RoE | Wiki

User Tools

Site Tools

Trace: • lets_encrypt • freenginx_php_php-fpm
servers:bsd:freenginx_php_php-fpm

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
servers:bsd:freenginx_php_php-fpm [2026/01/09 04:25] – [Information] Sean Rhoneservers:bsd:freenginx_php_php-fpm [2026/07/12 17:10] (current) – [Dependencies] Sean Rhone
Line 8: Line 8:
 ===== Prerequisites ===== ===== Prerequisites =====
  
-  * [[bsd:server:freebsd_16.0|FreeBSD 16.0]]+  * [[bsd:server:arm:freebsd_15.1|FreeBSD 15.1]]
  
 ====== Dependencies ====== ====== Dependencies ======
Line 14: Line 14:
   su -   su -
  
-  pkg install freenginx-devel php85+  pkg install freenginx-devel php86
  
 ====== Information ====== ====== Information ======
Line 40: Line 40:
   su -   su -
  
-  service start 'nginx' 'php_fpm'+  service 'nginx' start
  
-  service stop 'nginx' 'php_fpm'+  service 'php_fpm' start 
 + 
 +==== Stop ==== 
 + 
 +  su - 
 + 
 +  service 'nginx' stop 
 + 
 +  service 'php_fpm' stop
  
 ====== Disable Defaults ====== ====== Disable Defaults ======
Line 61: Line 69:
  
 ==== nginx ==== ==== nginx ====
- 
-**** 
  
   ee '/usr/local/etc/freenginx/nginx.conf-dist'   ee '/usr/local/etc/freenginx/nginx.conf-dist'
Line 142: Line 148:
 add_header 'X-Frame-Options' 'sameorigin' 'always'; add_header 'X-Frame-Options' 'sameorigin' 'always';
 add_header 'X-XSS-Protection' '1; mode=block' 'always'; add_header 'X-XSS-Protection' '1; mode=block' 'always';
-add_header 'Cache-Control' 'no-store, no-transform, public' 'always';+add_header 'Cache-Control' 'max-age=604800, no-transform, public' 'always';
 add_header 'Referrer-Policy' 'same-origin' 'always'; add_header 'Referrer-Policy' 'same-origin' 'always';
 add_header 'Expect-CT' 'max-age=0' 'always'; add_header 'Expect-CT' 'max-age=0' 'always';
Line 158: Line 164:
 worker_processes '1'; worker_processes '1';
 #error_log '/var/log/nginx/error.log'; #error_log '/var/log/nginx/error.log';
 +error_log '/dev/null';
  
 events { events {
Line 165: Line 172:
  
 http { http {
- # Logging 
  #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '  #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
  #                  '$status $body_bytes_sent "$http_referer" '  #                  '$status $body_bytes_sent "$http_referer" '
  #                  '"$http_user_agent" "$http_x_forwarded_for"';  #                  '"$http_user_agent" "$http_x_forwarded_for"';
  #access_log  logs/access.log  main;  #access_log  logs/access.log  main;
- 
  access_log '/dev/null';  access_log '/dev/null';
  
- # Includes 
  include '/usr/local/etc/freenginx/conf.d/*.conf';  include '/usr/local/etc/freenginx/conf.d/*.conf';
  include '/usr/local/etc/freenginx/vhosts.d/*.conf';  include '/usr/local/etc/freenginx/vhosts.d/*.conf';
Line 179: Line 183:
  default_type 'application/octet-stream';  default_type 'application/octet-stream';
  
- # Config 
  sendfile 'on';  sendfile 'on';
  tcp_nopush 'on';  tcp_nopush 'on';
Line 186: Line 189:
  types_hash_max_size '4096';  types_hash_max_size '4096';
  
- # gzip 
  gzip 'on';  gzip 'on';
  gzip_vary 'on';  gzip_vary 'on';
Line 219: Line 221:
 ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM'; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM';
 ssl_prefer_server_ciphers 'on'; ssl_prefer_server_ciphers 'on';
-ssl_ecdh_curve 'secp384r1';+ssl_ecdh_curve 'secp384r1:SecP384r1MLKEM1024:SecP256r1MLKEM768:X25519MLKEM768';
  
 # End</code> # End</code>
/usr/local/www/wiki/data/attic/servers/bsd/freenginx_php_php-fpm.1767950718.txt.gz · Last modified: by Sean Rhone