coldcommand — команды VPS/Linux

sudo certbot certificates

sudo certbot --nginx -d coldcommand.solusrex.ru

sudo certbot certonly --webroot -w /var/www/certbot -d coldcommand.solusrex.ru

sudo certbot renew --dry-run

sudo certbot renew --deploy-hook "systemctl reload nginx"

sudo nginx -t && sudo systemctl reload nginx

echo | openssl s_client -connect coldcommand.solusrex.ru:443 -servername coldcommand.solusrex.ru 2>/dev/null | openssl x509 -noout -dates -issuer -subject

curl -vI https://coldcommand.solusrex.ru/ 2>&1 | grep -E "subject|issuer|SSL connection|HTTP/"

sudo nano /etc/ssl/example.com.crt

sudo nano /etc/ssl/example.com.key

sudo dnf install epel-release && sudo dnf install certbot python3-certbot-nginx

dnf list installed | grep 'certbot-nginx'

30 6 * * * certbot renew --deploy-hook "systemctl reload nginx"

sudo cp /etc/nginx/bx/conf/ssl.conf /etc/nginx/bx/conf/twssl.conf

sudo grep server_name /etc/nginx/bx/site_enabled/* -RiI

ssl_certificate /etc/nginx/ssl/example.com.crt;
ssl_certificate_key /etc/nginx/ssl/example.com.key;

ssl_certificate /etc/letsencrypt/live/example.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/example.com/privkey.pem;

return 301 https://$host:443$request_uri;

server_name example.com www.example.com new-alias.ru www.new-alias.ru;

sudo systemctl reload nginx

sudo openssl dhparam -dsaparam -out /etc/ssl/certs/dhparam.pem 4096

openssl x509 -noout -dates -in /etc/letsencrypt/live/solusrex.ru/fullchain.pem

ip -brief addr show

ip route show

ip -s link show "$(ip route get 1.1.1.1 | awk '{print $5; exit}')"

ss -tulpn

ss -s

resolvectl status

sudo resolvectl dns "$(ip route get 1.1.1.1 | awk '{print $5; exit}')" 1.1.1.1 8.8.8.8

resolvectl query coldcommand.solusrex.ru

sudo lsof -i :443 -sTCP:LISTEN -P -n

sudo lsof -p 1

sudo lsof -i -a -p 1

sudo lsof -Pni | grep LISTEN

sudo lsof -nP -iTCP -sTCP:LISTEN

sudo lsof +D /var/log

ethtool <iface>

ls /etc/netplan/ && cat /etc/netplan/*.yaml

sudo netplan generate

sudo netplan try

sudo netplan apply

sudo netplan status -a

sudo netplan --debug apply

nmcli device status

nmcli connection show

cloud-init status --long

sudo nginx -t

sudo systemctl status nginx --no-pager

ls -l /etc/nginx/sites-enabled/ && cat /etc/nginx/sites-available/example.com

sudo ln -s /etc/nginx/sites-available/example.com /etc/nginx/sites-enabled/

systemctl status php8.3-fpm --no-pager

ls -l /run/php/*.sock

sudo chown -R www-data:www-data /var/www/example.com/html

sudo tail -n 50 /var/log/nginx/error.log

sudo /usr/local/mgr5/sbin/mgrctl -m ispmgr webdomain

php -nv && ls -d /opt/php* 2>/dev/null

sudo /usr/local/mgr5/sbin/mgrctl -m ispmgr letsencrypt.periodic

sudo /usr/local/mgr5/sbin/mgrctl -m ispmgr exit

ls /etc/nginx/vhosts/ && sudo tail -n 50 /var/www/httpd-logs/example.com.error.log

sudo mogwai sites list

sudo mogwai sites create --server-name=example.com --owner=fastuser --create-user -h php_fpm --handler_version=8.3

sudo mogwai sites update --id=1 -h php_fpm --handler_version=8.3

sudo mogwai certificates create-le --server-name=example.com --email=admin@example.com

sudo tail -n 50 /var/www/fastuser/data/logs/example.com-frontend.error.log

sudo mogwai change_ip --from=<OLD-IP> --to=<NEW-IP>
sudo grep -rn <OLD-IP> /etc/ 2>/dev/null

