配置一个nginx+php的web服务器

一、基本信息

• 系统（L）：CentOS 6.9 #下载地址：http://mirrors.sohu.com
• Web服务器(N)：NGINX 1.14.0 #下载地址：http://nginx.org/en/download.html
• 数据库服务器(M)：MySQL 5.6.40 #下载地址：https://dev.mysql.com/downloads/mysql
• PHP-FPM服务器(P)：php-5.6.8.tar.gz #下载地址：http://mirrors.sohu.com/php/
• OPENSSL：openssl-1.0.2o.tar.gz #下载地址：https://www.openssl.org/source/

指定服务安装的通用位置

mkdir /usr/local/servicesSERVICE_PATH=/usr/local/services

创建服务运行的账户

useradd -r -M -s /sbin/nologin www

安装所需依赖包

yum -y install pcre pcre-devel gperftools gcc zlib-devel libxml2 libxml2-devel bzip2 bzip2-devel curl curl-devel libjpeg-devel libjpeg libpng-devel libpng freetype freetype-devel libmcrypt libmcrypt-devel openssl-devel

二、软件安装配置

1、NGINX+OPENSSL安装

下载解压NGINX+OPENSSL

NGINX_URL="http://nginx.org/download/nginx-1.14.0.tar.gz"OPENSSL_URL="https://www.openssl.org/source/openssl-1.1.0h.tar.gz"wget -P ${SERVICE_PATH} ${NGINX_URL} && tar -zxvf ${SERVICE_PATH}/nginx*.tar.gz -C ${SERVICE_PATH}wget -P ${SERVICE_PATH} ${OPENSSL_URL} && tar -zxvf ${SERVICE_PATH}/openssl*.gz -C ${SERVICE_PATH}

编译安装NGINX

cd ${SERVICE_PATH}/nginx-*;./configure --prefix=${SERVICE_PATH}/nginx --user=www --group=www --with-http_stub_status_module --with-http_ssl_module --with-http_flv_module --with-pcre --with-http_gzip_static_module --with-openssl=${SERVICE_PATH}/openssl* --with-http_realip_module --with-google_perftools_module --without-select_module --without-mail_pop3_module --without-mail_imap_module --without-mail_smtp_module --without-poll_module --without-http_autoindex_module --without-http_geo_module --without-http_uwsgi_module --without-http_scgi_module --without-http_memcached_module --with-cc-opt=‘-O2‘ && cd ${SERVICE_PATH}/nginx-*;make && make install

NGINX+OPENSSL安装完成后的清理与其他配置

ln -sv ${SERVICE_PATH}/nginx /usr/local/rm -rf ${SERVICE_PATH}/nginx/conf/*.defaultcd ${SERVICE_PATH} ; rm -rf nginx*.tar.gz openssl*.tar.gz

写入主配置文件nginx.conf（配置已优化）

cat << EOF >/usr/local/nginx/conf/nginx.confuser www;worker_processes WORKERNUMBER;worker_cpu_affinity auto;worker_rlimit_nofile 655350;error_log /var/log/nginx_error.log;pid /tmp/nginx.pid;google_perftools_profiles /tmp/tcmalloc;events {use epoll;worker_connections 655350;multi_accept on;}http {charset utf-8;include mime.types;default_type text/html;log_format main ‘"\$remote_addr" - [\$time_local] "\$request" ‘‘\$status $body_bytes_sent "\$http_referer" ‘‘"\$http_user_agent" ‘‘"\$sent_http_server_name \$upstream_response_time" ‘‘\$request_time ‘‘\$args‘;sendfile on;tcp_nopush on;tcp_nodelay on;keepalive_timeout 120;client_body_buffer_size 512k;client_header_buffer_size 64k;large_client_header_buffers 4 32k;client_max_body_size 300M;client_header_timeout 15s;client_body_timeout 50s;open_file_cache max=102400 inactive=20s;open_file_cache_valid 30s;open_file_cache_min_uses 1;server_names_hash_max_size 2048;server_names_hash_bucket_size 256;server_tokens off;gzip on;gzip_proxied any;gzip_min_length 1024;gzip_buffers 4 8k;gzip_comp_level 9;gzip_disable "MSIE [1-6]\.";gzip_types application/json test/html text/plain text/css application/font-woff application/pdf application/octet-stream application/x-javascript application/javascript application/xml text/javascript;fastcgi_cache_path /dev/shm/ levels=1:2 keys_zone=fastcgicache:512m inactive=10m max_size=3g;fastcgi_cache_lock on;fastcgi_ignore_headers Cache-Control Expires Set-Cookie;fastcgi_send_timeout 300;fastcgi_connect_timeout 300;fastcgi_read_timeout 300;fastcgi_buffer_size 256k;fastcgi_buffers 4 128k;fastcgi_busy_buffers_size 256k;fastcgi_temp_file_write_size 256k;include vhost/*.conf;}EOF

