KarasoyWiki - Kullanıcı katkıları [tr]

Ubuntu Lawast Kurulumu

2023-11-18T15:51:44Z

Yusuf:

Bu yazımızda siz değerli okuyucularımıza Ubuntu Sunucusu üzerinde Docker Servisini kurarak lawast yazılımının ayarlarını anlatacağız.

1- Sunucu Kutusundan çıkartılarak gerekli donanımsal yapılandırılmaları gerçekleştirilir ve Fişe takılır.

2- Sunucu Vmware ( Son versiyon ) Usb disk üzerinde çalıştırılır.

3- Sunucuya Vmware üzerinde Ubuntu için sanal makine oluşturulur.

4- Ubuntu kurulur.

"sudo apt-get update", "sudo apt update", "sudo apt upgrade"

şeklinde ubuntu sunucumuzu en güncel hale getiririz.

5- Ubuntu üzerinde Docker kurulur. Kurulum aşağıdaki sitede anlatıldığı şekilde yapılır.

[https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository Ubuntu Docker Kurlumu]

Docker kurulumumuz gerçekleştikten sonra.

/home/lawast/ Klasörü içerisinde kurulum yapmamız için gerekli klasörler ve yaml dosyaları oluşturulur.

PostgreSQL Kurulumu

Ör; /home/lawast/postgresql/docker-compose.yml
-----------------------------------------------------------------------------------
version: '3.1'
------
services:

postgresdb:
image: postgres:latest
restart: always
environment:
POSTGRES_PASSWORD: Size-ait-olan-şifre
POSTGRES_USER: sizin-kullanıcı-adınız
volumes:
- ./data:/var/lib/postgresql/data
ports:
- 5432:5432
-----------------------------------------------------------------------------------
Komut satırından
"docker compose up -d" yazılarak enter tuşana basılır.

SoftEtherVPN Kurulumu

/home/lawast/softethervpn/docker-compose.yml ve vpn_server.config ( bu dosyanın içi boş olucak )
-----------------------------------------------------------------------------------
version: "3"

services:
softethervpn:
image: siomiz/softethervpn
volumes:
- ./vpn_server.config:/usr/vpnserver/vpn_server.config
cap_add:
- NET_ADMIN
ports:
- 5555:5555/tcp
environment:
- PSK= PreSharedKey
- SPW= AdminPassword
- HPW= AdminHubPassword
-----------------------------------------------------------------------------------

Kurulduktan sonra Virtual nat ve secure nat ayarları yapılıyor.

"192.168.1.0/255.255.255.0/192.168.1.1, 172.19.0.0/255.255.0.0/172.19.0.1"

Izpbx FreePBX Santral Kurulumu

/home/lawast/izpbx/docker-compose.yml ve .env ( bu dosya daha sonra link olarak eklenecek. :) )
-----------------------------------------------------------------------------------
version: '3'

networks:
izpbx:
driver: bridge
services:
db:
image: docker.io/mariadb:10.11.4
container_name: izpbx-db
command: --sql-mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
restart: unless-stopped
env_file:
- .env
environment:
- TZ
- MYSQL_DATABASE
- MYSQL_USER
- MYSQL_PASSWORD
- MYSQL_ROOT_PASSWORD
volumes:
- ./data/db:/var/lib/mysql
networks:
izpbx:
ports:
- ${APP_PORT_MYSQL}:3306

izpbx:
image: docker.io/izdock/izpbx-asterisk:20.16.9
container_name: izpbx
restart: unless-stopped
depends_on:
- db
env_file:
- .env
volumes:
- ./data/izpbx:/data
cap_add:
- NET_ADMIN
privileged: true
ulimits:
nofile:
soft: 8192
hard: 32768
network_mode: host
-----------------------------------------------------------------------------------

Örnek .env dosyası
-----------------------------------------------------------------------------------

### Persistent data management
## enable persistent data storage (comment if you want disable persistence of data) (default: /data)
APP_DATA=/data

### TimeZone configuration
## set the timezone based on your geographical location (default: TZ=UTC)
TZ=Europe/Istanbul

### Database
## WARNING: default izPBX security passwords. please change it according to your security defaults
## NOTE: to avoid writing the mysql root password here, the MYSQL_ROOT_PASSWORD variable can be disabled
## if the MYSQL_USER can create the asterisk database or if it already exist
MYSQL_PASSWORD=hQpqBAhWKgXn0VMiIPad
MYSQL_ROOT_PASSWORD=DmX6qEW8HmAOuYZXk9Kr

## WARNING: enable the following vars only for testing
#MYSQL_RANDOM_ROOT_PASSWORD=true
#MYSQL_ALLOW_EMPTY_ROOT_PASSWORD=true

## WARNING: if docker-compose is configured with "network_mode: host" then use "MYSQL_SERVER=127.0.0.1" or the address of the remote database server
## WARNING: if docker-compose is not configured with "network_mode: host" then use "MYSQL_SERVER=db" or the address of the remote database server
#MYSQL_SERVER=db
MYSQL_SERVER=127.0.0.1
MYSQL_DATABASE=asterisk
MYSQL_DATABASE_CDR=asteriskcdrdb
MYSQL_USER=asterisk

### Email addreses and SMTP smarthost
## outgoing mails will set as From as: (default: izpbx@localhost.localdomain)
#SMTP_MAIL_FROM=izpbx@example.com

## outgoing mails will to send notifications, like cron, fail2ban, etc... (default: root@localhost.localdomain)
#SMTP_MAIL_TO=admin@example.com

## specify DNS name or IP address for the SMTP RelayHost (default: none)
#SMTP_RELAYHOST=smtp.example.com
#SMTP_RELAYHOST_PORT=25
#SMTP_RELAYHOST_USERNAME=yourusername
#SMTP_RELAYHOST_PASSWORD=yoursecurepassword
#SMTP_STARTTLS=true
#SMTP_ALLOWED_SENDER_DOMAINS=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
#SMTP_MESSAGE_SIZE_LIMIT=67108864

### Webserver and HTTP/HTTPS
## enable if the pbx is exposed to internet and want autoconfigure virtualhosting based on the following FQDN (default: none)
#APP_FQDN=izpbx.example.com

## enable https protocols (default: false)
## by default izpbx will use a self-signed certificate generated on first run if missing
HTTPD_HTTPS_ENABLED=true

# use custom ssl certificates (only used when LETSENCRYPT_ENABLED=false) place you certs into: /etc/asterisk/keys
# NOTE: if you want recreate the self-signed certificates after initial deploy, you must delete the certs and restart izpbx
#HTTPD_HTTPS_CERT_FILE=/etc/asterisk/keys/default.crt
#HTTPD_HTTPS_KEY_FILE=/etc/asterisk/keys/default.key
#HTTPD_HTTPS_CHAIN_FILE=/etc/asterisk/keys/default.chain.crt

## redirect unencrypted http connetions to https (default: false)
HTTPD_REDIRECT_HTTP_TO_HTTPS=true

## auto generate Let's Encrypt SSL certificates if the pbx is exposed to Internet and want enable https protocol (default: false)
## To use LETSENCRYPT make sure SMTP_MAIL_TO and APP_FQDN are set to correct values
#LETSENCRYPT_ENABLED=true
#LETSENCRYPT_COUNTRY_CODE=IT
#LETSENCRYPT_COUNTRY_STATE=Rome

