nginx實驗

1.lnmp實現多個虛擬主機，部署wordpress和phpmyadmin，併爲後一個主機提供https。

2.配置rewrite，即便用戶使用http協議訪問phpmyadmin的站點，最終也會使用https從新請求資源。

-------------------------------------------------------------------------------------------

1、安裝nginx

 

方法一：編譯安裝

1.下載nginx程序包，傳導至CentOS主機中，並解壓。

2.進入解壓目錄

3.~]# ./configure --prefix=/usr/local/nginx--sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf--error-log-path=/var/log/nginx/error.log--http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid--lock-path=/var/lock/subsys/nginx.lock --user=nginx --group=nginx--with-http_ssl_module --with-http_v2_module --with-http_dav_module--with-threads --with-file-aio --with-http_stub_status_module

4. make -j 4 && make install

 

注意：1.啓動服務須要事先建立nginx用戶和nginx組；

2.若編譯錯誤提示缺乏編譯軟件能夠 yum -y install gcc gcc-c++autoconf automake make

 

方法二：EPEL源的安裝包

 [root@zj06 ~]# cd /etc/yum.repos.d/

 [root@zj06yum.repos.d]# vim nginx.repo

   [nginx]

name=nginx repo

baseurl=http://nginx.org/packages/centos/7/$basearch/

gpgcheck=0

enabled=1

[root@zj06 yum.repos.d]# yum install -y nginx

 

2、建立虛擬機

[root@zj06 ~]# mkdir -pv/var/www/vhost{1,2}

 

[root@zj06 ~]# echo"www1.zrs.com" >> /var/www/vhost1/index.html

[root@zj06 ~]# echo"www2.zrs.com" >> /var/www/vhost2/index.html

[root@zj06 ~]# vim /etc/nginx/nginx.conf

server {

      listen       80;

      server_name  www1.zrs.com;

      location / {

          root   /var/www/vhost1;

          index index.php index.html index.htm;

      }

}

server {

      listen       80;

      server_name  www2.zrs.com;

       location / {

          root   /var/www/vhost2;

           index index.php index.html index.htm;

      }

}

 

[root@zj06 ~]#nginx -t   ///檢查語法沒問題

[root@zj06~]# nginx -s reload     ///重啓服務

 

客戶端測試

3、安裝php和mariadb，測試鏈接

 

[root@zj06 ~]# yum install -y php-fpm mariadb-server mariadb

配置nginx支持php解析

[root@zj06 ~]# vim /etc/nginx/nginx.conf

server {

      listen       80;

      server_name  www1.zrs.com;

      location / {

          root   /var/www/vhost1;

          index index.php index.html index.htm;

      }

       location ~ \.php$ {

           root           /var/www/vhost1;

           fastcgi_pass   127.0.0.1:9000;

           fastcgi_index  index.php;

           fastcgi_param SCRIPT_FILENAME /var/www/vhost1/$fastcgi_script_name;

           include        fastcgi_params;

       }

}

server {

      listen       80;

      server_name  www2.zrs.com;

      location / {

          root   /var/www/vhost2;

           index index.php index.html index.htm;

      }

       location ~ \.php$ {

           root           /var/www/vhost2;

           fastcgi_pass   127.0.0.1:9000;

           fastcgi_index  index.php;

           fastcgi_param SCRIPT_FILENAME /var/www/vhost2/$fastcgi_script_name;

           include        fastcgi_params;

       }

 

}

 

[root@zj06 ~]# nginx -t   ///檢查語法沒問題

[root@zj06 ~]# nginx -s reload     ///重啓服務

修改兩個主頁index.html爲index.php

並添加測試段內容：

<?php

       Phpinfo();

?>

客戶端測試

 

建立數據庫，受權用戶，並刷新

MariaDB [(none)]> create database wpsdb;

MariaDB [(none)]> grant all on wpsdb.*TO 'wpuser'@'172.16.%.%'IDENTIFIED BY'123456';

MariaDB [(none)]> create database pma;

MariaDB [(none)]> grant all on pma.* TO'pmauser'@'172.16.%.%'IDENTIFIED BY'123456';

MariaDB [(none)]> FLUSH PRIVILEGES;

 

測試php和數據庫可否正常鏈接

[root@zj06 ~]# vim/var/www/vhost1/index.php

 

vhost2也一樣設置成這樣，相關數據庫內容要改成pma的。

 

客戶端測試

 

4、部署wordpress和phpmyadmin 

下載這兩個應用並導入虛擬機中，分別解壓

[root@zj06 ~]# unzipwordpress-3.9-zh_CN.zip

[root@zj06 ~]# tar -zxvfphpMyAdmin-4.0.10.20.tar.gz

 

1.部署wordpress

[root@zj06 ~]# mv wordpress/var/www/vhost1/

[root@zj06 ~]# cd /var/www/vhost1/wordpress/

[root@zj06 wordpress]# mvwp-config-sample.php wp-config.php

[root@zj06 wordpress]# vim wp-config.php   ///修改配置文件

/** WordPress數據庫的名稱*/

define('DB_NAME', 'wpsdb');