NGINX worker进程数配置，指定为逻辑CPU数量的2倍

THREAD=`expr $(grep process /proc/cpuinfo |wc -l) \* 2`sed -i s"/WORKERNUMBER/$THREAD/" ${SERVICE_PATH}/nginx/conf/nginx.conf

2、PHP-FPM安装

下载并解压PHP-FPM软件

FPM_URL="http://mirrors.sohu.com/php/php-5.6.8.tar.gz"wget -P ${SERVICE_PATH} ${FPM_URL} && tar -zxvf ${SERVICE_PATH}/php*.tar.gz -C ${SERVICE_PATH}

编译安装PHP-FPM

cd ${SERVICE_PATH}/php-*;./configure --prefix=${SERVICE_PATH}/php --with-gd --with-mcrypt --with-mysql=mysqlnd --with-mysqli=mysqlnd --with-pdo-mysql=mysqlnd --enable-maintainer-zts --enable-ftp --enable-zip --with-bz2 -with-iconv-dir --with-freetype-dir --with-jpeg-dir --with-png-dir --with-config-file-path=${SERVICE_PATH}/php --enable-mbstring --enable-fpm --with-fpm-user=www --with-fpm-group=www --disable-debug --enable-opcache --enable-soap --with-zlib --with-libxml-dir=/usr --enable-xml --disable-rpath --enable-bcmath --enable-shmop --enable-sysvsem --enable-inline-optimization --with-curl --enable-mbregex --enable-gd-native-ttf --with-openssl --with-mhash --enable-pcntl --enable-sockets --with-xmlrpc --with-pear --with-gettext --disable-fileinfo && cd ${SERVICE_PATH}/php-*;make && make install

若FPM程序有插件需求，如mongo或redis连接插件，则可通过pecl安装php相关插件

${SERVICE_PATH}/php/bin/pecl install mongo || exit

${SERVICE_PATH}/php/bin/pecl install redis || exit

安装完成后的配置清理

ln -sv ${SERVICE_PATH}/php /usr/local/

php.ini配置文件写入（配置已优化）

cat << EOF >${SERVICE_PATH}/php/php.ini [PHP]engine = Onshort_open_tag = Offasp_tags = Offprecision = 14output_buffering = 4096zlib.output_compression = Offimplicit_flush = Offunserialize_callback_func =serialize_precision = 17disable_functions = shell_exec,phpinfo,execdisable_classes =zend.enable_gc = Onexpose_php = Offmax_execution_time = 60max_input_time = 60memory_limit = 128Merror_reporting = E_WARING & ERRORdisplay_errors = Offdisplay_startup_errors = Offlog_errors = Onlog_errors_max_len = 2048ignore_repeated_errors = Offignore_repeated_source = Offreport_memleaks = Ontrack_errors = Offhtml_errors = Offerror_log = /var/log/php_errors.logvariables_order = "GPCS"request_order = "GP"register_argc_argv = Offauto_globals_jit = Onpost_max_size = 8Mauto_prepend_file =auto_append_file =default_mimetype = "text/html"default_charset = "UTF-8"doc_root =user_dir =enable_dl = Offcgi.fix_pathinfo=0file_uploads = Onupload_max_filesize = 2Mmax_file_uploads = 20allow_url_fopen = Offallow_url_include = Offdefault_socket_timeout = 60[CLI Server]cli_server.color = On[Date][filter][iconv][intl][sqlite][sqlite3][Pcre][Pdo][Pdo_mysql]pdo_mysql.cache_size = 2000pdo_mysql.default_socket=[Phar][mail function]SMTP = localhostsmtp_port = 25mail.add_x_header = On[SQL]sql.safe_mode = Off[ODBC]odbc.allow_persistent = Onodbc.check_persistent = Onodbc.max_persistent = -1odbc.max_links = -1odbc.defaultlrl = 4096odbc.defaultbinmode = 1[Interbase]ibase.allow_persistent = 1ibase.max_persistent = -1ibase.max_links = -1ibase.timestampformat = "%Y-%m-%d %H:%M:%S"ibase.dateformat = "%Y-%m-%d"ibase.timeformat = "%H:%M:%S"[MySQL]mysql.allow_local_infile = Onmysql.allow_persistent = Onmysql.cache_size = 2000mysql.max_persistent = -1mysql.max_links = -1mysql.default_port =mysql.default_socket =mysql.default_host =mysql.default_user =mysql.default_password =mysql.connect_timeout = 60mysql.trace_mode = Off[MySQLi]mysqli.max_persistent = -1mysqli.allow_persistent = Onmysqli.max_links = -1mysqli.cache_size = 2000mysqli.default_port = 3306mysqli.default_socket =mysqli.default_host =mysqli.default_user =mysqli.default_pw =mysqli.reconnect = Off[mysqlnd]mysqlnd.collect_statistics = Onmysqlnd.collect_memory_statistics = Off[OCI8][PostgreSQL]pgsql.allow_persistent = Onpgsql.auto_reset_persistent = Offpgsql.max_persistent = -1pgsql.max_links = -1pgsql.ignore_notice = 0pgsql.log_notice = 0[Sybase-CT]sybct.allow_persistent = Onsybct.max_persistent = -1sybct.max_links = -1sybct.min_server_severity = 10sybct.min_client_severity = 10[bcmath]bcmath.scale = 0[browscap][Session]session.save_handler = filessession.save_path = "/tmp"session.use_strict_mode = 0session.use_cookies = 1session.use_only_cookies = 1session.name = PHPSESSIDsession.auto_start = 0session.cookie_lifetime = 0session.cookie_path = /session.cookie_domain =session.cookie_httponly =session.serialize_handler = phpsession.gc_probability = 1session.gc_divisor = 1000session.gc_maxlifetime = 1440session.referer_check =session.cache_limiter = nocachesession.cache_expire = 180session.use_trans_sid = 0session.hash_function = 0session.hash_bits_per_character = 5url_rewriter.tags = "a=href,area=href,frame=src,input=src,form=fakeentry"[MSSQL]mssql.allow_persistent = Onmssql.max_persistent = -1mssql.max_links = -1mssql.min_error_severity = 10mssql.min_message_severity = 10mssql.compatibility_mode = Offmssql.secure_connection = Off[Assertion][COM][mbstring][gd]gd.jpeg_ignore_warning = 0[exif][Tidy]tidy.clean_output = Off[soap]soap.wsdl_cache_enabled=1soap.wsdl_cache_dir="/tmp"soap.wsdl_cache_ttl=86400soap.wsdl_cache_limit = 5[sysvshm][ldap]ldap.max_links = -1[mcrypt][dba][opcache]opcache.enable=1opcache.enable_cli=0opcache.memory_consumption=128opcache.interned_strings_buffer=8opcache.max_accelerated_files=4000opcache.validate_timestamps=1opcache.revalidate_freq=30opcache.fast_shutdown=1opcache.enable_file_override=1[curl][openssl]extension_dir=‘${SERVICE_PATH}/php/lib/php/extensions/‘;extension=mongo.so;extension=redis.soEOF

