RoE | Wiki

User Tools

Site Tools

Trace:
servers:bsd:freenginx_php_php-fpm

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
servers:bsd:freenginx_php_php-fpm [2025/10/30 12:50] – Sean Rhoneservers:bsd:freenginx_php_php-fpm [2026/03/04 18:38] (current) – [Headers] Sean Rhone
Line 1: Line 1:
 ====== Information ====== ====== Information ======
  
-  * freenginx ((https://freenginx.org/))+  * freenginx ((https://freenginx.org/en/)) 
 +  * PHP ((https://www.php.net/))
   * PHP-FPM   * PHP-FPM
   * [[Information:Realm of Espionage]]   * [[Information:Realm of Espionage]]
Line 7: Line 8:
 ===== Prerequisites ===== ===== Prerequisites =====
  
-  * [[bsd:server:freebsd_15.0|FreeBSD 15.0]]+  * [[bsd:server:freebsd_16.0|FreeBSD 16.0]]
  
 ====== Dependencies ====== ====== Dependencies ======
Line 15: Line 16:
   pkg install freenginx-devel php85   pkg install freenginx-devel php85
  
-===== PHP Modules =====+====== Information ======
  
-****+  nginx -v
  
   php -m   php -m
 +
 +====== Firewall ======
 +
 +  * TODO
  
 ====== Services ====== ====== Services ======
Line 31: Line 36:
   sysrc php_fpm_enable="YES"   sysrc php_fpm_enable="YES"
  
-====== Config Defaults ======+===== Start =====
  
-===== Backup =====+  su - 
 + 
 +  service 'nginx' start 
 + 
 +  service 'php_fpm' start 
 + 
 +==== Stop ====
  
   su -   su -
  
-  mv -v '/usr/local/etc/freenginx/nginx.conf' '/usr/local/etc/freenginx/nginx.conf~'+  service 'nginx' stop
  
-  mv -v '/usr/local/etc/php-fpm.d/www.conf' '/usr/local/etc/php-fpm.d/www.conf~'+  service 'php_fpm' stop 
 + 
 +====== Disable Defaults ====== 
 + 
 +===== freenginx ===== 
 + 
 +  su - 
 + 
 +  rm -fv '/usr/local/etc/freenginx/nginx.conf' 
 + 
 +===== PHP-FPM ===== 
 + 
 +  su - 
 + 
 +  rm -fv '/usr/local/etc/php-fpm.d/www.conf' 
 + 
 +===== Check Defaults ===== 
 + 
 +==== nginx ==== 
 + 
 +**** 
 + 
 +  ee '/usr/local/etc/freenginx/nginx.conf-dist' 
 + 
 +==== PHP ==== 
 + 
 +  * TODO: Other paths 
 + 
 +  ee '/usr/local/etc/php-fpm.d/www.conf.default' 
 + 
 +  nano '/etc/php8/fpm/php-fpm.conf' 
 + 
 +  ee '/usr/local/etc/php.conf' 
 + 
 +  nano '/etc/php8/fpm/php.ini' 
 + 
 +  nano '/etc/php8/cli/php.ini'
  
 ====== nginx Settings ====== ====== nginx Settings ======
  
-===== Defaults =====+===== Notes ===== 
 + 
 +  * ''conf.d'' contains **server-wide** modular configuration files 
 +  * ''default.d'' contains **site-specific** modular configuration files 
 +  * ''vhosts.d'' contains enabled websites 
 + 
 +===== Folders =====
  
   su -   su -
Line 59: Line 112:
 <code> <code>
 server { server {
-    listen 80 default_server; + listen '80' 'default_server'; 
-    listen [::]:80 default_server;+ listen '[::]:80' 'default_server';
  
-    return 301 https://$host$request_uri;+ return '301' 'https://$host$request_uri';
 } }
  
Line 77: Line 130:
 <code> <code>
 server { server {
-    listen 443 ssl default_server; + listen '443' 'ssl' 'default_server'; 
-    http2 on; + http2 'on'; 
-    server_name _;+ server_name '_';
  
-    return 404;+ return '404';
 } }
  
Line 93: Line 146:
  
