d /usr/local/src/engintron ]; then rm -rf /usr/local/src/engintron fi if [ "$2" = local ]; then # ~ Local (dev) installation from $APP_PATH ~ echo -e "\033[36m=== Performing local installation from $APP_PATH... ===\033[0m" else # ~ Remote (production) installation ~ # Always fetch the latest engintron-installer from GitHub and exec into # it. This runs as a completely separate process, so it can freely # overwrite $APP_PATH without any self-replacement issues in this script. wget --no-check-certificate -O /tmp/engintron-installer https://raw.githubusercontent.com/engintron/engintron/master/engintron-installer chmod +x /tmp/engintron-installer exec bash /tmp/engintron-installer "$1" "$2" fi echo "" echo "" install_basics install_nginx $3 install_mod_remoteip apache_change_port install_munin_patch install_engintron_ui if [ ! -f /etc/ssl/certs/dhparam.pem ]; then echo "" echo "=== Generating DHE ciphersuites (2048 bits)... ===" openssl dhparam -out /etc/ssl/certs/dhparam.pem 2048 fi echo "" echo "=== Restarting Apache & Nginx... ===" /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd fuser -k 80/tcp fuser -k 8080/tcp fuser -k 443/tcp fuser -k 8443/tcp if [ "$RELEASE" -gt "7" ]; then systemctl start nginx else service nginx start fi csf_pignore_add cron_for_https_vhosts_add chkserv_nginx_on if [ "$RELEASE" -gt "7" ]; then systemctl restart nginx else service nginx restart fi if [ ! -f $APP_PATH/state.conf ]; then touch $APP_PATH/state.conf fi echo "on" > $APP_PATH/state.conf if [ -f $APP_PATH/engintron.sh ]; then chmod +x $APP_PATH/engintron.sh $APP_PATH/engintron.sh purgecache fi /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd sleep 5 if [ "$RELEASE" -gt "7" ]; then systemctl restart httpd systemctl restart nginx else service httpd restart service nginx restart fi # Enable "engintron" shortcut if [ ! -f "/usr/local/sbin/engintron" ]; then ln -s $APP_PATH/engintron.sh /usr/local/sbin/engintron fi # Make installers executable if [ -d $APP_PATH/installers ]; then find $APP_PATH/installers/ -iname "*.sh" | xargs chmod +x fi # Make utilities executable if [ -d $APP_PATH/utilities ]; then find $APP_PATH/utilities/ -iname "*.sh" | xargs chmod +x find $APP_PATH/utilities/ -iname "*.pl" | xargs chmod +x fi echo "" echo "**************************************" echo "* Installation Complete *" echo "**************************************" echo "" echo "" ;; remove|uninstall) clear echo "**************************************" echo "* Removing Engintron *" echo "**************************************" remove_mod_remoteip apache_revert_port remove_nginx remove_munin_patch remove_engintron_ui csf_pignore_remove cron_for_https_vhosts_remove chkserv_nginx_off echo "" echo "=== Removing Engintron files... ===" rm -rvf /opt/engintron echo "" echo "=== Restarting Apache... ===" /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd # Remove "engintron" shortcut if [ -f "/usr/local/sbin/engintron" ]; then rm -f /usr/local/sbin/engintron fi echo "" echo "**************************************" echo "* Removal Complete *" echo "**************************************" echo "" echo "" ;; enable) clear echo "**************************************" echo "* Enabling Engintron *" echo "**************************************" if [ ! -f $APP_PATH/state.conf ]; then touch $APP_PATH/state.conf fi echo "on" > $APP_PATH/state.conf install_munin_patch if [ "$RELEASE" -gt "7" ]; then systemctl stop nginx else service nginx stop fi sed -i 's:PROXY_TO_PORT 443;:PROXY_TO_PORT 8443;:' /etc/nginx/common_https.conf sed -i 's:listen 8080 default_server:listen 80 default_server:' /etc/nginx/conf.d/default.conf sed -i 's:listen \[\:\:\]\:8080 default_server:listen [\:\:]\:80 default_server:' /etc/nginx/conf.d/default.conf sed -i 's:deny all; #:# deny all; #:' /etc/nginx/conf.d/default.conf sed -i 's:PROXY_TO_PORT 80;:PROXY_TO_PORT 8080;:' /etc/nginx/conf.d/default.conf sed -i 's:\:80; # Apache Status Page:\:8080; # Apache Status Page:' /etc/nginx/conf.d/default.conf if [ -f /etc/nginx/conf.d/default_https.conf ]; then sed -i 's:listen 8443 ssl:listen 443 ssl:g' /etc/nginx/conf.d/default_https.conf sed -i 's:listen \[\:\:\]\:8443 ssl:listen [\:\:]\:443 ssl:g' /etc/nginx/conf.d/default_https.conf sed -i 