می خواهم Nginx, MySQL, PHP را روی سیستم‌عامل CentOS کانفیگ کنم

# برای CentOS 7:
yum update -y

# برای CentOS 8+ / AlmaLinux / Rocky Linux:
dnf update -y

# برای CentOS 7:
yum update -y

# برای CentOS 8+ / AlmaLinux / Rocky Linux:
dnf update -y

# برای CentOS 7:
yum install epel-release -y
yum install https://rpms.remirepo.net/enterprise/remi-release-7.rpm -y

# برای CentOS 8 / AlmaLinux 8 / Rocky Linux 8:
dnf install epel-release -y
dnf install https://rpms.remirepo.net/enterprise/remi-release-8.rpm -y

# برای AlmaLinux 9 / Rocky Linux 9:
dnf install epel-release -y
dnf install https://rpms.remirepo.net/enterprise/remi-release-9.rpm -y

# برای CentOS 7:
yum install epel-release -y
yum install https://rpms.remirepo.net/enterprise/remi-release-7.rpm -y

# برای CentOS 8 / AlmaLinux 8 / Rocky Linux 8:
dnf install epel-release -y
dnf install https://rpms.remirepo.net/enterprise/remi-release-8.rpm -y

# برای AlmaLinux 9 / Rocky Linux 9:
dnf install epel-release -y
dnf install https://rpms.remirepo.net/enterprise/remi-release-9.rpm -y

# برای CentOS 8+:
dnf module reset php
dnf module enable php:remi-8.2 -y

# برای نصب PHP 8.1:
dnf module enable php:remi-8.1 -y

# برای CentOS 7:
yum-config-manager --enable remi-php82

# برای CentOS 8+:
dnf module reset php
dnf module enable php:remi-8.2 -y

# برای نصب PHP 8.1:
dnf module enable php:remi-8.1 -y

# برای CentOS 7:
yum-config-manager --enable remi-php82

# CentOS 7:
yum install nginx -y

# CentOS 8+:
dnf install nginx -y

# CentOS 7:
yum install nginx -y

# CentOS 8+:
dnf install nginx -y

systemctl enable nginx
systemctl start nginx
systemctl status nginx

systemctl enable nginx
systemctl start nginx
systemctl status nginx

nginx -v

nginx -v

# CentOS 7:
yum install php php-fpm php-mysqlnd php-cli php-opcache php-zip php-xml php-json php-mbstring php-gd php-curl -y

# CentOS 8+:
dnf install php php-fpm php-mysqlnd php-cli php-opcache php-zip php-xml php-json php-mbstring php-gd php-curl -y

# CentOS 7:
yum install php php-fpm php-mysqlnd php-cli php-opcache php-zip php-xml php-json php-mbstring php-gd php-curl -y

# CentOS 8+:
dnf install php php-fpm php-mysqlnd php-cli php-opcache php-zip php-xml php-json php-mbstring php-gd php-curl -y

systemctl enable php-fpm
systemctl start php-fpm
systemctl status php-fpm

systemctl enable php-fpm
systemctl start php-fpm
systemctl status php-fpm

php -v

php -v

vi /etc/php-fpm.d/www.conf

vi /etc/php-fpm.d/www.conf

; تغییر user و group به nginx
user = nginx
group = nginx

; تنظیم socket
listen = /run/php-fpm/www.sock

; تنظیم مالکیت socket
listen.owner = nginx
listen.group = nginx
listen.mode = 0660

; تنظیمات Process Manager
pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500

; تغییر user و group به nginx
user = nginx
group = nginx

; تنظیم socket
listen = /run/php-fpm/www.sock

; تنظیم مالکیت socket
listen.owner = nginx
listen.group = nginx
listen.mode = 0660

