1Anon.net - Apache VirtualHost & BIND9 DNS Zone Generator (vhost_dns

1. Apache 2.4+ VirtualHost Configuration (`1anon.net.conf`)

Maps 1anon.net & www.1anon.net on IP 162.213.248.20 to /home/oneanonnet/public_html.

⬇️ Download .conf

# ==============================================================================
# 1Anon.net - Apache 2.4+ VirtualHost Configuration (1anon.net)
# Target IP      : 162.213.248.20
# System User    : oneanonnet
# DocumentRoot   : /home/oneanonnet/public_html
# Deployment Path: /etc/apache2/sites-available/1anon.net.conf
#                  or /usr/local/apps/apache/etc/conf.d/webuzoVH.conf
# ==============================================================================

<VirtualHost 162.213.248.20:80 *:80>
    ServerName 1anon.net
    ServerAlias www.1anon.net
    ServerAdmin admin@1anon.net

    DocumentRoot "/home/oneanonnet/public_html"
    DirectoryIndex index.php index.html

    <Directory "/home/oneanonnet/public_html">
        Options -Indexes +FollowSymLinks -MultiViews
        AllowOverride All
        Require all granted
    </Directory>

    # Protect sensitive configuration & storage directories at VirtualHost level
    <FilesMatch "^(db_connect\.php|database\.sql|install_debug\.log|\.env.*|\.htaccess)$">
        Require all denied
    </FilesMatch>

    # Security Headers (mod_headers)
    <IfModule mod_headers.c>
        Header always set X-Content-Type-Options "nosniff"
        Header always set X-Frame-Options "SAMEORIGIN"
        Header always set X-XSS-Protection "1; mode=block"
        Header always set Referrer-Policy "strict-origin-when-cross-origin"
        Header always unset X-Powered-By
    </IfModule>

    ErrorLog "/home/oneanonnet/logs/1anon.net-error.log"
    CustomLog "/home/oneanonnet/logs/1anon.net-access.log" combined
</VirtualHost>

<IfModule mod_ssl.c>
<VirtualHost 162.213.248.20:443 *:443>
    ServerName 1anon.net
    ServerAlias www.1anon.net
    ServerAdmin admin@1anon.net

    DocumentRoot "/home/oneanonnet/public_html"
    DirectoryIndex index.php index.html

    SSLEngine on
    SSLCertificateFile      /etc/letsencrypt/live/1anon.net/fullchain.pem
    SSLCertificateKeyFile   /etc/letsencrypt/live/1anon.net/privkey.pem

    <Directory "/home/oneanonnet/public_html">
        Options -Indexes +FollowSymLinks -MultiViews
        AllowOverride All
        Require all granted
    </Directory>

    <FilesMatch "^(db_connect\.php|database\.sql|install_debug\.log|\.env.*|\.htaccess)$">
        Require all denied
    </FilesMatch>

    <IfModule mod_headers.c>
        Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
        Header always set X-Content-Type-Options "nosniff"
        Header always set X-Frame-Options "SAMEORIGIN"
        Header always set X-XSS-Protection "1; mode=block"
        Header always set Referrer-Policy "strict-origin-when-cross-origin"
        Header always unset X-Powered-By
    </IfModule>

    ErrorLog "/home/oneanonnet/logs/1anon.net-ssl-error.log"
    CustomLog "/home/oneanonnet/logs/1anon.net-ssl-access.log" combined
</VirtualHost>
</IfModule>

2. BIND9 / Webuzo / cPanel DNS Zone Template (`1anon.net.db`)

Maps @, www, ns1, ns2, mail, and api to 162.213.248.20 to eliminate Firefox "Server Not Found" (NXDOMAIN).

⬇️ Download .db

; ==============================================================================
; 1Anon.net - Standard BIND9 / Webuzo / cPanel DNS Zone File (1anon.net.db)
; Resolves Firefox/Chrome "Server Not Found" (NXDOMAIN) by mapping 1anon.net
; and all core subdomains to Primary VPS IP: 162.213.248.20
; Location (Webuzo/BIND): /var/named/1anon.net.db or /etc/bind/zones/db.1anon.net
; ==============================================================================
$TTL 14400
$ORIGIN 1anon.net.

@       14400   IN      SOA     ns1.1anon.net. hostmaster.1anon.net. (
                                2026100701 ; Serial Number (YYYYMMDDnn)
                                3600       ; Refresh (1 Hour)
                                1800       ; Retry (30 Minutes)
                                1209600    ; Expire (14 Days)
                                86400      ; Minimum / Negative Cache TTL (1 Day)
                                )

; --- Authoritative NameServer (NS) Records ---
@       14400   IN      NS      ns1.1anon.net.
@       14400   IN      NS      ns2.1anon.net.