## by default everyone can connect to HTTP/HTTPS WEB interface, comment out to restrict the access and enhance the security (default: 0.0.0.0/0)
#HTTPD_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### phpMyAdmin
#PMA_ALIAS=/admin/pma
#PMA_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### FOP2 configuration (https://www.fop2.com/docs/)
#FOP2_AUTOUPGRADE=true
#FOP2_LICENSE_NAME=<put here your corporation name>
#FOP2_LICENSE_CODE=<put here your license code>
#FOP2_LICENSE_IFACE=docker0

## the following variables are not mandatory, you can leave commented (FOP2_AMI_PASSWORD will be a random hash)
#FOP2_AMI_HOST=localhost
#FOP2_AMI_PORT=5038
#FOP2_AMI_USERNAME=admin
#FOP2_AMI_PASSWORD=amp111

### Zabbix Network Monitoring
## for automatic discovery of HOSTNAME leave ZABBIX_HOSTNAME commented
#ZABBIX_SERVER=zabbixserver.example.com
#ZABBIX_HOSTNAME=izpbx.example.com
#ZABBIX_HOSTMETADATA=izPBX CHANGEM3WithAS3cur3HA$H

### Fail2ban
## format: FAIL2BAN_SECTION_KEY=VALUE
## by default izpbx will will use: FAIL2BAN_DEFAULT_SENDER=$SMTP_MAIL_FROM and FAIL2BAN_DEFAULT_DESTEMAIL=$SMTP_MAIL_TO, anyway you can override it bellow
FAIL2BAN_ENABLED=true
FAIL2BAN_ASTERISK_ENABLED=true
#FAIL2BAN_ASTERISK_LOGPATH=/var/log/asterisk/security
#FAIL2BAN_DEFAULT_SENDER=fail2ban@example.com
#FAIL2BAN_DEFAULT_DESTEMAIL=security@example.com
#FAIL2BAN_DEFAULT_BANACTION=iptables-allports[blocktype=DROP]
FAIL2BAN_DEFAULT_IGNOREIP=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 192.168.1.0/24
FAIL2BAN_DEFAULT_BANTIME=300
FAIL2BAN_DEFAULT_FINDTIME=3600
FAIL2BAN_DEFAULT_MAXRETRY=10
FAIL2BAN_RECIDIVE_ENABLED=true
FAIL2BAN_RECIDIVE_BANTIME=1814400
FAIL2BAN_RECIDIVE_FINDTIME=15552000
FAIL2BAN_RECIDIVE_MAXRETRY=10

### FreePBX Advanced Settings
## prefix every FreePBX internal variable with FREEPBX_
## modules enabled on first startup
#FREEPBX_MODULES_EXTRA=soundlang callrecording cdr conferences customappsreg featurecodeadmin infoservices logfiles music manager arimanager filestore recordings announcement asteriskinfo backup callforward callwaiting daynight calendar certman cidlookup contactmanager donotdisturb fax findmefollow iaxsettings miscapps miscdests ivr parking phonebook presencestate printextensions queues cel timeconditions pm2
## enable automatic upgrading FreePBX on izpbx startup from previous version to a new major version (ex. from 15 to 16)
## WARNING: this is a dangerous task!!! be sure to have a backup before enabling core autoupgrade!
FREEPBX_AUTOUPGRADE_CORE=true
# enable automatic modules updates (NOTE: only on initial deploy)
FREEPBX_AUTOUPGRADE_MODULES=true
FREEPBX_FREEPBX_SYSTEM_IDENT=KarasoyPBX
FREEPBX_AS_DISPLAY_READONLY_SETTINGS=1
FREEPBX_AS_OVERRIDE_READONLY=1
FREEPBX_ENABLECW=0
FREEPBX_TONEZONE=it
FREEPBX_PHPTIMEZONE=Europe/Istanbul
#FREEPBX_BRAND_IMAGE_TANGO_LEFT=images/tango.png
#FREEPBX_BRAND_IMAGE_FREEPBX_FOOT=images/freepbx_small.png
#FREEPBX_BRAND_IMAGE_SPONSOR_FOOT=images/sangoma-horizontal_thumb.png
#FREEPBX_BRAND_FREEPBX_ALT_LEFT=FreePBX
#FREEPBX_BRAND_FREEPBX_ALT_FOOT=FreePBX®
#FREEPBX_BRAND_SPONSOR_ALT_FOOT=www.sangoma.com
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_LEFT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_FOOT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_SPONSOR_LINK_FOOT=http://www.sangoma.com
#FREEPBX_RSSFEEDS=

## WORKAROUND @20200322 https://issues.freepbx.org/browse/FREEPBX-20559 : fwconsole setting SIGNATURECHECK 0
#FREEPBX_SIGNATURECHECK=0

### PhoneBook Settings
## PhoneBook server address used by VoiP Phones.
## You can specify IP or DNS name. If empty, by default will be used in order: 'http://$APP_FQDN' or 'http://PBXIP'
#PHONEBOOK_ADDRESS=https://izpbx.example.com

### DHCP/NTP/TFTP Server
#DHCP_DOMAIN=izpbx.local
#DHCP_POOL_START=10.1.1.10
#DHCP_POOL_END=10.1.1.250
#DHCP_POOL_LEASE=72h
## DHCP_DNS: leave commented to use docker container DNS ip address
#DHCP_DNS=10.1.1.1
#DHCP_GW=10.1.1.1
#DHCP_NTP=10.1.1.1

### NTP Server
#NTP_SERVERS=0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org
#NTP_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### Container Network Ports
## webserver and freepbx ports
APP_PORT_HTTP=80
APP_PORT_HTTPS=443
# asterisk ports
APP_PORT_IAX=4569
APP_PORT_PJSIP=5060
APP_PORT_SIP=5160
APP_PORT_WEBRTC=8089
APP_PORT_UCP_HTTP=8001
APP_PORT_UCP_HTTPS=8003
APP_PORT_AMI=8088
## WARNING: tune the APP_PORT_RTP_END to a lower value (ex. 10200) if 'network_mode: host' is not used
APP_PORT_RTP_START=10000
APP_PORT_RTP_END=20000
# database port
APP_PORT_MYSQL=3306
# other services ports
APP_PORT_DHCP=67
APP_PORT_TFTP=69
APP_PORT_NTP=123
APP_PORT_FOP2=4445
APP_PORT_ZABBIX=10050

### Container Services
MSMTP_ENABLED=true
#POSTFIX_ENABLED=true
CRON_ENABLED=true
HTTPD_ENABLED=true
IZPBX_ENABLED=true
FAIL2BAN_ENABLED=true
#DHCP_ENABLED=true
#TFTP_ENABLED=true
#NTP_ENABLED=true
#FOP2_ENABLED=true
#ZABBIX_ENABLED=true
#PMA_ENABLED=true
PHONEBOOK_ENABLED=true
-----------------------------------------------------------------------------------

izpbx ilk kurulum yapıldıktan sonra 10-15 dakika aralığında web sayfasından erişilebilir oluyor.

Ardından Freepbx update kısmından
Please confirm the following actions:
Upgrades, installs, enables and disables:

PBX API 16.0.13 will be downloaded and installed and switched to the stable track
Dynamic Routes 16.0.4 will be downloaded and installed and switched to the stable track
bu 2 modül yükleniyor.

