\u8fd9\u4e2a\u811a\u672c\u4e3b\u8981\u662f\u6211\u7528\u6765\u4e00\u952e\u914d\u7f6e\u670d\u52a1\u5668\u7528\u7684\u3002<\/p>\n
\u4e3b\u8981\u5305\u62ecnginx1.10 php5.6 mysql5.6\u00a0postfix\u00a0opendkim\u3002<\/p>\n
\u4ee5\u53cadropbox\u5907\u4efd\uff0c\u865a\u62df\u4e3b\u673a\u6dfb\u52a0\u811a\u672c\u3002<\/p>\n
\u53ef\u4ee5\u81ea\u52a8\u914d\u7f6e\u6ee1\u5206\u7684\u90ae\u4ef6\u670d\u52a1\u5668\uff0cDNS\u90a3\u5757\u8bf7\u53c2\u8003\u522b\u7684\u6559\u7a0b\u914d\u7f6e\u4e00\u4e0b\uff0cdkim\u7684TXT\u8bb0\u5f55\u5728\/root\/’yourhostname’-dkim-signature_default.txt\uff0c\u7528\u4e4b\u524d\u4fee\u6539hostname\uff0crDNS\u4e5f\u8981\u4fee\u6539\u3002<\/p>\n
linode vultr \u5e94\u8be5\u90fd\u662f\u7c98\u8d34\u4e0a\u5c31\u80fd\u76f4\u63a5\u7528\u7684\u3002<\/p>\n
nginx\u914d\u7f6e\u5728\/etc\/nginx<\/p>\n
php.ini\u5728\/etc\u4e0b<\/p>\n
php-fpm\u4e5f\u5728\/etc\u4e0b<\/p>\n
\u6709\u95ee\u9898\u53ef\u7559\u8a00\u54a8\u8be2\u3002<\/p>\n
<\/p>\n
#!\/bin\/bash
\necho -e “\\033[46m input mysql keys \\033[0m”
\nread mysql
\nyum install -y wget
\nwget -P \/usr\/sbin https:\/\/raw.github.com\/andreafabrizi\/Dropbox-Uploader\/master\/dropbox_uploader.sh
\nchmod +x \/usr\/sbin\/dropbox_uploader.sh
\necho -e “\\033[46m [Notice] Close selinux \\033[0m”
\n[ -s \/etc\/selinux\/config ] && sed -i ‘s\/SELINUX=enforcing\/SELINUX=disabled\/g’ \/etc\/selinux\/config;
\nsetenforce 0 >\/dev\/null 2>&1;
\necho -e “\\033[46m [Notice] set datetime \\033[0m”
\nyum install -y epel-release ntp crontabs;
\nyum -y groupinstall ‘Development Tools’;
\nntpdate -u pool.ntp.org;
\nrm -rf \/etc\/localtime;
\nln -sf \/usr\/share\/zoneinfo\/Asia\/Shanghai \/etc\/localtime;
\necho -e “\\033[46m [Notice] install epel remi nginx repo \\033[0m”
\nrpm -Uvh http:\/\/rpms.famillecollet.com\/enterprise\/remi-release-7.rpm
\nrpm -Uvh http:\/\/nginx.org\/packages\/centos\/7\/noarch\/RPMS\/nginx-release-centos-7-0.el7.ngx.noarch.rpm
\nrpm -Uvh http:\/\/repo.mysql.com\/mysql-community-release-el7-5.noarch.rpm
\nrm \/etc\/yum.repos.d\/remi.repo -f
\ncat > \/etc\/yum.repos.d\/remi.repo <<“EOF”
\n# Repository: http:\/\/rpms.remirepo.net\/
\n# Blog: http:\/\/blog.remirepo.net\/
\n# Forum: http:\/\/forum.remirepo.net\/<\/p>\n
[remi]
\nname=Remi’s RPM repository for Enterprise Linux 7 – $basearch
\n#baseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/remi\/$basearch\/
\n#mirrorlist=https:\/\/rpms.remirepo.net\/enterprise\/7\/remi\/httpsmirror
\nmirrorlist=http:\/\/rpms.remirepo.net\/enterprise\/7\/remi\/mirror
\nenabled=1
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi<\/p>\n
[remi-php55]
\nname=Remi’s PHP 5.5 RPM repository for Enterprise Linux 7 – $basearch
\n#baseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/php55\/$basearch\/
