本文章具有一定时效性，最后更新时间为2019年12月20日星期五，并且会在结尾列出参考文献资料，本篇仅为后篇，后续更新其他相关，记得关注。
1.安装nginx php mariadb
1
2
|
pacman -S nginx mariadb mariadb-libs php-fpm php-gd
#php-fpm php-gd是需要的两个php模块
|
2.配置数据库
1
2
3
4
5
6
7
8
9
10
11
|
mysql_install_db --user=mysql --basedir=/usr --datadir=/var/lib/mysql
#需要以root权限运行
systemctl start mariadb #开启数据库服务端
systemctl enable mariadb #设置开机启动
mysql_secure_installation
#设置安全组策略第一个是询问MariaDB的root密码，没有设置密码就可以直接按Enter键，再设置一个root密码。之后，第一个问答输入y他会删除test数据库，第二个问答是是否删除anonymous用户以及最后一个禁用用root用户远程登录。
|
3.启用nginx
1
2
3
|
systemctl start nginx#启用
systemctl enable nginx#设置开机启动
|
之后浏览器打开网址http://server-ip:80/查看，会看到nginx的欢迎界面
如果绑定域名用于名访问提示服务器不存在很正常，因为你还没有正确的配置nginx
4.接下来进入进阶型配置，而非默认配置。
4.1首先关掉nginx服务
4.2然后进入到nginx配置文件目录
4.3备份配置及文件
1
|
mv nginx.conf nginx.conf.bak
|
4.4新建配置文件 /etc/nginx/nginx.conf并编辑内容如下
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
|
user http;
# May be equal to `grep processor /proc/cpuinfo | wc -l`
worker_processes auto;
worker_cpu_affinity auto;
# PCRE JIT can speed up processing of regular expressions significantly.
pcre_jit on;
events {
# Should be equal to `ulimit -n`
worker_connections 1024;
# Let each process accept multiple connections.
multi_accept on;
# Preferred connection method for newer linux versions.
use epoll;
}
http {
server_tokens off; # Disables the “Server” response header
charset utf-8;
# Sendfile copies data between one FD and other from within the kernel.
# More efficient than read() + write(), since the requires transferring
# data to and from the user space.
sendfile on;
# Tcp_nopush causes nginx to attempt to send its HTTP response head in one
# packet, instead of using partial frames. This is useful for prepending
# headers before calling sendfile, or for throughput optimization.
tcp_nopush on;
# Don't buffer data-sends (disable Nagle algorithm). Good for sending
# frequent small bursts of data in real time.
#
tcp_nodelay on;
# On Linux, AIO can be used starting from kernel version 2.6.22.
# It is necessary to enable directio, or otherwise reading will be blocking.
# aio threads;
# aio_write on;
# directio 8m;
# Caches information about open FDs, freqently accessed files.
# open_file_cache max=200000 inactive=20s;
# open_file_cache_valid 60s;
# open_file_cache_min_uses 2;
# open_file_cache_errors on;
# http://nginx.org/en/docs/hash.html
types_hash_max_size 4096;
include mime.types;
default_type application/octet-stream;
# Logging Settings
access_log off;
# Gzip Settings
gzip on;
gzip_comp_level 6;
gzip_min_length 500;
gzip_proxied expired no-cache no-store private auth;
gzip_vary on;
gzip_disable "MSIE [1-6]\.";
gzip_types
application/atom+xml
application/javascript
application/json
application/ld+json
application/manifest+json
application/rss+xml
application/vnd.geo+json
application/vnd.ms-fontobject
application/x-font-ttf
application/x-web-app-manifest+json
application/xhtml+xml
application/xml
font/opentype
image/bmp
image/svg+xml
image/x-icon
text/cache-manifest
text/css
text/plain
text/vcard
text/vnd.rim.location.xloc
text/vtt
text/x-component
text/x-cross-domain-policy;
# index index.php index.html index.htm;
include sites-enabled/*; # See Server blocks
}
|
4.5上面的配置文件并没有定义任何服务，所以即使启用也无法访问，接下来要使用多个配置文件
1
2
3
|
mkdir /etc/nginx/sites-available#新建模块文件放的位置
