{"id":2775,"date":"2018-01-24T17:14:27","date_gmt":"2018-01-24T14:14:27","guid":{"rendered":"https:\/\/www.howtoforge.com\/tutorial\/how-to-install-nginx-with-php-and-mysql-lemp-on-debian-9\/"},"modified":"2018-01-24T17:14:27","modified_gmt":"2018-01-24T14:14:27","slug":"how-to-install-nginx-with-php-mysql-lemp-on-debian-9","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/how-to-install-nginx-with-php-mysql-lemp-on-debian-9\/","title":{"rendered":"How to Install Nginx with PHP + MySQL (LEMP) on Debian 9"},"content":{"rendered":"

This tutorial will show you the installation of the Nginx web server on Debian 9 (Stretch).\u00a0Nginx<\/a> (pronounced “engine x”) is a free, open-source, high-performance HTTP server. Nginx is known for its stability, rich feature set, simple configuration, and low resource consumption. This tutorial shows\u00a0the installation of Nginx with PHP support (through PHP-FPM) and MySQL and MariaDB. This setup is often referred to as LEMP = L<\/b>inux + nginx (pronounced “e<\/b>ngine x”) + M<\/b>ySQL + P<\/b>HP) .<\/p>\n

Preliminary Note<\/h2>\n

In this tutorial, I use the hostname server1.example.com<\/span> with the IP address 192.168.1.100<\/span>. These settings might differ for you, so you have to replace them where appropriate. You should have a Debian 9 server, I will use the Debian minimal server<\/a>\u00a0as the\u00a0base system for this tutorial.<\/p>\n

Update the Debian System<\/h2>\n

It is recommended to update the package lists and install any pending updates before we start with the Nginx setup. Run the following commands to install any pending updates.<\/p>\n

apt-get update
apt-get upgrade -y<\/p>\n

I will use the nano editor later to edit configuration files. Nano can be installed with this command:<\/p>\n

apt-get -y install nano<\/p>\n

Install Nginx<\/h2>\n

Nginx is available as a package for Debian\u00a09 which we can be installed with this command:<\/p>\n

apt-get -y install nginx<\/p>\n

Now start Nginx web server:<\/p>\n

systemctl start nginx.service<\/p>\n

Type in your web server’s IP address or hostname into a browser (e.g. http:\/\/192.168.1.100<\/span>), and you\u00a0will see the following page:<\/p>\n

\"Nginx<\/a><\/p>\n

The default nginx document root on Debian Linux is \/var\/www\/html<\/span>.<\/p>\n

Install MySQL or MariaDB<\/h2>\n

In this step, I will show you how to install MySQL or MariaDB. You are free to choose which database system you prefer. Just ensure that you install only one database engine and not MySQL and MariaDB together.<\/p>\n

Install MySQL<\/h3>\n

The MySQL packages for Debian 9 can be obtained from Oracle directly. Oracle provides a MySQL repository package which integrates the Oracle MySQL repository into Debian so that we can install and update MySQL with apt. Get the MySQL apt repository package\u00a0here<\/a> in case the wget download below fails due to changes in the download URL.<\/p>\n

cd \/tmp
wget\u00a0https:\/\/dev.mysql.com\/get\/mysql-apt-config_0.8.9-1_all.deb
dpkg -i\u00a0mysql-apt-config_0.8.9-1_all.deb<\/p>\n

Choose to configure ‘OK’ in the list, then focus the OK button at the footer and press enter. This will select the current stable version, which is MySQL 5.7.<\/p>\n

\"Select<\/a><\/p>\n

Now we’ll update the package list and install the MySQL server and client package.<\/p>\n

apt-get update
apt-get -y install mysql-community-client mysql-community-server<\/p>\n

The MySQL installer will ask you to set a password for the MySQL root user. Choose a long and secure password as this pasword allows full administrative access to the MySQL database.<\/p>\n