Ubuntu Lawast Kurulumu

2023-11-18T15:03:45Z

Yusuf:

Bu yazımızda siz değerli okuyucularımıza Ubuntu Sunucusu üzerinde Docker Servisini kurarak lawast yazılımının ayarlarını anlatacağız.

1- Sunucu Kutusundan çıkartılarak gerekli donanımsal yapılandırılmaları gerçekleştirilir ve Fişe takılır.

2- Sunucu Vmware ( Son versiyon ) Usb disk üzerinde çalıştırılır.

3- Sunucuya Vmware üzerinde Ubuntu için sanal makine oluşturulur.

4- Ubuntu kurulur.

"sudo apt-get update", "sudo apt update", "sudo apt upgrade"

şeklinde ubuntu sunucumuzu en güncel hale getiririz.

5- Ubuntu üzerinde Docker kurulur. Kurulum aşağıdaki sitede anlatıldığı şekilde yapılır.

[https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository Ubuntu Docker Kurlumu]

Docker kurulumumuz gerçekleştikten sonra.

/home/lawast/ Klasörü içerisinde kurulum yapmamız için gerekli klasörler ve yaml dosyaları oluşturulur.

PostgreSQL Kurulumu

Ör; /home/lawast/postgresql/docker-compose.yml
-----------------------------------------------------------------------------------
version: '3.1'
------
services:

postgresdb:
image: postgres:latest
restart: always
environment:
POSTGRES_PASSWORD: Size-ait-olan-şifre
POSTGRES_USER: sizin-kullanıcı-adınız
volumes:
- ./data:/var/lib/postgresql/data
ports:
- 5432:5432
-----------------------------------------------------------------------------------
Komut satırından
"docker compose up -d" yazılarak enter tuşana basılır.

SoftEtherVPN Kurulumu

/home/lawast/softethervpn/docker-compose.yml ve vpn_server.config ( bu dosyanın içi boş olucak )
-----------------------------------------------------------------------------------
version: "3"

services:
softethervpn:
image: siomiz/softethervpn
volumes:
- ./vpn_server.config:/usr/vpnserver/vpn_server.config
cap_add:
- NET_ADMIN
ports:
- 5555:5555/tcp
environment:
- PSK= PreSharedKey
- SPW= AdminPassword
- HPW= AdminHubPassword
-----------------------------------------------------------------------------------

Izpbx FreePBX Santral Kurulumu

/home/lawast/izpbx/docker-compose.yml ve .env ( bu dosya daha sonra link olarak eklenecek. :) )
-----------------------------------------------------------------------------------
version: '3'

networks:
izpbx:
driver: bridge
services:
db:
image: docker.io/mariadb:10.11.4
container_name: izpbx-db
command: --sql-mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
restart: unless-stopped
env_file:
- .env
environment:
- TZ
- MYSQL_DATABASE
- MYSQL_USER
- MYSQL_PASSWORD
- MYSQL_ROOT_PASSWORD
volumes:
- ./data/db:/var/lib/mysql
networks:
izpbx:
ports:
- ${APP_PORT_MYSQL}:3306

izpbx:
image: docker.io/izdock/izpbx-asterisk:20.16.9
container_name: izpbx
restart: unless-stopped
depends_on:
- db
env_file:
- .env
volumes:
- ./data/izpbx:/data
cap_add:
- NET_ADMIN
privileged: true
ulimits:
nofile:
soft: 8192
hard: 32768
network_mode: host
-----------------------------------------------------------------------------------

Örnek .env dosyası
-----------------------------------------------------------------------------------

### Persistent data management
## enable persistent data storage (comment if you want disable persistence of data) (default: /data)
APP_DATA=/data

### TimeZone configuration
## set the timezone based on your geographical location (default: TZ=UTC)
TZ=Europe/Istanbul

### Database
## WARNING: default izPBX security passwords. please change it according to your security defaults
## NOTE: to avoid writing the mysql root password here, the MYSQL_ROOT_PASSWORD variable can be disabled
## if the MYSQL_USER can create the asterisk database or if it already exist
MYSQL_PASSWORD=hQpqBAhWKgXn0VMiIPad
MYSQL_ROOT_PASSWORD=DmX6qEW8HmAOuYZXk9Kr

## WARNING: enable the following vars only for testing
#MYSQL_RANDOM_ROOT_PASSWORD=true
#MYSQL_ALLOW_EMPTY_ROOT_PASSWORD=true

## WARNING: if docker-compose is configured with "network_mode: host" then use "MYSQL_SERVER=127.0.0.1" or the address of the remote database server
## WARNING: if docker-compose is not configured with "network_mode: host" then use "MYSQL_SERVER=db" or the address of the remote database server
#MYSQL_SERVER=db
MYSQL_SERVER=127.0.0.1
MYSQL_DATABASE=asterisk
MYSQL_DATABASE_CDR=asteriskcdrdb
MYSQL_USER=asterisk

### Email addreses and SMTP smarthost
## outgoing mails will set as From as: (default: izpbx@localhost.localdomain)
#SMTP_MAIL_FROM=izpbx@example.com

## outgoing mails will to send notifications, like cron, fail2ban, etc... (default: root@localhost.localdomain)
#SMTP_MAIL_TO=admin@example.com

## specify DNS name or IP address for the SMTP RelayHost (default: none)
#SMTP_RELAYHOST=smtp.example.com
#SMTP_RELAYHOST_PORT=25
#SMTP_RELAYHOST_USERNAME=yourusername
#SMTP_RELAYHOST_PASSWORD=yoursecurepassword
#SMTP_STARTTLS=true
#SMTP_ALLOWED_SENDER_DOMAINS=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
#SMTP_MESSAGE_SIZE_LIMIT=67108864

### Webserver and HTTP/HTTPS
## enable if the pbx is exposed to internet and want autoconfigure virtualhosting based on the following FQDN (default: none)
#APP_FQDN=izpbx.example.com

## enable https protocols (default: false)
## by default izpbx will use a self-signed certificate generated on first run if missing
HTTPD_HTTPS_ENABLED=true

# use custom ssl certificates (only used when LETSENCRYPT_ENABLED=false) place you certs into: /etc/asterisk/keys
# NOTE: if you want recreate the self-signed certificates after initial deploy, you must delete the certs and restart izpbx
#HTTPD_HTTPS_CERT_FILE=/etc/asterisk/keys/default.crt
#HTTPD_HTTPS_KEY_FILE=/etc/asterisk/keys/default.key
#HTTPD_HTTPS_CHAIN_FILE=/etc/asterisk/keys/default.chain.crt

## redirect unencrypted http connetions to https (default: false)
HTTPD_REDIRECT_HTTP_TO_HTTPS=true

## auto generate Let's Encrypt SSL certificates if the pbx is exposed to Internet and want enable https protocol (default: false)
## To use LETSENCRYPT make sure SMTP_MAIL_TO and APP_FQDN are set to correct values
#LETSENCRYPT_ENABLED=true
#LETSENCRYPT_COUNTRY_CODE=IT
#LETSENCRYPT_COUNTRY_STATE=Rome

## by default everyone can connect to HTTP/HTTPS WEB interface, comment out to restrict the access and enhance the security (default: 0.0.0.0/0)
#HTTPD_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### phpMyAdmin
#PMA_ALIAS=/admin/pma
#PMA_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### FOP2 configuration (https://www.fop2.com/docs/)
#FOP2_AUTOUPGRADE=true
#FOP2_LICENSE_NAME=<put here your corporation name>
#FOP2_LICENSE_CODE=<put here your license code>
#FOP2_LICENSE_IFACE=docker0

