README

LEMP Stack Installer

Automated Bash script to provision a production-ready LEMP web server on Ubuntu. One command install, per-site isolation, FastCGI cache, and WordPress auto-setup.

Requirements

Ubuntu 22.04 or 24.04 (fresh install recommended)
Root access
Minimum 1 vCPU / 1 GB RAM (2C/4G recommended)

Stack Components

NGINX (nginx.org) PHP 8.4 FPM MariaDB 11.4 Redis (Socket + TCP) phpMyAdmin Filebrowser WP-CLI ionCube Loader Fail2Ban iptables (v4+v6) Bad Bot Blocker TCP BBR Sysctl Tuning Let's Encrypt Swap (2 GB)

Features

Web Server & PHP
- NGINX from official repo with FastCGI Cache, Brotli, Gzip
- PHP 8.4 FPM with OPcache tuning & auto pool sizing
- ionCube Loader auto-installed
- Per-site PHP-FPM pool isolation (separate user & socket)
Database & Cache
- MariaDB 11.4 with performance tuning
- Redis Object Cache (unix socket preferred, TCP fallback)
- phpMyAdmin with auto-secured config
Security
- iptables firewall (IPv4 + IPv6) with rate limiting
- Fail2Ban jails: wp-login, phpMyAdmin, Filebrowser, MySQL
- NGINX Bad Bot Blocker (auto-updated nightly)
- 7G WAF rules
- Security headers (X-Frame, CSP, HSTS)
Performance
- TCP BBR congestion control (auto-enabled)
- Sysctl kernel tuning (network buffers, conntrack, file limits)
- 2 GB Swapfile
Management
- Filebrowser file manager (per-user scoped)
- WP-CLI for WordPress management
- Auto logrotate per-site
FSS Cache Manager Plugin (Auto-installed for WordPress):
- Smart Purge: Auto-refresh cache on content update
- Daily Sitemap Preloader: Keeps cache warm
- Dashboard Widget: Real-time cache stats
- URL Exclusion: Exclude specific pages from caching

Site Types

WordPress — PHP App with Redis, FastCGI Cache, FSS Cache Manager
Static — HTML/CSS/JS with optimized caching headers
Reverse Proxy — Single backend, load balancer, or path-based routing

Install

bash <(curl -fsSL https://vps.fio.link/install.sh)

Add Site

SSL options: le (Let's Encrypt), self (Self-signed), none (HTTP only)

WordPress

bash <(curl -fsSL https://vps.fio.link/add-site.sh) -d domain.com -php 8.4 -app wordpress -ssl le

General PHP App

bash <(curl -fsSL https://vps.fio.link/add-site.sh) -d domain.com -php 8.4 -app general -ssl le

Static Site

bash <(curl -fsSL https://vps.fio.link/add-site.sh) -d domain.com -static -ssl le

Reverse Proxy — Single Backend

bash <(curl -fsSL https://vps.fio.link/add-site.sh) -d domain.com -backends '127.0.0.1:3000' -ssl le

Reverse Proxy — SSL Backend

bash <(curl -fsSL https://vps.fio.link/add-site.sh) -d domain.com -backends 'https://127.0.0.1:3000' -ssl le

Reverse Proxy — Load Balancer

bash <(curl -fsSL https://vps.fio.link/add-site.sh) -d domain.com -backends '127.0.0.1:3000,127.0.0.1:3001' -ssl le

Reverse Proxy — Path-based Routing

bash <(curl -fsSL https://vps.fio.link/add-site.sh) -d domain.com -routes '/api=http://127.0.0.1:3000,/admin=http://127.0.0.1:4000' -ssl le

Remove Site

bash <(curl -fsSL https://vps.fio.link/rm-site.sh) -d domain.com

Uninstall

bash <(curl -fsSL https://vps.fio.link/uninstall.sh)

Post-Install Info

phpMyAdmin: https://your-ip/pma
Filebrowser: https://your-ip/fm
MariaDB root password: /root/.mysql_root_password
Filebrowser admin: /root/.filebrowser_admin
Site summary: /home/<user>/.summary.md
Installer log: /var/log/installer.log

Directory Structure

/home/<user>/
├── domain.com/
│   └── public_html/      # Document root
├── logs/
│   ├── nginx/            # Access & error logs
│   └── php/              # PHP-FPM slow log
├── tmp/php_sessions/     # PHP sessions (isolated)
└── .summary.md           # Site credentials