 <code> <code>
-add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload" always; +add_header 'Strict-Transport-Security' 'max-age=63072000; includeSubdomains; preload' 'always'; 
-add_header X-Content-Type-Options "nosniff" always; +add_header 'X-Content-Type-Options' 'nosniff' 'always'; 
-add_header X-Frame-Options "sameorigin" always; +add_header 'X-Frame-Options' 'sameorigin' 'always'; 
-add_header X-XSS-Protection "1; mode=block" always; +add_header 'X-XSS-Protection' '1; mode=block' 'always'; 
-add_header Cache-Control "no-store, no-transform, public" always; +add_header 'Cache-Control' 'max-age=604800, no-transform, public' 'always'; 
-add_header Referrer-Policy "same-origin" always; +add_header 'Referrer-Policy' 'same-origin' 'always'; 
-add_header Expect-CT "max-age=0" always; +add_header 'Expect-CT' 'max-age=0' 'always'; 
-add_header Permissions-Policy "geolocation=(), microphone=(), payment=(), usb=(), vr=(), magnetometer=(), midi=(), camera=(), ambient-light-sensor=(), accelerometer=()" always;+add_header 'Permissions-Policy' 'geolocation=(), microphone=(), payment=(), usb=(), vr=(), magnetometer=(), midi=(), camera=(), ambient-light-sensor=(), accelerometer=()' 'always';
  
 # End</code> # End</code>
Line 111: Line 164:
  
 <code> <code>
-worker_processes 1; +worker_processes '1'; 
-#error_log  /var/log/nginx/error.log;+#error_log '/var/log/nginx/error.log';
  
 events { events {
-    worker_connections 1024;+ multi_accept 'on'; 
 + worker_connections '1024';
 } }
  
 http { http {
 + # Logging
 + #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
 + #                  '$status $body_bytes_sent "$http_referer" '
 + #                  '"$http_user_agent" "$http_x_forwarded_for"';
 + #access_log  logs/access.log  main;
  
-    # Logging + access_log '/dev/null';
-    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" ' +
-    #                  '$status $body_bytes_sent "$http_referer" ' +
-    #                  '"$http_user_agent" "$http_x_forwarded_for"';+
  
-    #access_log  logs/access.log  main;+ # Includes 
 + include '/usr/local/etc/freenginx/conf.d/*.conf'; 
 + include '/usr/local/etc/freenginx/vhosts.d/*.conf'; 
 + include '/usr/local/etc/freenginx/mime.types'; 
 + default_type 'application/octet-stream';
  
-    # Includes + # Config 
-    include /usr/local/etc/freenginx/conf.d/*.conf; + sendfile 'on'; 
-    include /usr/local/etc/freenginx/vhosts.d/*.conf; + tcp_nopush 'on'; 
-    include /usr/local/etc/freenginx/mime.types; + tcp_nodelay 'on'; 
-    default_type application/octet-stream;+ keepalive_timeout '65'; 
 + types_hash_max_size '4096';
  
-    # Config + # gzip 
-    sendfile on; + gzip 'on'; 
-    tcp_nopush on; + gzip_vary 'on'; 
-    tcp_nodelay on; + gzip_proxied 'any'; 
-    keepalive_timeout 65; + gzip_comp_level '9'; 
-    types_hash_max_size 4096; + gzip_types '*';
- +
-    # gzip +
-    gzip on; +
-    gzip_vary on; +
-    gzip_proxied any; +
-    gzip_comp_level 9; +
-    gzip_types *;+
 } }
  
Line 179: Line 233:
 ====== Resources ====== ====== Resources ======
  
-===== dos2unix ===== +  * [[https://www.ssllabs.com/ssltest/analyze.html?d=wiki.realmofespionage.xyz|Qualys SSL Test]]
- +
-  * Useful for restoring files as-is from Windows +
- +
-  su - +
- +
-  pkg install 'dos2unix' +
- +
-  find /usr/local/www/media -type f -print0 | xargs -0 dos2unix -- +
- +
-  chown -R 'www':'www' '/usr/local/www' +
- +
-===== Original confs ===== +
- +
-  ee '/usr/local/etc/freenginx/nginx.conf~' +
- +
-  ee '/usr/local/etc/php-fpm.d/www.conf~'+
  
/usr/local/www/wiki/data/attic/servers/bsd/freenginx_php_php-fpm.1761843006.txt.gz · Last modified: by Sean Rhone