; --- Primary IPv4 Address (A) Records Mapping to 162.213.248.20 ---
@       14400   IN      A       162.213.248.20
ns1     14400   IN      A       162.213.248.20
ns2     14400   IN      A       162.213.248.20
mail    14400   IN      A       162.213.248.20

; --- Canonical Name (CNAME) Records for Web, API, FTP & Control Panel Aliases ---
www     14400   IN      CNAME   1anon.net.
api     14400   IN      CNAME   1anon.net.
ftp     14400   IN      CNAME   1anon.net.
webmail 14400   IN      CNAME   mail.1anon.net.
cpanel  14400   IN      CNAME   1anon.net.
webuzo  14400   IN      CNAME   1anon.net.

; --- Mail Exchange (MX) Record ---
@       14400   IN      MX  10  mail.1anon.net.

; --- SPF, DMARC & CAA Security Records ---
@       14400   IN      TXT     "v=spf1 a mx ip4:162.213.248.20 ~all"
_dmarc  14400   IN      TXT     "v=DMARC1; p=quarantine; rua=mailto:admin@1anon.net"
@       14400   IN      CAA     0 issue "letsencrypt.org"

3. 1-Click Server Root Provisioning Script (`provision_1anon_vhost_dns.sh`)

Applies Apache VHost, BIND DNS Zone, /etc/hosts loopback mapping, and /home/oneanonnet/public_html permissions.

⬇️ Download .sh

#!/usr/bin/env bash
# ==============================================================================
# 1Anon.net - Automated Apache VirtualHost, BIND DNS & WebRoot Provisioner v4.2
# Target Domain : 1anon.net
# Primary IP    : 162.213.248.20
# Webuzo User   : oneanonnet
# Web Root      : /home/oneanonnet/public_html
# ==============================================================================
set -e

echo "[1/5] Ensuring public_html and log directories exist for oneanonnet..."
mkdir -p "/home/oneanonnet/public_html" "/home/oneanonnet/public_html/storage" "/home/oneanonnet/public_html/logs" "/home/oneanonnet/logs"
chmod 755 "/home/oneanonnet/public_html"
chmod 775 "/home/oneanonnet/public_html/storage" "/home/oneanonnet/public_html/logs"

if id "oneanonnet" >/dev/null 2>&1; then
    chown -R "oneanonnet:oneanonnet" "/home/oneanonnet"
fi

echo "[2/5] Configuring local /etc/hosts loopback & domain resolution for 1anon.net..."
if ! grep -q "1anon.net" /etc/hosts; then
    echo "162.213.248.20 1anon.net www.1anon.net" >> /etc/hosts
fi

echo "[3/5] Installing Apache VirtualHost configuration..."
if [ -d /etc/apache2/sites-available ]; then
    cp apache_vhost.conf "/etc/apache2/sites-available/1anon.net.conf"
    a2enmod rewrite headers ssl >/dev/null 2>&1 || true
    a2ensite "1anon.net.conf" >/dev/null 2>&1 || true
    apache2ctl configtest && systemctl reload apache2
elif [ -d /etc/httpd/conf.d ]; then
    cp apache_vhost.conf "/etc/httpd/conf.d/1anon.net.conf"
    httpd -t && systemctl reload httpd
fi

echo "[4/5] Installing BIND9 / Webuzo DNS Zone file..."
if [ -d /var/named ]; then
    cp 1anon.net.zone.db "/var/named/1anon.net.db"
    systemctl reload named 2>/dev/null || service named reload 2>/dev/null || true
elif [ -d /etc/bind ]; then
    mkdir -p /etc/bind/zones
    cp 1anon.net.zone.db "/etc/bind/zones/db.1anon.net"
    systemctl reload bind9 2>/dev/null || true
fi

echo "[5/5] Complete! Navigate to http://1anon.net/install.php or http://162.213.248.20/install.php"

1. Apache 2.4+ VirtualHost Configuration (1anon.net.conf)

2. BIND9 / Webuzo / cPanel DNS Zone Template (1anon.net.db)

3. 1-Click Server Root Provisioning Script (provision_1anon_vhost_dns.sh)

1. Apache 2.4+ VirtualHost Configuration (`1anon.net.conf`)

2. BIND9 / Webuzo / cPanel DNS Zone Template (`1anon.net.db`)

3. 1-Click Server Root Provisioning Script (`provision_1anon_vhost_dns.sh`)