## the following variables are not mandatory, you can leave commented (FOP2_AMI_PASSWORD will be a random hash)
#FOP2_AMI_HOST=localhost
#FOP2_AMI_PORT=5038
#FOP2_AMI_USERNAME=admin
#FOP2_AMI_PASSWORD=amp111

### Zabbix Network Monitoring
## for automatic discovery of HOSTNAME leave ZABBIX_HOSTNAME commented
#ZABBIX_SERVER=zabbixserver.example.com
#ZABBIX_HOSTNAME=izpbx.example.com
#ZABBIX_HOSTMETADATA=izPBX CHANGEM3WithAS3cur3HA$H

### Fail2ban
## format: FAIL2BAN_SECTION_KEY=VALUE
## by default izpbx will will use: FAIL2BAN_DEFAULT_SENDER=$SMTP_MAIL_FROM and FAIL2BAN_DEFAULT_DESTEMAIL=$SMTP_MAIL_TO, anyway you can override it bellow
FAIL2BAN_ENABLED=true
FAIL2BAN_ASTERISK_ENABLED=true
#FAIL2BAN_ASTERISK_LOGPATH=/var/log/asterisk/security
#FAIL2BAN_DEFAULT_SENDER=fail2ban@example.com
#FAIL2BAN_DEFAULT_DESTEMAIL=security@example.com
#FAIL2BAN_DEFAULT_BANACTION=iptables-allports[blocktype=DROP]
FAIL2BAN_DEFAULT_IGNOREIP=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 192.168.1.0/24
FAIL2BAN_DEFAULT_BANTIME=300
FAIL2BAN_DEFAULT_FINDTIME=3600
FAIL2BAN_DEFAULT_MAXRETRY=10
FAIL2BAN_RECIDIVE_ENABLED=true
FAIL2BAN_RECIDIVE_BANTIME=1814400
FAIL2BAN_RECIDIVE_FINDTIME=15552000
FAIL2BAN_RECIDIVE_MAXRETRY=10

### FreePBX Advanced Settings
## prefix every FreePBX internal variable with FREEPBX_
## modules enabled on first startup
#FREEPBX_MODULES_EXTRA=soundlang callrecording cdr conferences customappsreg featurecodeadmin infoservices logfiles music manager arimanager filestore recordings announcement asteriskinfo backup callforward callwaiting daynight calendar certman cidlookup contactmanager donotdisturb fax findmefollow iaxsettings miscapps miscdests ivr parking phonebook presencestate printextensions queues cel timeconditions pm2
## enable automatic upgrading FreePBX on izpbx startup from previous version to a new major version (ex. from 15 to 16)
## WARNING: this is a dangerous task!!! be sure to have a backup before enabling core autoupgrade!
FREEPBX_AUTOUPGRADE_CORE=true
# enable automatic modules updates (NOTE: only on initial deploy)
FREEPBX_AUTOUPGRADE_MODULES=true
FREEPBX_FREEPBX_SYSTEM_IDENT=KarasoyPBX
FREEPBX_AS_DISPLAY_READONLY_SETTINGS=1
FREEPBX_AS_OVERRIDE_READONLY=1
FREEPBX_ENABLECW=0
FREEPBX_TONEZONE=it
FREEPBX_PHPTIMEZONE=Europe/Istanbul
#FREEPBX_BRAND_IMAGE_TANGO_LEFT=images/tango.png
#FREEPBX_BRAND_IMAGE_FREEPBX_FOOT=images/freepbx_small.png
#FREEPBX_BRAND_IMAGE_SPONSOR_FOOT=images/sangoma-horizontal_thumb.png
#FREEPBX_BRAND_FREEPBX_ALT_LEFT=FreePBX
#FREEPBX_BRAND_FREEPBX_ALT_FOOT=FreePBX®
#FREEPBX_BRAND_SPONSOR_ALT_FOOT=www.sangoma.com
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_LEFT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_FOOT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_SPONSOR_LINK_FOOT=http://www.sangoma.com
#FREEPBX_RSSFEEDS=

## WORKAROUND @20200322 https://issues.freepbx.org/browse/FREEPBX-20559 : fwconsole setting SIGNATURECHECK 0
#FREEPBX_SIGNATURECHECK=0

### PhoneBook Settings
## PhoneBook server address used by VoiP Phones.
## You can specify IP or DNS name. If empty, by default will be used in order: 'http://$APP_FQDN' or 'http://PBXIP'
#PHONEBOOK_ADDRESS=https://izpbx.example.com

### DHCP/NTP/TFTP Server
#DHCP_DOMAIN=izpbx.local
#DHCP_POOL_START=10.1.1.10
#DHCP_POOL_END=10.1.1.250
#DHCP_POOL_LEASE=72h
## DHCP_DNS: leave commented to use docker container DNS ip address
#DHCP_DNS=10.1.1.1
#DHCP_GW=10.1.1.1
#DHCP_NTP=10.1.1.1

### NTP Server
#NTP_SERVERS=0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org
#NTP_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### Container Network Ports
## webserver and freepbx ports
APP_PORT_HTTP=80
APP_PORT_HTTPS=443
# asterisk ports
APP_PORT_IAX=4569
APP_PORT_PJSIP=5060
APP_PORT_SIP=5160
APP_PORT_WEBRTC=8089
APP_PORT_UCP_HTTP=8001
APP_PORT_UCP_HTTPS=8003
APP_PORT_AMI=8088
## WARNING: tune the APP_PORT_RTP_END to a lower value (ex. 10200) if 'network_mode: host' is not used
APP_PORT_RTP_START=10000
APP_PORT_RTP_END=20000
# database port
APP_PORT_MYSQL=3306
# other services ports
APP_PORT_DHCP=67
APP_PORT_TFTP=69
APP_PORT_NTP=123
APP_PORT_FOP2=4445
APP_PORT_ZABBIX=10050

### Container Services
MSMTP_ENABLED=true
#POSTFIX_ENABLED=true
CRON_ENABLED=true
HTTPD_ENABLED=true
IZPBX_ENABLED=true
FAIL2BAN_ENABLED=true
#DHCP_ENABLED=true
#TFTP_ENABLED=true
#NTP_ENABLED=true
#FOP2_ENABLED=true
#ZABBIX_ENABLED=true
#PMA_ENABLED=true
PHONEBOOK_ENABLED=true
-----------------------------------------------------------------------------------

izpbx ilk kurulum yapıldıktan sonra 10-15 dakika aralığında web sayfasından erişilebilir oluyor.

Ardından Freepbx update kısmından
Please confirm the following actions:
Upgrades, installs, enables and disables:

PBX API 16.0.13 will be downloaded and installed and switched to the stable track
Dynamic Routes 16.0.4 will be downloaded and installed and switched to the stable track
bu 2 modül yükleniyor.

Ubuntu Lawast Kurulumu

2023-11-18T14:57:42Z

Yusuf:

Bu yazımızda siz değerli okuyucularımıza Ubuntu Sunucusu üzerinde Docker Servisini kurarak lawast yazılımının ayarlarını anlatacağız.

1- Sunucu Kutusundan çıkartılarak gerekli donanımsal yapılandırılmaları gerçekleştirilir ve Fişe takılır.

2- Sunucu Vmware ( Son versiyon ) Usb disk üzerinde çalıştırılır.

