十年网站开发经验 + 多家企业客户 + 靠谱的建站团队
量身定制 + 运营维护+专业推广+无忧售后,网站问题一站解决
建站服务器
什么是LNMP?
金沙网站制作公司哪家好,找创新互联建站!从网页设计、网站建设、微信开发、APP开发、成都响应式网站建设等网站项目制作,到程序开发,运营维护。创新互联建站自2013年起到现在10年的时间,我们拥有了丰富的建站经验和运维经验,来保证我们的工作的顺利进行。专注于网站建设就选创新互联建站。LNMP(别名LEMP)是指由Linux, Nginx, mysql/MariaDB, PHP/Perl/Python组合成的动态Web应用程序和服务器,它是一组Web应用程序的基础软件包,在这个基础环境上我们可以搭建任何使用PHP/Perl/Python等语言的动态网站,如商务网站、博客、论坛和开源Web应用程序软件等,它是互联网上被广泛使用的Web网站架构之一。
部署方式
从网站规模大小(访问流量、注册用户等)角度来看,LNMP架构可以使用单机部署方式和集群部署方式。单机部署方式即所有的软件都部署在一台Linux服务器上;集群部署方式可以将Nginx网络服务器,Mysql/MariaDB数据库,PHP软件分开安装到不同的服务器上,它们彼此之间通过TCP网络协议相互通信协助工作,以及对外提供Web应用访问服务。因此,当单台服务器不能满足性能要求时,可以使用集群方式部署。
本教程将指导您如何在RHEL 7/CentOS 7以及Fedora 23/24/25等衍生版本中使用Nginx 1.10, MariaDB 10和PHP 6安装LNMP应用服务器环境。(在其他系统如SUSE、Ubuntu中源码编译安装LNMP同样可以参考本教程。)
前提要求
准备2台RHEL 7或CentOS 7服务器,一台用于安装MariaDB,另一台用于安装Nginx和PHP。当然你也可以仅仅使用1台服务器部署LNMP以通过实验来验证LNMP。
HOSTNAMEIPOSNODEhming-server217-mdb
10.0.6.217CentOS 7.2 x86_64MariaDBhming-server218-web10.0.6.218CentOS 7.2 x86_64MariaDB,Nginx,PHP主软件包(源码包)
DB mariadb-10.1.20.tar.gz
PHP php-5.6.30.tar.bz2
Nginx nginx-1.10.2.tar.gz
注意:主软件包在这之前我已经提前下载好了,可能并不是最新和稳定版,你也可以根据你的需求选择其他版本。
依赖软件
源码编译安装LNMP有许多依赖软件(如gcc、make)是必要的,一般可以通过YUM软件管理程序来安装,另外小部分需要源码编译安装。
通过yum安装gcc、gcc-c++、make等必需软件包
#yuminstall-ygccgcc-c++makeautomake
安装MariaDB
1. 使用yum安装gcc、make、bison、ncurses-devel等依赖软件包
#yuminstallzlib-develncursesncurses-develbison
2.安装cmake,cmake是编译MYSQL/MariaDB的必要工具(MySQL5.6/MariaDB 10及以后的版本) 你可以在网站https://cmake.org/中下载cmake软件包
将软件包上传到/usr/local/src目录下,然后解压cmake包,cd到cmake目录执行./bootstrap脚本进行安装,同时可以使用--prefix=
#tar-zxfcmake-3.7.2.tar.gz #cdcmake-3.7.2/ #./bootstrap--prefix=/usr/local/cmake #make&&makeinstall
当安装完之后,你可以使用执行/usr/local/cmake/bin/cmake --version查看安装的cmake版本
[root@hming-server217-mdb~]#/usr/local/cmake/bin/cmake--version cmakeversion3.7.2 CMakesuitemaintainedandsupportedbyKitware(kitware.com/cmake).
