VPS/Linux搭建Nginx+MariaDB服務器環境
作者：DreamChaser
Nginx+MariaDB的搭配一直是月光寶盒博主心目中最理想的搭配，linux的vps主機，各種命令行對大多數站長來說都不太習慣，在Windows下就好得多!
如果想在windows下搭建Nginx+MariaDB，可以參考月光寶盒另一篇博文《使用WnMp在windows下搭建Nginx+MariaDB+PHP》
首先， 以root登錄:
基本服務器配置
設置Hostname
- echo “plato” > /etc/hostname
- hostname -F /etc/hostname
編輯 /etc/hosts （IPv6）
增加：
12.34.56.78 plato.example.com plato
2600:3c01::a123:b456:c789:d012 plato.example.com plato
設置時區
- dpkg-reconfigure tzdata
更新服務器軟件
- nano /etc/apt/sources.list
增加下面兩行：
- deb http://packages.dotdeb.org squeeze all
- deb-src http://packages.dotdeb.org squeeze all
- wget http://www.dotdeb.org/dotdeb.gpg
- cat dotdeb.gpg | apt-key add -
- apt-get update
- apt-get upgrade –show-upgraded
配置安全屬性
增加一個系統管理員
- adduser example_user
- usermod -a -G sudo example_user
- logout
- ssh example_user@123.456.78.90
現在開始，你可以用新用戶加sudo來執行管理員命令了。
反激活root的SSH登錄
- sudo nano /etc/ssh/sshd_config
更新這一行：PermitRootLogin no
sudo service ssh restart
設置防火墻：
- sudo iptables -L
- sudo nano /etc/iptables.firewall.rules
復制：
- *filter
- # Allow all loopback (lo0) traffic and drop all traffic to 127/8 that doesn’t use lo0
- -A INPUT -i lo -j ACCEPT
- -A INPUT -d 127.0.0.0/8 -j REJECT
- # Accept all established inbound connections
- -A INPUT -m state –state ESTABLISHED,RELATED -j ACCEPT
- # Allow all outbound traffic – you can modify this to only allow certain traffic
- -A OUTPUT -j ACCEPT
- # Allow HTTP and HTTPS connections from anywhere (the normal ports for websites and SSL).
- -A INPUT -p tcp –dport 80 -j ACCEPT
- -A INPUT -p tcp –dport 443 -j ACCEPT
- # Allow SSH connections
- #
- # The -dport number should be the same port number you set in sshd_config
- #
- -A INPUT -p tcp -m state –state NEW –dport 22 -j ACCEPT
- # Allow ping
- -A INPUT -p icmp -j ACCEPT
- # Log iptables denied calls
- -A INPUT -m limit –limit 5/min -j LOG –log-prefix “iptables denied: ” –log-level 7
- # Drop all other inbound – default deny unless explicitly allowed policy
- -A INPUT -j DROP
- -A FORWARD -j DROP
- COMMIT
- sudo iptables-restore
讓防火墻每次重啟后自動加載：
- sudo nano /etc/network/if-pre-up.d/firewall
- #!/bin/sh
- /sbin/iptables-restore
- sudo chmod +x /etc/network/if-pre-up.d/firewall
安裝Fail2Ban，自動檢測攻擊并阻止：
- sudo aptitude install fail2ban
安裝PHP-FPM
- sudo aptitude install php5 php5-cli php5-dev php5-gd php-pear php5-fpm php5-geoip libgeoip1 libgeoip-dev geoip-database
更新一些配置：
- sudo nano /etc/php5/fpm/php.ini
- memory_limit: 512M
- cgi.fix_pathinfo=0
安裝Nginx
- sudo aptitude install nginx
配置虛擬主機
- sudo mkdir -p /srv/www/insready.com/{public_html,logs}
- sudo chown -R www-data:www-data /srv/www
- sudo chmod -R 775 /srv/www
- cd /etc/nginx/sites-available/