; تنظیمات Process Manager
pm = dynamic
pm.max_children = 50
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 35
pm.max_requests = 500

systemctl restart php-fpm

systemctl restart php-fpm

ls -la /run/php-fpm/www.sock

ls -la /run/php-fpm/www.sock

srw-rw---- 1 nginx nginx 0 Dec 8 10:30 /run/php-fpm/www.sock

srw-rw---- 1 nginx nginx 0 Dec 8 10:30 /run/php-fpm/www.sock

={IMPORTXML("https://webdade.com/post-sitemap1.xml","//*[local-name() = 'url']/*[local-name() = 'loc']");IMPORTXML("https://webdade.com/post-sitemap2.xml","//*[local-name() = 'ur# فعال‌سازی اتصال شبکه برای Nginx
setsebool -P httpd_can_network_connect 1

# اجازه اجرای حافظه برای PHP
setsebool -P httpd_execmem 1

# تنظیم context برای فایل‌های وب
chcon -R -t httpd_sys_content_t /var/www/html/

# اجازه اتصال به database
setsebool -P httpd_can_network_connect_db 1

# بررسی وضعیت SELinux
getenforcel']/*[local-name() = 'loc']");IMPORTXML("https://webdade.com/post-sitemap3.xml","//*[local-name() = 'url']/*[local-name() = 'loc']");IMPORTXML("https://webdade.com/page-sitemap.xml","//*[local-name() = 'url']/*[local-name() = 'loc']")}

={IMPORTXML("https://webdade.com/post-sitemap1.xml","//*[local-name() = 'url']/*[local-name() = 'loc']");IMPORTXML("https://webdade.com/post-sitemap2.xml","//*[local-name() = 'ur# فعال‌سازی اتصال شبکه برای Nginx
setsebool -P httpd_can_network_connect 1

# اجازه اجرای حافظه برای PHP
setsebool -P httpd_execmem 1

# تنظیم context برای فایل‌های وب
chcon -R -t httpd_sys_content_t /var/www/html/

# اجازه اتصال به database
setsebool -P httpd_can_network_connect_db 1

# بررسی وضعیت SELinux
getenforcel']/*[local-name() = 'loc']");IMPORTXML("https://webdade.com/post-sitemap3.xml","//*[local-name() = 'url']/*[local-name() = 'loc']");IMPORTXML("https://webdade.com/page-sitemap.xml","//*[local-name() = 'url']/*[local-name() = 'loc']")}

# باز کردن پورت HTTP
firewall-cmd --permanent --add-service=http

# باز کردن پورت HTTPS
firewall-cmd --permanent --add-service=https

# اعمال تغییرات
firewall-cmd --reload

# بررسی وضعیت
firewall-cmd --list-all

# باز کردن پورت HTTP
firewall-cmd --permanent --add-service=http

# باز کردن پورت HTTPS
firewall-cmd --permanent --add-service=https

# اعمال تغییرات
firewall-cmd --reload

# بررسی وضعیت
firewall-cmd --list-all

# CentOS 7:
yum install mariadb-server -y

# CentOS 8+:
dnf install mariadb-server -y

# CentOS 7:
yum install mariadb-server -y

# CentOS 8+:
dnf install mariadb-server -y

systemctl enable mariadb
systemctl start mariadb
systemctl status mariadb

systemctl enable mariadb
systemctl start mariadb
systemctl status mariadb

mysql_secure_installation

mysql_secure_installation

mysql -u root -p

mysql -u root -p

CREATE DATABASE myapp CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'myuser'@'localhost' IDENTIFIED BY 'StrongPassword123!';
GRANT ALL PRIVILEGES ON myapp.* TO 'myuser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

CREATE DATABASE myapp CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;
CREATE USER 'myuser'@'localhost' IDENTIFIED BY 'StrongPassword123!';
GRANT ALL PRIVILEGES ON myapp.* TO 'myuser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

mysql -u myuser -p myapp

mysql -u myuser -p myapp

mkdir -p /var/www/html/example.com
chown -R nginx:nginx /var/www/html/example.com
chmod -R 755 /var/www/html/example.com

mkdir -p /var/www/html/example.com
chown -R nginx:nginx /var/www/html/example.com
chmod -R 755 /var/www/html/example.com

vi /etc/nginx/conf.d/example.com.conf

vi /etc/nginx/conf.d/example.com.conf

server {
    listen 80;
    server_name example.com www.example.com;
    root /var/www/html/example.com;
    
    index index.php index.html index.htm;
    
