How to setup DA with an SSL certificate
If you already have your own certificate and key, then paste them into the following files:
certificate: /usr/local/directadmin/conf/cacert.pem
key: /usr/local/directadmin/conf/cakey.pem
Edit the /usr/local/directadmin/conf/directadmin.conf and set SSL=1 (default is 0). This tells DA to load the certificate and key and to use an SSL connection. DirectAdmin needs to be restarted after this change.
If you also have a CA Root Certificate, this can be specified by adding:
carootcert=/usr/local/directadmin/conf/carootcert.pem
into the /usr/local/directadmin/conf/directadmin.conf file and by pasting the contents of the caroot cert into that file.
Source: http://directadmin.com/
Note that if the value does not exist in the directadmin.conf, it will be the default internal value within DirectAdmin.
Adding a value to the directadmin.conf would override the internal default.
You can always see what values are being used on your system by typing:
/usr/local/directadmin/directadmin c
Variables with default values which are (null) should not be added to the directadmin.conf unless you plan on using them.
If you want to remove that variable, then completely remove it from the directadmin.conf
Removing Reseller’s Access to Server’s Shared IP in DirectAdmin
As an Admin, you can give Resellers the ability to create User web sites using the Server’s Shared (main) IP address. At this time, you cannot remove this ability through the control panel.
To solve the problem manually, remove the desired IP address from the ip.list file in the Reseller’s DirectAdmin config directory
Reseller’s DirectAdmin config directory
/usr/local/directadmin/data/users/username/ip.list
This change will not affect the Reseller’s current Users (if they are using the server’s main IP, they will continue to do so.
Source & credit - http://www.directadmin.com
SSL on the server’s main domain with DirectAdmin
If an Admin wishes to add an SSL certificate on the main server’s domain, they must do it manually. To do this, the Admin must obtain the certificate and key (explained in just a moment). After these have been acquired, the Admin will have to edit /etc/httpd/conf/httpd.conf file and scroll to the very bottom. You should see 2 virtual host directives. With the one that says <VirtualHost :443> you must modify the SSL tags.
Set:
SSLCertificateFile [full path to certificate]
SSLCertificateKeyFile [full path to key]
and if provided with a CA certificate file ADD the following line
SSLCACertificateFile [full path to CA certificate]
You have a few options when it comes to obtaining the key and certificate. First you can create you own self signed certificate. You can do this by typing the following:
openssl req -new -x509 -days 365 -keyout key.temp -out certificate
openssl rsa -in key.temp -out key.real
The second line is to remove the password from the key so that apache won’t hang on bootup waiting for the key password. Those commands will create a self signed certificate (remove the key.temp file after you’re done) but if you want to use an authority to sign your certificate (removes the annoying popup), you’ll need to create a certificate request:
openssl genrsa 1024 > key.real
openssl req -new -key key.real -out certificate.request
and you send the certificate.request file to to certificate authority to be signed. They will send you a signed certificate which you will install using the apache tags noted above (and you can delete the certificate.request file, it’s not needed).
Source and Credit - http://www.directadmin.com
DirectAdmin simple partition structure
/boot 40 meg
swap 2 x memory
/tmp 1 Gig. Highly recommended to mount /tmp with noexec,nosuid in /etc/fstab
/ 6-10 Gig
/var 8-20 gig. Emails, logs and databases stored here on Redhat/CentOS/Fedora
/usr 5-12 gig. Just DA data, source code, frontpage.
/home rest of drive. Roughly 80% for user data. Mount with nosuid in /etc/fstab if possible.
You may modify these as needed.
Note, if you plan on installing dovecot, all email data is stored under /home and not /var, so adjust as needed. Also FreeBSD and Debian store mysql databases in /home/mysql/.
Please have Basic development/compiling tools such as gcc, g++, and perl.