\n#mirrorlist=https:\/\/rpms.remirepo.net\/enterprise\/7\/php55\/httpsmirror
\nmirrorlist=http:\/\/rpms.remirepo.net\/enterprise\/7\/php55\/mirror
\n# NOTICE: common dependencies are in “remi-safe”
\nenabled=0
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi<\/p>\n
[remi-php56]
\nname=Remi’s PHP 5.6 RPM repository for Enterprise Linux 7 – $basearch
\n#baseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/php56\/$basearch\/
\n#mirrorlist=https:\/\/rpms.remirepo.net\/enterprise\/7\/php56\/httpsmirror
\nmirrorlist=http:\/\/rpms.remirepo.net\/enterprise\/7\/php56\/mirror
\n# NOTICE: common dependencies are in “remi-safe”
\nenabled=1
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi<\/p>\n
[remi-test]
\nname=Remi’s test RPM repository for Enterprise Linux 7 – $basearch
\n#baseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/test\/$basearch\/
\nname=Remi’s test RPM repository for Enterprise Linux 7 – $basearch
\n#baseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/test\/$basearch\/
\n#mirrorlist=https:\/\/rpms.remirepo.net\/enterprise\/7\/test\/mirror
\nmirrorlist=http:\/\/rpms.remirepo.net\/enterprise\/7\/test\/mirror
\n# WARNING: If you enable this repository, you must also enable “remi”
\nenabled=0
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi<\/p>\n
[remi-debuginfo]
\nname=Remi’s RPM repository for Enterprise Linux 7 – $basearch – debuginfo
\nbaseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/debug-remi\/$basearch\/
\nenabled=0
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi<\/p>\n
[remi-php55-debuginfo]
\nname=Remi’s PHP 5.5 RPM repository for Enterprise Linux 7 – $basearch – debuginfo
\nbaseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/debug-php55\/$basearch\/
\nenabled=0
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi<\/p>\n
[remi-php56-debuginfo]
\nname=Remi’s PHP 5.6 RPM repository for Enterprise Linux 7 – $basearch – debuginfo
\nbaseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/debug-php56\/$basearch\/
\nenabled=0
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi<\/p>\n
[remi-test-debuginfo]
\nname=Remi’s test RPM repository for Enterprise Linux 7 – $basearch – debuginfo
\nbaseurl=http:\/\/rpms.remirepo.net\/enterprise\/7\/debug-test\/$basearch\/
\nenabled=0
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi
\ngpgcheck=1
\ngpgkey=file:\/\/\/etc\/pki\/rpm-gpg\/RPM-GPG-KEY-remi
\nEOF
\nyum clean all
\nyum makecache
\necho -e “\\033[46m [Notice] install service \\033[0m”
\nyum install -y nginx mysql-community-server php php-opcache php-pecl-apcu php-devel php-mbstring php-mcrypt php-mysqlnd php-json php-phpunit-PHPUnit php-pecl-xdebug php-pecl-xhprof php-pdo php-pdo_dblib php-pear php-fpm php-cli php-xml php-bcmath php-process php-gd php-common php-pecl-zip php-recode php-snmp php-soap memcached libmemcached libmemcached-devel php-pecl-memcached redis php-pecl-redis ImageMagick ImageMagick-devel php-pecl-imagick
