User Tools

Site Tools


servers:bsd:freenginx_php_php-fpm

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
servers:bsd:freenginx_php_php-fpm [2026/01/08 19:12] – nginx.conf-dist exists too Sean Rhoneservers:bsd:freenginx_php_php-fpm [2026/07/12 17:10] (current) – [Dependencies] Sean Rhone
Line 1: Line 1:
 ====== Information ====== ====== Information ======
  
-  * freenginx ((https://freenginx.org/)) +  * freenginx ((https://freenginx.org/en/)) 
-  * PHP+  * PHP ((https://www.php.net/))
   * PHP-FPM   * PHP-FPM
   * [[Information:Realm of Espionage]]   * [[Information:Realm of Espionage]]
Line 8: Line 8:
 ===== Prerequisites ===== ===== Prerequisites =====
  
-  * [[bsd:server:freebsd_16.0|FreeBSD 16.0]]+  * [[bsd:server:arm:freebsd_15.1|FreeBSD 15.1]]
  
 ====== Dependencies ====== ====== Dependencies ======
Line 14: Line 14:
   su -   su -
  
-  pkg install freenginx-devel php85+  pkg install freenginx-devel php86
  
 ====== Information ====== ====== Information ======
Line 40: Line 40:
   su -   su -
  
-  service start 'nginx' 'php_fpm'+  service 'nginx' start
  
-  service stop 'nginx' 'php_fpm'+  service 'php_fpm' start 
 + 
 +==== Stop ==== 
 + 
 +  su - 
 + 
 +  service 'nginx' stop 
 + 
 +  service 'php_fpm' stop
  
 ====== Disable Defaults ====== ====== Disable Defaults ======
Line 61: Line 69:
  
 ==== nginx ==== ==== nginx ====
- 
-**** 
  
   ee '/usr/local/etc/freenginx/nginx.conf-dist'   ee '/usr/local/etc/freenginx/nginx.conf-dist'
Line 104: Line 110:
 <code> <code>
 server { server {
- 
  listen '80' 'default_server';  listen '80' 'default_server';
  listen '[::]:80' 'default_server';  listen '[::]:80' 'default_server';
  
  return '301' 'https://$host$request_uri';  return '301' 'https://$host$request_uri';
- 
 } }
  
Line 124: Line 128:
 <code> <code>
 server { server {
- 
  listen '443' 'ssl' 'default_server';  listen '443' 'ssl' 'default_server';
  http2 'on';  http2 'on';
Line 130: Line 133:
  
  return '404';  return '404';
- 
 } }
  
Line 146: Line 148:
 add_header 'X-Frame-Options' 'sameorigin' 'always'; add_header 'X-Frame-Options' 'sameorigin' 'always';
 add_header 'X-XSS-Protection' '1; mode=block' 'always'; add_header 'X-XSS-Protection' '1; mode=block' 'always';
-add_header 'Cache-Control' 'no-store, no-transform, public' 'always';+add_header 'Cache-Control' 'max-age=604800, no-transform, public' 'always';
 add_header 'Referrer-Policy' 'same-origin' 'always'; add_header 'Referrer-Policy' 'same-origin' 'always';
 add_header 'Expect-CT' 'max-age=0' 'always'; add_header 'Expect-CT' 'max-age=0' 'always';
Line 162: Line 164:
 worker_processes '1'; worker_processes '1';
 #error_log '/var/log/nginx/error.log'; #error_log '/var/log/nginx/error.log';
 +error_log '/dev/null';
  
 events { events {
Line 169: Line 172:
  
 http { http {
-    # Logging + #log_format  main  '$remote_addr - $remote_user [$time_local] "$request"
-    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request"+ #                  '$status $body_bytes_sent "$http_referer"
-    #                  '$status $body_bytes_sent "$http_referer"+ #                  '"$http_user_agent" "$http_x_forwarded_for"'; 
-    #                  '"$http_user_agent" "$http_x_forwarded_for"'; + #access_log  logs/access.log  main;
-    #access_log  logs/access.log  main; +
  access_log '/dev/null';  access_log '/dev/null';
  
- # Includes 
  include '/usr/local/etc/freenginx/conf.d/*.conf';  include '/usr/local/etc/freenginx/conf.d/*.conf';
  include '/usr/local/etc/freenginx/vhosts.d/*.conf';  include '/usr/local/etc/freenginx/vhosts.d/*.conf';
Line 183: Line 183:
  default_type 'application/octet-stream';  default_type 'application/octet-stream';
  
- # Config 
  sendfile 'on';  sendfile 'on';
  tcp_nopush 'on';  tcp_nopush 'on';
Line 190: Line 189:
  types_hash_max_size '4096';  types_hash_max_size '4096';
  
- # gzip 
  gzip 'on';  gzip 'on';
  gzip_vary 'on';  gzip_vary 'on';
Line 223: Line 221:
 ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM'; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM';
 ssl_prefer_server_ciphers 'on'; ssl_prefer_server_ciphers 'on';
-ssl_ecdh_curve 'secp384r1';+ssl_ecdh_curve 'secp384r1:SecP384r1MLKEM1024:SecP256r1MLKEM768:X25519MLKEM768';
  
 # End</code> # End</code>
/usr/local/www/wiki/data/attic/servers/bsd/freenginx_php_php-fpm.1767917557.txt.gz · Last modified: by Sean Rhone