mkdir /etc/nginx/sites-enabled#模块文件启用的目录
|
4.6进入到模块文件夹
1
|
cd /etc/nginx/sites-available
|
4.7编辑/etc/nginx/sites-available/example文件创建一个示例代码块
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
server {
listen 80;
listen [::]:80;
server_name server_url/name/ip;#可以是ip、域名、等等，本地调试请改为127.0.0.1
root /usr/share/nginx/html;
location / {
index index.php index.html index.htm;
}
}
|
4.8启用代码块只需要简单的创建一个符号链接：
1
|
ln -s /etc/nginx/sites-available/example /etc/nginx/sites-enabled/example
|
取消代码块
1
|
unlink /etc/nginx/sites-enabled/example
|
添加代码块或者修改配置只需要重启nginx就可以了
1
|
systemctl restart nginx
|
5.配置php
修改php配置文件启用模块
编辑/etc/php/php.ini文件：
1
2
3
4
5
|
extension=gd.so
extension=pdo_mysql.so
extension=mysqli.so
|
6.启用php-fpm
1
2
3
|
systemctl start php-fpm
systemctl enable php-fpm
|
7.在nginx配置模块里启用php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
/etc/nginx/sites-available/php-test
server {
listen 8000;
listen [::]:8000;
server_name server_url/name/ip;#可以是ip、域名、等等，本地调试请改为127.0.0.1
root /usr/share/nginx/html;
location / {
index test.php index.html index.htm;
}
location ~ [^/]\.php(/|$) {
# Correctly handle request like /test.php/foo/blah.php or /test.php/
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
try_files $uri $document_root$fastcgi_script_name =404;
# Mitigate https://httpoxy.org/ vulnerabilities
fastcgi_param HTTP_PROXY "";
fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}
|
8.在/usr/share/nginx/html下新建test.php
之后link启用模块
1
|
ln -s /etc/nginx/sites-available/php-test /etc/nginx/sites-enabled/php-test
|
然后重启nginx
1
|
systemctl restart nginx
|
a.一共使用了两个web端口80和8000，两个一个是html的静态，另一个是可以使用php的动态，访问时需要区分
b.本地访问一般都可以，服务器访问需要开启端口阿里云的配置文档非常详细了，这里给个链接：https://help.aliyun.com/document_detail/25471.html
c.访问的时候注意代码模块test.php中代码index设定的为主页，指定第一加载php文件为test.php
访问的两个地址：
a.http://server_name:80/ #指向静态加载，也是默认加载
b.http://server_name:8000/ #指向动态加载
9.最后测试phpmyadmin搭建和测试
9.1首先安装phpmyadmin
9.2然后创建phpmyadmin 的nginx配置文件(基于php-test改就行了)
/etc/nginx/sites-available/phpmyadmin
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
|
server {
listen 888;
listen [::]:888;
server_name server_url/name/ip;#可以是ip、域名、等等，本地调试请改为127.0.0.1
root /srv/http/phpmyadmin;#修改web目录
location / {
index index.php index.html index.htm;#设置为index.php
}
location ~ [^/]\.php(/|$) {
# Correctly handle request like /test.php/foo/blah.php or /test.php/
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
try_files $uri $document_root$fastcgi_script_name =404;
# Mitigate https://httpoxy.org/ vulnerabilities
fastcgi_param HTTP_PROXY "";
fastcgi_pass unix:/run/php-fpm/php-fpm.sock;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
}
|
9.3接下来设置web权限
9.3.1链接phpmyadmin到/srv/http
1
|
ln -s /usr/share/webapps/phpMyAdmin /srv/http/phpmyadmin
|
9.3.2使用安装脚本
1
2
3
4
5
|
mkdir /usr/share/webapps/phpMyAdmin/config #创建配置文件文件夹
chown http:http /usr/share/webapps/phpMyAdmin/config #用户组使可以网页端访问
chmod 750 /usr/share/webapps/phpMyAdmin/config #修改权限保证安全
|
9.4输入网址http://server:888/访问
BUG：
1.配置文件现在需要一个短语密码，修改配置文件,中间char必须是32个字符
/etc/webapps/phpmyadmin/config.inc.php
1
|
$cfg['blowfish_secret'] = 'char';
|
2.错误提示：安装时所用的 config 文件夹尚未删除。我们强烈建议您在完成 phpMyAdmin 安装后立即删除该文件夹。否则未经授权的用户都可以下载您的配置文件从而使服务器陷入危险。
1
|
rm -rf /usr/share/webapps/phpMyAdmin/config #删除创建的配置文件文件夹
|
到此基本lnmp的环境已经搭建完成了