2015-05-18LAMP/LNMP Stage Review

We review them in the form of simulated actual needs. The requirements are as follows:
1. Prepare two CentOS 6, one machine running MySQL, another machine running Apache and Nginx + PHP
2. Install Apache and Nginx at the same time, which Nginx start 80 port, used to run static objects (image, JS, CSS), Apache listening 88 port, is responsible for running dynamic pages (PHP related), and need to be accessed by Nginx Agent
3. mysql server needs to turn on slow query log
4. Build Discuz, WordPress and phpMyAdmin, the domain name is bbs.abc.com, blog.abc.com, pma.abc.com
5. Configuring pseudo-static (Nginx) for Discuz
6. Apache does not need to log logs, Nginx logs, but does not record the log of static pages such as pictures, and configuration log cutting
7. Configure image anti-theft chain (Nginx)
8. Configure picture Cache for 7 days, JS,CSS cache for 1 days (Nginx)
9. Discuz and WordPress Access background limit the IP whitelist, such as only allow 192.168.1.100 access (Nginx)
phpMyAdmin the entire site needs to be configured with user authentication (Nginx)
11. Write a MySQL backup script that executes at 5 points per day and requires remote copy to the Web machine
12. Remove other common search engine spiders except Baidu and Google, such as (bingbot/2.0, Sogou Web spider/4.0, 360Spider, Yisouspider, yandexbot/3.0) (Nginx)
Reference configuration:
/usr/local/apache2/conf/extra/httpd-vhosts.conf

2. Namevirtualhost *:88
6. <virtualhost *:88>
8. DocumentRoot "/tmp/tmp"
10. ServerName tmp.com
12. Php_admin_value Open_basedir "/tmp/tmp"
14. <Directory/tmp/tmp/>
16. Order Allow,deny
18. Deny from all
20. </Directory>
22. </VirtualHost>
26. <virtualhost *:88>
28. DocumentRoot "/data/bbs"
30. ServerName bbs.abc.com
32. </VirtualHost>
36. <virtualhost *:88>
38. DocumentRoot "/data/blog"
40. ServerName blog.abc.com
42. </VirtualHost>
46. <virtualhost *:88>
48. DocumentRoot "/DATA/PMA"
50. ServerName pma.abc.com
52. </VirtualHost>

Copy Code

Related to Nginx:
1. bbs.conf

2. Server
4. {
6. Listen 80;
8. server_name bbs.abc.com;
10. Index index.html index.htm index.php;
12. Root/data/bbs;
16. #根据user_agent控制
18. if ($http _user_agent ~ ' bingbot/2.0| mj12bot/v1.4.2| spider/3.0| Youdaobot| tomato| gecko/20100315 ') {
20. return 403;
22. }
24. Location ~ admin.php {
26. Allow 192.168.31.141;
28. Deny all;
30. Proxy_pass http://127.0.0.1:88;
32. Proxy_set_header Host $host;
34. }
38. Location ~ \.php$ {
40. Proxy_pass http://127.0.0.1:88;
42. Proxy_set_header Host $host;
44. Proxy_set_header X-real-ip $remote _addr;
46. Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
48. }
54. Location ~. *\. (JS|CSS)? $
56. {
58. Expires 24h;
60. Access_log off;
62. }
66. Location ~* ^.+\. (Gif|jpg|png|swf|flv|rar|zip|doc|pdf|gz|bz2|jpeg|bmp|xls) $ {
68. Expires 7d;
70. Valid_referers None blocked Server_names *.abc.com *.a.com *.b.com *.baidu.com\
72. *.google.com *.google.cn *.soso.com;
74. if ($invalid _referer) {
76. return 403;
78. #rewrite ^/http://www.example.com/nophoto.gif;
80. }
82. Access_log off;
84. }
88. rewrite ^ ([^\.] *)/topic-(. +) \.html$ $1/portal.php?mod=topic&topic=$2 last;
90. rewrite ^ ([^\.] *)/forum-(\w+)-([0-9]+) \.html$ $1/forum.php?mod=forumdisplay&fid=$2&page=$3 last;
92. rewrite ^ ([^\.] *)/thread-([0-9]+)-([0-9]+)-([0-9]+] \.html$ $1/forum.php?mod=viewthread&tid=$2&extra=page%3d$4&page =$3 last;
94. rewrite ^ ([^\.] *)/group-([0-9]+)-([0-9]+) \.html$ $1/forum.php?mod=group&fid=$2&page=$3 last;
96. rewrite ^ ([^\.] *)/space-(USERNAME|UID)-(. +) \.html$ $1/home.php?mod=space&$2=$3 last;
98. rewrite ^ ([^\.] *)/(Fid|tid)-([0-9]+) \.html$ $1/index.php?action=$2&value=$3 last;
104. Access_log/home/logs/discuz.log Combined_realip;
106. }

Copy Code

2. blog.conf (Reference http://www.upupw.net/nginxhelp/n33.html)

2. Server
4. {
6. Listen 80;
8. server_name blog.abc.com;
10. Index index.html index.htm index.php;
12. Root/data/blog;
14. location/wp-admin/{
16. Allow 127.0.0.1;
18. Deny all;
20. Location ~ \.php$ {
22. Proxy_pass http://127.0.0.1:88;
24. Proxy_set_header Host $host;
26. }
28. }
32. Location/{
34. Proxy_pass http://127.0.0.1:88/;
36. Proxy_set_header Host $host;
38. Proxy_set_header X-real-ip $remote _addr;
40. Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
42. }
46. }

Copy Code

3. pma.conf

2. Server
4. {
6. Listen 80;
8. server_name pma.abc.com;
10. Index index.html index.htm index.php;
12. ROOT/DATA/PMA;
16. Location/{
18. Auth_basic "Auth";
20. AUTH_BASIC_USER_FILE/USR/LOCAL/NGINX/CONF/HTPASSWD;
24. Location ~ \.php$ {
26. Proxy_pass http://127.0.0.1:88;
28. Proxy_set_header Host $host;
30. Proxy_set_header X-real-ip $remote _addr;
32. Proxy_set_header x-forwarded-for $proxy _add_x_forwarded_for;
34. }
38. }
40. }

Copy Code

phpMyAdmin installation http://www.aminglinux.com/bbs/thread-6509-1-1.html

Wordpress installation Http://www.apelearn.com/bbs/forum.php?mod=viewthread&tid=7954&highlight=wordpress

2015-05-18LAMP/LNMP Stage Review