## Configuration
- On linux servers need to ensure the `/etc/proftpd/ssl.conf` has the following configuration
```xml
<Global>
<IfModule mod_tls.c>
TLSDHParamFile /usr/local/psa/etc/dhparams2048.pem
</IfModule>
</Global>
<Global>
<IfModule mod_tls.c>
TLSProtocol TLSv1.2 TLSv1.3
TLSCipherSuite EECDH+AESGCM+AES128:EECDH+AESGCM+AES256:EECDH+CHACHA20:EDH+AESGCM+AES128:EDH+AESGCM+AES256:EDH+CHACHA20:EECDH+SHA256+AES128:EECDH+SHA384+AES256:EDH+SHA256+AES128:EDH+SHA256+AES256:EECDH+SHA1+AES128:EECDH+SHA1+AES256:EDH+SHA1+AES128:EDH+SHA1+AES256:EECDH+HIGH:EDH+HIGH:AESGCM+AES128:AESGCM+AES256:CHACHA20:SHA256+AES128:SHA256+AES256:SHA1+AES128:SHA1+AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!aECDH
TLSServerCipherPreference on
</IfModule>
</Global>
```
## Exports
- Run SQL on Plesk db
```bash
plesk db "<SQL Query>"
```
- Export customer list from plesk to csv. ClientID, Name, Email, Login, Domain ID, Domain Name, Service Plan, Disk Usage, IP Addresses
```sql
SELECT cl.id AS 'Client ID',
cl.pname AS 'Name',
cl.email AS 'Email',
cl.login AS 'Login',
d.id AS 'Domain ID',
d.name AS 'Domain',
Templates.name AS 'service plan',
ROUND(d.real_size / 1024 / 1024, 2) AS 'disk usage (MB)'
FROM DomainServices ds,
IpAddressesCollections ipc,
IP_Addresses ip,
clients cl,
domains d
LEFT JOIN Subscriptions as s ON d.id = s.object_id
LEFT JOIN PlansSubscriptions AS pls ON s.id = pls.subscription_id
LEFT JOIN Templates ON pls.plan_id = Templates.id
LEFT JOIN SubscriptionProperties AS sp ON s.id = sp.subscription_id
LEFT JOIN Limits ON sp.value = Limits.id
left join DomainsTraffic AS dtf on d.id = dtf.dom_id
WHERE (
sp.name = 'limitsId'
OR sp.name IS NULL
)
AND (
Limits.limit_name = 'expiration'
OR Limits.limit_name is NULL
)
AND (
Templates.type <> 'domain_addon'
OR Templates.type IS NULL
)
AND d.id = ds.dom_id
AND d.cl_id = cl.id
AND ds.type = 'web'
AND ds.ipCollectionId = ipc.ipCollectionId
AND ip.id = ipc.ipAddressId
group by d.id INTO OUTFILE './request.csv' FIELDS TERMINATED BY ',' OPTIONALLY ENCLOSED BY '\"' LINES TERMINATED BY '\n'
```
## Disable OCSP Stapling on all domains
```bash
plesk bin site -l | while read i; do plesk ext sslit --ocsp-stapling -disable -domain $i; done
```