3.安装完cmake编译工具之后,接下来我们安装MariaDB(你可以访问https://mariadb.org/下载MariaDB), 首先创建MariaDB安装目录/usr/local/mysql和数据库服务器的数据目录/data/mysql/webdata,并创建MySQL用户,并将/data/mysql/webdata目录的所属主权限修改为mysql用户
创建安装目录和数据目录
#mkdir/usr/local/mysql #mkdir/data/mysql/webdata-p
创建mysql用户,并修改数据目录的权限
#groupaddmysql #useradd-r-gmysql-s/sbin/nologinmysql-M #chown-Rmysql:mysql/data/mysql/
4. 编译安装MariaDB,将MariaDB软件包解压后使用cmake进行编译,根据需求选择相应的编译参数进行编译(查看编译选项/usr/local/cmake/bin/cmake . -LH). (或者访问MariaDB编译安装帮助文档https://mariadb.com/kb/en/mariadb/compiling-mariadb-from-source/)
[root@hming-server217-mdb/usr/local/src]#tar-zxfmariadb-10.1.20.tar.gz [root@hming-server217-mdb/usr/local/src]#cdmariadb-10.1.20/ [root@hming-server217-mdb/usr/local/src/mariadb-10.1.20]#/usr/local/cmake/bin/cmake.-DCMAKE_INSTALL_PREFIX=/usr/local/mysql-DMYSQL_DATADIR=/data/mysql/webdata-DSYSCONFDIR=/etc-DMYSQL_TCP_PORT=3306-DMYSQL_USER=mysql-DDEFAULT_CHARSET=utf8-DEXTRA_CHARSETS=all-DDEFAULT_COLLATION=utf8_general_ci-DMYSQL_UNIX_ADDR=/data/mysql/webdata/mysql.sock-DWITH_INNOBASE_STORAGE_ENGINE=1-DWITH_MYISAM_STORAGE_ENGINE=1-DWITH_MEMORY_STORAGE_ENGINE=1-DWITH_PARTITION_STORAGE_ENGINE=1-DWITH_ARCHIVE_STORAGE_ENGINE=1-DENABLED_LOCAL_INFILE=1-DWITH_EMBEDDED_SERVER=1-DWITH_READLINE=1-DWITH_DEBUG=0
执行gmake 和 gmake install进行最后的安装
[root@hming-server217-mdb/usr/local/src/mariadb-10.1.20]#gmake [root@hming-server217-mdb/usr/local/src/mariadb-10.1.20]#gmakeinstall
5.配置mysql环境变量,如果不配置默认系统找不到mysql的可执行程序和命令,否则你必须使用全路径执行与mysql相关的任何命令,查看系统默认的环境变量
使用export命令添加mysql环境变量
[root@hming-server217-mdb~]#exportPATH=$PATH:/usr/local/mysql/bin [root@hming-server217-mdb~]#echo$PATH /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin:/usr/local/mysql/bin
最后将mysql环境配置添加到/etc/profile或者/etc/profile.d/的自定义文件中
[root@hming-server217-mdb~]#echoexportPATH=$PATH:/usr/local/mysql/bin>/etc/profile.d/mysql.sh [root@hming-server217-mdb~]#source/etc/profile.d/mysql.sh
配置了环境变量,我们就可以直接在shell终端下执行mysql命令,使用mysql -V查看mysql版本
[root@hming-server217-mdb~]#mysql-V mysqlVer15.1Distrib10.1.20-MariaDB,forLinux(x86_64)usingreadline5.1
6.添加MariaDB库文件
[root@hming-server217-mdb~]#echo/usr/local/mysql/lib>>/etc/ld.so.conf.d/mariadb-x86_64.conf
7.拷贝MariaDB服务启动脚本到/etc/init.d/目录中
[root@hming-server217-mdb~]#cp/usr/local/mysql/support-files/mysql.server/etc/init.d/mysqld [root@hming-server217-mdb~]#chmod755/etc/init.d/mysqld [root@hming-server217-mdb~]#chkconfig--addmysqld [root@hming-server217-mdb~]#chkconfigmysqldon [root@hming-server217-mdb~]#systemctldaemon-reload
