ก๊วนซอฟท์แวร์ </softganz> SoftGang (Gang Software)

Create new user

Ubuntu create user account commands

sudo adduser <username>

Make user to sudoer

sudo adduser <username> sudo

Make user ssh

Setup ssh to login with password

ที่มา How to change the SSH port nano etc/ssh/sshd_config or nano /etc/ssh/sshd_config.d/60-cloudimg-settings.conf Change value to yes

Port 22
...
PasswordAuthentication yes

sudo ufw allow 22/tcp
sudo ufw reload
sudo service ssh restart
sudo systemctl status sshd
ss -tuln | grep [new_port_number]

###Generate an SSH Key Run command in local

ssh-keygen -t ed25519
ssh-copy-id -p 22 username@your_server_ip
ssh username@your_server_ip

Check current services running

sudo service --status-all

Install nginx lastest version from nginx server

nginx: Linux packages

sudo apt install curl gnupg2 ca-certificates lsb-release ubuntu-keyring

Import an official nginx signing key so apt could verify the packages authenticity. Fetch the key:

curl https://nginx.org/keys/nginx_signing.key | gpg --dearmor \
    | sudo tee /usr/share/keyrings/nginx-archive-keyring.gpg >/dev/null

Verify that the downloaded file contains the proper key:

gpg --dry-run --quiet --no-keyring --import --import-options import-show /usr/share/keyrings/nginx-archive-keyring.gpg

The output should contain the full fingerprint 573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62 as follows:

 [expires: 2027-05-24]
      573BFD6B3D8FBC641079A6ABABF5BD827BD9BF62
uid                      nginx signing key <signing-key@nginx.com>

Note that the output can contain other keys used to sign the packages. To set up the apt repository for stable nginx packages, run the following command:

echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
https://nginx.org/packages/ubuntu `lsb_release -cs` nginx" \
    | sudo tee /etc/apt/sources.list.d/nginx.list

If you would like to use mainline nginx packages, run the following command instead:

echo "deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] \
https://nginx.org/packages/mainline/ubuntu `lsb_release -cs` nginx" \
    | sudo tee /etc/apt/sources.list.d/nginx.list

Set up repository pinning to prefer our packages over distribution-provided ones:

echo -e "Package: *\nPin: origin nginx.org\nPin: release o=nginx\nPin-Priority: 900\n" \
    | sudo tee /etc/apt/preferences.d/99nginx

To install nginx, run the following commands:

sudo apt update
sudo apt install nginx

nginx -version

sudo service nginx start
sudo ufw allow 80

Install nginx current version from Ubuntu repo

sudo apt install nginx

Test nginx config

sudo nginx -t

Restart nginx

sudo systemctl restart nginx
sudo systemctl reload nginx
sudo service nginx restart
sudo service nginx reload

Install MariaDB lastest version from MariaDB server

More information

Here are the commands to run to import the MariaDB repository key on your Ubuntu system:

sudo apt-get install apt-transport-https curl
sudo mkdir -p /etc/apt/keyrings
sudo curl -o /etc/apt/keyrings/mariadb-keyring.pgp 'https://mariadb.org/mariadbreleasesigning_key.pgp'

Once the key is imported, copy and paste the following into a file under /etc/apt/sources.list.d (for instance /etc/apt/sources.list.d/mariadb.sources):

# MariaDB 12.3 repository list - created 2026-03-06 08:09 UTC
# https://mariadb.org/download/
X-Repolib-Name: MariaDB
Types: deb
# deb.mariadb.org is a dynamic mirror if your preferred mirror goes offline. See https://mariadb.org/mirrorbits/ for details.
# URIs: https://deb.mariadb.org/12.rc/ubuntu
URIs: https://mirror.kku.ac.th/mariadb/repo/12.3/ubuntu
Suites: questing
Components: main main/debug
Signed-By: /etc/apt/keyrings/mariadb-keyring.pgp

You can now install MariaDB 12.3 from the MariaDB repository with:

sudo apt-get update
sudo apt-get install mariadb-server

Debug symbol packages, those that end in a '-dbgsym' suffix, are harmless to install. They are typically used to resolve stack traces and provide detail of perf recordings. They do not change the running behaviour of MariaDB. If in doubt, omit from installation.