    # لاگ‌ها
    access_log /var/log/nginx/example.com-access.log;
    error_log /var/log/nginx/example.com-error.log;
    
    # تنظیمات امنیتی
    server_tokens off;
    
    # بهینه‌سازی
    client_max_body_size 64M;
    
    # مسیر اصلی
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    
    # پردازش PHP
    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_pass unix:/run/php-fpm/www.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        include fastcgi_params;
        
        # تنظیمات بهینه‌سازی
        fastcgi_buffer_size 128k;
        fastcgi_buffers 256 16k;
        fastcgi_busy_buffers_size 256k;
        fastcgi_temp_file_write_size 256k;
        fastcgi_read_timeout 240;
    }
    
    # مسدود کردن فایل‌های .htaccess
    location ~ /\.ht {
        deny all;
    }
    
    # مسدود کردن فایل‌های مخفی
    location ~ /\. {
        deny all;
        access_log off;
        log_not_found off;
    }
    
    # کش فایل‌های استاتیک
    location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
        access_log off;
    }
}

server {
    listen 80;
    server_name example.com www.example.com;
    root /var/www/html/example.com;
    
    index index.php index.html index.htm;
    
    # لاگ‌ها
    access_log /var/log/nginx/example.com-access.log;
    error_log /var/log/nginx/example.com-error.log;
    
    # تنظیمات امنیتی
    server_tokens off;
    
    # بهینه‌سازی
    client_max_body_size 64M;
    
    # مسیر اصلی
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    
    # پردازش PHP
    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_pass unix:/run/php-fpm/www.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        include fastcgi_params;
        
        # تنظیمات بهینه‌سازی
        fastcgi_buffer_size 128k;
        fastcgi_buffers 256 16k;
        fastcgi_busy_buffers_size 256k;
        fastcgi_temp_file_write_size 256k;
        fastcgi_read_timeout 240;
    }
    
    # مسدود کردن فایل‌های .htaccess
    location ~ /\.ht {
        deny all;
    }
    
    # مسدود کردن فایل‌های مخفی
    location ~ /\. {
        deny all;
        access_log off;
        log_not_found off;
    }
    
    # کش فایل‌های استاتیک
    location ~* \.(jpg|jpeg|png|gif|ico|css|js|svg|woff|woff2|ttf|eot)$ {
        expires 1y;
        add_header Cache-Control "public, immutable";
        access_log off;
    }
}

nginx -t

nginx -t

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful

systemctl restart nginx

systemctl restart nginx

vi /etc/nginx/nginx.conf

vi /etc/nginx/nginx.conf

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /run/nginx.pid;

events {
    worker_connections 1024;
    use epoll;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    
    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';
    
    access_log /var/log/nginx/access.log main;
    
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;
    
    # فشرده‌سازی Gzip
    gzip on;
    gzip_vary on;
    gzip_comp_level 5;
    gzip_min_length 256;
    gzip_proxied any;
    gzip_types
        application/atom+xml
        application/javascript
        application/json
        application/ld+json
        application/manifest+json
        application/rss+xml
        application/vnd.geo+json
        application/vnd.ms-fontobject
        application/x-font-ttf
        application/x-web-app-manifest+json
        application/xhtml+xml
        application/xml
        font/opentype
        image/bmp
        image/svg+xml
        image/x-icon
        text/cache-manifest
        text/css
        text/plain
        text/vcard
        text/vnd.rim.location.xloc
        text/vtt
        text/x-component
        text/x-cross-domain-policy;
    
    include /etc/nginx/conf.d/*.conf;
}

user nginx;
worker_processes auto;
error_log /var/log/nginx/error.log warn;
pid /run/nginx.pid;

events {
    worker_connections 1024;
    use epoll;
}

http {
    include /etc/nginx/mime.types;
    default_type application/octet-stream;
    
    log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                    '$status $body_bytes_sent "$http_referer" '
                    '"$http_user_agent" "$http_x_forwarded_for"';
    
    access_log /var/log/nginx/access.log main;
    
