Plesk Onyx custom setup on Ubuntu 16.04 LTS

System update and packages cleanup

apt-get update && apt-get upgrade -y && apt-get autoremove -y && apt-get clean

Install useful packages

sudo apt install haveged curl git unzip zip htop -y

Tweak Kernel sysctl configuration

wget -O /etc/sysctl.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-nginx-web-server/master/etc/sysctl.conf
sysctl -p
echo never > /sys/kernel/mm/transparent_hugepage/enabled
wget -O /etc/security/limits.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-nginx-web-server/master/etc/security/limits.conf

Install netdata monitoring

bash <(curl -Ss https://my-netdata.io/kickstart.sh) all

# save 40-60% of netdata memory
echo 1 >/sys/kernel/mm/ksm/run
echo 1000 >/sys/kernel/mm/ksm/sleep_millisecs

# disable email notifications
wget -O /etc/netdata/health_alarm_notify.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-nginx-web-server/master/etc/netdata/health_alarm_notify.conf
service netdata restart

Install MariaDB 10.1 (do not set any root password)

curl -sS https://downloads.mariadb.com/MariaDB/mariadb_repo_setup |
sudo bash -s -- --mariadb-server-version=10.1 --skip-maxscale

sudo apt update
sudo apt install mariadb-server

Install the lastest Plesk Onyx release

### stable
sh <(curl https://autoinstall.plesk.com/plesk-installer || wget -O - https://autoinstall.plesk.com/plesk-installer)

### preview
sh <(curl https://autoinstall.plesk.com/plesk-installer || wget -O - https://autoinstall.plesk.com/plesk-installer) --all-versions

Enable vps_optimized mode

plesk bin vps_optimized --turn-on

Enable pci_compliance configuration

plesk sbin pci_compliance_resolver --enable all

Compile the last Nginx release with plesk-nginx bash script

bash <(wget -O - https://raw.githubusercontent.com/VirtuBox/plesk-nginx/master/plesk-nginx.sh)

Set Panel.ini custom configuration

wget https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/usr/local/psa/admin/conf/panel.ini -O /usr/local/psa/admin/conf/panel.ini

Set custom php.ini configuration

# plesk-php56-fpm
wget -O /opt/plesk/php/5.6/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/5.6/etc/php.ini

# plesk-php70-fpm
wget -O /opt/plesk/php/7.0/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/7.0/etc/php.ini

# plesk-php71-fpm
wget -O /opt/plesk/php/7.1/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/7.1/etc/php.ini

# plesk-php72-fpm
wget -O /opt/plesk/php/7.2/etc/php.ini https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/opt/plesk/php/7.2/etc/php.ini

# apply new configuration 
plesk bin php_handler --reread

Set custom nginx configuration

# nginx.conf 
wget -O /etc/nginx/nginx.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/etc/nginx/nginx.conf

# SSL/TLS strict configuration (TLSv1.2 & TLSv1.3)
wget -O /etc/nginx/conf.d/ssl.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/etc/nginx/conf.d/ssl.conf

# SSL/TLS Intermediate configuration (TLSv1.0 TLSv1.1 TLSv1.2 & TLSv1.3)
wget -O /etc/nginx/conf.d/ssl.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/etc/nginx/conf.d/ssl-intermediate.conf

# Security and performance tweaks
wget -O /etc/nginx/conf.d/tweaks.conf https://raw.githubusercontent.com/VirtuBox/ubuntu-plesk-onyx/master/etc/nginx/conf.d/tweaks.conf