\nsed -i ‘4a return 500;’ \/etc\/nginx\/conf.d\/default.conf
\nsed -i “\/^return\/ s\/^\/ \/ ” \/etc\/nginx\/conf.d\/default.conf
\nsed -i ’23a server_tokens off;’ \/etc\/nginx\/nginx.conf
\nsed -i “\/^server_tokens\/ s\/^\/ \/ ” \/etc\/nginx\/nginx.conf
\nsed -i ‘s:#gzip on;:gzip on;:g’ \/etc\/nginx\/nginx.conf
\nsed -i ‘s:short_open_tag = Off:short_open_tag = On:g’ \/etc\/php.ini
\nsed -i ‘s:expose_php = On:expose_php = Off:g’ \/etc\/php.ini
\nsed -i ‘s:;cgi.fix_pathinfo=1:cgi.fix_pathinfo=0:g’ \/etc\/php.ini
\nsed -i ‘s:;date.timezone =:date.timezone = “Asia\/Hong_Kong”:g’ \/etc\/php.ini
\nsed -i ‘s:; max_input_vars = 1000:max_input_vars = 10000:g’ \/etc\/php.ini
\nsed -i ‘s@;open_basedir =@open_basedir = \/data\/wwwroot\/:\/tmp\/:\/proc\/@g’ \/etc\/php.ini
\nsed -i ‘s@listen = 127.0.0.1:9000@listen = \/var\/run\/php-fpm\/php-fpm.sock@g’ \/etc\/php-fpm.d\/www.conf
\nsed -i ‘s:user = apache:user = nginx:g’ \/etc\/php-fpm.d\/www.conf
\nsed -i ‘s:group = apache:group = nginx:g’ \/etc\/php-fpm.d\/www.conf
\nsed -i ‘s:;listen.owner = nobody:listen.owner = nobody:g’ \/etc\/php-fpm.d\/www.conf
\nsed -i ‘s:;listen.group = nobody:listen.group = nobody:g’ \/etc\/php-fpm.d\/www.conf
\necho -e “\\033[46m [Notice] Start service \\033[0m”
\nsystemctl disable httpd
\nsystemctl stop httpd
\nsystemctl enable mysqld.service;
\nsystemctl enable php-fpm.service;
\nsystemctl enable nginx.service;
\nsystemctl enable firewalld.service;
\nsystemctl start firewalld.service
\nfirewall-cmd –permanent –zone=public –add-service=http;
\nfirewall-cmd –permanent –zone=public –add-service=https;
\nfirewall-cmd –reload;
\nsystemctl start mysqld.service;
\nsystemctl start php-fpm.service;
\nsystemctl start nginx.service;
\nmkdir -p \/var\/lib\/php\/session
\nchown -R nginx:nginx \/var\/lib\/php\/session\/
\nchown -R nginx:nginx \/var\/run\/php-fpm\/
\necho -e “\\033[46m [Notice] lnmp successful \\033[0m”
\necho -e “\\033[46m [Notice] install postfix opendkim \\033[0m”
\nyum install -y postfix opendkim mailx
\nsed -i “s\/#myhostname = virtual.domain.tld\/myhostname = `hostname -f`\/g” \/etc\/postfix\/main.cf
\nsed -i “s\/#mydomain = domain.tld\/mydomain = `hostname -f`\/g” \/etc\/postfix\/main.cf
\nsed -i ‘s:inet_interfaces = localhost:inet_interfaces = all:g’ \/etc\/postfix\/main.cf
\nsed -i ‘s:inet_protocols = all:inet_protocols = ipv4:g’ \/etc\/postfix\/main.cf
\nsed -i ‘s:mydestination =:#mydestination =:g’ \/etc\/postfix\/main.cf
\nsed -i ‘s:#relay_domains = $mydestination:relay_domains = $mydomain:g’ \/etc\/postfix\/main.cf
\nsed -i ‘s:#myorigin = $mydomain:myorigin = $mydomain:g’ \/etc\/postfix\/main.cf
