RoE | Wiki

User Tools

Site Tools

Trace:
servers:bsd:nginx_php_php-fpm

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
servers:bsd:nginx_php_php-fpm [2025/05/16 19:05] – created Sean Rhoneservers:bsd:nginx_php_php-fpm [2025/05/16 21:47] (current) – Sean Rhone
Line 2: Line 2:
  
   * nginx   * nginx
-  * PHP 8.4 
   * PHP-FPM   * PHP-FPM
   * [[Information:Realm of Espionage]]   * [[Information:Realm of Espionage]]
- 
-  * :!: WIP 
  
 ===== Prerequisites ===== ===== Prerequisites =====
Line 64: Line 61:
 <code> <code>
 server { server {
-    listen '80' 'default_server'; +    listen 80 default_server; 
-    listen '[::]:80' 'default_server';+    listen [::]:80 default_server;
  
-    return '301' 'https://$host$request_uri'; +    return 301 https://$host$request_uri; 
-}</code>+} 
 + 
 +# End</code>
  
 ===== Non-existent 404 ===== ===== Non-existent 404 =====
  
   * This prevents unconfigured subdomains from loading assets from other sites ((if a site/URL doesn't exist, it'll 404))   * This prevents unconfigured subdomains from loading assets from other sites ((if a site/URL doesn't exist, it'll 404))
 +  * 2025/05/16: ''http2'' disabled due to freshports note about gcc disabled; might need ''nginx-full'' or non-lite too?
  
   su -   su -
Line 80: Line 80:
 <code> <code>
 server { server {
-    listen '443' 'ssl' default_server; +    listen 443 ssl default_server; 
-    http2 'on'; +#    http2 on; 
-    server_name '_';+    server_name _;
  
-    return '404'; +    return 404; 
-}</code>+} 
 + 
 +# End</code>
  
 ===== Headers ===== ===== Headers =====
Line 101: Line 103:
 add_header Referrer-Policy "same-origin" always; add_header Referrer-Policy "same-origin" always;
 add_header Expect-CT "max-age=0" always; add_header Expect-CT "max-age=0" always;
-add_header Permissions-Policy "geolocation=(), microphone=(), payment=(), usb=(), vr=(), magnetometer=(), midi=(), camera=(), ambient-light-sensor=(), accelerometer=()" always;</code>+add_header Permissions-Policy "geolocation=(), microphone=(), payment=(), usb=(), vr=(), magnetometer=(), midi=(), camera=(), ambient-light-sensor=(), accelerometer=()" always; 
 + 
 +# End</code>
  
 ===== nginx ===== ===== nginx =====
Line 173: Line 177:
 ssl_prefer_server_ciphers 'on'; ssl_prefer_server_ciphers 'on';
 ssl_ecdh_curve 'secp384r1'; ssl_ecdh_curve 'secp384r1';
- 
-ssl_stapling 'on'; 
-ssl_stapling_verify 'on'; 
  
 # End</code> # End</code>
 +
 +====== dos2unix ======
 +
 +  * Useful for restoring files as-is from Windows
 +
 +  su -
 +
 +  pkg install 'dos2unix'
 +
 +  find /usr/local/www/media -type f -print0 | xargs -0 dos2unix --
 +
 +  chown -R 'www':'www' '/usr/local/www'
  
/usr/local/www/wiki/data/attic/servers/bsd/nginx_php_php-fpm.1747436737.txt.gz · Last modified: by Sean Rhone