3- Sunucuya Vmware üzerinde Ubuntu için sanal makine oluşturulur.

4- Ubuntu kurulur.

"sudo apt-get update", "sudo apt update", "sudo apt upgrade"

şeklinde ubuntu sunucumuzu en güncel hale getiririz.

5- Ubuntu üzerinde Docker kurulur. Kurulum aşağıdaki sitede anlatıldığı şekilde yapılır.

[https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository Ubuntu Docker Kurlumu]

Docker kurulumumuz gerçekleştikten sonra.

/home/lawast/ Klasörü içerisinde kurulum yapmamız için gerekli klasörler ve yaml dosyaları oluşturulur.

PostgreSQL Kurulumu

Ör; /home/lawast/postgresql/docker-compose.yml
-----------------------------------------------------------------------------------
version: '3.1'
------
services:

postgresdb:
image: postgres:latest
restart: always
environment:
POSTGRES_PASSWORD: Size-ait-olan-şifre
POSTGRES_USER: sizin-kullanıcı-adınız
volumes:
- ./data:/var/lib/postgresql/data
ports:
- 5432:5432
-----------------------------------------------------------------------------------
Komut satırından
"docker compose up -d" yazılarak enter tuşana basılır.

SoftEtherVPN Kurulumu

/home/lawast/softethervpn/docker-compose.yml ve vpn_server.config ( bu dosyanın içi boş olucak )
-----------------------------------------------------------------------------------
version: "3"

services:
softethervpn:
image: siomiz/softethervpn
volumes:
- ./vpn_server.config:/usr/vpnserver/vpn_server.config
cap_add:
- NET_ADMIN
ports:
- 5555:5555/tcp
environment:
- PSK= PreSharedKey
- SPW= AdminPassword
- HPW= AdminHubPassword
-----------------------------------------------------------------------------------

Izpbx FreePBX Santral Kurulumu

/home/lawast/izpbx/docker-compose.yml ve .env ( bu dosya daha sonra link olarak eklenecek. :) )
-----------------------------------------------------------------------------------
version: '3'

networks:
izpbx:
driver: bridge
services:
db:
image: docker.io/mariadb:10.11.4
container_name: izpbx-db
command: --sql-mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
restart: unless-stopped
env_file:
- .env
environment:
- TZ
- MYSQL_DATABASE
- MYSQL_USER
- MYSQL_PASSWORD
- MYSQL_ROOT_PASSWORD
volumes:
- ./data/db:/var/lib/mysql
networks:
izpbx:
ports:
- ${APP_PORT_MYSQL}:3306

izpbx:
image: docker.io/izdock/izpbx-asterisk:20.16.9
container_name: izpbx
restart: unless-stopped
depends_on:
- db
env_file:
- .env
volumes:
- ./data/izpbx:/data
cap_add:
- NET_ADMIN
privileged: true
ulimits:
nofile:
soft: 8192
hard: 32768
network_mode: host
-----------------------------------------------------------------------------------

Örnek .env dosyası
-----------------------------------------------------------------------------------

### Persistent data management
## enable persistent data storage (comment if you want disable persistence of data) (default: /data)
APP_DATA=/data

### TimeZone configuration
## set the timezone based on your geographical location (default: TZ=UTC)
TZ=Europe/Istanbul

### Database
## WARNING: default izPBX security passwords. please change it according to your security defaults
## NOTE: to avoid writing the mysql root password here, the MYSQL_ROOT_PASSWORD variable can be disabled
## if the MYSQL_USER can create the asterisk database or if it already exist
MYSQL_PASSWORD=hQpqBAhWKgXn0VMiIPad
MYSQL_ROOT_PASSWORD=DmX6qEW8HmAOuYZXk9Kr

## WARNING: enable the following vars only for testing
#MYSQL_RANDOM_ROOT_PASSWORD=true
#MYSQL_ALLOW_EMPTY_ROOT_PASSWORD=true

## WARNING: if docker-compose is configured with "network_mode: host" then use "MYSQL_SERVER=127.0.0.1" or the address of the remote database server
## WARNING: if docker-compose is not configured with "network_mode: host" then use "MYSQL_SERVER=db" or the address of the remote database server
#MYSQL_SERVER=db
MYSQL_SERVER=127.0.0.1
MYSQL_DATABASE=asterisk
MYSQL_DATABASE_CDR=asteriskcdrdb
MYSQL_USER=asterisk

### Email addreses and SMTP smarthost
## outgoing mails will set as From as: (default: izpbx@localhost.localdomain)
#SMTP_MAIL_FROM=izpbx@example.com

## outgoing mails will to send notifications, like cron, fail2ban, etc... (default: root@localhost.localdomain)
#SMTP_MAIL_TO=admin@example.com

## specify DNS name or IP address for the SMTP RelayHost (default: none)
#SMTP_RELAYHOST=smtp.example.com
#SMTP_RELAYHOST_PORT=25
#SMTP_RELAYHOST_USERNAME=yourusername
#SMTP_RELAYHOST_PASSWORD=yoursecurepassword
#SMTP_STARTTLS=true
#SMTP_ALLOWED_SENDER_DOMAINS=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
#SMTP_MESSAGE_SIZE_LIMIT=67108864

### Webserver and HTTP/HTTPS
## enable if the pbx is exposed to internet and want autoconfigure virtualhosting based on the following FQDN (default: none)
#APP_FQDN=izpbx.example.com

## enable https protocols (default: false)
## by default izpbx will use a self-signed certificate generated on first run if missing
HTTPD_HTTPS_ENABLED=true

# use custom ssl certificates (only used when LETSENCRYPT_ENABLED=false) place you certs into: /etc/asterisk/keys
# NOTE: if you want recreate the self-signed certificates after initial deploy, you must delete the certs and restart izpbx
#HTTPD_HTTPS_CERT_FILE=/etc/asterisk/keys/default.crt
#HTTPD_HTTPS_KEY_FILE=/etc/asterisk/keys/default.key
#HTTPD_HTTPS_CHAIN_FILE=/etc/asterisk/keys/default.chain.crt

## redirect unencrypted http connetions to https (default: false)
HTTPD_REDIRECT_HTTP_TO_HTTPS=true

## auto generate Let's Encrypt SSL certificates if the pbx is exposed to Internet and want enable https protocol (default: false)
## To use LETSENCRYPT make sure SMTP_MAIL_TO and APP_FQDN are set to correct values
#LETSENCRYPT_ENABLED=true
#LETSENCRYPT_COUNTRY_CODE=IT
#LETSENCRYPT_COUNTRY_STATE=Rome

## by default everyone can connect to HTTP/HTTPS WEB interface, comment out to restrict the access and enhance the security (default: 0.0.0.0/0)
#HTTPD_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### phpMyAdmin
#PMA_ALIAS=/admin/pma
#PMA_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### FOP2 configuration (https://www.fop2.com/docs/)
#FOP2_AUTOUPGRADE=true
#FOP2_LICENSE_NAME=<put here your corporation name>
#FOP2_LICENSE_CODE=<put here your license code>
#FOP2_LICENSE_IFACE=docker0

## the following variables are not mandatory, you can leave commented (FOP2_AMI_PASSWORD will be a random hash)
#FOP2_AMI_HOST=localhost
#FOP2_AMI_PORT=5038
#FOP2_AMI_USERNAME=admin
#FOP2_AMI_PASSWORD=amp111