\"Set<\/a><\/p>\n

Re-enter the password as requested.<\/p>\n

Install MariaDB<\/h3>\n

In order to install MariaDB, we run:<\/p>\n

apt-get -y install mariadb-server mariadb-client<\/span><\/p>\n

Unlike the MySQL installer, the MariaDB installer will not set a root password during installation. To secure the MariaDB installation, remove the anonymous user and to disable the test database, run this command:<\/p>\n

mysql_secure_installation<\/p>\n

Answer the questions as follows:<\/p>\n

Change the root password? [Y\/n]\u00a0<\/span><– y<\/span>
New password:\u00a0<\/span><– Enter a new MySQL root password<\/span>
Re-enter new password:\u00a0<\/span><– Repeat the MySQL root password<\/span>
Remove anonymous users? [Y\/n]\u00a0<\/span><– y<\/span>
Disallow root login remotely? [Y\/n]\u00a0<\/span><– y<\/span>
Remove test database and access to it? [Y\/n]\u00a0<\/span><– y<\/span>
Reload privilege tables now? [Y\/n]\u00a0<\/span><– y<\/span><\/p>\n

Installing PHP<\/h2>\n

We can make PHP work in nginx through PHP-FPM (PHP FastCGI Process Manager). This is an alternative PHP FastCGI implementation with some additional features useful for sites of any size, especially busier sites. Install PHP 7 as follows:<\/p>\n

apt-get -y install\u00a0php7.0-fpm<\/p>\n

PHP-FPM is a daemon process (with the systemd unit file php7.0-fpm.service) that runs a FastCGI server on the socket \/var\/run\/php\/php7.0-fpm.sock<\/span>.<\/p>\n

Configuring Nginx<\/h2>\n

The Nginx configuration is in \/etc\/nginx\/nginx.conf<\/span> which we open now:<\/p>\n

nano \/etc\/nginx\/nginx.conf<\/p>\n

The configuration is easy to understand (you can learn more about it here:\u00a0https:\/\/www.nginx.com\/resources\/wiki\/start\/topics\/examples\/full\/<\/a> and here: https:\/\/www.nginx.com\/resources\/wiki\/<\/a>)<\/p>\n

First set the keepalive_timeout<\/span> to a reasonable value like 2 seconds:<\/p>\n