sudo mogwai certificates create-le --server-name=example.com --email=admin@example.com --debug

sudo perl -pi -e 's/<OLD-IP>/<NEW-IP>/g' /etc/exim/*

sudo systemctl restart exim

sudo mv /usr/local/mgr5/var/.ispmgr.progress.xml /root/ispmgr.progress.bak

sudo /usr/local/mgr5/sbin/mgrctl -m ispmgr --unlock

sudo systemctl status ihttpd ispmysql --no-pager

sudo sed -i 's/<OLD-IP>/<NEW-IP>/g' /usr/local/mgr5/etc/ispmgr.conf

sudo grep -rn <OLD-IP> /usr/local/mgr5/etc/ 2>/dev/null && sudo systemctl restart ihttpd ispmysql

sudo du -sh /var/lib/mysql /var/ispmysql && sudo tar -czf /root/isp-backup.tar.gz /var/lib/mysql /var/ispmysql

sudo sh /home/bitrix/configure.sh 2>/tmp/bitrix-config.log

sudo grep -Rn "REMOTE_ADDR.*X_REAL_IP" /etc/nginx/ 2>/dev/null && sudo grep -Rn "CF_CONNECTING_IP" /etc/nginx/ 2>/dev/null

sudo ls -l /var/www/USERNAME/data/logs/ | head -n 30

sudo ls /var/log/fastpanel2/ && sudo tail -n 50 /var/log/fastpanel2/*.log

sudo systemctl restart fastpanel2

sudo systemctl restart ihttpd

sudo systemctl status fastpanel2 --no-pager -l

sudo tar czf /root/etc-backup-$(date +%F-%H%M).tar.gz /etc
sudo grep -rl '<OLD-IP>' /etc 2>/dev/null
sudo find /etc -type f -exec sed -i.bak 's/<OLD-IP>/<NEW-IP>/g' {} +
sudo grep -rn --exclude='*.bak' '<OLD-IP>' /etc/ 2>/dev/null

ping -c 4 8.8.8.8

ping -c 4 coldcommand.solusrex.ru

mtr --report --report-cycles 10 coldcommand.solusrex.ru

traceroute coldcommand.solusrex.ru

curl -I https://coldcommand.solusrex.ru/

curl -w "%{http_code} %{time_total}s %{remote_ip}\n" -o /dev/null -s https://coldcommand.solusrex.ru/

dig A coldcommand.solusrex.ru +short

curl -I http://coldcommand.solusrex.ru/

nc -zv <IP> <порт>

curl -s -o /dev/null -w "%{http_code} %{time_total}s %{remote_ip}\n" https://coldcommand.solusrex.ru/

curl -v https://coldcommand.solusrex.ru/ 2>&1 | grep -E "subject|issuer|SSL connection|Server certificate"

echo | openssl s_client -connect coldcommand.solusrex.ru:443 -servername coldcommand.solusrex.ru 2>/dev/null | openssl x509 -noout -dates -subject -issuer

curl -4 -s -o /dev/null -w "IPv4: %{http_code} %{time_total}s\n" https://coldcommand.solusrex.ru/

curl -6 -s -o /dev/null -w "IPv6: %{http_code} %{time_total}s\n" https://coldcommand.solusrex.ru/

curl --resolve coldcommand.solusrex.ru:443:147.45.238.82 -I https://coldcommand.solusrex.ru/

for i in 1 2 3; do curl -s -o /dev/null -w "try $i: %{http_code} %{time_total}s\n" https://coldcommand.solusrex.ru/; done

docker compose version

docker compose config

docker compose ps

docker compose logs --tail=100 nginx-proxy

docker compose up -d

docker compose exec whois-api sh

docker volume ls && docker system df

docker image prune -f

docker ps --format "table {{.Names}}\t{{.Status}}\t{{.Ports}}"

crontab -l

systemctl list-timers | grep certbot

journalctl -u nginx -n 50 --no-pager

journalctl --since "1 hour ago" -p err --no-pager

sudo ufw status verbose

sudo ufw allow OpenSSH && sudo ufw allow 'Nginx Full'

