Nginx notes

Leave a reply

Install

https://www.nginx.com/resources/wiki/start/topics/tutorials/install/

Debian /etc/apt/sources.list

# replace $release 
deb http://nginx.org/packages/debian/ $release nginx
deb-src http://nginx.org/packages/debian/ $release nginx

Если нет ключа:

$ wget http://nginx.org/packages/keys/nginx_signing.key
$ cat nginx_signing.key | sudo apt-key add -
$ apt-get update

SSL

http {

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;.
    ssl_prefer_server_ciphers on;
    ssl_session_cache   shared:SSL:10m;
    ssl_session_timeout 5m;
    ssl_stapling on;
    resolver 8.8.8.8;
}

server {

    listen 443 ssl;
    ssl                         on;
    ssl_protocols               TLSv1.2 TLSv1.1 TLSv1;
    ssl_session_timeout         10m;
    ssl_ciphers                 'EECDH+ECDSA+AESGCM:AES128+EECDH:AES128+EDH:!RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!CAMELLIA:!ADH';
    ssl_prefer_server_ciphers   on;
    ssl_stapling                on;

    # openssl dhparam -out /etc/ssl/dh.pem 1024
    ssl_dhparam                 /etc/ssl/dh.pem;

    ssl_certificate     /path/ssl/domain_com.crt;
    ssl_certificate_key /path/ssl/domain_com.key;

}

Заворачиваем все на https://www.domain.com 

server {
    listen 80;
    server_name domain.com;
    server_name www.domain.com;
    return 301 https://www.domain.com$request_uri;
}

server {
    listen 443 ssl;
    server_name domain.com;
    return 301 https://www.domain.com$request_uri;
}

server {
    server_name www.domain.com;
    listen 443 ssl;

}

Скрываем index.html и index.php

server {

      if ($request_uri ~ "^\/index\.(?:php|html)$") {
            rewrite ^ /$1 permanent;
      } 

}

Nginx + php-fpm. Ошибка: FastCGI sent in stderr: “Unable to open primary script: /home/dima/Dropbox/www/ucet/public_html/index.php (No such file or directory)”
FastCGI должен пройти полный путь до скрипта:

# хоть было так 
[email protected]:/home/dima# ls -la /home/dima/Dropbox/www/ucet/public_html/
total 136
drwxr-xr-x 10 dima dima 4096 мар 10 21:46 .
drwxr-xr-x 13 dima dima 4096 мар 10 21:43 ..
# не хватало
chmod 755 /home/dima
Просмотров: 94