/wordpress-nginx

VPS/Dedicated Server setup for running WordPress on Nginx & PHP-FPM

Wordpress on Nginx + PHP-FPM

This is my personal steps in preparing my VPS/Dedicated server for running WordPress installation. Due to the nature of Nginx, .htaccess is not supported. We will look into configuration to imimate the how .htaccess normally works.

All files given on http://paste.laravel.com has been put into its respective files in etc folder above.

Make sure to replace <username> or <website> with your own

STEP 1: update to latest CentOS version

  • ssh root@your-ip-address
  • yum update
  • Check version
  • cat /etc/redhat-release
  • Cetup hostname
  • echo "HOSTNAME=<yourhostname>" >> /etc/sysconfig/network
  • hostname "<yourhostname>"
  • Update /etc/hosts
  • nano /etc/hosts
  • add new line: <ip address> <yourhostname>.example.com <yourhostname>
  • add new line: <ipv6 address> <yourhostname>.example.com <yourhostname>

STEP 2: get important Repo

STEP 3: install mysql, nginx, php-fpm, memcached

  • Install mysql
  • yum install mysql mysql-server
  • chkconfig --levels 235 mysqld on
  • service mysqld start
  • Check mysqld server in running
  • netstat -tap | grep mysql
  • Run secure installation (to set password to root)
  • mysql_secure_installation
  • Set password
  • Now, lets install nginx
  • yum install nginx
  • chkconfig --levels 235 nginx on
  • service nginx start
  • ifconfig eth0 | grep inet | awk '{ print $2 }'
  • Visit your ip address to check on nginx static page
  • Now, lets install php-fpm
  • yum install php-fpm php-cli php-mysql php-gd php-imap php-ldap php-odbc php-pear php-xml php-xmlrpc php-magickwand php-magpierss php-mbstring php-mcrypt php-mssql php-shout php-snmp php-soap php-tidy php-pecl-apc sendmail sendmail-cf
  • edit /etc/php.ini to set cgi.fix_pathinfo=0;
  • nano /etc/php.ini

  • cgi.fix_pathinfo=0;

  • Edit timezone to your location (Asia/Kuala_Lumpur)

  • date.timezone = "Asia/Kuala_Lumpur"

  • ln -sf /usr/share/zoneinfo/Asia/Kuala_Lumpur /etc/localtime
  • chkconfig --levels 235 php-fpm on
  • service php-fpm start
  • chkconfig --levels 235 sendmail on
  • service sendmail start
  • Now, lets install memcached
  • yum install memcached php-memcached
  • nano /etc/sysconfig/memcached

  • OPTIONS="-l 127.0.0.1”

  • chkconfig --levels 235 memcached on
  • service memcached start

STEP 4: new user for FTP and SSH

  • useradd <username>
  • passwd <username>
  • cd /srv
  • mkdir www
  • cd www
  • mkdir <website>
  • mkdir <website>/html
  • chown -R user:usergroup <website>

STEP 5: configure nginx, php-fpm, php session to memcached

  • Edit nginx configuration file
  • nano /etc/nginx/nginx.conf

  • worker_processes 8;

  • keeplive_timeout 2;

  • Easier, follow this format http://paste.laravel.com/15PT
  • Here, we set some configuration for php-fpm to run on socket
  • Then, we edit the default virtual host configuration
  • nano /etc/nginx/conf.d/default.conf
  • Follow this format http://paste.laravel.com/162K
  • Now, add those global/… config files
  • cd /etc/nginx
  • mkdir global
  • cd global
  • nano restrictions.conf => http://paste.laravel.com/15PY
  • nano wordpress.conf => http://paste.laravel.com/162I
  • nano w3-total-cache.conf => http://paste.laravel.com/15Q6
  • service nginx restart
  • Now, we edit php-fpm configuration
  • nano /etc/php-fpm.d/www.conf

  • listen = /tmp/php-fpm.sock

  • user = <username>

  • group = <username>

  • php_value[session.save_handler] = memcached

  • php_value[session.save_path] = “127.0.0.1:11211"

  • service php-fpm restart
  • service memcached restart

STEP 6: install FTP (vsftpd)

  • yum install vsftpd
  • nano /etc/vsftpd/vsftpd.conf

  • anonymous_enable=NO

  • chroot_local_user=YES

  • add => user_config_dir=/etc/vsftpd/vsftpd_user_conf
  • add => use_localtime=YES
  • Save
  • mkdir /etc/vsftpd/vsftpd_user_conf
  • nano /etc/vsftpd/vsftpd_user_conf/

  • dirlist_enable=YES

  • download_enable=YES

  • local_root=/srv/www/

  • write_enable=YES

  • Save
  • service vsftpd restart

STEP 7: install phpMyAdmin

  • yum install phpmyadmin
  • Now, create new mysql user since root has been denied
  • mysql -u root -p
  • CREATE USER ‘<username>'@'localhost' IDENTIFIED BY ‘<password>’;
  • GRANT ALL PRIVILEGES ON * . * TO ‘<username>'@'localhost’;
  • FLUSH PRIVILEGES;
  • exit

STEP 8: Grant to sudoers

  • usermod -a -G wheel <username>
  • visudo
  • Uncomment %wheel lines
  • Add new line below root ALL=(ALL) ALL
  • <username> ALL=(ALL) ALL
  • ESC key
  • :wq

STEP 9: install WordPress files

  • su <username>
  • cd /srv/www/<website>/html
  • wget http://wordpress.org/latest.tar.gz
  • tar -xzvf latest.tar.gz
  • mv wordpress/* ./
  • rmdir wordpress
  • rm latest.tar.gz
  • Visit website and install

STEP 10: install NewRelic

###vSTEP 11: Disable root SSH login and change Port 22 to Port 215

  • nano /etc/ssh/sshd_config

  • Port 215

  • PermitRootLogin no

  • service sshd restart

STEP 12: Enable firewall settings

STEP 13: install Fail2Ban for failed login access (bruteforce)

References