[...]keepalive_timeout 2;[...]<\/pre>\n
The virtual hosts are defined in server {}<\/span> containers. The default vhost is defined in the file \/etc\/nginx\/sites-available\/default<\/span> – let’s modify it as follows:<\/p>\n
nano \/etc\/nginx\/sites-available\/default<\/p>\n
[...]
\nserver {listen 80 default_server;listen [::]:80 default_server;
# SSL configuration## listen 443 ssl default_server;# listen [::]:443 ssl default_server;## Note: You should disable gzip for SSL traffic.# See: https:\/\/bugs.debian.org\/773332## Read up on ssl_ciphers to ensure a secure configuration.# See: https:\/\/bugs.debian.org\/765782## Self signed certs generated by the ssl-cert package# Don't use them in a production server!## include snippets\/snakeoil.conf;<\/p>
root \/var\/www\/html;<\/p>
# Add index.php to the list if you are using PHPindex index.php index.html index.htm index.nginx-debian.html;<\/p>
server_name _;<\/p>
location \/ {# First attempt to serve request as file, then# as directory, then fall back to displaying a 404.try_files $uri $uri\/ =404;}<\/p>
# pass PHP scripts to FastCGI server#location ~ \\.php$ {include snippets\/fastcgi-php.conf;<\/p>
# With php-fpm (or other unix sockets):fastcgi_pass unix:\/var\/run\/php\/php7.0-fpm.sock;# With php-cgi (or other tcp sockets):# fastcgi_pass 127.0.0.1:9000;}<\/p>
# deny access to .htaccess files, if Apache's document root# concurs with nginx's one#location ~ \/\\.ht {deny all;}}
\n[...]<\/p><\/pre>\n
server_name _;<\/span> makes this a default catchall vhost (of course, you can as well specify a hostname here like www.example.com<\/span>).<\/p>\n
I’ve added index.php<\/span> to the index<\/span> line. root \/var\/www\/html;<\/span> means that the document root is the directory \/var\/www\/html<\/span>.<\/p>\n
The important part for PHP is the location ~ \\.php$ {}<\/span> stanza. Uncomment it like shown above to enable it. There are two fastcgi_pass lines included, uncomment just the one for the php-7.0-fpm.sock file.<\/p>\n
Now save the file and reload Nginx:<\/p>\n
systemctl reload nginx.service<\/p>\n
Next open \/etc\/php\/7.0\/fpm\/php.ini<\/span>…<\/p>\n
nano \/etc\/php\/7.0\/fpm\/php.ini<\/p>\n
… and set cgi.fix_pathinfo=0<\/span>:<\/p>\n
[...]
\n; cgi.fix_pathinfo provides *real* PATH_INFO\/PATH_TRANSLATED support for CGI. PHP's
\n; previous behaviour was to set PATH_TRANSLATED to SCRIPT_FILENAME, and to not grok
\n; what PATH_INFO is. For more information on PATH_INFO, see the cgi specs. Setting
\n; this to 1 will cause PHP CGI to fix its paths to conform to the spec. A setting
\n; of zero causes PHP to behave as before. Default is 1. You should fix your scripts
\n; to use SCRIPT_FILENAME rather than PATH_TRANSLATED.
\n; http:\/\/php.net\/cgi.fix-pathinfo
\ncgi.fix_pathinfo=0
\n[...]<\/pre>\n
… then you might want to rise the POST limit and the file upload limit:<\/p>\n
post_max_size = 25Mupload_max_filesize = 20M<\/pre>\n
When you plan to upload large files by PHP then you should raise the values to even 500M or more. M stands here for Megabytes.<\/p>\n
Finally, you might want to set the timezone to your local timezone. In my case, the timezone is:<\/p>\n
date.timezone = 'Europe\/Berlin'<\/pre>\n
You can find the list of supported timezones here<\/a>.<\/p>\n
Reload PHP-FPM to apply the changes:<\/p>\n
systemctl reload php7.0-fpm.service<\/p>\n
Now create the following PHP file in the document root \/var\/www\/html\/<\/span>:<\/p>\n
nano \/var\/www\/html\/info.php<\/p>\n
<?php
\nphpinfo();<\/pre>\n
Now we call that file in a browser (e.g. http:\/\/192.168.1.100\/info.php<\/span>):<\/p>\n
\"PHP-FPM<\/a><\/p>\n
As you see, PHP 7 is working, and it’s working through FPM\/FastCGI, as shown in the Server API<\/span> line. If you scroll further down, you will see all modules that are already enabled in PHP. MySQL is not listed there which means we don’t have MariaDB \/ MySQL support in PHP yet.<\/p>\n
Getting MySQL \/ MariaDB Support in PHP<\/h2>\n
To get MySQL support in PHP, we can install the php7.0-mysqlnd<\/span> package. It’s a good idea to install some other PHP modules as well as you might need them for your applications. You can search for available PHP modules like this:<\/p>\n
apt-cache search php7.0<\/p>\n
