├── OgCXa7e-mO0
    ├── cron
    │   ├── renew_cron
    │   └── sert_renew.sh
    ├── .env
    ├── README.md
    ├── nginx-conf.d
    │   ├── options-ssl-nginx.conf
    │   ├── test.world-itech.ru.conf
    │   └── north.world-ithech.ru.conf
    └── docker-compose.yaml
├── mKdwkV5p1xg
    ├── .env
    ├── README.md
    ├── nginx-conf.d
    │   └── north.world-ithech.ru.conf
    └── docker-compose.yaml
├── kfQEPxigNY4
    ├── SwordInquisition.service
    ├── SwordInquisition.timer
    └── README.md
└── README.md


/OgCXa7e-mO0/cron/renew_cron:
--------------------------------------------------------------------------------
1 | 0 0 * * * /root/wordpress/cron/sert_renew.sh >> /var/log/cron.log 2>&1
2 | 


--------------------------------------------------------------------------------
/OgCXa7e-mO0/.env:
--------------------------------------------------------------------------------
1 | MYSQL_ROOT_PASSWORD=Be$t)P@s$w0rdR00T-u$eR
2 | MYSQL_USER=wp_db_user
3 | MYSQL_PASSWORD=W0rdpres$%d@taBa$e%paS$worD
4 | MYSQL_DATABASE=wp_db
5 | 


--------------------------------------------------------------------------------
/mKdwkV5p1xg/.env:
--------------------------------------------------------------------------------
1 | MYSQL_ROOT_PASSWORD=Be$t)P@s$w0rdR00T-u$eR
2 | MYSQL_USER=wp_db_user
3 | MYSQL_PASSWORD=W0rdpres$%d@taBa$e%paS$worD
4 | MYSQL_DATABASE=wp_db
5 | 


--------------------------------------------------------------------------------
/mKdwkV5p1xg/README.md:
--------------------------------------------------------------------------------
1 | # Конфиг файлы с видео [Web-сервер для ленивых](https://youtu.be/mKdwkV5p1xg)
2 | В видео настраивается связка Docker-compose, nginx, mysql, php-fpm, wordpress


--------------------------------------------------------------------------------
/OgCXa7e-mO0/README.md:
--------------------------------------------------------------------------------
1 | # Конфиг файлы с видео [HTTPS для ленивых](https://youtu.be/OgCXa7e-mO0)
2 | В видео настраивается связка Docker-compose, nginx, mysql, php-fpm, wordpress, cerbot
3 | 


--------------------------------------------------------------------------------
/OgCXa7e-mO0/cron/sert_renew.sh:
--------------------------------------------------------------------------------
1 | #!/bin/bash
2 | 
3 | COMPOSE="/usr/local/bin/docker-compose --no-ansi"
4 | 
5 | cd /root/https/
6 | $COMPOSE run certbot renew --dry-run && \
7 | $COMPOSE kill -s SIGHUP nginx
8 | 


--------------------------------------------------------------------------------
/kfQEPxigNY4/SwordInquisition.service:
--------------------------------------------------------------------------------
 1 | [Unit]
 2 | Description=Sword of the Inquisition.
 3 | Wants=SwordInquisition.timer
 4 | 
 5 | [Service]
 6 | Type=oneshot
 7 | ExecStart=/usr/bin/df
 8 | 
 9 | [Install]
10 | WantedBy=multi-user.target
11 | 


--------------------------------------------------------------------------------
/kfQEPxigNY4/SwordInquisition.timer:
--------------------------------------------------------------------------------
 1 | [Unit]
 2 | Description=Sword of the Inquisition.
 3 | Requires=SwordInquisition.service
 4 | 
 5 | [Timer]
 6 | Unit=SwordInquisition.service
 7 | OnCalendar=*-*-* 09:50:00
 8 | 
 9 | [Install]
10 | WantedBy=timers.target
11 | 