If you need source packages, replace Types: deb with Types: deb deb-src in the /etc/apt/sources.list.d/mariadb.sources file. Then, you can obtain the mariadb source after installing dpkg-dev package, with apt-get source mariadb-server.

If you prefer to use the old "one-line-style" APT format, create the file /etc/apt/sources.list.d/mariadb.list with the following:

# MariaDB 12.3 repository list - created 2026-03-06 08:09 UTC
# https://mariadb.org/download/
# deb.mariadb.org is a dynamic mirror if your preferred mirror goes offline. See https://mariadb.org/mirrorbits/ for details.
# deb [signed-by=/etc/apt/keyrings/mariadb-keyring.pgp] https://deb.mariadb.org/12.3/ubuntu questing main
deb [signed-by=/etc/apt/keyrings/mariadb-keyring.pgp] https://mirror.kku.ac.th/mariadb/repo/12.3/ubuntu questing main
# deb-src [signed-by=/etc/apt/keyrings/mariadb-keyring.pgp] https://mirror.kku.ac.th/mariadb/repo/12.3/ubuntu questing main

See Installing MariaDB packages for more information.

Or install from Ubuntu repo (maybe not lastest version)

sudo apt install mariadb-server
sudo mysql_secure_installation
    Switch to unix_socket authentication [Y/n] n

Create user

sudo mysql
mysql> ALTER USER 'root'@'localhost' IDENTIFIED WITH mysqlnativepassword BY 'password';
mysql> FLUSH PRIVILEGES;


mysql> CREATE USER 'newuser'@'localhost' IDENTIFIED BY 'strongpassword';
mysql> GRANT ALL PRIVILEGES ON . TO 'username'@'localhost' WITH GRANT OPTION;
mysql> FLUSH PRIVILEGES;

mysql> SHOW GRANTS FOR 'username'@'localhost';

Change data folder

More information

Warning: Changing the location for a MySQL server is an administrative task which is not officially supported by Plesk. The solution should be applied on your risk. As an alternative to moving the MySQL data directory to another location, consider mounting a partition from a new disk to the default MySQL data directory location /var/lib/mysql/ Create a backup of /etc/my.cnf(CentOS/RHEL) or /etc/mysql/my.cnf(Debian/Ubuntu)

# cp /etc/my.cnf /etc/my.cnf.backup

Copy or move all files from /var/lib/mysql to the desired directory and set the permissions:

# cp -pr /var/lib/mysql /data/mysql

# chown -R mysql:mysql /data/mysql

Update /etc/my.cnf or /etc/mysql/my.cnf(Debian/Ubuntu) using vi text editor and change the location to where you have copied mysql directory:

# vi /etc/my.cnf

datadir=/data/mysql Note: Be sure that the path to socket mysql.sock is unchanged in my.cnf and it is /var/lib/mysql. Also the directory /var/lib/mysql itself should present on the server as changing the path to the socket can cause the Plesk to crush. Create a configuration file:

# touch /etc/systemd/system/mariadb.service.d/mariadb_custom.conf

Add necessary content into the created file:

# echo "[Service]" >> /etc/systemd/system/mariadb.service.d/mariadb_custom.conf

# echo "ProtectHome=false" >> /etc/systemd/system/mariadb.service.d/mariadb_custom.conf

Create a backup of /etc/passwd:

# cp -a /etc/passwd /etc/passwd.backup

Modify the string below in /etc/passwd and set up the new MySQL location: mysql:x:27:27:MariaDB Server:/data/mysql:/sbin/nologin Restart mysqld: Debian/Ubuntu:

# service mysqld restart

CentOS:

