dffd8e3b76
Features: - PHP 8.4 support (from 8.3) - WordPress 7.0 (auto-update via WP-CLI) - Modern TLS 1.3 cipher suites (2026 best practices) - Fail2Ban security integration (5 jails: SSH, Nginx, WordPress, recidive) - Auto-update cron job for WordPress (weekly Minor updates) - Debian 14 Forky support (testing) - Ubuntu 25.04 support - Python 3.12 in GitHub Actions Security: - Fail2Ban with SSH brute force protection (24h ban) - WordPress wp-login.php protection (2h ban) - Nginx bot scanner protection - Recidive jail for repeat offenders (1 week ban) - Modern TLS ciphers (AEAD only) - HSTS 2 years for preload Documentation: - docs/autoupdate.md - WordPress auto-update guide - docs/fail2ban.md - Fail2Ban configuration guide - docs/troubleshooting.md - Updated with php_version variable Breaking changes: - PHP 8.4 is now the default (requires Ubuntu 20.04+ or Debian 11+)
62 lines
1.3 KiB
YAML
Executable File
62 lines
1.3 KiB
YAML
Executable File
# Ubuntu/Debian family variables
|
|
---
|
|
# Package names for Ubuntu/Debian systems
|
|
packages:
|
|
- nginx
|
|
- mysql-server
|
|
- php8.4-fpm
|
|
- php8.4-mysql
|
|
- php8.4-curl
|
|
- php8.4-gd
|
|
- php8.4-intl
|
|
- php8.4-mbstring
|
|
- php8.4-soap
|
|
- php8.4-xml
|
|
- php8.4-xmlrpc
|
|
- php8.4-zip
|
|
- python3-pymysql
|
|
- unzip
|
|
- fail2ban
|
|
|
|
# Service names
|
|
mysql_service: mysql
|
|
nginx_service: nginx
|
|
php_fpm_service: php8.4-fpm
|
|
|
|
# Package manager
|
|
package_manager: apt
|
|
|
|
# PHP paths
|
|
php_fpm_config_path: /etc/php/8.4/fpm
|
|
php_cli_config_path: /etc/php/8.4/cli
|
|
php_fpm_pool_path: /etc/php/8.4/fpm/pool.d
|
|
php_fpm_socket: /run/php/php8.4-fpm.sock
|
|
|
|
# Nginx paths
|
|
nginx_config_path: /etc/nginx
|
|
nginx_sites_available: /etc/nginx/sites-available
|
|
nginx_sites_enabled: /etc/nginx/sites-enabled
|
|
|
|
# MySQL paths
|
|
mysql_config_path: /etc/mysql
|
|
mysql_socket: /var/run/mysqld/mysqld.sock
|
|
mysql_pid_file: /var/run/mysqld/mysqld.pid
|
|
mysql_log_error: /var/log/mysql/error.log
|
|
|
|
# Nginx User
|
|
nginx_user: www-data
|
|
|
|
# Default PHP version
|
|
php_version: "8.4"
|
|
|
|
# System paths
|
|
web_root: /var/www/html
|
|
|
|
# SSL Configuration (optional)
|
|
ssl_cert_path: /etc/ssl/certs/nginx-selfsigned.crt
|
|
ssl_cert_key_path: /etc/ssl/private/nginx-selfsigned.key
|
|
|
|
# Additional Variables for Templates
|
|
enable_www_redirect: false
|
|
enable_nginx_cache: false
|