System update and packages cleanup
apt-get update && apt-get upgrade -y && apt-get autoremove -y && apt-get clean
Install useful packages
sudo apt install haveged curl git unzip zip htop -y
Tweak Kernel sysctl configuration
wget -O /etc/sysctl.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-nginx-web-server/master/etc/sysctl.conf
sysctl -p
echo never > /sys/kernel/mm/transparent_hugepage/enabled
wget -O /etc/security/limits.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-nginx-web-server/master/etc/security/limits.conf
Install netdata monitoring
bash <(curl -Ss https://my-netdata.io/kickstart.sh) all
# save 40-60% of netdata memory
echo 1 >/sys/kernel/mm/ksm/run
echo 1000 >/sys/kernel/mm/ksm/sleep_millisecs
# disable email notifications
wget -O /etc/netdata/health_alarm_notify.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-nginx-web-server/master/etc/netdata/health_alarm_notify.conf
service netdata restart
Install MariaDB 10.1 (do not set any root password)
curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup |
sudo bash -s -- --mariadb-server-version=10.1 --skip-maxscale
sudo apt update
sudo apt install mariadb-server
Install the lastest Plesk Onyx release
### stable
sh <(curl https://autoinstall.plesk.com/plesk-installer || wget -O - https://autoinstall.plesk.com/plesk-installer)
### preview
sh <(curl https://autoinstall.plesk.com/plesk-installer || wget -O - https://autoinstall.plesk.com/plesk-installer) --all-versions
Enable vps_optimized mode
plesk bin vps_optimized --turn-on
Enable pci_compliance configuration
plesk sbin pci_compliance_resolver --enable all
Compile the last Nginx release with plesk-nginx bash script
bash <(wget -O - https://raw.githubusercontent.com/VirtuBox/plesk-nginx/master/plesk-nginx.sh)
Set Panel.ini custom configuration
wget https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/usr/local/psa/admin/conf/panel.ini -O /usr/local/psa/admin/conf/panel.ini
Set custom php.ini configuration
# plesk-php56-fpm
wget -O /opt/plesk/php/5.6/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/5.6/etc/php.ini
# plesk-php70-fpm
wget -O /opt/plesk/php/7.0/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/7.0/etc/php.ini
# plesk-php71-fpm
wget -O /opt/plesk/php/7.1/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/7.1/etc/php.ini
# plesk-php72-fpm
wget -O /opt/plesk/php/7.2/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/7.2/etc/php.ini
# apply new configuration
plesk bin php_handler --reread
Set custom nginx configuration
# nginx.conf
wget -O /etc/nginx/nginx.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/etc/nginx/nginx.conf
# SSL/TLS strict configuration (TLSv1.2 & TLSv1.3)
wget -O /etc/nginx/conf.d/ssl.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/etc/nginx/conf.d/ssl.conf
# SSL/TLS Intermediate configuration (TLSv1.0 TLSv1.1 TLSv1.2 & TLSv1.3)
wget -O /etc/nginx/conf.d/ssl.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/etc/nginx/conf.d/ssl-intermediate.conf