# service mariadb restart

Update /etc/psa/psa.conf with a path to the new mysql directory: MYSQLVARD /data/mysql In case of Ubuntu 16.04, disable mysql in apparmor: Modify file /etc/apparmor.d/usr.sbin.mysqld (create it if it doesn't exist using vi editor), add: /usr/sbin/mysqld { }

# rm /etc/apparmor.d/disable/usr.sbin.mysqld

# apparmor_parser -a /etc/apparmor.d/usr.sbin.mysqld

# aa-disable /etc/apparmor.d/usr.sbin.mysqld

For CentOS/RHEL, SELinux context should be changed or it should be disabled.

ปรับแต่ง config

nano /etc/mysql/mariadb.conf.d/50-server.cnf

[mysqld]
log_slow_query_file    = /var/log/mysql/mariadb-slow.log
log_slow_query_time    = 2
...
innodb_buffer_pool_size = 256M
innodb_log_file_size = 128M

ตรวจสอบตารางว่า crash หรือไม่

mariadb-check -u user -p -c database

Backup and restore data

Common mysqldump Commands Backup a single database:

mysqldump -u [username] -p [database_name] > [backup_name.sql]

Backup specific tables:

mysqldump -u [username] -p [database_name] [table1] [table2] > [tables_backup.sql]

Backup all databases:

mysqldump -u [username] -p --all-databases > [all_databases.sql]

Backup only the structure (no data):

mysqldump -u [username] -p --no-data [database_name] > [structure.sql]

Backup and compress (requires gzip):

mysqldump -u [username] -p [database_name] | gzip > [backup_name.sql.gz]

Restore database:

mysql -u [username] -p

mysql> use database_name
mysql> source \folder\backup_name.sql

ถ้าต้องการถอด php ออก ด้วย

sudo apt-get purge php7.*
sudo apt purge php8.*
sudo apt-get autoclean
sudo apt-get autoremove

Install php 8.5

sudo add-apt-repository ppa:ondrej/nginx
sudo add-apt-repository ppa:ondrej/php
sudo apt update && sudo apt-get install ca-certificates apt-transport-https software-properties-common
sudo apt install php8.5-fpm
php -v
php --modules
apt install -y php8.5-common php8.5-fpm php8.5-mysql php8.5-zip php8.5-gd php8.5-mbstring php8.5-cli php8.5-curl php8.5-xml php8.5-bcmath

Install php 8.3

sudo add-apt-repository ppa:ondrej/nginx
sudo apt update && sudo apt-get install ca-certificates apt-transport-https software-properties-common
sudo apt install php8.3-fpm
php -v
php --modules
apt install -y php8.3-common php8.3-fpm php8.3-mysql php8.3-redis php8.3-mongodb php8.3-zip php8.3-gd php8.3-mbstring php8.3-cli php8.3-curl php8.3-xml php8.3-bcmath

หากเกิด error permission denied โดยดูจาก nginx error.log

sudo tail -30 /var/log/nginx/error.log

connect() to unix:/run/php/php8.5-fpm.sock failed (13: Permission denied) while connecting to upstream, client: 171.7.216.140, server: softgang.app, request: "GET /info.php HTTP/2.0", upstream: "fastcgi://unix:/run/php/php8.5-fpm.sock:", host: "softgang.app"

วิธีแก้ปัญา The socket permissions look correct, but still failing. Let's diagnose further: 1. Check what user nginx runs as:

ps aux | grep nginx

If it's nginx user (not www-data), that's the problem. Add nginx to www-data group:

sudo usermod -a -G www-data nginx
sudo systemctl restart nginx

The issue was the nginx user didn't have permissions to access the socket owned by www-data. Adding nginx to the www-data group solved it.
This is a common gotcha when nginx and PHP-FPM run as different users. Your PHP app should now be working properly! 2. Verify PHP-FPM is actually listening:

sudo lsof | grep php8.5-fpm.sock

Should show it's listening. If not, restart it:

sudo systemctl restart php8.5-fpm
sudo systemctl status php8.5-fpm

3. Check for SELinux/AppArmor issues:

sudo aa-status  # Check AppArmor
getenforce      # Check SELinux

If SELinux is enabled:

sudo semanage fcontext -a -t httpd_var_run_t "/run/php/php8.5-fpm.sock"
sudo restorecon -v /run/php/php8.5-fpm.sock