[root@hming-server217-mdb~]#cd/usr/local/mysql/scripts/ [root@hming-server217-mdb/usr/local/mysql/scripts]#./mysql_install_db--basedir=/usr/local/mysql--datadir=/data/mysql/webdata--user=mysql--no-defaults [root@hming-server217-mdb/usr/local/mysql/scripts]#ls/data/mysql/webdata/ aria_log.00000001ibdata1ib_logfile1performance_schema aria_log_controlib_logfile0mysqltest
[root@hming-server217-mdb~]#cp/etc/my.cnf/etc/my.cnf.save [root@hming-server217-mdb~]#cat/etc/my.cnf [client] port=3306 socket=/data/mysql/webdata/mysql.sock default-character-set=utf8 [mysqld] port=3306 user=mysql basedir=/usr/local/mysql datadir=/data/mysql/webdata socket=/data/mysql/webdata/mysql.sock character-set-server=utf8 external-locking=FALSE skip-name-resolv default-storage-engine=InnoDB back_log=1024 transaction_isolation=REPEATABLE-READ max_connections=5000 max_connect_errors=6000 open_files_limit=65535 table_open_cache=512 [mysqldump] quick max_allowed_packet=32M [mysql] no-auto-rehash default-character-set=utf8 [mysqld_safe] open-files-limit=8192 log-error=/var/log/mariadb/mariadb.log pid-file=/var/run/mariadb/mariadb.pid
[root@hming-server217-mdb~]#mkdir/var/log/mariadb [root@hming-server217-mdb~]#mkdir/var/run/mariadb [root@hming-server217-mdb~]#chownmysql:mysql/var/log/mariadb [root@hming-server217-mdb~]#chownmysql:mysql/var/run/mariadb
[root@hming-server217-mdb~]#systemctlstartmysqld [root@hming-server217-mdb~]#systemctlstatusmysqld [root@hming-server217-mdb~]#systemctlstatusmysqld ●mysqld.service-LSB:startandstopMySQL Loaded:loaded(/etc/rc.d/init.d/mysqld) Active:active(running)sinceFri2017-06-0223:53:09CST;3daysago Docs:man:systemd-sysv-generator(8) Process:27419ExecStop=/etc/rc.d/init.d/mysqldstop(code=exited,status=0/SUCCESS) Process:27449ExecStart=/etc/rc.d/init.d/mysqldstart(code=exited,status=0/SUCCESS) CGroup:/system.slice/mysqld.service ├─27460/bin/sh/usr/local/mysql/bin/mysqld_safe--datadir=/data/mysql/webdata--pid-file=/data/mysq... └─27595/usr/local/mysql/bin/mysqld--basedir=/usr/local/mysql--datadir=/data/mysql/webdata--plugi... Jun0223:53:08hming-server217-mdbsystemd[1]:StartingLSB:startandstopMySQL... Jun0223:53:08hming-server217-mdbmysqld[27449]:StartingMySQL.17060223:53:08mysqld_safeLoggingto\'/...og\'. Jun0223:53:09hming-server217-mdbmysqld[27449]:SUCCESS! Jun0223:53:09hming-server217-mdbsystemd[1]:StartedLSB:startandstopMySQL. Hint:Somelineswereellipsized,use-ltoshowinfull.
