RoE | Wiki

User Tools

Site Tools

Trace: • 2009scape_localhost • nginx_php_php-fpm
servers:linux:nginx_php_php-fpm

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
servers:linux:nginx_php_php-fpm [2026/04/29 21:55] – Sean Rhoneservers:linux:nginx_php_php-fpm [2026/07/10 20:53] (current) – [nginx] Sean Rhone
Line 8: Line 8:
 ===== Prerequisites ===== ===== Prerequisites =====
  
-  * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]+  * [[linux:distros:server:arm:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
  
 ====== Dependencies ====== ====== Dependencies ======
- 
-**** 
  
   sudo zypper install git-core nginx php8-cli php8-fpm   sudo zypper install git-core nginx php8-cli php8-fpm
Line 39: Line 37:
 ===== nginx ===== ===== nginx =====
  
-**** +  sudo mv -fv '/etc/nginx/nginx.conf' '/etc/nginx/nginx.conf~'
- +
-  sudo mv '/etc/nginx/nginx.conf' '/etc/nginx/nginx.conf~'+
  
 ===== PHP-FPM ===== ===== PHP-FPM =====
  
-**** +  sudo mv -fv '/etc/php8/fpm/php-fpm.d/www.conf' '/etc/php8/fpm/php-fpm.d/www.conf~'
- +
-  sudo mv '/etc/php8/fpm/php-fpm.d/www.conf' '/etc/php8/fpm/php-fpm.d/www.conf~'+
  
 ===== Check Defaults ===== ===== Check Defaults =====
  
 ==== nginx ==== ==== nginx ====
- 
-**** 
  
   nano '/etc/nginx/nginx.conf~'   nano '/etc/nginx/nginx.conf~'
Line 76: Line 68:
  
 ===== Folders ===== ===== Folders =====
- 
-**** 
  
   sudo mkdir -p '/etc/nginx/default.d' '/etc/nginx/vhosts.d'   sudo mkdir -p '/etc/nginx/default.d' '/etc/nginx/vhosts.d'
Line 146: Line 136:
  
 http { http {
- 
  #log_format main '$time_local - $http_host - $remote_addr - $status "$request" $body_bytes_sent - $http_referer - "$http_user_agent"';  #log_format main '$time_local - $http_host - $remote_addr - $status "$request" $body_bytes_sent - $http_referer - "$http_user_agent"';
  #access_log '/var/log/nginx/access.log main';  #access_log '/var/log/nginx/access.log main';
- 
  access_log '/dev/null';  access_log '/dev/null';
  
Line 176: Line 164:
   * The empty CSP allows all and can be useful for new site bring-ups, and should be placed in site-specific configs underneath the ''include'' line(s)   * The empty CSP allows all and can be useful for new site bring-ups, and should be placed in site-specific configs underneath the ''include'' line(s)
  
-<code>    add_header Content-Security-Policy "default-src 'self'" always;</code>+<code>add_header Content-Security-Policy "default-src 'self'" always;</code>
  
-<code>    add_header Content-Security-Policy "" always;</code>+<code>add_header Content-Security-Policy "" always;</code>
  
 ====== SSL Certs ====== ====== SSL Certs ======
Line 201: Line 189:
 ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM'; ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM';
 ssl_prefer_server_ciphers 'on'; ssl_prefer_server_ciphers 'on';
-ssl_ecdh_curve 'secp384r1';+ssl_ecdh_curve 'secp384r1:SecP384r1MLKEM1024:SecP256r1MLKEM768:X25519MLKEM768';
  
 # End</code> # End</code>
/usr/local/www/wiki/data/attic/servers/linux/nginx_php_php-fpm.1777514135.txt.gz · Last modified: by Sean Rhone