Pick the ones you need and install them like this:<\/p>\n
apt-get -y install php7.0-mysqlnd php7.0-curl php7.0-gd php7.0-intl php-pear php-imagick php7.0-imap php7.0-mcrypt php-memcache php7.0-intl php7.0-pspell php7.0-recode php7.0-sqlite3 php7.0-tidy php7.0-xmlrpc php7.0-xsl<\/p>\n
Now reload PHP-FPM:<\/p>\n
systemctl reload php7.0-fpm.service<\/p>\n
Now reload http:\/\/192.168.1.100\/info.php<\/span> in your browser and scroll down to the modules section again. You should now find lots of new modules there, including the MySQLi and MySQLnd module:<\/p>\n
\"PHP<\/a><\/p>\n
Making PHP-FPM use a TCP connection (optional)<\/h2>\n
By default, PHP-FPM is listening on the socket \/var\/run\/php\/php7.0-fpm.sock<\/span>\u00a0and that’s the recommended and fastest way to connect PHP to Nginx. However, there might be setups where you want to let Nginx connect to PHP over the network. It is possible to make PHP-FPM use a TCP connection. To do this, open \/etc\/php\/7.0\/fpm\/pool.d\/www.conf<\/span>…<\/p>\n
nano\u00a0\/etc\/php\/7.0\/fpm\/pool.d\/www.conf<\/p>\n
… and make the listen<\/span> line look as follows:<\/p>\n
[...]
\n;listen = \/var\/run\/php5-fpm.sock
\nlisten = 127.0.0.1:9000
\n[...]<\/pre>\n
This will make PHP-FPM listen on port 9000<\/span> on the IP 127.0.0.1<\/span> (localhost<\/span>). Make sure you use a port that is not in use on your system.<\/p>\n
Then reload PHP-FPM:<\/p>\n
systemctl reload php7.0-fpm.service<\/p>\n
Next go through your Nginx configuration and all your vhosts and change the line fastcgi_pass unix:\/var\/run\/php7.0-fpm.sock;<\/span> to fastcgi_pass 127.0.0.1:9000;<\/span>, e.g. like this:<\/p>\n
nano \/etc\/nginx\/sites-available\/default<\/p>\n
[...]location ~ \\.php$ {include snippets\/fastcgi-php.conf;
# With php-fpm (or other unix sockets):# fastcgi_pass unix:\/var\/run\/php\/php7.0-fpm.sock;# With php-cgi (or other tcp sockets):fastcgi_pass 127.0.0.1:9000;}
\n[...]<\/p><\/pre>\n
Finally, reload Nginx:<\/p>\n
systemctl reload nginx.service<\/p>\n
Enable SSL and HTTP\/2 in Nginx<\/h2>\n
Most websites today use SSL (TLS) to provide secure access. In this chapter, I’ll show you how to create an SSL certificate an how to activate SSL in Nginx. You can either use a self-signed SSL certificate or request an officially signed SSL certificate from Let’s encrypt. Let#s encrypt SSL certificates are available free of charge, but you must have a valid domain name that points to your server in DNS already. If you have no domain name yet or when your server is on a local network and not accessible from outside, then use a self-signed SSL certificate. Follow either the steps for a self-signed SSL certificate or the Let’s encrypt certificate below but not both.<\/p>\n
Create a self-signed SSL certificate<\/h3>\n
Create the SSL key file with the\u00a0OpenSSL command:<\/p>\n
openssl genrsa -out \/etc\/ssl\/private\/nginx.key 4096<\/p>\n
\"Create<\/a><\/p>\n
Then create the self-signed SSL certificate:<\/p>\n
openssl req -new -x509 -key \/etc\/ssl\/private\/nginx.key -out \/etc\/ssl\/certs\/nginx.pem -days 3650<\/p>\n
The command will ask for details like country, state, city, company name and domain name.<\/p>\n
\"Create<\/a><\/p>\n
Activate the self-signed SSL certificate in Nginx. To do so, edit the nginx.conf file again:<\/p>\n
nano \/etc\/<\/span>nginx\/sites-available\/default<\/span><\/p>\n
and make the server part it look like this:<\/span><\/p>\n
server {listen 80 default_server;listen [::]:80 default_server;
# SSL configuration<\/p>
listen 443 ssl http2 default_server;listen [::]:443 ssl http2 default_server;<\/p>
ssl on;ssl_certificate_key \/etc\/ssl\/private\/nginx.key;ssl_certificate \/etc\/ssl\/certs\/nginx.pem;ssl_protocols TLSv1 TLSv1.1 TLSv1.2;ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';ssl_prefer_server_ciphers on;<\/p>
# Note: You should disable gzip for SSL traffic.# See: https:\/\/bugs.debian.org\/773332## Read up on ssl_ciphers to ensure a secure configuration.# See: https:\/\/bugs.debian.org\/765782## Self signed certs generated by the ssl-cert package# Don't use them in a production server!## include snippets\/snakeoil.conf;<\/p>
root \/var\/www\/html;<\/p>
# Add index.php to the list if you are using PHPindex index.php index.html index.htm index.nginx-debian.html;<\/p>
server_name _;<\/p>