--------------------------------------------------------------------------------
/README.md:
--------------------------------------------------------------------------------
 1 | # Материалы для видео с канала [Мир IT c Антоном Павленко](https://www.youtube.com/c/pavlenkoat/)
 2 | 
 3 | ## Навигация
 4 | 
 5 | Имя каждого подкаталога — это идентификатор видео на YouTube: `https://www.youtube.com/watch?v=<video id>`.
 6 | 
 7 | * [Web-сервер для ленивых](https://youtu.be/mKdwkV5p1xg), см. [mKdwkV5p1xg](./mKdwkV5p1xg/README.md).
 8 | * [HTTPS для ленивых](https://youtu.be/OgCXa7e-mO0), см. [OgCXa7e-mO0](./OgCXa7e-mO0/README.md).
 9 | * [CRON.D больше НЕ НУЖЕН. Как пользоваться SYSTEMD TIMER?](https://youtu.be/kfQEPxigNY4), см. [kfQEPxigNY4](./kfQEPxigNY4/README.md).
10 | 


--------------------------------------------------------------------------------
/OgCXa7e-mO0/nginx-conf.d/options-ssl-nginx.conf:
--------------------------------------------------------------------------------
 1 | # This file contains important security parameters. If you modify this file
 2 | # manually, Certbot will be unable to automatically provide future security
 3 | # updates. Instead, Certbot will print and log an error message with a path to
 4 | # the up-to-date file that you will need to refer to when manually updating
 5 | # this file.
 6 | 
 7 | ssl_session_cache shared:le_nginx_SSL:10m;
 8 | ssl_session_timeout 1440m;
 9 | ssl_session_tickets off;
10 | 
11 | ssl_protocols TLSv1.2 TLSv1.3;
12 | ssl_prefer_server_ciphers off;
13 | 
14 | ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384";
15 | 


--------------------------------------------------------------------------------
/mKdwkV5p1xg/nginx-conf.d/north.world-ithech.ru.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 |         listen 80;
 3 |         listen [::]:80;
 4 | 
 5 |         server_name  north.world-ithech.ru;
 6 | 
 7 |         index index.php index.html index.htm;
 8 | 
 9 |         root /var/www/html;
10 | 
11 |         location / {
12 |                 try_files $uri $uri/ /index.php$is_args$args;
13 |         }
14 | 
15 |         location ~ \.php$ {
16 |                 try_files $uri =404;
17 |                 fastcgi_split_path_info ^(.+\.php)(/.+)$;
18 |                 fastcgi_pass wp:9000;
19 |                 fastcgi_index index.php;
20 |                 include fastcgi_params;
21 |                 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
22 |                 fastcgi_param PATH_INFO $fastcgi_path_info;
23 |         }
24 | 
25 |         location ~ /\.ht {
26 |                 deny all;
27 |         }
28 | 
29 |         location = /favicon.ico {
30 |                 log_not_found off;
31 |         }
32 |         location = /robots.txt {
33 |                 log_not_found off;
34 |         }
35 |         location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
36 |                 expires max;
37 |                 log_not_found off;
38 |         }
39 | }
40 | 


--------------------------------------------------------------------------------
/mKdwkV5p1xg/docker-compose.yaml:
--------------------------------------------------------------------------------
 1 | version: '3.9'
 2 | 
 3 | services:
 4 |   mysql:
 5 |     image: mysql:8.0
 6 |     container_name: mysql8
 7 |     restart: unless-stopped
 8 |     env_file: .env
 9 |     volumes:
10 |       - dbfile:/var/lib/mysql
11 |     command: '--default-authentication-plugin=mysql_native_password'
12 |     networks:
13 |       - app
14 | 
15 |   wp:
16 |     image: wordpress:5.7.0-php8.0-fpm
17 |     container_name: wordpress-5.7.0-php8.0-fpm
18 |     depends_on:
19 |       - mysql
20 |     restart: unless-stopped
21 |     env_file: .env
22 |     environment:
23 |       - WORDPRESS_DB_HOST=mysql:3306
24 |       - WORDPRESS_DB_USER=$MYSQL_USER
25 |       - WORDPRESS_DB_PASSWORD=$MYSQL_PASSWORD
26 |       - WORDPRESS_DB_NAME=$MYSQL_DATABASE
27 |     volumes:
28 |       - www-html:/var/www/html
29 |     networks:
30 |       - app
31 | 
32 |   nginx:
33 |     image: nginx:1.19.8-alpine
34 |     depends_on:
35 |       - wp
36 |     container_name: nginx-1.19.8-alpine
37 |     restart: unless-stopped
38 |     ports:
39 |       - "80:80"
40 |     volumes:
41 |       - www-html:/var/www/html
42 |       - ./nginx-conf.d:/etc/nginx/conf.d
43 |     networks:
44 |       - app
45 | 
46 | volumes:
47 |   www-html:
48 |   dbfile:
49 | 
50 | networks:
51 |   app:
52 |     driver: bridge