ssh -i ~/.ssh/id_ed25519 user@147.45.238.82 -p 1488

sudo systemctl status nginx --no-pager && sudo systemctl is-enabled nginx

sudo sysctl -w net.ipv4.ip_nonlocal_bind=1 && sudo sysctl -w net.ipv6.ip_nonlocal_bind=1

sudo sysctl -p

curl -fsSL <URL-КЛЮЧА> | sudo gpg --dearmor -o /etc/apt/keyrings/<name>.gpg && echo "deb [signed-by=/etc/apt/keyrings/<name>.gpg] <URL-РЕПОЗИТОРИЯ> <suite> main" | sudo tee /etc/apt/sources.list.d/<name>.list

sudo dpkg --configure -a

ls -l /etc/apt/trusted.gpg.d/

systemctl --failed

journalctl -u <юнит> -b --no-pager

systemctl daemon-reload

systemctl list-timers --all

apt list --upgradable

cat /var/run/reboot-required

lastb | head -n 20

grep "Failed password" /var/log/auth.log | tail -n 20

fail2ban-client status sshd

timedatectl

chronyc tracking

rsync -avz /var/www/ /backup/www/

logrotate -d /etc/logrotate.conf

curl -I https://example.com/

curl -s -o /dev/null -w "%{http_code} %{time_total}s %{remote_ip}\n" https://example.com/

sudo awk '$9 ~ /^4[0-9][0-9]$/' /var/log/nginx/access.log | tail -n 50

sudo awk '$9 ~ /^5[0-9][0-9]$/' /var/log/nginx/access.log | tail -n 50

sudo awk '$9 ~ /^5/ {print $7}' /var/log/nginx/access.log | sort | uniq -c | sort -nr | head -n 20

sudo grep -Ei "upstream|connect\(\) failed|timed out" /var/log/nginx/error.log | tail -n 50

sudo journalctl -u php8.3-fpm -n 50 --no-pager

sudo grep -R "fastcgi_pass" /etc/nginx/ && ls -l /run/php/

sudo tail -n 50 /var/log/nginx/access.log

df -h

df -h /

df -i

sudo du -xhd1 / 2>/dev/null | sort -h

sudo ncdu -x /

swapon --show && free -h

sudo dmesg -T | grep -Ei "out of memory|oom|killed process"

journalctl --disk-usage && sudo journalctl --vacuum-size=100M

sudo du -sh /var/cache/apt/archives/ && sudo apt-get clean

sudo du -sh /var/lib/mysql/* 2>/dev/null | sort -rh | head -n 20

smartctl -a /dev/vda

find / -xdev -size +500M -type f 2>/dev/null

df -i /

mailq

systemctl status postfix --no-pager

sudo tail -n 50 /var/log/mail.log

sudo ss -ltnp | grep -E ':25|:587|:465'

nc localhost 25

dig +short TXT example.com

dig +short TXT mail._domainkey.example.com && dig +short TXT _dmarc.example.com

dig +short 82.238.45.147.zen.spamhaus.org

echo "Timeweb test" | sendmail -v admin@example.com

uptime && w

top -b -n1 | head -n 20

vmstat 1 5

iostat -xz 1 3

sudo iotop -b -n1 | head -n 20

sudo ss -tanp | head -n 30

sudo awk '{print $NF, $7, $9}' /var/log/nginx/access.log | sort -nr | head -n 20

sudo tail -n 50 /var/log/php8.3-fpm/www-slow.log

sudo mysqladmin processlist --verbose | head -n 30

nproc

ps aux --sort=-%mem | head -n 15

dig +short -x 147.45.238.82

hostnamectl

sudo hostnamectl set-hostname mail.example.com

systemctl status qemu-guest-agent --no-pager

systemctl status serial-getty@ttyS0 --no-pager

sudo ss -ltnp | grep -E ':22|:80|:443'

