RoE | Wiki

User Tools

Site Tools

Trace: • nginx_php_php-fpm
servers:linux:nginx_php_php-fpm

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
servers:linux:nginx_php_php-fpm [2025/04/25 01:07] – Sean Rhoneservers:linux:nginx_php_php-fpm [2025/09/11 15:50] (current) – [php.ini] Sean Rhone
Line 4: Line 4:
   * PHP   * PHP
   * PHP-FPM   * PHP-FPM
-  * [[Information:Realm of Espionage]]+  * [[information:realm_of_espionage|Realm of Espionage]]
  
 ===== Prerequisites ===== ===== Prerequisites =====
  
   * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]   * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
- 
-===== Resources ===== 
- 
-  * [[https://www.ssllabs.com/ssltest/analyze.html?d=wiki.realmofespionage.xyz|Qualys SSL Test]] 
-  * https://fedoraproject.org/wiki/Nginx 
- 
-==== Old ==== 
- 
-  * [[https://cipherli.st/|Cipherli.st]] 
-  * [[https://securityheaders.com/?q=wiki.realmofespionage.xyz&followRedirects=on|Security Headers]] 
-  * [[https://dev.ssllabs.com/ssltest/analyze.html?d=wiki.realmofespionage.xyz|Qualys SSL Test (dev)]] 
-  * https://cs.chromium.org/chromium/src/third_party/blink/renderer/platform/feature_policy/feature_policy.cc?l=138&rcl=ab90b51c5b60de15054a32b0bd18e4839536a1c9 
-  * https://infosec.mozilla.org 
-  * https://gist.github.com/plentz/6737338 
-  * https://scotthelme.co.uk 
-  * https://mozilla.github.io/server-side-tls/ssl-config-generator 
  
 ====== Dependencies ====== ====== Dependencies ======
Line 43: Line 27:
  
   sudo firewall-cmd --add-service='http' --permanent && sudo firewall-cmd --add-service='https' --permanent && sudo firewall-cmd --reload   sudo firewall-cmd --add-service='http' --permanent && sudo firewall-cmd --add-service='https' --permanent && sudo firewall-cmd --reload
- 
-====== SELinux ====== 
- 
-===== php-fpm ===== 
- 
-**** 
- 
-  sudo setsebool -P 'httpd_execmem' '1' 
- 
-===== DokuWiki ===== 
- 
-  * 2025/04/25 
- 
-  sudo setsebool -P 'httpd_can_network_connect' '1' 
- 
-===== Other ===== 
- 
-  sudo setsebool -P 'httpd_graceful_shutdown' '1' 
- 
-  sudo setsebool -P 'nis_enabled' '1' 
- 
-  sudo setsebool -P 'httpd_can_network_relay' '1' 
- 
-===== Global restorecon ===== 
- 
-**** 
- 
-  sudo restorecon -F -I -R '/etc/nginx' '/etc/php8/fpm/php-fpm.d' '/srv/www' 
  
 ====== Services ====== ====== Services ======
Line 94: Line 50:
   nano '/etc/nginx/nginx.conf~'   nano '/etc/nginx/nginx.conf~'
  
-===== Backup =====+===== php.ini =====
  
-  sudo mv '/etc/nginx/default.d/php.conf' '/etc/nginx/default.d/php.conf~' +****
- +
-  sudo mv '/etc/nginx/conf.d/php-fpm.conf' '/etc/nginx/conf.d/php-fpm.conf~' +
- +
-===== View ===== +
- +
-  nano '/etc/nginx/default.d/php.conf~' +
- +
-  nano '/etc/nginx/conf.d/php-fpm.conf~'+
  
-  nano '/etc/php.ini'+  nano '/etc/php8/cli/php.ini'
  
 ====== nginx Settings ====== ====== nginx Settings ======
Line 118: Line 66:
 ===== Defaults ===== ===== Defaults =====
  
-==== vhosts.d ====+==== Folders ====
  
 **** ****
  
-  sudo mkdir -p '/etc/nginx/vhosts.d'+  sudo mkdir -p '/etc/nginx/default.d' '/etc/nginx/vhosts.d'
  
 ===== HTTPS Redirect ===== ===== HTTPS Redirect =====
Line 131: Line 79:
  
 <code> <code>
-# nginx/conf.d/http-redirect.conf 
- 
 server { server {
     listen '80' 'default_server';     listen '80' 'default_server';
Line 149: Line 95:
  
 <code> <code>
-# nginx/conf.d/non-existent.conf 
- 
 server { server {
     listen '443' 'ssl' default_server;     listen '443' 'ssl' default_server;
Line 168: Line 112:
  
 <code> <code>
-# nginx/default.d/headers.conf 
- 
 add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload" always; add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload" always;
 add_header X-Content-Type-Options "nosniff" always; add_header X-Content-Type-Options "nosniff" always;
Line 186: Line 128:
  
 <code> <code>
-# nginx/nginx.conf 
- 
 events { events {
  multi_accept 'on';  multi_accept 'on';
Line 241: Line 181:
  
 <code> <code>
-# nginx/conf.d/ssl.conf 
- 
 ssl_certificate '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem'; ssl_certificate '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem';
 ssl_trusted_certificate '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem'; ssl_trusted_certificate '/etc/letsencrypt/live/realmofespionage.xyz/fullchain.pem';
Line 256: Line 194:
 ssl_prefer_server_ciphers 'on'; ssl_prefer_server_ciphers 'on';
 ssl_ecdh_curve 'secp384r1'; ssl_ecdh_curve 'secp384r1';
- 
-ssl_stapling 'on'; 
-ssl_stapling_verify 'on'; 
  
 # End</code> # End</code>
 +
 +====== TODOs ======
 +
 +===== Resources =====
 +
 +  * https://nginx.org/en/docs/windows.html
 +  * https://gist.github.com/odan/b5f7de8dfbdbf76bef089776c868fea1
 +  * https://certbot.eff.org/instructions?ws=other&os=pip
 +  * https://community.letsencrypt.org/t/using-certbot-in-windows-the-pragmatic-way/173929
 +  * https://www.php.net/manual/en/image.installation.php
 +  * [[https://www.ssllabs.com/ssltest/analyze.html?d=wiki.realmofespionage.xyz|Qualys SSL Test]]
 +
 +==== Old ====
 +
 +  * [[https://cipherli.st/|Cipherli.st]]
 +  * [[https://securityheaders.com/?q=wiki.realmofespionage.xyz&followRedirects=on|Security Headers]]
 +  * [[https://dev.ssllabs.com/ssltest/analyze.html?d=wiki.realmofespionage.xyz|Qualys SSL Test (dev)]]
 +  * https://cs.chromium.org/chromium/src/third_party/blink/renderer/platform/feature_policy/feature_policy.cc?l=138&rcl=ab90b51c5b60de15054a32b0bd18e4839536a1c9
 +  * https://infosec.mozilla.org
 +  * https://gist.github.com/plentz/6737338
 +  * https://scotthelme.co.uk
 +  * https://mozilla.github.io/server-side-tls/ssl-config-generator
 +  * [[https://www.ssllabs.com/ssltest/analyze.html?d=wiki.realmofespionage.xyz|Qualys SSL Test]]
 +  * https://fedoraproject.org/wiki/Nginx
  
/srv/www/wiki/data/attic/servers/linux/nginx_php_php-fpm.1745557645.txt.gz · Last modified: by Sean Rhone