--------------------------------------------------------------------------------
/OgCXa7e-mO0/docker-compose.yaml:
--------------------------------------------------------------------------------
 1 | version: '3.9'
 2 | 
 3 | services:
 4 |   mysql:
 5 |     image: mysql:8.0
 6 |     container_name: mysql8
 7 |     restart: unless-stopped
 8 |     env_file: .env
 9 |     volumes:
10 |       - dbfile:/var/lib/mysql
11 |     command: '--default-authentication-plugin=mysql_native_password'
12 |     networks:
13 |       - app
14 | 
15 |   wp:
16 |     image: wordpress:5.7.0-php8.0-fpm
17 |     container_name: wordpress-5.7.0-php8.0-fpm
18 |     depends_on:
19 |       - mysql
20 |     restart: unless-stopped
21 |     env_file: .env
22 |     environment:
23 |       - WORDPRESS_DB_HOST=mysql:3306
24 |       - WORDPRESS_DB_USER=$MYSQL_USER
25 |       - WORDPRESS_DB_PASSWORD=$MYSQL_PASSWORD
26 |       - WORDPRESS_DB_NAME=$MYSQL_DATABASE
27 |     volumes:
28 |       - www-html:/var/www/html
29 |     networks:
30 |       - app
31 | 
32 |   nginx:
33 |     image: nginx:1.19.8-alpine
34 |     depends_on:
35 |       - wp
36 |     container_name: nginx
37 |     restart: unless-stopped
38 |     ports:
39 |       - "80:80"
40 |       - "443:443"
41 |     volumes:
42 |       - www-html:/var/www/html
43 |       - ./nginx-conf.d:/etc/nginx/conf.d
44 |       - etc-letsencrypt:/etc/letsencrypt
45 |     networks:
46 |       - app
47 | 
48 |   certbot:
49 |     image: certbot/certbot
50 |     depends_on:
51 |       - nginx
52 |     container_name: certbot
53 |     volumes:
54 |       - etc-letsencrypt:/etc/letsencrypt
55 |       - www-html:/var/www/html
56 |     command: certonly --webroot --webroot-path=/var/www/html --email pavlenko.at@mail.ru --agree-tos --no-eff-email -d test.world-itech.ru
57 |  
58 | volumes:
59 |   www-html:
60 |   dbfile:
61 |   etc-letsencrypt:
62 | 
63 | networks:
64 |   app:
65 |     driver: bridge
66 | 
67 | 


--------------------------------------------------------------------------------
/OgCXa7e-mO0/nginx-conf.d/test.world-itech.ru.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 |         listen 80;
 3 |         listen [::]:80;
 4 | 
 5 |         server_name test.world-itech.ru;
 6 | 
 7 |         location ~ /.well-known/acme-challenge {
 8 |                 allow all;
 9 |                 root /var/www/html;
10 |         }
11 | 
12 |         location / {
13 |                 rewrite ^ https://$host$request_uri? permanent;
14 |         }
15 | }
16 | 
17 | 
18 | server {
19 |         listen 443 ssl http2;
20 |         listen [::]:443 ssl http2;
21 |         server_name test.world-itech.ru;
22 | 
23 |         index index.php index.html index.htm;
24 | 
25 |         root /var/www/html;
26 | 
27 |         server_tokens off;
28 | 
29 |         ssl_certificate /etc/letsencrypt/live/north.world-ithech.ru/fullchain.pem;
30 |         ssl_certificate_key /etc/letsencrypt/live/north.world-ithech.ru/privkey.pem;
31 | 
32 |         include /etc/nginx/conf.d/options-ssl-nginx.conf;
33 | 
34 |         add_header X-Frame-Options "SAMEORIGIN" always;
35 |         add_header X-XSS-Protection "1; mode=block" always;
36 |         add_header X-Content-Type-Options "nosniff" always;
37 |         add_header Referrer-Policy "no-referrer-when-downgrade" always;
38 |         add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always;
39 | 
40 |         location / {
41 |                 try_files $uri $uri/ /index.php$is_args$args;
42 |         }
43 | 
44 |         location ~ \.php$ {
45 |                 try_files $uri =404;
46 |                 fastcgi_split_path_info ^(.+\.php)(/.+)$;
47 |                 fastcgi_pass wp:9000;
48 |                 fastcgi_index index.php;
49 |                 include fastcgi_params;
50 |                 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
51 |                 fastcgi_param PATH_INFO $fastcgi_path_info;
52 |         }
53 | 
54 |         location ~ /\.ht {
55 |                 deny all;
56 |         }
57 | 
58 |         location = /favicon.ico {
59 |                 log_not_found off;
60 |         }
61 |         location = /robots.txt {
62 |                 log_not_found off;
63 |         }
64 |         location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
65 |                 expires max;
66 |                 log_not_found off;
67 |         }
68 | }
69 | 