's:deny all; #:# deny all; #:g' /etc/nginx/conf.d/default_https.conf fi sed -i 's:deny all; #:# deny all; #:g' /etc/nginx/utilities/https_vhosts.php sed -i 's:'HTTPD_HTTPS_PORT', '443':'HTTPD_HTTPS_PORT', '8443':' /etc/nginx/utilities/https_vhosts.php sed -i 's:'NGINX_HTTPS_PORT', '8443':'NGINX_HTTPS_PORT', '443':' /etc/nginx/utilities/https_vhosts.php apache_change_port if [ "$RELEASE" -gt "7" ]; then systemctl start nginx else service nginx start fi /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd if [ "$RELEASE" -gt "7" ]; then systemctl restart nginx else service nginx restart fi chkserv_nginx_on echo "" echo "**************************************" echo "* Engintron Enabled *" echo "**************************************" echo "" echo "" ;; disable) clear echo "**************************************" echo "* Disabling Engintron *" echo "**************************************" if [ ! -f $APP_PATH/state.conf ]; then touch $APP_PATH/state.conf fi echo "off" > $APP_PATH/state.conf remove_munin_patch if [ "$RELEASE" -gt "7" ]; then systemctl stop nginx else service nginx stop fi sed -i 's:PROXY_TO_PORT 8443;:PROXY_TO_PORT 443;:' /etc/nginx/common_https.conf sed -i 's:listen 80 default_server:listen 8080 default_server:' /etc/nginx/conf.d/default.conf sed -i 's:listen \[\:\:\]\:80 default_server:listen [\:\:]\:8080 default_server:' /etc/nginx/conf.d/default.conf sed -i 's:# deny all; #:deny all; #:' /etc/nginx/conf.d/default.conf sed -i 's:PROXY_TO_PORT 8080;:PROXY_TO_PORT 80;:' /etc/nginx/conf.d/default.conf sed -i 's:\:8080; # Apache Status Page:\:80; # Apache Status Page:' /etc/nginx/conf.d/default.conf if [ -f /etc/nginx/conf.d/default_https.conf ]; then sed -i 's:listen 443 ssl:listen 8443 ssl:g' /etc/nginx/conf.d/default_https.conf sed -i 's:listen \[\:\:\]\:443 ssl:listen [\:\:]\:8443 ssl:g' /etc/nginx/conf.d/default_https.conf sed -i 's:# deny all; #:deny all; #:g' /etc/nginx/conf.d/default_https.conf fi sed -i 's:# deny all; #:deny all; #:g' /etc/nginx/utilities/https_vhosts.php sed -i 's:'HTTPD_HTTPS_PORT', '8443':'HTTPD_HTTPS_PORT', '443':' /etc/nginx/utilities/https_vhosts.php sed -i 's:'NGINX_HTTPS_PORT', '443':'NGINX_HTTPS_PORT', '8443':' /etc/nginx/utilities/https_vhosts.php apache_revert_port if [ "$RELEASE" -gt "7" ]; then systemctl start nginx else service nginx start fi /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd if [ "$RELEASE" -gt "7" ]; then systemctl restart nginx else service nginx restart fi chkserv_nginx_off echo "" echo "**************************************" echo "* Engintron Disabled *" echo "**************************************" echo "" echo "" ;; resall) echo "=========================================" echo "=== Restarting All Important Services ===" echo "=========================================" echo "" #if [ -f "/usr/local/cpanel/cpanel" ]; then # echo "Restarting cPanel..." # service cpanel restart # echo "" #fi if [ "$(pstree | grep 'crond')" ]; then echo "Restarting Cron..." if [ "$RELEASE" -gt "7" ]; then systemctl restart crond else service crond restart fi echo "" fi if [[ -f /etc/csf/csf.conf && "$(cat /etc/csf/csf.conf | grep 'TESTING = \"0\"')" ]]; then echo "Restarting CSF..." csf -r echo "" fi if [ "$(pstree | grep 'lfd')" ]; then echo "Restarting LFD..." if [ "$RELEASE" -gt "7" ]; then systemctl restart lfd else service lfd restart fi echo "" fi if [ "$(pstree | grep 'munin-node')" ]; then echo "Restarting Munin..." if [ "$RELEASE" -gt "7" ]; then systemctl restart munin-node else service munin-node restart fi echo "" fi if [ "$(pstree | grep 'mysql')" ]; then echo "Restarting the database..." /scripts/restartsrv_mysql echo "" fi if [ "$(pstree | grep 'httpd')" ]; then echo "Restarting Apache..." /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd echo "" fi if [ "$(pstree | grep 'nginx')" ]; then echo "Restarting Nginx..." if [ "$RELEASE" -gt "7" ]; then systemctl restart nginx else service nginx restart fi echo "" fi echo "" ;; res|restart) echo "=====================================" echo "=== Restarting All Basic Services ===" echo "=====================================" echo "" if [ "$(pstree | grep 'httpd')" ]; then echo "Restarting Apache..." /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd echo "" fi if [ "$(pstree | grep 'nginx')" ]; then if [ "$2" = force ]; then echo "Kill all Nginx processes..." killall -9 nginx killall -9 nginx killall -9 nginx fi echo "Restarting Nginx..." if [ "$RELEASE" -gt "7" ]; then systemctl restart nginx else service nginx restart fi echo "" fi echo "" ;; reload) echo "=======================" echo "=== Reloading Nginx ===" echo "=======================" echo "" if [ "$(pstree | grep 'nginx')" ]; then echo "Reloading Nginx..." if [ "$RELEASE" -gt "7" ]; then systemctl reload nginx else service nginx reload fi echo "" fi echo "" ;; restoreipfwd) echo "=======================================" echo "=== Restore IP Forwarding in Apache ===" echo "=======================================" echo "" install_mod_remoteip /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd if [ "$RELEASE" -gt "7" ]; then systemctl reload nginx else service nginx reload fi echo "Operation completed." echo "" echo "" ;; upd) echo "================================" echo "=== Updating Server Software ===" echo "================================" echo "" if [ "$DISTRO" = "el" ]; then if [ "$RELEASE" -gt "7" ]; then echo "~ For EL8 (or newer) ~" echo "" echo "Flush all caches..." dnf clean all echo "" echo "Update packages..." dnf -y update else echo "~ For EL6 or EL7 ~" echo "" echo "Flush all caches..." yum clean all echo "" echo "Update packages..." yum -y update fi else echo "" echo "Flush all caches..." apt-get clean all echo "" echo "Update packages..." apt-get update apt-get -y dist-upgrade apt-get -y autoremove fi echo "" echo "Operation completed." ;; info) echo "==================" echo "=== OS Version ===" echo "==================" echo "" if [ -f "/etc/redhat-release" ]; then cat /etc/redhat-release if [ -f "/usr/local/cpanel/cpanel" ]; then CPANEL_VERSION=$(/usr/local/cpanel/cpanel -V) echo "" echo "cPanel version: $CPANEL_VERSION" fi else lsb_release -drc fi echo "" echo "" echo "==================" echo "=== Disk Usage ===" echo "==================" echo "" df -hT echo "" echo "" echo "==============" echo "=== Uptime ===" echo "==============" echo "" uptime echo "" echo "" echo "===================" echo "=== System Date ===" echo "===================" echo "" date echo "" echo "" echo "=======================" echo "=== Users Logged In ===" echo "=======================" echo "" who ;; tp) echo "=== Tuning Primer ===" echo "" bash $APP_PATH/utilities/tuning-primer.sh echo "" echo "Operation completed." ;; mt) echo "=== MySQL Tuner ===" echo "" if [ -f /root/.my.cnf ]; then #source /root/.my.cnf #perl $APP_PATH/utilities/mysqltuner/mysqltuner.pl --user $user --pass $password perl $APP_PATH/utilities/mysqltuner/mysqltuner.pl --defaults-file=/root/.my.cnf else echo "Missing /root/.my.cnf credentials." echo "Can't connect to the server's database!" fi echo "" echo "Operation completed." ;; purgecache) NOW=$(date +'%Y.%m.%d at %H:%M:%S') echo "===============================================================" echo "=== Purge Nginx cache/temp files and restart Apache & Nginx ===" echo "===============================================================" echo "" echo "--- Process started at $NOW ---" echo "" if [ "$(pstree | grep 'httpd')" ]; then echo "Restarting Apache..." /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd echo "" fi if [ "$(pstree | grep 'nginx')" ]; then echo "Count Nginx cache/temp files..." du -shc /var/cache/nginx/engintron_*/ sleep 1 echo "" echo "Purging Nginx cache/temp files..." find /var/cache/nginx/engintron_dynamic/ -type f | xargs rm -rf find /var/cache/nginx/engintron_static/ -type f | xargs rm -rf find /var/cache/nginx/engintron_temp/ -type f | xargs rm -rf echo "" echo "Restarting Nginx..." if [ "$RELEASE" -gt "7" ]; then systemctl restart nginx else service nginx restart fi echo "" fi echo "" ;; purgelogs) echo "================================================================" echo "=== Clean Nginx access/error logs and restart Apache & Nginx ===" echo "================================================================" echo "" if [ -f /var/log/nginx/access.log ]; then echo "" > /var/log/nginx/access.log fi if [ -f /var/log/nginx/error.log ]; then echo "" > /var/log/nginx/error.log fi if [ "$(pstree | grep 