### Zabbix Network Monitoring
## for automatic discovery of HOSTNAME leave ZABBIX_HOSTNAME commented
#ZABBIX_SERVER=zabbixserver.example.com
#ZABBIX_HOSTNAME=izpbx.example.com
#ZABBIX_HOSTMETADATA=izPBX CHANGEM3WithAS3cur3HA$H

### Fail2ban
## format: FAIL2BAN_SECTION_KEY=VALUE
## by default izpbx will will use: FAIL2BAN_DEFAULT_SENDER=$SMTP_MAIL_FROM and FAIL2BAN_DEFAULT_DESTEMAIL=$SMTP_MAIL_TO, anyway you can override it bellow
FAIL2BAN_ENABLED=true
FAIL2BAN_ASTERISK_ENABLED=true
#FAIL2BAN_ASTERISK_LOGPATH=/var/log/asterisk/security
#FAIL2BAN_DEFAULT_SENDER=fail2ban@example.com
#FAIL2BAN_DEFAULT_DESTEMAIL=security@example.com
#FAIL2BAN_DEFAULT_BANACTION=iptables-allports[blocktype=DROP]
FAIL2BAN_DEFAULT_IGNOREIP=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 192.168.1.0/24
FAIL2BAN_DEFAULT_BANTIME=300
FAIL2BAN_DEFAULT_FINDTIME=3600
FAIL2BAN_DEFAULT_MAXRETRY=10
FAIL2BAN_RECIDIVE_ENABLED=true
FAIL2BAN_RECIDIVE_BANTIME=1814400
FAIL2BAN_RECIDIVE_FINDTIME=15552000
FAIL2BAN_RECIDIVE_MAXRETRY=10

### FreePBX Advanced Settings
## prefix every FreePBX internal variable with FREEPBX_
## modules enabled on first startup
#FREEPBX_MODULES_EXTRA=soundlang callrecording cdr conferences customappsreg featurecodeadmin infoservices logfiles music manager arimanager filestore recordings announcement asteriskinfo backup callforward callwaiting daynight calendar certman cidlookup contactmanager donotdisturb fax findmefollow iaxsettings miscapps miscdests ivr parking phonebook presencestate printextensions queues cel timeconditions pm2
## enable automatic upgrading FreePBX on izpbx startup from previous version to a new major version (ex. from 15 to 16)
## WARNING: this is a dangerous task!!! be sure to have a backup before enabling core autoupgrade!
FREEPBX_AUTOUPGRADE_CORE=true
# enable automatic modules updates (NOTE: only on initial deploy)
FREEPBX_AUTOUPGRADE_MODULES=true
FREEPBX_FREEPBX_SYSTEM_IDENT=KarasoyPBX
FREEPBX_AS_DISPLAY_READONLY_SETTINGS=1
FREEPBX_AS_OVERRIDE_READONLY=1
FREEPBX_ENABLECW=0
FREEPBX_TONEZONE=it
FREEPBX_PHPTIMEZONE=Europe/Istanbul
#FREEPBX_BRAND_IMAGE_TANGO_LEFT=images/tango.png
#FREEPBX_BRAND_IMAGE_FREEPBX_FOOT=images/freepbx_small.png
#FREEPBX_BRAND_IMAGE_SPONSOR_FOOT=images/sangoma-horizontal_thumb.png
#FREEPBX_BRAND_FREEPBX_ALT_LEFT=FreePBX
#FREEPBX_BRAND_FREEPBX_ALT_FOOT=FreePBX®
#FREEPBX_BRAND_SPONSOR_ALT_FOOT=www.sangoma.com
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_LEFT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_FOOT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_SPONSOR_LINK_FOOT=http://www.sangoma.com
#FREEPBX_RSSFEEDS=

## WORKAROUND @20200322 https://issues.freepbx.org/browse/FREEPBX-20559 : fwconsole setting SIGNATURECHECK 0
#FREEPBX_SIGNATURECHECK=0

### PhoneBook Settings
## PhoneBook server address used by VoiP Phones.
## You can specify IP or DNS name. If empty, by default will be used in order: 'http://$APP_FQDN' or 'http://PBXIP'
#PHONEBOOK_ADDRESS=https://izpbx.example.com

### DHCP/NTP/TFTP Server
#DHCP_DOMAIN=izpbx.local
#DHCP_POOL_START=10.1.1.10
#DHCP_POOL_END=10.1.1.250
#DHCP_POOL_LEASE=72h
## DHCP_DNS: leave commented to use docker container DNS ip address
#DHCP_DNS=10.1.1.1
#DHCP_GW=10.1.1.1
#DHCP_NTP=10.1.1.1

### NTP Server
#NTP_SERVERS=0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org
#NTP_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### Container Network Ports
## webserver and freepbx ports
APP_PORT_HTTP=80
APP_PORT_HTTPS=443
# asterisk ports
APP_PORT_IAX=4569
APP_PORT_PJSIP=5060
APP_PORT_SIP=5160
APP_PORT_WEBRTC=8089
APP_PORT_UCP_HTTP=8001
APP_PORT_UCP_HTTPS=8003
APP_PORT_AMI=8088
## WARNING: tune the APP_PORT_RTP_END to a lower value (ex. 10200) if 'network_mode: host' is not used
APP_PORT_RTP_START=10000
APP_PORT_RTP_END=20000
# database port
APP_PORT_MYSQL=3306
# other services ports
APP_PORT_DHCP=67
APP_PORT_TFTP=69
APP_PORT_NTP=123
APP_PORT_FOP2=4445
APP_PORT_ZABBIX=10050

### Container Services
MSMTP_ENABLED=true
#POSTFIX_ENABLED=true
CRON_ENABLED=true
HTTPD_ENABLED=true
IZPBX_ENABLED=true
FAIL2BAN_ENABLED=true
#DHCP_ENABLED=true
#TFTP_ENABLED=true
#NTP_ENABLED=true
#FOP2_ENABLED=true
#ZABBIX_ENABLED=true
#PMA_ENABLED=true
PHONEBOOK_ENABLED=true
-----------------------------------------------------------------------------------

izpbx ilk kurulum yapıldıktan sonra 10-15 dakika aralığında web sayfasından erişilebilir oluyor.

Ubuntu Lawast Kurulumu

2023-11-18T14:50:14Z

Yusuf:

Bu yazımızda siz değerli okuyucularımıza Ubuntu Sunucusu üzerinde Docker Servisini kurarak lawast yazılımının ayarlarını anlatacağız.

1- Sunucu Kutusundan çıkartılarak gerekli donanımsal yapılandırılmaları gerçekleştirilir ve Fişe takılır.

2- Sunucu Vmware ( Son versiyon ) Usb disk üzerinde çalıştırılır.

3- Sunucuya Vmware üzerinde Ubuntu için sanal makine oluşturulur.

4- Ubuntu kurulur.

"sudo apt-get update", "sudo apt update", "sudo apt upgrade"

şeklinde ubuntu sunucumuzu en güncel hale getiririz.

5- Ubuntu üzerinde Docker kurulur. Kurulum aşağıdaki sitede anlatıldığı şekilde yapılır.

[https://docs.docker.com/engine/install/ubuntu/#install-using-the-repository Ubuntu Docker Kurlumu]

Docker kurulumumuz gerçekleştikten sonra.