[root@hming-server217-mdb~]#psaux|grepmysql root274600.00.01153801744?S23:530:00/bin/sh/usr/local/mysql/bin/mysqld_safe--datadir=/data/mysql/webdata--pid-file=/data/mysql/webdata/hming-server217-mdb.pid mysql275951.05.2120938099428?Sl23:530:00/usr/local/mysql/bin/mysqld--basedir=/usr/local/mysql--datadir=/data/mysql/webdata--plugin-dir=/usr/local/mysql/lib/plugin--user=mysql--log-error=/var/log/mariadb/mariadb.log--open-files-limit=8192--pid-file=/data/mysql/webdata/hming-server217-mdb.pid--socket=/data/mysql/webdata/mysql.sock--port=3306 root276270.00.0112644952pts/2S+23:530:00grep--color=automysql
[root@hming-server217-mdb~]#mysql_secure_installation NOTE:RUNNINGALLPARTSOFTHISSCRIPTISRECOMMENDEDFORALLMariaDB SERVERSINPRODUCTIONUSE!PLEASEREADEACHSTEPCAREFULLY! InordertologintoMariaDBtosecureit,we\'llneedthecurrent passwordfortherootuser.Ifyou\'vejustinstalledMariaDB,and youhaven\'tsettherootpasswordyet,thepasswordwillbeblank, soyoushouldjustpressenterhere. Entercurrentpasswordforroot(enterfornone): OK,successfullyusedpassword,movingon... SettingtherootpasswordensuresthatnobodycanlogintotheMariaDB rootuserwithouttheproperauthorisation. Setrootpassword?[Y/n]y Newpassword: Re-enternewpassword: Passwordupdatedsuccessfully! Reloadingprivilegetables.. ...Success! Bydefault,aMariaDBinstallationhasananonymoususer,allowinganyone tologintoMariaDBwithouthavingtohaveauseraccountcreatedfor them.Thisisintendedonlyfortesting,andtomaketheinstallation goabitsmoother.Youshouldremovethembeforemovingintoa productionenvironment. Removeanonymoususers?[Y/n]y ...Success! Normally,rootshouldonlybeallowedtoconnectfrom\'localhost\'.This ensuresthatsomeonecannotguessattherootpasswordfromthenetwork. Disallowrootloginremotely?[Y/n]y ...Success! Bydefault,MariaDBcomeswithadatabasenamed\'test\'thatanyonecan access.Thisisalsointendedonlyfortesting,andshouldberemoved beforemovingintoaproductionenvironment. Removetestdatabaseandaccesstoit?[Y/n]y -Droppingtestdatabase... ...Success! -Removingprivilegesontestdatabase... ...Success! Reloadingtheprivilegetableswillensurethatallchangesmadesofar willtakeeffectimmediately. Reloadprivilegetablesnow?[Y/n]y ...Success! Cleaningup... Alldone!Ifyou\'vecompletedalloftheabovesteps,yourMariaDB installationshouldnowbesecure. ThanksforusingMariaDB!
12.登录MariaDB数据库
[root@hming-server217-mdb~]#mysql-uroot-p Enterpassword: WelcometotheMariaDBmonitor.Commandsendwith;or\\g. YourMariaDBconnectionidis353 Serverversion:10.1.20-MariaDBSourcedistribution Copyright(c)2000,2016,Oracle,MariaDBCorporationAbandothers. Type\'help;\'or\'\\h\'forhelp.Type\'\\c\'toclearthecurrentinputstatement. MariaDB[(none)]>selectversion(); +-----------------+ |version()| +-----------------+ |10.1.20-MariaDB| +-----------------+ 1rowinset(0.00sec) MariaDB[(none)]>
[root@hming-server218-web~]#yuminstallgccgcc-c++zlibzlib-develpcrepcre-developenssl-develgdgd-develperl-develperl-ExtUtils-Embed