    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    types_hash_max_size 2048;
    server_tokens off;
    
    # فشرده‌سازی Gzip
    gzip on;
    gzip_vary on;
    gzip_comp_level 5;
    gzip_min_length 256;
    gzip_proxied any;
    gzip_types
        application/atom+xml
        application/javascript
        application/json
        application/ld+json
        application/manifest+json
        application/rss+xml
        application/vnd.geo+json
        application/vnd.ms-fontobject
        application/x-font-ttf
        application/x-web-app-manifest+json
        application/xhtml+xml
        application/xml
        font/opentype
        image/bmp
        image/svg+xml
        image/x-icon
        text/cache-manifest
        text/css
        text/plain
        text/vcard
        text/vnd.rim.location.xloc
        text/vtt
        text/x-component
        text/x-cross-domain-policy;
    
    include /etc/nginx/conf.d/*.conf;
}

vi /etc/php.ini

vi /etc/php.ini

max_execution_time = 300
max_input_time = 300
memory_limit = 256M
post_max_size = 64M
upload_max_filesize = 64M

date.timezone = Asia/Tehran

opcache.enable=1
opcache.enable_cli=1
opcache.memory_consumption=128
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.revalidate_freq=2
opcache.fast_shutdown=1

max_execution_time = 300
max_input_time = 300
memory_limit = 256M
post_max_size = 64M
upload_max_filesize = 64M

date.timezone = Asia/Tehran

opcache.enable=1
opcache.enable_cli=1
opcache.memory_consumption=128
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.revalidate_freq=2
opcache.fast_shutdown=1

systemctl restart php-fpm

systemctl restart php-fpm

# نصب Certbot
dnf install certbot python3-certbot-nginx -y

# دریافت SSL برای دامنه
certbot --nginx -d example.com -d www.example.com

# تست تمدید خودکار
certbot renew --dry-run

# نصب Certbot
dnf install certbot python3-certbot-nginx -y

# دریافت SSL برای دامنه
certbot --nginx -d example.com -d www.example.com

# تست تمدید خودکار
certbot renew --dry-run

vi /var/www/html/example.com/info.php

vi /var/www/html/example.com/info.php

<?php
phpinfo();
?>

<?php
phpinfo();
?>

vi /var/www/html/example.com/dbtest.php

vi /var/www/html/example.com/dbtest.php

<?php
$servername = "localhost";
$username = "myuser";
$password = "StrongPassword123!";
$dbname = "myapp";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}
echo "Connected successfully to MySQL!";
$conn->close();
?>

<?php
$servername = "localhost";
$username = "myuser";
$password = "StrongPassword123!";
$dbname = "myapp";

$conn = new mysqli($servername, $username, $password, $dbname);

if ($conn->connect_error) {
    die("Connection failed: " . $conn->connect_error);
}
echo "Connected successfully to MySQL!";
$conn->close();
?>

http://example.com/info.php
http://example.com/dbtest.php

http://example.com/info.php
http://example.com/dbtest.php

rm -f /var/www/html/example.com/info.php
rm -f /var/www/html/example.com/dbtest.php

rm -f /var/www/html/example.com/info.php
rm -f /var/www/html/example.com/dbtest.php

tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/example.com-error.log
tail -f /var/log/php-fpm/error.log

tail -f /var/log/nginx/error.log
tail -f /var/log/nginx/example.com-error.log
tail -f /var/log/php-fpm/error.log