lnmp NGINX网站配置文件
server
{
listen 80;
server_name xxxxxxx.com www.xxxxxxx.com; #将localhost修改为您证书绑定的域名,例如:www.example.com。
rewrite ^(.*)$ https://$host$1 permanent; #域名重定向调整
}
server
{
listen 443 ssl;
#listen [::]:443 ssl http2;
server_name xxxxxxx.com www.xxxxxxx.com ;
index index.html index.htm index.php default.html default.htm default.php;
root /home/wwwroot/www.xxxxxxx.com;
ssl_certificate /usr/local/nginx/conf/ssl/www.xxxxxxx.com/www.xxxxxxx.com.pem;
ssl_certificate_key /usr/local/nginx/conf/ssl/www.xxxxxxx.com/www.xxxxxxx.com.key;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_session_cache builtin:1000 shared:SSL:10m;
# openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
#error_page 404 /404.html;
# Deny access to PHP files in specific directory
#location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }
location ~ /.well-known {
allow all;
}
location / {
try_files $uri $uri/ /index.php?$query_string;
}
#location = /xmlrpc.php { #过滤对应的目录访问
# deny all;
# access_log off;
# log_not_found off;
#}
location /index.html{
rewrite ^/(.*) https://www.xxxxxxx.com/ permanent;#重定向调整
}
location ~ \.php(.*)$ {
fastcgi_pass 127.0.0.1:9000;#CGI有两种设置方式unix:/tmp/php-cgi.sock;
fastcgi_index index.php;
fastcgi_split_path_info ^((?U).+\.php)(/?.+)$;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
include fastcgi_params;
}
access_log /home/wwwlogs/www.xxxxxxx.com.log;
error_log /home/wwwlogs/www.xxxxxxx.com_error.log;
}
注意 fastcgi_pass设置有两种设置方式
fastcgi_pass 设置与php-fpm.conf配置文件中,listen设置保持一致,php.ini配置文件设置为cgi.fix_pathinfo=1
1.本地接口监听方式
fastcgi_pass 127.0.0.1:9000;
2.php-cgi.sock设置方式,lnmp为默认方式
fastcgi_pass unix:/tmp/php-cgi.sock;