 

/** MySQL數據庫用戶名 */

define('DB_USER', 'wpuser');

 

/** MySQL數據庫密碼 */

define('DB_PASSWORD', '123456');

 

/** MySQL主機 */

define('DB_HOST', '172.16.1.6');

 

客戶端測試 

2. 部署phpmyadmin

[root@zj06 ~]# mkdir/var/www/vhost2/phpmyadmin

 

[root@zj06 ~]# mv phpMyAdmin-4.0.10.20-all-languages/*/var/www/vhost2/phpmyadmin/

[root@zj06 ~]# cd /var/www/vhost2/phpmyadmin/

[root@zj06 phpmyadmin]# mvconfig.sample.inc.php config.inc.php

[root@zj06 phpmyadmin]# vim config.inc.php   ///修改這個文件中的下面一行配置爲主機地址

$cfg['Servers'][$i]['host'] = '172.16.1.6';

 

客戶端測試

 

5、爲phpmyadmin提供https

 

在主機上安裝mod_ssl模塊

[root@zj06 ~]# yum -y install mod_ssl

 

切換到CA目錄下，生成密鑰和自簽證書

[root@zj06 ~]# cd /etc/pki/CA

[root@zj06 CA]# (umask 077; openssl genrsa-out private/cakey.pem 2048)

Generating RSA private key, 2048 bit longmodulus

.......+++

...................................+++

e is 65537 (0x10001)

[root@zj06 CA]# openssl req -new -x509 -keyprivate/cakey.pem -out cacert.pem

You are about to be asked to enterinformation that will be incorporated

into your certificate request.

What you are about to enter is what iscalled a Distinguished Name or a DN.

There are quite a few fields but you canleave some blank

For some fields there will be a defaultvalue,

If you enter '.', the field will be leftblank.

-----

Country Name (2 letter code) [XX]:CN

State or Province Name (full name) []:Hebei

Locality Name (eg, city) [DefaultCity]:QinHuangdao

Organization Name (eg, company) [DefaultCompany Ltd]:Link

Organizational Unit Name (eg, section)[]:ops

Common Name (eg, your name or your server'shostname) []:ca.link.com

Email Address []:admin@link.com

 

提供輔助文件

[root@zj06 CA]# touch index.txt

[root@zj06 CA]# echo 01 > serial

 

生成私鑰而且生成證書籤署請求

 

[root@zj06~]# mkdir -pv /etc/nginx/ssl

[root@zj06~]# cd /etc/nginx/ssl

 

[root@zj06 ssl]# (umask 077; openssl genrsa-out nginx.key 1024)   ///生成私鑰

Generating RSA private key, 1024 bit longmodulus

....++++++

...............................++++++

e is 65537 (0x10001)

[root@zj06 ssl]# openssl req -new -keynginx.key -out nginx.csr   ///生成證書請求

You are about to be asked to enterinformation that will be incorporated

into your certificate request.

What you are about to enter is what iscalled a Distinguished Name or a DN.

There are quite a few fields but you canleave some blank

For some fields there will be a defaultvalue,

If you enter '.', the field will be leftblank.

-----

Country Name (2 letter code) [XX]:CN

State or Province Name (full name)[]:Hebei 

Locality Name (eg, city) [DefaultCity]:QinHuangdao

Organization Name (eg, company) [DefaultCompany Ltd]:Link

Organizational Unit Name (eg, section)[]:ops

Common Name (eg, your name or your server'shostname) []:ca.link.com

Email Address []:admin@link.com

 

Please enter the following 'extra'attributes

to be sent with your certificate request

A challenge password []:

An optional company name []:

 

簽發證書

[root@zj06 ssl]# cp nginx.csr /tmp/

[root@zj06 ssl]# openssl ca -in/tmp/nginx.csr -out /etc/pki/CA/certs/nginx.crt   ///根據提示連續按兩個「y」

[root@zj06 ssl]# cp/etc/pki/CA/certs/nginx.crt /etc/nginx/ssl/  ///把簽署好的證書發給請求者

 

修改nginx配置文件，添加支持ssl

[root@zj06 ssl]# vim /etc/nginx/nginx.conf

server {

       listen       443 ssl;

       server_name  www2.zrs.com;

       ssl_certificate     /etc/nginx/ssl/nginx.crt;

       ssl_certificate_key /etc/nginx/ssl/nginx.key;

       ssl_session_cache   shared:SSL:1m;

       ssl_session_timeout  5m;

       ssl_ciphers  HIGH:!aNULL:!MD5;

       ssl_prefer_server_ciphers  on;

       location / {

           root   html;

           index index.php index.html index.htm;

       }

}

 

客戶端測試

6、配置rewrite，即便用戶使用http協議訪問phpmyadmin的站點，最終也會使用https從新請求資源

 

當用戶訪問www2.zrs.com的時候自動跳轉到https://www2.zrs.com，直接用rewrite功能便可

 

在www2.zrs.com主機的配置文件中添加rewrite便可

客戶端測試