lsblk -o NAME,SIZE,FSTYPE,MOUNTPOINTS

lsblk -o NAME,SIZE,TYPE,MOUNTPOINT,FSTYPE

cat /etc/os-release && uname -r

sudo sync && systemctl is-system-running

twc --help

twc server list

uptime -p && hostname -f

sudo hostnamectl set-hostname <новое-имя>

hostname -f

twc server reboot <SERVER_ID>

twc server shutdown <SERVER_ID>

twc server reset-root-password <SERVER_ID> -y

twc server set-boot-mode <SERVER_ID> recovery

twc server vnc <SERVER_ID> --print

twc server backup create <DISK_ID>

twc server backup schedule <DISK_ID> --enable --keep 3 --interval week

twc server disk resize <DISK_ID> --size 100G

twc server resize <SERVER_ID> --cpu 2 --ram 4G --disk 80G

twc image create <DISK_ID>

twc server ip add <SERVER_ID>

twc server ip set <IP_ADDRESS> --ptr mail.example.com

twc ip attach <IP> --server <SERVER_ID>

twc firewall rule create "22/TCP" "80/TCP" "443/TCP" -G --group-name main

twc firewall link server <SERVER_ID> <GROUP_ID>

twc firewall show server <SERVER_ID>

twc vpc create 10.0.0.0/24 --name internal

twc domain record add example.com --type A --value 1.2.3.4

twc apps list

twc apps create app.yml

twc apps get <APP_ID>

sudo ls -la /home/n8n/ && sudo grep -E "DOMAIN|SUBDOMAIN|SSL_EMAIL" /home/n8n/.env

sudo docker compose -f /home/n8n/docker-compose.yml logs --tail=100

sudo docker compose -f /home/n8n/docker-compose.yml down && sudo docker compose -f /home/n8n/docker-compose.yml up -d

ip addr

sudo ip addr add <IP>/24 dev <IFACE>

sudo ip addr add <IPv6>/128 dev <IFACE>

ip route show default

ip -6 route show default

sudo ip route add default via <GW> dev <IFACE>

sudo ip route add default via <GW6> dev <IFACE> onlink

sudo chmod 600 /etc/netplan/99-ipv4.yaml /etc/netplan/99-ipv6.yaml

sudo systemctl disable --now dhclient6.service

sudo systemctl daemon-reload

sudo mv /etc/netplan/50-cloud-init.yaml /etc/netplan/50-cloud-init.yaml-backup-$(date +%Y%m%d)

printf 'network: {config: disabled}\n' | sudo tee /etc/cloud/cloud.cfg.d/99-disable-network-config.cfg

printf 'net.ipv4.ip_nonlocal_bind = 1\nnet.ipv6.ip_nonlocal_bind = 1\n' | sudo tee /etc/sysctl.d/99-nonlocal-bind.conf && sudo sysctl --system

sudo systemctl restart networking.service

sudo nmcli connection modify <NAME> +ipv4.addresses <IP>/24

sudo nmcli connection modify <NAME> ipv4.gateway <GW>

sudo nmcli connection modify <NAME> ipv4.method manual && sudo nmcli connection modify <NAME> ipv6.method manual

sudo systemctl restart NetworkManager.service

sudo systemctl restart systemd-networkd

sudo grep ip /usr/local/mgr5/etc/ihttpd.conf | grep "^[^#*]"

sudo sed -i 's/<OLD-IP>/<NEW-IP>/g' /usr/local/mgr5/etc/ihttpd.conf

sudo sed -i 's/<OLD-IP>/<NEW-IP>/g' /etc/nginx/vhosts/*/*

sudo grep -r <OLD-IP> /etc/nginx | grep "^[^#*]"

sudo sed -i 's/<OLD-IP>/<NEW-IP>/g' /etc/apache2/vhosts/*/*

sudo sed -i 's/<OLD-IP>/<NEW-IP>/g' /etc/exim4/exim4.conf.template

sudo grep -r <OLD-IP> /etc/mysql | grep "^[^#*]"

sudo grep -n -A3 listen /usr/local/mgr5/etc/ihttpd.conf

sudo grep -n "DefaultIPAddr" /usr/local/mgr5/etc/ispmgr.conf

sudo grep -rn "hostlist relay_from_hosts" /etc/exim4/ /etc/exim/ 2>/dev/null

sudo cat /etc/exim4/domainips

sudo ls /usr/local/mgr5/etc/ && sudo ls /usr/local/mgr5/var/

sudo tail -n 50 /usr/local/mgr5/var/ispmgr.log

sudo tail -n 50 /usr/local/mgr5/var/ihttpd.log

sudo tail -n 50 /usr/local/mgr5/var/core.log

sudo /usr/local/mgr5/sbin/mgrctl -m core exit