\ncat > \/etc\/opendkim.conf<<“EOF”
\nUserID opendkim:opendkim
\nUMask 022
\nMode sv
\nPidFile \/var\/run\/opendkim\/opendkim.pid
\nCanonicalization relaxed\/relaxed
\nTemporaryDirectory \/var\/tmp
\nExternalIgnoreList refile:\/etc\/opendkim\/TrustedHosts
\nInternalHosts refile:\/etc\/opendkim\/TrustedHosts
\nKeyTable refile:\/etc\/opendkim\/KeyTable
\nSigningTable refile:\/etc\/opendkim\/SigningTable
\nMinimumKeyBits 1024
\nSocket inet:8891@127.0.0.1
\nLogWhy Yes
\nSyslog Yes
\nSyslogSuccess Yes
\nEOF
\nmkdir -p \/etc\/opendkim\/keys\/`hostname -f`
\nopendkim-genkey -D \/etc\/opendkim\/keys\/`hostname -f`\/ -d `hostname -f` -s default
\nchown opendkim:opendkim -R \/etc\/opendkim\/
\nchmod -R 700 \/etc\/opendkim
\necho “default._domainkey.`hostname -f` `hostname -f`:default:\/etc\/opendkim\/keys\/`hostname -f`\/default.private” >> \/etc\/opendkim\/KeyTable
\necho “*@`hostname -f` default._domainkey.`hostname -f`” >> \/etc\/opendkim\/SigningTable
\necho “localhost” >> \/etc\/opendkim\/TrustedHosts
\necho “`hostname -f`” >> \/etc\/opendkim\/TrustedHosts
\ncat >> \/etc\/postfix\/main.cf<<EOF
\nmynetworks = 127.0.0.0\/8
\nhome_mailbox = Maildir\/
\nmydestination = $myhostname, localhost.$mydomain, localhost, $mydomain, mail.$mydomain, www.$mydomain, ftp.$mydomain
\n#DKIM
\nmilter_default_action = accept
\nmilter_protocol = 2
\nsmtpd_milters = inet:8891
\nnon_smtpd_milters = inet:8891
\nEOF
\nhash -r
\nsystemctl enable postfix
\nsystemctl start postfix
\nsystemctl enable opendkim
\nsystemctl start opendkim
\ncp \/etc\/opendkim\/keys\/`hostname -f`\/default.txt \/root\/`hostname -f`-dkim-signature_default.txt
\necho -e “\\033[46m open ‘\/root\/`hostname -f`-dkim-signature_default.txt’, then add the TXT record to you DNS resolution system. \\033[0m”
\necho -e “\\033[46m [Notice] install postfix opendkim successful \\033[0m”
\ncat > \/usr\/sbin\/panel<<“EOF”
\n#!\/bin\/bash
\n# Sanity check
\n[ $(id -g) != “0” ] && die “Script must be run as root.”;
\necho -e “\\033[46m Nginx PHP Mail Manage \\033[0m”
\necho -e “\\033[46m1.restart nginx&php-fpm\\n2.check nginx&php-fpm status\\n3.restart postfix&opendkim\\n4.check postfix&opendkim \\033[0m”
\nselect selected in ‘rnp’ ‘cnp’ ‘rpo’ ‘cpo’; do
\nbreak;
\ndone;
\nif [ “$selected” == ‘rnp’ ]; then
\nsystemctl restart nginx
\nsystemctl restart php-fpm
\nsystemctl status nginx
\nsystemctl status php-fpm
\nchown -R nginx:nginx \/var\/run\/php-fpm\/
\nchown -R nginx:nginx \/var\/lib\/php\/session\/
\nexit;
\nelif [ “$selected” == ‘cnp’ ]; then
\nsystemctl status nginx
\nsystemctl status php-fpm
\nexit;
\nelif [ “$selected” == ‘rpo’ ]; then
\nsystemctl restart postfix
\nsystemctl restart opendkim
\nsystemctl status postfix
\nsystemctl status opendkim
\nexit;
\nelif [ “$selected” == ‘cpo’ ]; then