- sudo wget https://gist.github.com/raw/4248423/c7b2ea550ef9273f7f5d0823f81f054296fc…
你需要修改以上的域名配置 sudo nano insready.com
sudo nano /etc/php5/fpm/pool.d/www.conf
把listen = 127.0.0.1:9000 這行改成：
- listen = /tmp/php-fpm.sock
- sudo ln -s /etc/nginx/sites-available/insready.com /etc/nginx/sites-enabled
配置Nginx Microcache (并且把Microcache放在內存里，體驗閃電的速度吧！)
- sudo nano /etc/nginx/conf.d/microcache.conf
- fastcgi_cache_path /dev/shm/microcache levels=1:2 keys_zone=microcache:5M max_size=1G inactive=2h; #把Nignx Microcache設置在內存里，這就更快了！
- map $http_cookie $cache_uid {
- default nil; # hommage to Lisp :)
- ~SESS[[:alnum:]]+=(?<session_id>[[:alnum:]]+) $session_id;
- }
- map $request_method $no_cache {
- default 1;
- HEAD 0;
- GET 0;
- }
現在使Nginx每次啟動的時候自動運行
- sudo update-rc.d nginx defaults
啟動Nginx
- sudo /etc/init.d/nginx start
安裝MariaDB
長話短說，MariaDB是甲骨文公司購買了MySQL后，原來開發人員離職然后創建的新開源數據庫。MariaDB和MySQL一樣使用。
- sudo nano /etc/apt/sources.list.d/MariaDB.list
- # MariaDB 5.5 repository list – created 2012-12-08 07:39 UTC
- # http://downloads.mariadb.org/mariadb/repositories/
- deb http://ftp.yz.yamagata-u.ac.jp/pub/dbms/mariadb/repo/5.5/debian squeeze main
- deb-src http://ftp.yz.yamagata-u.ac.jp/pub/dbms/mariadb/repo/5.5/debian squeeze main
- sudo apt-key adv –recv-keys –keyserver keyserver.ubuntu.com 0xcbcb082a1bb943db
- sudo aptitude update
- sudo aptitude install libmariadbclient-dev libmariadbclient18 libmariadbd-dev
- libmysqlclient18 mariadb-client mariadb-client-5.5 mariadb-client-core-5.5
- mariadb-common mariadb-server mariadb-server-5.5 mariadb-server-core-5.5 mariadb-test mariadb-test-5.5 mysql-common
安裝最新版本的Drupal
- cd /srv/www/insready.com
- sudo wget http://ftp.drupal.org/files/projects/drupal-7.18.tar.gz
- sudo tar -xvzf drupal-7.18.tar.gz
- cd drupal-7.18
- sudo cp -a . ../public_html/
- sudo chown www-data:www-data public_html -R
安裝Memcache, APC
- sudo aptitude install memcached libmemcached-tools memstat make
- sudo pecl install memcache
- sudo pecl install apc
創建以下文件，配置Memcache
- sudo nano /etc/php5/conf.d/memcache.ini
- extension= memcache.so
- memcache.hash_strategy=”consistent”
創建以下文件，配置apc
- sudo nano /etc/php5/conf.d/apc.ini
- extension=apc.so
- apc.shm_size = 256M
- apc.apc.stat = 0
安裝uploadprogress
- sudo pecl install uploadprogress
創建以下文件，配置uploadprogress
- sudo nano /etc/php5/conf.d/uploadprogress.ini
- extension=uploadprogress.so
重啟：
- sudo service nginx restart
- sudo service mysql restart
- sudo service php5-fpm restart
- sudo service memcached restart
完成！
原文鏈接：http://lunax.info/archives/2361.html
【編輯推薦】
- MariaDB 5.3將支持ALTER TABLE的進度提示
- MySQL創始人打造MariaDB 全面兼容MySQL 5.1
- MariaDB 2周年了
- 教你五步優化你的MongoDB
- Windows下安裝MariaDB
責任編輯：彭凡
來源：
月光寶盒