location \/ {# First attempt to serve request as file, then# as directory, then fall back to displaying a 404.try_files $uri $uri\/ =404;}<\/p>
# pass PHP scripts to FastCGI server#location ~ \\.php$ {include snippets\/fastcgi-php.conf;<\/p>
# With php-fpm (or other unix sockets):fastcgi_pass unix:\/var\/run\/php\/php7.0-fpm.sock;# With php-cgi (or other tcp sockets):# fastcgi_pass 127.0.0.1:9000;}<\/p>
# deny access to .htaccess files, if Apache's document root# concurs with nginx's one#location ~ \/\\.ht {deny all;}}<\/p><\/pre>\n
Restart Nginx to apply the changes.<\/p>\n
systemctl restart nginx.service<\/p>\n
Now open the https URL of your server in a browser, e.g. https:\/\/192.169.1.100\/<\/a>. You will get a security warning which you’ll have to accept to proceed. Afterwards, you will see the Nginx start page, the warning icon in the URL bar of the browser indicates that we use a self-signed SSL certificate.<\/p>\n
\"\"<\/a><\/p>\n
Use a free Let’s Encrypt SSL certificate<\/h3>\n
In this chapter, I’ll describe how to secure your Nginx server by using a free Let’s encrypt SSL certificate. A prerequisite is that you own a domain name which points to the IP of the server where you install Nginx on at the moment.<\/p>\n
Install Certbot, the Let’s encrypt client that is used to obtain a free SSL certificate.<\/p>\n
apt-get -y install certbot\u00a0python-certbot-nginx<\/p>\n
Edit the website configuration file \/etc\/nginx\/sites-available\/default and set your domain name(s) in the server_name line:<\/p>\n
nano \/etc\/nginx\/sites-available\/default<\/p>\n
The line should look like this after editing:<\/p>\n
server_name example.com;<\/pre>\n
Replace example.com with your own domain name. If you have multiple domain names or subdomains, then add them separated by whitespace.<\/p>\n
server_name example.com www.example.com\u00a0otherdomain.tld;<\/pre>\n
Now we request an SSL certificate from let’s encrypt by using the nginx plugin from Certbot.<\/p>\n
certbot –nginx -d example.com<\/p>\n
Multiple domains can be added by repeating the -d option. Example:<\/p>\n
certbot\u00a0certonly\u00a0<\/span>–webroot<\/span>\u00a0<\/span>-d example.com -d www.example.com<\/span><\/p>\n
Certbot will ask you for an email address where renewal notifications shall be sent to. Enter\u00a0a valid email address here:<\/p>\n
Enter email address (used for urgent renewal and security notices) (Enter ‘c’ to cancel): [email\u00a0protected]<\/a><\/span><\/p>\n
Accept the license terms by entering ‘A’.<\/p>\n
——————————————————————————-
Please read the Terms of Service at
https:\/\/letsencrypt.org\/documents\/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https:\/\/acme-v01.api.letsencrypt.org\/directory
——————————————————————————-
(A)gree\/(C)ancel: A<\/span><\/p>\n
Here the further dialog that requests the SSL certificate. I’ve added my answers in red.<\/p>\n
Saving debug log to \/var\/log\/letsencrypt\/letsencrypt.log
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for example.com
http-01 challenge for www.example.com<\/p>\n
Select the webroot for example.com:
——————————————————————————-
1: Enter a new webroot
——————————————————————————-
Press 1 [enter] to confirm the selection (press ‘c’ to cancel): 1<\/span>
Input the webroot for example.com: (Enter ‘c’ to cancel):\/var\/www\/html<\/span><\/p>\n
Select the webroot for www.example.com:
——————————————————————————-
1: Enter a new webroot
2: \/var\/www\/html
——————————————————————————-
Select the appropriate number [1-2] then [enter] (press ‘c’ to cancel): 2<\/span>
Waiting for verification…
Cleaning up challenges
Generating key (2048 bits): \/etc\/letsencrypt\/keys\/0000_key-certbot.pem
Creating CSR: \/etc\/letsencrypt\/csr\/0000_csr-certbot.pem<\/p>\n
IMPORTANT NOTES:
– Congratulations! Your certificate and chain have been saved at
\/etc\/letsencrypt\/live\/example.com\/fullchain.pem. Your cert will
expire on 2018-04-23. To obtain a new or tweaked version of this
certificate in the future, simply run certbot again. To
non-interactively renew *all* of your certificates, run “certbot
renew”
– If you like Certbot, please consider supporting our work by:<\/p>\n
Donating to ISRG \/ Let’s Encrypt: https:\/\/letsencrypt.org\/donate
