servers:nginx_php_php-fpm
Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
servers:nginx_php_php-fpm [2024/02/07 14:28] – [Non-existent 404] Sean Rhone | servers:nginx_php_php-fpm [2024/02/07 17:11] (current) – [Headers] Sean Rhone | ||
---|---|---|---|
Line 8: | Line 8: | ||
===== Prerequisites ===== | ===== Prerequisites ===== | ||
- | * [[distros:ubuntu_server|Ubuntu Server]] | + | * [[distros:fedora_server|Fedora Server]] |
- | + | ||
- | * [[servers: | + | |
===== Resources ===== | ===== Resources ===== | ||
Line 28: | Line 26: | ||
**** | **** | ||
- | sudo apt install git nginx-core php-fpm | + | sudo dnf install git nginx php-fpm |
===== PHP Extensions ===== | ===== PHP Extensions ===== | ||
Line 42: | Line 40: | ||
* 80/tcp is HTTP | * 80/tcp is HTTP | ||
* 443/tcp is HTTPS | * 443/tcp is HTTPS | ||
- | * '' | ||
- | sudo ufw allow 'Nginx Full' | + | sudo firewall-cmd --add-service='http' --permanent && sudo firewall-cmd --add-service=' |
+ | |||
+ | ====== SELinux ====== | ||
+ | |||
+ | ===== DokuWiki ===== | ||
+ | |||
+ | * 2023/ | ||
+ | |||
+ | sudo setsebool -P ' | ||
+ | |||
+ | sudo setsebool -P ' | ||
+ | |||
+ | sudo setsebool -P ' | ||
+ | |||
+ | sudo setsebool -P ' | ||
====== Services ====== | ====== Services ====== | ||
Line 52: | Line 63: | ||
**** | **** | ||
- | sudo systemctl enable ' | + | sudo systemctl enable ' |
====== Permissions ====== | ====== Permissions ====== | ||
- | | + | **** |
sudo chown --recursive ' | sudo chown --recursive ' | ||
Line 64: | Line 75: | ||
===== Backup ===== | ===== Backup ===== | ||
- | sudo mv '/etc/php/8.2/fpm/pool.d/www.conf' '/etc/php/8.2/ | + | sudo mv '/etc/nginx/default.d/php.conf' '/etc/nginx/default.d/php.conf~' |
- | sudo mv '/ | + | sudo mv '/ |
- | sudo unlink | + | sudo mv '/etc/php-fpm.d/www.conf' |
+ | |||
+ | sudo mv '/ | ||
===== View ===== | ===== View ===== | ||
- | nano '/etc/php/8.2/ | + | nano '/etc/nginx/default.d/php.conf~' |
- | nano '/ | + | nano '/ |
- | nano '/etc/nginx/sites-available/default' | + | nano '/etc/php-fpm.d/www.conf~' |
- | nano '/etc/php/8.2/ | + | nano '/etc/nginx/nginx.conf~' |
- | nano '/ | + | nano '/ |
====== nginx Settings ====== | ====== nginx Settings ====== | ||
Line 86: | Line 99: | ||
===== Notes ===== | ===== Notes ===== | ||
- | * '' | + | * '' |
- | * '' | + | * '' |
- | * '' | + | * '' |
- | | + | |
+ | ===== Defaults ===== | ||
+ | |||
+ | ==== vhosts.d ==== | ||
+ | |||
+ | **** | ||
+ | |||
+ | | ||
===== HTTPS Redirect ===== | ===== HTTPS Redirect ===== | ||
Line 98: | Line 118: | ||
< | < | ||
- | # HTTPS Redirect | ||
- | |||
server { | server { | ||
listen 80 default_server; | listen 80 default_server; | ||
Line 105: | Line 123: | ||
return 301 https:// | return 301 https:// | ||
- | } | + | }</ |
- | + | ||
- | # End</ | + | |
===== Non-existent 404 ===== | ===== Non-existent 404 ===== | ||
Line 116: | Line 132: | ||
< | < | ||
- | # Non-existent 404 | ||
- | |||
server { | server { | ||
listen ' | listen ' | ||
Line 123: | Line 137: | ||
return ' | return ' | ||
- | } | + | }</ |
- | + | ||
- | # End</ | + | |
===== Headers ===== | ===== Headers ===== | ||
- | * Last updated: | + | * Last updated: |
* Add to individual site configs as an '' | * Add to individual site configs as an '' | ||
- | sudo -e '/ | + | sudo -e '/ |
< | < | ||
Line 142: | Line 154: | ||
add_header Referrer-Policy " | add_header Referrer-Policy " | ||
add_header Expect-CT " | add_header Expect-CT " | ||
- | add_header Feature-Policy " | ||
add_header Permissions-Policy " | add_header Permissions-Policy " | ||
===== nginx ===== | ===== nginx ===== | ||
- | * Last updated: | + | * :!: Last updated: |
sudo -e '/ | sudo -e '/ | ||
< | < | ||
- | user www-data; | + | user nginx; |
worker_processes auto; | worker_processes auto; | ||
- | error_log / | + | error_log / |
pid / | pid / | ||
+ | |||
+ | include / | ||
events { | events { | ||
Line 164: | Line 177: | ||
# Logging | # Logging | ||
+ | log_format | ||
+ | ' | ||
+ | '" | ||
+ | |||
access_log | access_log | ||
# Includes | # Includes | ||
include / | include / | ||
- | include /etc/nginx/sites-enabled/*.conf; | + | include /etc/nginx/vhosts.d/*.conf; |
include / | include / | ||
default_type application/ | default_type application/ | ||
Line 224: | Line 241: | ||
ssl_stapling ' | ssl_stapling ' | ||
ssl_stapling_verify ' | ssl_stapling_verify ' | ||
- | resolver '1.1.1.2' '1.0.0.2' '2606:4700:4700::1112' '2606:4700:4700::1002' ' | + | resolver '127.0.0.1' '9.9.9.9' '149.112.112.112' '[::1]' ' |
resolver_timeout ' | resolver_timeout ' | ||
/var/www/wiki/data/pages/servers/nginx_php_php-fpm.txt · Last modified: 2024/02/07 17:11 by Sean Rhone