'httpd')" ]; then echo "Restarting Apache..." /scripts/restartsrv apache_php_fpm /scripts/restartsrv_httpd echo "" fi if [ "$(pstree | grep 'nginx')" ]; then echo "Restarting Nginx..." if [ "$RELEASE" -gt "7" ]; then systemctl restart nginx else service nginx restart fi echo "" fi echo "" ;; ip) echo "=== Get server's IP ===" echo "" echo "~ From the system..." ip a | grep global | grep "inet." echo "" echo "" echo "~ Externally from ifconfig.co..." echo "IPv4: $(curl -s -4 ifconfig.co)" echo "IPv6: $(curl -s -6 ifconfig.co)" echo "Default: $(curl -s ifconfig.co)" echo "" echo "" echo "~ Externally from ifconfig.io..." echo "IPv4: $(curl -s -4 ifconfig.io)" echo "IPv6: $(curl -s -6 ifconfig.io)" echo "Default: $(curl -s ifconfig.io)" echo "" echo "" echo "Operation completed." ;; 80) echo "=== Connections on port 80 sorted by connection count & IP ===" echo "" netstat -anp | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n echo "" echo "" echo "=== Concurrent connections on port 80 ===" echo "" netstat -an | grep :80 | wc -l echo "" echo "Operation completed." ;; 443) echo "=== Connections on port 443 sorted by connection count & IP ===" echo "" netstat -anp | grep :443 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n echo "" echo "" echo "=== Concurrent connections on port 443 ===" echo "" netstat -an | grep :443 | wc -l echo "" echo "Operation completed." ;; 80-443) echo "=== Concurrent connections on port 80 ===" echo "" netstat -an | grep :80 | wc -l echo "" echo "" echo "=== Concurrent connections on port 443 ===" echo "" netstat -an | grep :443 | wc -l echo "" echo "Operation completed." ;; 80) echo "=== Connections on port 80 (HTTP traffic) sorted by connection count & IP ===" echo "" netstat -anp | grep :80 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n echo "" echo "" echo "=== Concurrent connections on port 80 (HTTP traffic) ===" echo "" netstat -an | grep :80 | wc -l echo "" echo "" ;; 443) echo "=== Connections on port 443 (HTTPS traffic) sorted by connection count & IP ===" echo "" netstat -anp | grep :443 | awk '{print $5}' | cut -d: -f1 | sort | uniq -c | sort -n echo "" echo "" echo "=== Concurrent connections on port 443 (HTTPS traffic) ===" echo "" netstat -an | grep :443 | wc -l echo "" echo "" ;; fixownerperms) echo "===================================================" echo "=== Fix user file & directory owner permissions ===" echo "===================================================" echo "" cd /home for user in $( ls -d * ) do if [ -d /home/$user/public_html ]; then echo "=== Fixing permissions for user $user ===" chown -R $user:$user /home/$user/public_html chown $user:nobody /home/$user/public_html fi done echo "Operation completed." echo "" echo "" ;; fixaccessperms) echo "====================================================" echo "=== Fix user file & directory access permissions ===" echo "====================================================" echo "" echo "Changing directory permissions to 755..." find /home/*/public_html/ -type d -exec chmod 755 {} \; echo "" echo "Changing file permissions to 644..." find /home/*/public_html/ -type f -exec chmod 644 {} \; echo "" echo "Operation completed." echo "" echo "" ;; cleanup) echo "=========================================================================" echo "=== Cleanup Mac or Windows specific metadata & Apache error_log files ===" echo "=========================================================================" echo "" find /home/*/public_html/ -iname 'error_log' | xargs rm -rvf find /home/*/public_html/ -iname '.DS_Store' | xargs rm -rvf find /home/*/public_html/ -iname 'thumbs.db' | xargs rm -rvf find /home/*/public_html/ -iname '__MACOSX' | xargs rm -rvf find /home/*/public_html/ -iname '._*' | xargs rm -rvf echo "" echo "Operation completed." echo "" echo "" ;; w|weather) if [ "$2" != "" ]; then curl wttr.in/$2 else curl wttr.in fi ;; -h|--help|*) echo " _______ _____________ ____________ ____ _ __" echo " / ____/ | / / ____/ _/ | / /_ __/ __ \/ __ \/ | / /" echo " / __/ / |/ / / __ / // |/ / / / / /_/ / / / / |/ / " echo " / /___/ /| / /_/ // // /| / / / / _, _/ /_/ / /| / " echo "/_____/_/ |_/\____/___/_/ |_/ /_/ /_/ |_|\____/_/ |_/ " echo " " echo " https://engintron.com " cat <