4. Double-check nginx error log again:

sudo tail -20 /var/log/nginx/error.log

5. Test PHP-FPM directly:

sudo -u www-data php -v

6. Also verify your nginx upstream is correct in config:

grep -A2 "upstream" /etc/nginx/sites-enabled/your-site.conf

Should be exactly: server unix:/run/php/php8.5-fpm.sock; ####ปรับ config PHP ####เปลี่ยนค่า session.gc\_probability, date.timezone, post_max_size, upload\_max\_filesize

nano /etc/php/8.3/fpm/php.ini

session.gc_probability = 1
date.timezone = Asia/Bangkok
post_max_size = 64M
upload_max_filesize = 64M

####แก้ไขค่า php pool

nano /etc/php/8.3/fpm/pool.d/www.conf

pm = dynamic
pm.max_children = 600
pm.start_servers = 20
pm.min_spare_servers = 10
pm.max_spare_servers = 30
request_terminate_timeout = 30s
pm.max_requests = 500

Enabling PHP8.3 on Nginx server

sudo nano /etc/nginx/sites-available/default

index index.php index.html
...
location ~ \.php$ {
        include snippets/fastcgi-php.conf
        # With php-fpm (or other unix sockets):
        fastcgi_pass unix:/var/run/php/php8.3-fpm.sock;
        # With php-cgi (or other tcp sockets):
        <a class="hashtag" href="/tags/fastcgi">#fastcgi</a>_pass 127.0.0.1:9000;
}

Restart php

sudo service php8.3-fpm restart

Restart nginx

sudo systemctl restart nginx.service

Install phpmyadmin

apt install phpmyadmin
sudo ln -s /usr/share/phpmyadmin /var/www/your_domain/phpmyadmin

Create site config

cd /etc/nginx/sites-available
nano domain.conf
cd /etc/nginx/sites-enabled
ln -s ../sites-available/domain.conf domain.conf

sudo apt remove certbot
sudo snap install core; sudo snap refresh core
sudo snap install --classic certbot
sudo ln -s /snap/bin/certbot /usr/bin/certbot
sudo certbot

กรณีมีปัญหาในการติดตั้งผ่าน snap ไม่ได้ สามารถติดตั้งโดยตรงได้จาก Certbot Instructions

1. Create new user

Change timezone to Asia/Bangkok

sudo nano /etc/php/8.3/fpm/php.ini

Then change

date.timezone = Asia/Bangkok

Then restart php

sudo service php8.3-fpm restart

เปลี่ยนขนาดอัพโหลดไฟล์
It sets the maximum allowed size of the client request body, specified in the “Content-Length” request header field. Here’s an example of increasing the limit to 50MB in /etc/nginx/nginx.conf file. Set in http block which affects all server blocks (virtual hosts).

nano /etc/nginx/nginx.conf

http {
    ...
    client_max_body_size 50M;
}

In each domain config in site-a Set in server block, which affects a particular site/app

nano /etc/nginx/sites-available/domain.conf

server {
    ...
    client_max_body_size 50M;
}

Set in location block, which affects a particular directory (uploads) under a site/app.

location /uploads {
    ...
    client_max_body_size 50M;
}<br />

Save the file and restart Nginx web server to apply the recent changes using following command.

systemctl restart nginx

ติดตั้ง ssl แบบ manual

server {
    ...
    listen 443 ssl; # managed by manual
    ssl_certificate    /etc/ssl/certs/filename.crt;
    ssl_certificate_key    /etc/ssl/certs/filename.key;
    # ssl_certificate_chain /etc/ssl/filename.chain
}