Up 2 Down 0

NGINX + PHP + MySQL in jail

jls
jexec # csh
portsnap fetch extract
vi /etc/make.conf

DEFAULT_VERSIONS+=ssl=openssl

cd /usr/ports/ports-mgmt/pkg && make reinstall clean
cd /usr/ports/www/nginx && make config-recursive
make install clean
cd /usr/ports/lang/php56 && make install clean
cd /usr/ports/lang/php56-extensions && make install

Enable: CURL, GD, IMAP, MBSTRING, MCRYPT, MySQL, MySQLi, OPENSSL, PDO_MySQL, ZIP, ZLIB
cd /usr/ports/graphics/php56-exif && make install
cd /usr/ports/databases/mysql55-server/ && make install clean
vi /etc/rc.conf

nginx_enable="YES"
php_fpm_enable="YES"
mysql_enable="YES"

vi /usr/local/etc/my.cnf

MySQL server configuration:
# The MySQL server configuration
[mysqld]
socket = /tmp/mysql.sock
# Don't listen on a TCP/IP port at all.
skip-networking
skip-name-resolve
#Expire binary logs after one day:
expire_logs_days = 1

service mysql-server start
mysql_secure_installation
mysql -u root -p
CREATE DATABASE pydiodb;
CREATE USER "pydio"@"localhost" IDENTIFIED BY "ChangeThisPa$$w0rd";
GRANT ALL PRIVILEGES ON pydiodb.* TO "pydio"@"localhost";
FLUSH PRIVILEGES;
quit

cp /usr/local/etc/php.ini-production /usr/local/etc/php.ini
vi /usr/local/etc/php.ini

output_buffering = OFF
session.save_path = "/tmp"
upload_max_filesize = 5120M
post_max_size = 5120M
date.timezone = Europe/Amsterdam

vi /usr/local/etc/php-fpm.conf

[global]
pid = run/php-fpm.pid


[PYDIO]
listen = /var/run/phph-fpm.socket
listen.owner = www
listen.group = www
listen.mode = 0666


listen.backlog = -1
listen.allowed_clients = 127.0.0.1


user = www
group = www


pm = dynamic
pm.max_children = 5
pm.start_servers = 2
pm.min_spare_servers = 1
pm.max_spare_servers = 3
pm.max_requests = 500


env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp

vi /usr/local/etc/nginx/fastcgi_params

fastcgi_param  QUERY_STRING       $query_string;
fastcgi_param  REQUEST_METHOD     $request_method;
fastcgi_param  CONTENT_TYPE       $content_type;
fastcgi_param  CONTENT_LENGTH     $content_length;


fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
fastcgi_param  REQUEST_URI        $request_uri;
fastcgi_param  DOCUMENT_URI       $document_uri;
fastcgi_param  DOCUMENT_ROOT      $document_root;
fastcgi_param  SERVER_PROTOCOL    $server_protocol;
fastcgi_param  HTTPS              $https if_not_empty;


fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;


fastcgi_param  REMOTE_ADDR        $remote_addr;
fastcgi_param  REMOTE_PORT        $remote_port;
fastcgi_param  SERVER_ADDR        $server_addr;
fastcgi_param  SERVER_PORT        $server_port;
fastcgi_param  SERVER_NAME        $server_name;


# PHP only, required if PHP was built with --enable-force-cgi-redirect
fastcgi_param  REDIRECT_STATUS    200;

service php-fpm start
vi /usr/local/etc/nginx/nginx.conf

Insert attachment: nginx.conf-no-ssl.txt

Next, go through the configuration file and look at the comments with three hash symbols (###), and change them to match your environment.
service nginx start

After setting up SSL:
https://kbhost.nl/knowledgebase/ssl-for-jail/
vi /usr/local/etc/nginx/nginx.conf
Remove the # from the three lines with # at char 1
service nginx restart