/home/lawast/ Klasörü içerisinde kurulum yapmamız için gerekli klasörler ve yaml dosyaları oluşturulur.

PostgreSQL Kurulumu

Ör; /home/lawast/postgresql/docker-compose.yml
-----------------------------------------------------------------------------------
version: '3.1'
------
services:

postgresdb:
image: postgres:latest
restart: always
environment:
POSTGRES_PASSWORD: Size-ait-olan-şifre
POSTGRES_USER: sizin-kullanıcı-adınız
volumes:
- ./data:/var/lib/postgresql/data
ports:
- 5432:5432
-----------------------------------------------------------------------------------
Komut satırından
"docker compose up -d" yazılarak enter tuşana basılır.

SoftEtherVPN Kurulumu

/home/lawast/softethervpn/docker-compose.yml ve vpn_server.config ( bu dosyanın içi boş olucak )
-----------------------------------------------------------------------------------
version: "3"

services:
softethervpn:
image: siomiz/softethervpn
volumes:
- ./vpn_server.config:/usr/vpnserver/vpn_server.config
cap_add:
- NET_ADMIN
ports:
- 5555:5555/tcp
environment:
- PSK= PreSharedKey
- SPW= AdminPassword
- HPW= AdminHubPassword
-----------------------------------------------------------------------------------

Izpbx FreePBX Santral Kurulumu

/home/lawast/izpbx/docker-compose.yml ve .env ( bu dosya daha sonra link olarak eklenecek. :) )
-----------------------------------------------------------------------------------
version: '3'

networks:
izpbx:
driver: bridge
services:
db:
image: docker.io/mariadb:10.11.4
container_name: izpbx-db
command: --sql-mode=ERROR_FOR_DIVISION_BY_ZERO,NO_AUTO_CREATE_USER,NO_ENGINE_SUBSTITUTION
restart: unless-stopped
env_file:
- .env
environment:
- TZ
- MYSQL_DATABASE
- MYSQL_USER
- MYSQL_PASSWORD
- MYSQL_ROOT_PASSWORD
volumes:
- ./data/db:/var/lib/mysql
networks:
izpbx:
ports:
- ${APP_PORT_MYSQL}:3306

izpbx:
image: docker.io/izdock/izpbx-asterisk:20.16.9
container_name: izpbx
restart: unless-stopped
depends_on:
- db
env_file:
- .env
volumes:
- ./data/izpbx:/data
cap_add:
- NET_ADMIN
privileged: true
ulimits:
nofile:
soft: 8192
hard: 32768
network_mode: host
-----------------------------------------------------------------------------------

Örnek .env dosyası
-----------------------------------------------------------------------------------

### Persistent data management
## enable persistent data storage (comment if you want disable persistence of data) (default: /data)
APP_DATA=/data

### TimeZone configuration
## set the timezone based on your geographical location (default: TZ=UTC)
TZ=Europe/Istanbul

### Database
## WARNING: default izPBX security passwords. please change it according to your security defaults
## NOTE: to avoid writing the mysql root password here, the MYSQL_ROOT_PASSWORD variable can be disabled
## if the MYSQL_USER can create the asterisk database or if it already exist
MYSQL_PASSWORD=hQpqBAhWKgXn0VMiIPad
MYSQL_ROOT_PASSWORD=DmX6qEW8HmAOuYZXk9Kr

## WARNING: enable the following vars only for testing
#MYSQL_RANDOM_ROOT_PASSWORD=true
#MYSQL_ALLOW_EMPTY_ROOT_PASSWORD=true

## WARNING: if docker-compose is configured with "network_mode: host" then use "MYSQL_SERVER=127.0.0.1" or the address of the remote database server
## WARNING: if docker-compose is not configured with "network_mode: host" then use "MYSQL_SERVER=db" or the address of the remote database server
#MYSQL_SERVER=db
MYSQL_SERVER=127.0.0.1
MYSQL_DATABASE=asterisk
MYSQL_DATABASE_CDR=asteriskcdrdb
MYSQL_USER=asterisk

### Email addreses and SMTP smarthost
## outgoing mails will set as From as: (default: izpbx@localhost.localdomain)
#SMTP_MAIL_FROM=izpbx@example.com

## outgoing mails will to send notifications, like cron, fail2ban, etc... (default: root@localhost.localdomain)
#SMTP_MAIL_TO=admin@example.com

## specify DNS name or IP address for the SMTP RelayHost (default: none)
#SMTP_RELAYHOST=smtp.example.com
#SMTP_RELAYHOST_PORT=25
#SMTP_RELAYHOST_USERNAME=yourusername
#SMTP_RELAYHOST_PASSWORD=yoursecurepassword
#SMTP_STARTTLS=true
#SMTP_ALLOWED_SENDER_DOMAINS=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16
#SMTP_MESSAGE_SIZE_LIMIT=67108864

### Webserver and HTTP/HTTPS
## enable if the pbx is exposed to internet and want autoconfigure virtualhosting based on the following FQDN (default: none)
#APP_FQDN=izpbx.example.com

## enable https protocols (default: false)
## by default izpbx will use a self-signed certificate generated on first run if missing
HTTPD_HTTPS_ENABLED=true

# use custom ssl certificates (only used when LETSENCRYPT_ENABLED=false) place you certs into: /etc/asterisk/keys
# NOTE: if you want recreate the self-signed certificates after initial deploy, you must delete the certs and restart izpbx
#HTTPD_HTTPS_CERT_FILE=/etc/asterisk/keys/default.crt
#HTTPD_HTTPS_KEY_FILE=/etc/asterisk/keys/default.key
#HTTPD_HTTPS_CHAIN_FILE=/etc/asterisk/keys/default.chain.crt

## redirect unencrypted http connetions to https (default: false)
HTTPD_REDIRECT_HTTP_TO_HTTPS=true

## auto generate Let's Encrypt SSL certificates if the pbx is exposed to Internet and want enable https protocol (default: false)
## To use LETSENCRYPT make sure SMTP_MAIL_TO and APP_FQDN are set to correct values
#LETSENCRYPT_ENABLED=true
#LETSENCRYPT_COUNTRY_CODE=IT
#LETSENCRYPT_COUNTRY_STATE=Rome

## by default everyone can connect to HTTP/HTTPS WEB interface, comment out to restrict the access and enhance the security (default: 0.0.0.0/0)
#HTTPD_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### phpMyAdmin
#PMA_ALIAS=/admin/pma
#PMA_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### FOP2 configuration (https://www.fop2.com/docs/)
#FOP2_AUTOUPGRADE=true
#FOP2_LICENSE_NAME=<put here your corporation name>
#FOP2_LICENSE_CODE=<put here your license code>
#FOP2_LICENSE_IFACE=docker0

## the following variables are not mandatory, you can leave commented (FOP2_AMI_PASSWORD will be a random hash)
#FOP2_AMI_HOST=localhost
#FOP2_AMI_PORT=5038
#FOP2_AMI_USERNAME=admin
#FOP2_AMI_PASSWORD=amp111

### Zabbix Network Monitoring
## for automatic discovery of HOSTNAME leave ZABBIX_HOSTNAME commented
#ZABBIX_SERVER=zabbixserver.example.com
#ZABBIX_HOSTNAME=izpbx.example.com
#ZABBIX_HOSTMETADATA=izPBX CHANGEM3WithAS3cur3HA$H

