Differences

This shows you the differences between two versions of the page.

--- servers:linux:nginx_php_php-fpm [2026/04/29 21:57] – [Headers] Sean Rhone
+++ servers:linux:nginx_php_php-fpm [2026/07/10 20:53] (current) – [nginx] Sean Rhone
@@ Line 8: / Line 8: @@
 ===== Prerequisites =====
-  * [[linux:distros:server:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
+  * [[linux:distros:server:arm:opensuse_tumbleweed_server|openSUSE Tumbleweed (Server)]]
 ====== Dependencies ======
-****
   sudo zypper install git-core nginx php8-cli php8-fpm
@@ Line 39: / Line 37: @@
 ===== nginx =====
-****
+  sudo mv -fv '/etc/nginx/nginx.conf' '/etc/nginx/nginx.conf~'
-  sudo mv '/etc/nginx/nginx.conf' '/etc/nginx/nginx.conf~'
 ===== PHP-FPM =====
-****
+  sudo mv -fv '/etc/php8/fpm/php-fpm.d/www.conf' '/etc/php8/fpm/php-fpm.d/www.conf~'
-  sudo mv '/etc/php8/fpm/php-fpm.d/www.conf' '/etc/php8/fpm/php-fpm.d/www.conf~'
 ===== Check Defaults =====
 ==== nginx ====
-****
   nano '/etc/nginx/nginx.conf~'
@@ Line 76: / Line 68: @@
 ===== Folders =====
-****
   sudo mkdir -p '/etc/nginx/default.d' '/etc/nginx/vhosts.d'
@@ Line 121: / Line 111: @@
 <code>
- add_header 'Strict-Transport-Security' 'max-age=63072000; includeSubdomains; preload' 'always';
+add_header 'Strict-Transport-Security' 'max-age=63072000; includeSubdomains; preload' 'always';
- add_header 'X-Content-Type-Options' 'nosniff' 'always';
+add_header 'X-Content-Type-Options' 'nosniff' 'always';
- add_header 'X-Frame-Options' 'sameorigin' 'always';
+add_header 'X-Frame-Options' 'sameorigin' 'always';
- add_header 'X-XSS-Protection' '1; mode=block' 'always';
+add_header 'X-XSS-Protection' '1; mode=block' 'always';
- add_header 'Cache-Control' 'max-age=604800, no-transform, public' 'always';
+add_header 'Cache-Control' 'max-age=604800, no-transform, public' 'always';
- add_header 'Referrer-Policy' 'same-origin' 'always';
+add_header 'Referrer-Policy' 'same-origin' 'always';
- add_header 'Expect-CT' 'max-age=0' 'always';
+add_header 'Expect-CT' 'max-age=0' 'always';
- add_header 'Permissions-Policy' 'geolocation=(), microphone=(), payment=(), usb=(), vr=(), magnetometer=(), midi=(), camera=(), ambient-light-sensor=(), accelerometer=()' 'always';
+add_header 'Permissions-Policy' 'geolocation=(), microphone=(), payment=(), usb=(), vr=(), magnetometer=(), midi=(), camera=(), ambient-light-sensor=(), accelerometer=()' 'always';
 # End</code>
@@ Line 146: / Line 136: @@
 http {
  #log_format main '$time_local - $http_host - $remote_addr - $status "$request" $body_bytes_sent - $http_referer - "$http_user_agent"';
  #access_log '/var/log/nginx/access.log main';
  access_log '/dev/null';
@@ Line 176: / Line 164: @@
   * The empty CSP allows all and can be useful for new site bring-ups, and should be placed in site-specific configs underneath the ''include'' line(s)
-<code>    add_header Content-Security-Policy "default-src 'self'" always;</code>
+<code>add_header Content-Security-Policy "default-src 'self'" always;</code>
-<code>    add_header Content-Security-Policy "" always;</code>
+<code>add_header Content-Security-Policy "" always;</code>
 ====== SSL Certs ======
@@ Line 201: / Line 189: @@
 ssl_ciphers 'EECDH+AESGCM:EDH+AESGCM';
 ssl_prefer_server_ciphers 'on';
-ssl_ecdh_curve 'secp384r1';
+ssl_ecdh_curve 'secp384r1:SecP384r1MLKEM1024:SecP256r1MLKEM768:X25519MLKEM768';
 # End</code>