[root@hming-server218-web~]#groupaddnginx [root@hming-server218-web~]#useradd-gnginx-s/sbin/nologinnginx-M
3. 编译安装Nginx
[root@hming-server218-web/usr/local/src]#tar-zxfnginx-1.10.2.tar.gz [root@hming-server218-web/usr/local/src]#cdnginx-1.10.2/ [root@hming-server218-web/usr/local/src/nginx-1.10.2]#./configure\\ --user=nginx\\ --group=nginx\\ --prefix=/usr/local/nginx\\ --pid-path=/var/run/nginx/nginx.pid\\ --lock-path=/var/lock/subsys/nginx\\ --with-http_stub_status_module\\ --with-pcre\\ --with-http_ssl_module\\ --with-mail_ssl_module\\ --with-http_gzip_static_module\\ --http-log-path=/var/log/nginx/access.log\\ --error-log-path=/var/log/nginx/error.log\\ --http-client-body-temp-path=/tmp/nginx/client_body\\ --http-proxy-temp-path=/tmp/nginx/proxy\\ --http-fastcgi-temp-path=/tmp/nginx/fastcgi\\ --http-uwsgi-temp-path=/tmp/nginx/uwsgi\\ --with-http_degradation_module\\ --with-http_realip_module\\ --with-http_addition_module\\ --with-http_sub_module\\ --with-http_perl_module\\ --with-http_p_w_picpath_filter_module=dynamic\\ --with-http_flv_module [root@hming-server218-web/usr/local/src/nginx-1.10.2]#make&&makeinstall
4. 启动Nginx服务
[root@hming-server218-web~]#ln-s/usr/local/nginx/sbin/nginx/usr/local/sbin/ [root@hming-server218-web~]#mkdir/tmp/nginx [root@hming-server218-web~]#nginx [root@hming-server218-web~]#ps-ef|grepnginx root279131000:49?00:00:00nginx:masterprocessnginx nginx2791427913000:49?00:00:00nginx:workerprocess root2792322381000:49pts/100:00:00grep--color=autonginx
5.添加防火墙
[root@hming-server218-web~]#firewall-cmd--permanent--add-port=80/tcp success [root@hming-server218-web~]#firewall-cmd--reload success
6. 通过客户端访问http://10.0.6.218
安装依赖软件包
[root@hming-server218-web~]#yuminstallgccgcc-c++libtoollibxslt-devellibpnglibpng-develbzip2bzip2-devellibxml2-devellibXpm-devellibcurl-develcurllibmcryptexpatlibxsltfreetypefreetype-devellibmcrypt-develautoconflibpngzlib-develzlibnet-snmpnet-snmp-devel
[root@hming-server218-web~]#tar-zxflibiconv-1.15.tar.gz [root@hming-server218-web~]#cdlibiconv-1.15/ [root@hming-server218-web~/libiconv-1.15]#./configure--prefix=/usr/local/libiconv [root@hming-server218-web~/libiconv-1.15]#make&&makeinstall [root@hming-server218-web~]#echo/usr/local/libiconv/lib>>/etc/ld.so.conf [root@hming-server218-web~]#ldconfig
[root@hming-server218-web~]#tar-jxflibmcrypt-2.5.8.tar.bz2 [root@hming-server218-web~]#cdlibmcrypt-2.5.8/ [root@hming-server218-web~/libmcrypt-2.5.8]#./configure--prefix=/usr/local/libmcrypt [root@hming-server218-web~/libmcrypt-2.5.8]#make&&makeinstall
#tar-zxfjpegsrc.v9b.tar.gz #cdjpeg-9b/ #mkdir/usr/local/jpeg9&&mkdir/usr/local/jpeg9/{bin,lib,include} #mkdir/usr/local/jpeg9/man/man1-p #cp-rf/usr/share/libtool/config/config.sub.&&cp-rf/usr/share/libtool/config/config.guess. cp:overwrite\\u2018./config.sub\\u2019?y cp:overwrite\\u2018./config.guess\\u2019?y #./configure--prefix=/usr/local/jpeg9--enable-shared--enable-static #make&&makeinstall