--------------------------------------------------------------------------------
/OgCXa7e-mO0/nginx-conf.d/north.world-ithech.ru.conf:
--------------------------------------------------------------------------------
 1 | server {
 2 |         listen 80;
 3 |         listen [::]:80;
 4 | 
 5 |         server_name north.world-ithech.ru;
 6 | 
 7 |         location ~ /.well-known/acme-challenge {
 8 |                 allow all;
 9 |                 root /var/www/html;
10 |         }
11 | 
12 |         location / {
13 |                 rewrite ^ https://$host$request_uri? permanent;
14 |         }
15 | }
16 | 
17 | 
18 | server {
19 |         listen 443 ssl http2;
20 |         listen [::]:443 ssl http2;
21 |         server_name north.world-ithech.ru;
22 | 
23 |         index index.php index.html index.htm;
24 | 
25 |         root /var/www/html;
26 | 
27 |         server_tokens off;
28 | 
29 |         ssl_certificate /etc/letsencrypt/live/north.world-ithech.ru/fullchain.pem;
30 |         ssl_certificate_key /etc/letsencrypt/live/north.world-ithech.ru/privkey.pem;
31 | 
32 |         include /etc/nginx/conf.d/options-ssl-nginx.conf;
33 | 
34 |         add_header X-Frame-Options "SAMEORIGIN" always;
35 |         add_header X-XSS-Protection "1; mode=block" always;
36 |         add_header X-Content-Type-Options "nosniff" always;
37 |         add_header Referrer-Policy "no-referrer-when-downgrade" always;
38 |         add_header Content-Security-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always;
39 | 
40 |         location / {
41 |                 try_files $uri $uri/ /index.php$is_args$args;
42 |         }
43 | 
44 |         location ~ \.php$ {
45 |                 try_files $uri =404;
46 |                 fastcgi_split_path_info ^(.+\.php)(/.+)$;
47 |                 fastcgi_pass wp:9000;
48 |                 fastcgi_index index.php;
49 |                 include fastcgi_params;
50 |                 fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
51 |                 fastcgi_param PATH_INFO $fastcgi_path_info;
52 |         }
53 | 
54 |         location ~ /\.ht {
55 |                 deny all;
56 |         }
57 | 
58 |         location = /favicon.ico {
59 |                 log_not_found off;
60 |         }
61 |         location = /robots.txt {
62 |                 log_not_found off;
63 |         }
64 |         location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
65 |                 expires max;
66 |                 log_not_found off;
67 |         }
68 | }
69 | 


