Скачать или смотреть Production Ready Wordpress with NGINX, PHP-FPM & SSL

Here is the code snippet used in the video:

sudo echo "deb http://nginx.org/packages/ubuntu `lsb_release -cs` nginx" | sudo tee /etc/apt/sources.list.d/nginx.list
sudo curl -fsSL https://nginx.org/keys/nginx_signing.key | sudo apt-key add -
apt update
sudo apt install nginx php7.0 php7.0-fpm php7.0-mysql mysql-server
sudo useradd -s /bin/bash -d /home/test.unixhops.com -m unixhops

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

mv /etc/php/7.0/fpm/pool.d/www.conf{,.bak}
vi /etc/php/7.0/fpm/pool.d/test.unixhops.com.conf

[test.unixhops.com]
user = unixhops
group = unixhops
listen = /run/php/$pool-fpm.sock
listen.owner = nginx
listen.group = nginx
listen.mode = 0660
chdir = /
; catch_workers_output = yes
; php_value[disable_functions] = "opcache_get_status"
; php_value[display_errors] = on
; php_value[error_reporting] = 22519
; php_value[open_basedir] = "/home/test.unixhops.com/:/tmp/"
; php_value[short_open_tag] = on
; php_admin_value[error_log] = /home/$pool/error.log
; php_admin_flag[log_errors] = on

pm = ondemand
pm.max_children = 5
pm.max_spare_servers = 1
pm.min_spare_servers = 1
pm.process_idle_timeout = 10s
pm.start_servers = 1
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

vi /etc/nginx/conf.d/test.unixhops.com.conf

server {
listen 80;
server_name test.unixhops.com;

root /home/test.unixhops.com/public_html;

WordPress Perm links config ##
location / {
try_files $uri $uri/ /index.php?$args;
}

Add trailing slash to */wp-admin requests.
rewrite /wp-admin$ $scheme://$host$uri/ permanent;

Deal with sitemap wordpress plugin urls ##
rewrite ^/sitemap(-+([a-zA-Z0-9_-]+))?\.xml$ "/index.php?xml_sitemap=params=$2" last;
rewrite ^/sitemap(-+([a-zA-Z0-9_-]+))?\.xml\.gz$ "/index.php?xml_sitemap=params=$2;zip=true" last;
rewrite ^/sitemap(-+([a-zA-Z0-9_-]+))?\.html$ "/index.php?xml_sitemap=params=$2;html=true" last;
rewrite ^/sitemap(-+([a-zA-Z0-9_-]+))?\.html.gz$ "/index.php?xml_sitemap=params=$2;html=true;zip=true" last;

Directives to send expires headers and turn off 404 error logging.
location ~* ^.+\.(ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
access_log off; log_not_found off; expires max;
}

Okay, Pass all .php files onto a php-fpm/php-fcgi server.
index index.php;

location ~ [^/]\.php(/|$) {
fastcgi_split_path_info ^(.+?\.php)(/.*)$;
if (!-f $document_root$fastcgi_script_name) {
return 404;
}
Setting works on Ubuntu/Debian Linux
This is a robust solution for path info security issue and works with "cgi.fix_pathinfo = 1" in /etc/php.ini (default)
include /etc/nginx/fastcgi_params;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_pass unix:/run/php/$server_name-fpm.sock;
}
}
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
su - unixhops
wget https://wordpress.org/latest.tar.gz
tar -xzf latest.tar.gz
ls -l
mv wordpress public_html
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
CREATE DATABASE wordpress;
CREATE USER 'wordpress'@'localhost' IDENTIFIED BY '**********';
GRANT ALL PRIVILEGES ON wordpress.* TO 'wordpress'@'localhost';
FLUSH PRIVILEGES;
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

apt-get install software-properties-common
add-apt-repository universe
add-apt-repository ppa:certbot/certbot
apt-get update
apt-get install certbot python-certbot-nginx

certbot --nginx