[root@hming-server218-web~]#tar-zxflibgd-2.2.3.tar.gz [root@hming-server218-web~]#cdlibgd-2.2.3/ [root@hming-server218-web~/libgd-2.2.3]#./configure--prefix=/usr/local/libgd2--with-zlib--with-jpeg=/usr/local/jpeg9--with-png--with-freetype [root@hming-server218-web~/libgd-2.2.3]#make&&makeinstall
6. 编译安装PHP
[root@hming-server218-web~]#groupaddphp-fpm [root@hming-server218-web~]#useradd-gphp-fpm-s/sbin/nologinphp-fpm-M [root@hming-server218-web~]#tar-jxfphp-5.6.30.tar.bz2 [root@hming-server218-web~]#cdphp-5.6.30/ [root@hming-server218-web~]#./configure\\ --prefix=/usr/local/php\\ --with-config-file-path=/usr/local/php/etc\\ --enable-fpm\\ --with-fpm-user=php-fpm\\ --with-fpm-group=php-fpm\\ --with-mysql=/usr/local/mysql\\ --with-mysqli=/usr/local/mysql/bin/mysql_config\\ --with-jpeg-dir=/usr/local/jpeg9\\ --with-mcrypt=/usr/local/libmcrypt\\ --with-gd=/usr/local/libgd2\\ --with-iconv-dir=/usr/local/libiconv\\ --with-openssl-dir\\ --with-freetype-dir\\ --with-libxml-dir\\ --with-png-dir\\ --with-zlib\\ --with-curl\\ --with-mhash\\ --with-pear\\ --with-pcre-dir\\ --with-gettext\\ --enable-soap\\ --enable-gd-native-ttf\\ --enable-mbstring\\ --enable-exif\\ --enable-sockets\\ --enable-ftp\\ --disable-ipv6\\ --enable-bcmath\\ --enable-shmop\\ --with-snmp\\ --enable-sysvsem [root@hming-server218-web~/php-5.6.30]#make [root@hming-server218-web~/php-5.6.30]#maketest [root@hming-server218-web~/php-5.6.30]#makeinstall
7.拷贝php.ini配置文件
[root@hming-server218-web~/php-5.6.30]#cpphp.ini-production/usr/local/php/etc/php.ini
[root@hming-server218-web~]#vim/usr/local/php/etc/php-fpm.conf [global] pid=/usr/local/php/var/run/php-fpm.pid error_log=/usr/local/php/var/log/php-fpm.log [www] listen=/var/lib/php/php-fcgi.sock user=php-fpm group=php-fpm listen.owner=nginx listen.group=nginx pm=dynamic pm.max_children=100 pm.start_servers=20 pm.min_spare_servers=5 pm.max_spare_servers=35 pm.max_requests=500 rlimit_files=1024
9. 检查配置
[root@hming-server218-web~]#/usr/local/php/sbin/php-fpm-t [05-Jun-201720:23:27]NOTICE:configurationfile/usr/local/php/etc/php-fpm.conftestissuccessful
10.拷贝启动脚本
[root@hming-server218-web~]#cpphp-5.6.30/sapi/fpm/init.d.php-fpm/etc/init.d/php-fpm [root@hming-server218-web~]#chmod755/etc/init.d/php-fpm [root@hming-server218-web~]#/etc/init.d/php-fpmstart Startingphp-fpmdone
1. 修改nginx.conf配置文件
usernginxnginx; worker_processes4; error_log/var/log/nginx/error.lognotice; pid/var/run/nginx/nginx.pid; worker_rlimit_nofile65535; events{ useepoll; worker_connections65535; } http{ includemime.types; default_typeapplication/octet-stream; server_names_hash_bucket_size2048; server_names_hash_max_size4096; log_formatmain\'$remote_addr-$remote_user[$time_local]$request\' \'$status$body_bytes_sent$http_referer\' \'$http_user_agent$http_x_forwarded_for\'; access_log/var/log/nginx/access.logmain; sendfileon; tcp_nopushon; tcp_nodelayon; keepalive_timeout65; client_header_timeout30; client_body_timeout3m; client_max_body_size10m; client_body_buffer_size256k; send_timeout3m; connection_pool_size256; client_header_buffer_size32k; large_client_header_buffers464k; request_pool_size4k; output_buffers432k; postpone_output1460; client_body_temp_path/tmp/nginx/client_body; proxy_temp_path/tmp/nginx/proxy; fastcgi_temp_path/tmp/nginx/fastcgi; gzipon; gzip_min_length1k; gzip_buffers416k; gzip_comp_level3; gzip_http_version1.1; gzip_typestext/plainapplication/x-javascripttext/csstext/htmapplication/xml; gzip_varyon; fastcgi_connect_timeout300; fastcgi_send_timeout300; fastcgi_read_timeout300; fastcgi_buffer_size64k; fastcgi_buffers464k; fastcgi_busy_buffers_size128k; fastcgi_temp_file_write_size128k; fastcgi_intercept_errorson; server{ listen80; server_name10.0.6.218; charsetUTF8; indexindex.htmlindex.htmindex.phpindex.jsp; root/usr/local/nginx/html; #access_loglogs/host.access.logmain; location/{ roothtml; indexindex.htmlindex.htm; } #redirectservererrorpagestothestaticpage/50x.html error_page500502503504/50x.html; location=/50x.html{ roothtml; } #passthePHPscriptstoFastCGIserverlisteningon127.0.0.1:9000 location~\\.php${ roothtml; fastcgi_passunix:/var/lib/php/php-fcgi.sock; fastcgi_indexindex.php; fastcgi_paramSCRIPT_FILENAME/usr/local/nginx/html$fastcgi_script_name; includefastcgi_params; } } }
[root@hming-server218-web~]#nginx-t nginx:theconfigurationfile/usr/local/nginx/conf/nginx.confsyntaxisok nginx:configurationfile/usr/local/nginx/conf/nginx.conftestissuccessful
[root@hming-server218-web~]#vim/usr/local/nginx/html/info.php [root@hming-server218-web~]#nginx-sreload
4. 访问http://10.0.6.218/info.php
[root@hming-server218-web~]#mkdir/app/data/phpMyAdmin-p
2.将phpMyAdmin软件包解压到/app/data/phpMyAdmin 目录下
#tar-zxfphpMyAdmin-4.7.1-all-languages.tar.gz #cp-arphpMyAdmin-4.7.1-all-languages/*/app/data/phpMyAdmin/ #chown-Rnginx:nginx/app/data/phpMyAdmin #chown-Rphp-fpm:php-fpm/app/data/phpMyAdmin
http{ ...... #phpMyAdmin server{ listen8000; server_name10.0.6.218; charsetUTF8; indexindex.htmlindex.htmindex.phpindex.jsp; root/app/data; access_log/var/log/nginx/phpMyAdmin.logmain; location/phpMyAdmin/{ indexindex.htmlindex.htmindex.php; } location~\\.php${ fastcgi_passunix:/var/lib/php/php-fcgi.sock; fastcgi_indexindex.php; fastcgi_paramSCRIPT_FILENAME/app/data$fastcgi_script_name; includefastcgi_params; } } }
[root@hming-server217-mdb~]#mysql-uroot-p Enterpassword: WelcometotheMariaDBmonitor.Commandsendwith;or\\g. YourMariaDBconnectionidis13 Serverversion:10.1.20-MariaDBSourcedistribution Copyright(c)2000,2016,Oracle,MariaDBCorporationAbandothers. Type\'help;\'or\'\\h\'forhelp.Type\'\\c\'toclearthecurrentinputstatement. MariaDB[(none)]>selectuser,host,passwordfrommysql.user; +------+-----------+-------------------------------------------+ |user|host|password| +------+-----------+-------------------------------------------+ |root|localhost|*84BB5DF4823DA319BBF86C99624479A198E6EEE9| |root|127.0.0.1|*84BB5DF4823DA319BBF86C99624479A198E6EEE9| |root|::1|*84BB5DF4823DA319BBF86C99624479A198E6EEE9| +------+-----------+-------------------------------------------+ 3rowsinset(0.00sec) MariaDB[(none)]>grantallprivilegeson*.