### Fail2ban
## format: FAIL2BAN_SECTION_KEY=VALUE
## by default izpbx will will use: FAIL2BAN_DEFAULT_SENDER=$SMTP_MAIL_FROM and FAIL2BAN_DEFAULT_DESTEMAIL=$SMTP_MAIL_TO, anyway you can override it bellow
FAIL2BAN_ENABLED=true
FAIL2BAN_ASTERISK_ENABLED=true
#FAIL2BAN_ASTERISK_LOGPATH=/var/log/asterisk/security
#FAIL2BAN_DEFAULT_SENDER=fail2ban@example.com
#FAIL2BAN_DEFAULT_DESTEMAIL=security@example.com
#FAIL2BAN_DEFAULT_BANACTION=iptables-allports[blocktype=DROP]
FAIL2BAN_DEFAULT_IGNOREIP=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 192.168.1.0/24
FAIL2BAN_DEFAULT_BANTIME=300
FAIL2BAN_DEFAULT_FINDTIME=3600
FAIL2BAN_DEFAULT_MAXRETRY=10
FAIL2BAN_RECIDIVE_ENABLED=true
FAIL2BAN_RECIDIVE_BANTIME=1814400
FAIL2BAN_RECIDIVE_FINDTIME=15552000
FAIL2BAN_RECIDIVE_MAXRETRY=10

### FreePBX Advanced Settings
## prefix every FreePBX internal variable with FREEPBX_
## modules enabled on first startup
#FREEPBX_MODULES_EXTRA=soundlang callrecording cdr conferences customappsreg featurecodeadmin infoservices logfiles music manager arimanager filestore recordings announcement asteriskinfo backup callforward callwaiting daynight calendar certman cidlookup contactmanager donotdisturb fax findmefollow iaxsettings miscapps miscdests ivr parking phonebook presencestate printextensions queues cel timeconditions pm2
## enable automatic upgrading FreePBX on izpbx startup from previous version to a new major version (ex. from 15 to 16)
## WARNING: this is a dangerous task!!! be sure to have a backup before enabling core autoupgrade!
FREEPBX_AUTOUPGRADE_CORE=true
# enable automatic modules updates (NOTE: only on initial deploy)
FREEPBX_AUTOUPGRADE_MODULES=true
FREEPBX_FREEPBX_SYSTEM_IDENT=KarasoyPBX
FREEPBX_AS_DISPLAY_READONLY_SETTINGS=1
FREEPBX_AS_OVERRIDE_READONLY=1
FREEPBX_ENABLECW=0
FREEPBX_TONEZONE=it
FREEPBX_PHPTIMEZONE=Europe/Istanbul
#FREEPBX_BRAND_IMAGE_TANGO_LEFT=images/tango.png
#FREEPBX_BRAND_IMAGE_FREEPBX_FOOT=images/freepbx_small.png
#FREEPBX_BRAND_IMAGE_SPONSOR_FOOT=images/sangoma-horizontal_thumb.png
#FREEPBX_BRAND_FREEPBX_ALT_LEFT=FreePBX
#FREEPBX_BRAND_FREEPBX_ALT_FOOT=FreePBX®
#FREEPBX_BRAND_SPONSOR_ALT_FOOT=www.sangoma.com
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_LEFT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_FREEPBX_LINK_FOOT=http://www.freepbx.org
#FREEPBX_BRAND_IMAGE_SPONSOR_LINK_FOOT=http://www.sangoma.com
#FREEPBX_RSSFEEDS=

## WORKAROUND @20200322 https://issues.freepbx.org/browse/FREEPBX-20559 : fwconsole setting SIGNATURECHECK 0
#FREEPBX_SIGNATURECHECK=0

### PhoneBook Settings
## PhoneBook server address used by VoiP Phones.
## You can specify IP or DNS name. If empty, by default will be used in order: 'http://$APP_FQDN' or 'http://PBXIP'
#PHONEBOOK_ADDRESS=https://izpbx.example.com

### DHCP/NTP/TFTP Server
#DHCP_DOMAIN=izpbx.local
#DHCP_POOL_START=10.1.1.10
#DHCP_POOL_END=10.1.1.250
#DHCP_POOL_LEASE=72h
## DHCP_DNS: leave commented to use docker container DNS ip address
#DHCP_DNS=10.1.1.1
#DHCP_GW=10.1.1.1
#DHCP_NTP=10.1.1.1

### NTP Server
#NTP_SERVERS=0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org
#NTP_ALLOW_FROM=127.0.0.0/8 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16

### Container Network Ports
## webserver and freepbx ports
APP_PORT_HTTP=80
APP_PORT_HTTPS=443
# asterisk ports
APP_PORT_IAX=4569
APP_PORT_PJSIP=5060
APP_PORT_SIP=5160
APP_PORT_WEBRTC=8089
APP_PORT_UCP_HTTP=8001
APP_PORT_UCP_HTTPS=8003
APP_PORT_AMI=8088
## WARNING: tune the APP_PORT_RTP_END to a lower value (ex. 10200) if 'network_mode: host' is not used
APP_PORT_RTP_START=10000
APP_PORT_RTP_END=20000
# database port
APP_PORT_MYSQL=3306
# other services ports
APP_PORT_DHCP=67
APP_PORT_TFTP=69
APP_PORT_NTP=123
APP_PORT_FOP2=4445
APP_PORT_ZABBIX=10050

### Container Services
MSMTP_ENABLED=true
#POSTFIX_ENABLED=true
CRON_ENABLED=true
HTTPD_ENABLED=true
IZPBX_ENABLED=true
FAIL2BAN_ENABLED=true
#DHCP_ENABLED=true
#TFTP_ENABLED=true
#NTP_ENABLED=true
#FOP2_ENABLED=true
#ZABBIX_ENABLED=true
#PMA_ENABLED=true
PHONEBOOK_ENABLED=true
-----------------------------------------------------------------------------------

Ubuntu Lawast Kurulumu

2023-11-18T14:47:08Z

Yusuf:

Anasayfa

2023-11-18T14:13:00Z

Yusuf:

<strong>MediaWiki başarı ile kuruldu.</strong>

[http://195.142.235.184:28080/index.php/IIS_SSL_Kurulumu IIS SSL Kurulumu]

[http://195.142.235.184:28080/index.php/Ubuntu_Lawast_Kurulumu Ubuntu Docker Kurulumu]

Viki yazılımının kullanımı hakkında bilgi almak için [https://www.mediawiki.org/wiki/Special:MyLanguage/Help:Contents kullanıcı rehberine] bakınız.

== Yeni Başlayanlar ==
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Configuration_settings Yapılandırma ayarlarının listesi]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Buraya bunu eklediğimi bakalım kim fark edecek]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:FAQ MediaWiki SSS]
* [https://lists.wikimedia.org/postorius/lists/mediawiki-announce.lists.wikimedia.org/ MediaWiki sürüm e-posta listesi]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Localisation#Translation_resources Diliniz için MediaWiki'yi yerelleştirin]
* [https://www.mediawiki.org/wiki/Special:MyLanguage/Manual:Combating_spam Vikinizde spam ile nasıl savaşılacağını öğrenin]

Ubuntu Lawast Kurulumu

2023-11-18T14:12:06Z

Yusuf:

Anasayfa

2023-11-18T14:10:46Z

Yusuf:

Ubuntu Lawast Kurulumu

2023-11-18T14:09:10Z

Yusuf: Docker, Ubuntu