--------------------------------------------------------------------------------
/kfQEPxigNY4/README.md:
--------------------------------------------------------------------------------
  1 | # Конфиг файлы для видео [CRON.D больше НЕ НУЖЕН. Как пользоваться SYSTEMD TIMER?](https://youtu.be/kfQEPxigNY4)
  2 | 
  3 | См. также посты и обсуждения в [Telegram-канале](https://t.me/worlditech):
  4 | 
  5 | - [Я хочу в systemd unit не писать путь до bash скрипта, а просто написать его имя myscript.sh . Что нужно сделать чтобы гарантировано отработало?](https://t.me/worlditech/1279).
  6 | - [Конфиг Unit & Timer](https://t.me/worlditech/1283).
  7 | 
  8 | ## Полезные команды из видео
  9 | 
 10 | ### Unit
 11 | 
 12 | ```bash
 13 | # Разовый запуск.
 14 | sudo systemctl start SwordInquisition.service
 15 | 
 16 | # Проверка статуса службы и последние логи.
 17 | sudo systemctl status SwordInquisition.service
 18 | 
 19 | # Просмотреть логи службы за сегодня.
 20 | journalctl -S today -u SwordInquisition
 21 | ```
 22 | 
 23 | ### Timers
 24 | 
 25 | ```bash
 26 | # Проверка значений OnCalendar timer values.
 27 | systemd-analyze calendar --iterations=5 "09:5/5" 
 28 | 
 29 | # Активация и запуск таймера.
 30 | sudo systemctl enable SwordInquisition.timer
 31 | systemctl daemon-reload
 32 | sudo systemctl start SwordInquisition.timer
 33 | ```
 34 | 
 35 | ## Примеры для OnCalendar
 36 | 
 37 | | Spec                | Описание                               |
 38 | | ------------------- |:--------------------------------------:|
 39 | | `*:*:00`            | каждую минуту                          |
 40 | | `*:15:00`           | в 15 минут каждого часа                |
 41 | | `*-*-1,5,7 *:00:00` | каждый час 1, 5 и 7 числа              |
 42 | | `Mon *-*~1`         | если последний день месяца понедельник |
 43 | | `Mon *-*~7/1`       | последний понедельник месяца           |
 44 | 
 45 | ### Алиасы
 46 | 
 47 | | Spec           | Описание      |
 48 | | -------------- |:-------------:|
 49 | | `minutely`     | ежеминутно    |
 50 | | `hourly`       | каждый час    |
 51 | | `daily`        | каждый день   |
 52 | | `monthly`      | каждый месяц  |
 53 | | `weekly`       | еженедельно   |
 54 | | `yearly`       | ежегодно      |
 55 | | `quarterly`    | ежеквартально |
 56 | | `semiannually` | раз в полгода |
 57 | 
 58 | ### Проверка
 59 | 
 60 | Для проверки можно использовать
 61 | 
 62 | ```bash
 63 | systemd-analyze calendar --iterations=5 "SPEC"
 64 | ```
 65 | 
 66 | например:
 67 | 
 68 | ```bash
 69 | $ systemd-analyze calendar --iterations=5 "Mon *-*~7/1"
 70 |   Original form: Mon *-*~7/1
 71 | Normalized form: Mon *-*~07/1 00:00:00
 72 |     Next elapse: Mon 2022-10-31 00:00:00 MSK
 73 |        (in UTC): Sun 2022-10-30 21:00:00 UTC
 74 |        From now: 4 weeks 1 day left
 75 |        Iter. #2: Mon 2022-11-28 00:00:00 MSK
 76 |        (in UTC): Sun 2022-11-27 21:00:00 UTC
 77 |        From now: 1 month 26 days left
 78 |        Iter. #3: Mon 2022-12-26 00:00:00 MSK
 79 |        (in UTC): Sun 2022-12-25 21:00:00 UTC
 80 |        From now: 2 months 24 days left
 81 |        Iter. #4: Mon 2023-01-30 00:00:00 MSK
 82 |        (in UTC): Sun 2023-01-29 21:00:00 UTC
 83 |        From now: 3 months 29 days left
 84 |        Iter. #5: Mon 2023-02-27 00:00:00 MSK
 85 |        (in UTC): Sun 2023-02-26 21:00:00 UTC
 86 |        From now: 4 months 26 days left
 87 | 
 88 | ```
 89 | 
 90 | ### Попробуй сам
 91 | 
 92 | - `*-*-* 00:15:30`
 93 | - `Mon *-*-* 00:00:00`
 94 | - `Wed 2020-*-*`
 95 | - `Mon..Fri 2021-*-*`
 96 | - `2022-6,7,8-1,15 01:15:00`
 97 | - `Mon *-05~03`
 98 | - `Mon..Fri *-08~04`
 99 | - `*-05~03/2`
100 | - `*-05-03/2`
101 | 


--------------------------------------------------------------------------------