*to\'root\'@\'10.0.6.218\'identifiedby\'phpMyAdmin_123\'; QueryOK,0rowsaffected(0.00sec) MariaDB[(none)]>flushprivileges; QueryOK,0rowsaffected(0.00sec)
5. 配置防火墙规则
#iptables-IINPUT-ptcp--dport3306-s10.0.6.0/24-jACCEPT 或者 #firewall-cmd--permanent--add-rich-rule\'rulefamily=ipv4sourceaddress=10.0.6.0/24portport=3306protocol=tcpaccept\'
#cp/app/data/phpMyAdmin/libraries/config.default.php/app/data/phpMyAdmin/libraries/config.default.php.save #vim/app/data/phpMyAdmin/libraries/config.default.php /** *The\'cookie\'auth_typeusesAESalgorithmtoencryptthepassword.If *atleastoneserverconfigurationuses\'cookie\'auth_type,enterherea *passphrasethatwillbeusedbyAES.Themaximumlengthseemstobe46 *characters. * *@globalstring$cfg[\'blowfish_secret\'] */ $cfg[\'blowfish_secret\']=\'123456\'; /** *MySQLhostnameorIPaddress * *@globalstring$cfg[\'Servers\'][$i][\'host\'] */ $cfg[\'Servers\'][$i][\'host\']=\'10.0.6.217\'; /** *MySQLport-leaveblankfordefaultport * *@globalstring$cfg[\'Servers\'][$i][\'port\'] */ $cfg[\'Servers\'][$i][\'port\']=\'3306\'; /** *Pathtothesocket-leaveblankfordefaultsocket * *@globalstring$cfg[\'Servers\'][$i][\'socket\'] */ $cfg[\'Servers\'][$i][\'socket\']=\'\'; /** *Authenticationmethod(validchoices:config,http,signonorcookie) * *@globalstring$cfg[\'Servers\'][$i][\'auth_type\'] */ $cfg[\'Servers\'][$i][\'auth_type\']=\'cookie\'; /** *HTTPBasicAuthRealmnametodisplay(onlyusedwith\'HTTP\'auth_type) * *@globalstring$cfg[\'Servers\'][$i][\'auth_http_realm\'] */ $cfg[\'Servers\'][$i][\'auth_http_realm\']=\'\'; /** *MySQLuser * *@globalstring$cfg[\'Servers\'][$i][\'user\'] */ $cfg[\'Servers\'][$i][\'user\']=\'root\'; /** *MySQLpassword(onlyneededwith\'config\'auth_type) * *@globalstring$cfg[\'Servers\'][$i][\'password\'] */ $cfg[\'Servers\'][$i][\'password\']=\'phpMyAdmin_123\';
#phpMyAdmin server{ listen8000; server_name10.0.6.218; charsetUTF8; indexindex.htmlindex.htmindex.phpindex.jsp; root/app/data; access_log/var/log/nginx/phpMyAdmin.logmain; location/phpMyAdmin/{ allow10.0.6.0/24; denyall; auth_basicAuth; auth_basic_user_file/usr/local/nginx/.htpassword; indexindex.htmlindex.htmindex.php; } location~\\.php${ fastcgi_passunix:/var/lib/php/php-fcgi.sock; fastcgi_indexindex.php; fastcgi_paramSCRIPT_FILENAME/app/data$fastcgi_script_name; includefastcgi_params; } }
[root@hming-server218-web~]#yuminstallhttpd [root@hming-server218-web~]#htpasswd-c/usr/local/nginx/.htpasswordHM Newpassword: Re-typenewpassword: AddingpasswordforuserHM [root@hming-server218-web~]#ls-l/usr/local/nginx/.htpassword -rw-r--r--1rootroot41Jun618:04/usr/local/nginx/.htpassword