Donating to EFF: https:\/\/eff.org\/donate-le<\/p>\n
There is an alternate method by using the ‘–nginx’ option in Certbot, but this method does not seem to work at the moment due to the TLS-SNI-01 problem in Let’s encrypt. The webroot method, as shown above, works fine though.<\/p>\n
The newly generated SSL certificate is in a subfolder of\u00a0\/etc\/letsencrypt\/live\/ folder. The exact path is shown in the Certbot output.<\/p>\n
Now we’ll add this SSL certificate in our Nginx website file. Edit the Nginx default file:<\/p>\n
nano \/etc\/<\/span>nginx\/sites-available\/default<\/span><\/p>\n
and change the SSL section like this:<\/span><\/p>\n
[...]
\nserver {listen 80 default_server;listen [::]:80 default_server;
# SSL configuration<\/p>
listen 443 ssl http2 default_server;listen [::]:443 ssl http2 default_server;<\/p>
ssl on;ssl_certificate_key \/etc\/letsencrypt\/live\/example.com\/privkey.pem;ssl_certificate \/etc\/letsencrypt\/live\/example.com\/fullchain.pem;ssl_protocols TLSv1 TLSv1.1 TLSv1.2;ssl_ciphers 'ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS';ssl_prefer_server_ciphers on;<\/p>
# Note: You should disable gzip for SSL traffic.# See: https:\/\/bugs.debian.org\/773332## Read up on ssl_ciphers to ensure a secure configuration.# See: https:\/\/bugs.debian.org\/765782## Self signed certs generated by the ssl-cert package# Don't use them in a production server!## include snippets\/snakeoil.conf;<\/p>
root \/var\/www\/html;<\/p>
# Add index.php to the list if you are using PHPindex index.php index.html index.htm index.nginx-debian.html;<\/p>
server_name _;<\/p>
location \/ {# First attempt to serve request as file, then# as directory, then fall back to displaying a 404.try_files $uri $uri\/ =404;}<\/p>
# pass PHP scripts to FastCGI server#location ~ \\.php$ {include snippets\/fastcgi-php.conf;<\/p>
# With php-fpm (or other unix sockets):fastcgi_pass unix:\/var\/run\/php\/php7.0-fpm.sock;# With php-cgi (or other tcp sockets):# fastcgi_pass 127.0.0.1:9000;}<\/p>
# deny access to .htaccess files, if Apache's document root# concurs with nginx's one#location ~ \/\\.ht {deny all;}}
\n[...]<\/p><\/pre>\n
Replace ‘example.com’ in the SSL certificate path with your own domain name. Restart Nginx to apply the changes.<\/p>\n
systemctl restart\u00a0<\/span>nginx.service<\/p>\n
Virtual Machine image<\/h2>\n
This tutorial is available as ready to use virtual machine in OVA \/ OVF format for Howtoforge subscribers. The VM format is compatible with VMWare and Virtualbox and probably some other tools that can import this format. You can find the download link in the right menu on the top. Click on the file name to start the download.<\/p>\n
The login details of the VM are:<\/p>\n
SSH Login<\/h3>\n
Username: administrator
Password: howtoforge<\/p>\n
Run ‘su’ to become root user, the root password is ‘howtoforge’ as well.<\/p>\n
The virtual machine image uses MySQL as the database server.<\/p>\n
MySQL Login<\/h3>\n
Username: root<\/span>
Password: howtoforge<\/span><\/p>\n
Please change the passwords after the first boot.<\/span><\/p>\n
The VM is configured for the static IP 192.168.1.100, the IP can be changed in the file \/etc\/network\/interfaces.<\/span><\/p>\n
Links<\/h2>\n
\n
Share this page:<\/b><\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"
This tutorial will show you the installation of the Nginx web server on Debian 9 (Stretch).\u00a0Nginx (pronounced “engine x”) is a free, open-source, high-performance HTTP server. Nginx is known for its stability, rich feature set, simple configuration, and low resource consumption. This tutorial shows\u00a0the installation of Nginx with PHP support (through PHP-FPM) and MySQL and […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[],"class_list":["post-2775","post","type-post","status-publish","format-standard","hentry","category-36"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/2775","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=2775"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/2775\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=2775"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=2775"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=2775"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}