php-fpm.conf配置文件写入（配置已优化）

cat << EOF >${SERVICE_PATH}/php/etc/php-fpm.conf[global]pid = /tmp/php-fpm.piderror_log = /var/log/php-fpm-error.loglog_level = warningprocess_control_timeout = 10rlimit_files = 655350events.mechanism = epoll[www]user = wwwgroup = wwwlisten = /dev/shm/php-fpm.socklisten.backlog = 2048listen.owner = wwwlisten.group = wwwlisten.mode = 0660pm = dynamicpm.max_children = 200pm.start_servers = 105pm.min_spare_servers = 10pm.max_spare_servers = 200pm.process_idle_timeout = 10s;pm.max_requests = 1000pm.status_path = /fpmstatusping.path = /pingping.response = pongslowlog = /var/log/php-slow-$pool.logrequest_slowlog_timeout = 10request_terminate_timeout = 0rlimit_files = 655350security.limit_extensions = .phpEOF

三、基于以上配置PHP网站

mkdir /usr/local/nginx/conf/vhost

cat << EOF > /usr/local/nginx/conf/vhost/erbiao.ex.com.confserver{listen 80 backlog=1024;server_name erbiao.ex.com;index index.php index.html ;root /www/web/;access_log off;add_header Server-Name WEBerbiaoEX;location ~ \.php {fastcgi_pass unix:/dev/shm/php-fpm.sock;fastcgi_index index.php;include fastcgi.conf;set \$real_script_name \$fastcgi_script_name;if (\$fastcgi_script_name ~ "^(.+?\.php)(/.+)\$") {set \$real_script_name \$1;set \$path_info \$2;}fastcgi_param SCRIPT_FILENAME \$document_root\$real_script_name;fastcgi_param SCRIPT_NAME \$real_script_name;fastcgi_param PATH_INFO \$fastcgi_path_info;location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)${expires 30d;}location ~ .*\.(js|css)?${expires 12h;}}}EOF

若在同一服务器运行nginx和php-fpm，并发量不超过1000，选择unix socket，如此可避免一些检查操作(路由等)，因此更快，更轻。若是高并发业务，则选择使用更可靠的tcp socket，以负载均衡、内核优化等运维手段维持效率

四、启动服务

启动nginx和php-fpm

/usr/local/nginx/sbin/nginx/usr/local/php-fpm/sbin/php-fpm

命令其他选项

nginx├── -s选项，向主进程发送信号| ??├── reload参数，重新加载配置文件| ??├── stop参数，快速停止nginx| ??├── reopen参数，重新打开日志文件| ??├── quit参数，Nginx在退出前完成已经接受的连接请求├── -t选项，检查配置文件是否正确├── -c选项，用于指定特定的配置文件并启动nginx├── -V选项（大写），显示nginx编译选项与版本信息php-fpm├── -t选项，检查配置文件是否正确├── -m选项，显示所有已安装模块├── -i选项，显示PHP详细信息├── -v选项，显示版本信息

配置一个nginx+php的web服务器

原文地址：https://www.cnblogs.com/erbiao/p/9237851.html