\nsystemctl status postfix
\nsystemctl status opendkim
\nexit;
\nfi;<\/p>\n
EOF
\nchmod +x \/usr\/sbin\/panel
\nmkdir \/root\/backup
\nmkdir \/root\/tools
\nmkdir \/root\/tmp
\ncat > \/root\/tools\/backup.sh<<EOF
\n#!\/bin\/bash
\nSCRIPT_DIR=”\/usr\/sbin” #\u8fd9\u4e2a\u6539\u6210\u4f60\u5b58\u653e\u521a\u521a\u4e0b\u8f7d\u4e0b\u6765\u7684dropbox_uploader.sh\u7684\u6587\u4ef6\u5939\u4f4d\u7f6e
\nDROPBOX_DIR=”\/root\/backup” #\u8fd9\u4e2a\u6539\u6210\u4f60\u7684\u5907\u4efd\u6587\u4ef6\u60f3\u8981\u653e\u5728Dropbox\u4e0b\u9762\u7684\u6587\u4ef6\u5939\u540d\u79f0\uff0c\u5982\u679c\u4e0d\u5b58\u5728\uff0c\u811a\u672c\u4f1a\u81ea\u52a8\u521b\u5efa
\nBACKUP_SRC=”\/home \/etc\/nginx\/conf.d” #\u8fd9\u4e2a\u662f\u4f60\u60f3\u8981\u5907\u4efd\u7684\u672c\u5730VPS\u4e0a\u7684\u6587\u4ef6\uff0c\u4e0d\u540c\u7684\u76ee\u5f55\u7528\u7a7a\u683c\u5206\u5f00
\nBACKUP_DST=”\/root\/tmp” #\u8fd9\u4e2a\u662f\u4f60\u6682\u65f6\u5b58\u653e\u5907\u4efd\u538b\u7f29\u6587\u4ef6\u7684\u5730\u65b9\uff0c\u4e00\u822c\u7528\/tmp\u5373\u53ef
\nMYSQL_SERVER=”localhost” #\u8fd9\u4e2a\u662f\u4f60mysql\u670d\u52a1\u5668\u7684\u5730\u5740\uff0c\u4e00\u822c\u586b\u8fd9\u4e2a\u672c\u5730\u5730\u5740\u5373\u53ef
\nMYSQL_USER=”root” #\u8fd9\u4e2a\u662f\u4f60mysql\u7684\u7528\u6237\u540d\u540d\u79f0\uff0c\u6bd4\u5982root\u6216admin\u4e4b\u7c7b\u7684
\nMYSQL_PASS=”$mysql” #\u8fd9\u4e2a\u662f\u4f60mysql\u7528\u6237\u7684\u5bc6\u7801
\n# \u4e0b\u9762\u7684\u4e00\u822c\u4e0d\u7528\u6539\u4e86
\nNOW=\\$(date +”%Y.%m.%d”)
\nDESTFILE=”\\$BACKUP_DST\/\\$NOW.tar.gz”
\n# \u5907\u4efdmysql\u6570\u636e\u5e93\u5e76\u548c\u5176\u5b83\u5907\u4efd\u6587\u4ef6\u4e00\u8d77\u538b\u7f29\u6210\u4e00\u4e2a\u6587\u4ef6
\nmysqldump -u \\$MYSQL_USER -h \\$MYSQL_SERVER -p\\$MYSQL_PASS –all-databases > “\\$NOW-Databases.sql”
\necho “Databases Package Done,Package Website…”
\ntar cfzP “\\$DESTFILE” \\$BACKUP_SRC “\\$NOW-Databases.sql”
\necho “Package Done,Uploading…”
\n# \u7528\u811a\u672c\u4e0a\u4f20\u5230dropbox
\n\\$SCRIPT_DIR\/dropbox_uploader.sh upload “\\$DESTFILE” “\\$DROPBOX_DIR\/\\$NOW.tar.gz”
\nif [ \\$? -eq 0 ];then
\necho “Upload Successful”
\nelse
\necho “Upload Fail”
\nfi
\n# \u5220\u9664\u672c\u5730\u7684\u4e34\u65f6\u6587\u4ef6
\nrm -f “\\$NOW-Databases.sql” “\\$DESTFILE”
\nEOF
\nchmod +x \/root\/tools\/backup.sh
\nsystemctl enable crond
\nsystemctl start crond
\necho ‘#!\/bin\/bash
\n# Sanity check
\n[ $(id -g) != “0” ] && die “Script must be run as root.”;
\necho -e “\\033[46m Vhost Manage \\033[0m”
\necho -e “\\033[46m1.add www domain\\n2.add second domain\\n3.delete website\\n4.exit \\033[0m”
\nselect selected in ‘addwww’ ‘addxxx’ ‘del’ ‘exit’; do
\nbreak;
\ndone;
\nif [ “$selected” == ‘addwww’ ]; then
\nunset domain
\necho “input domain”;
\nread domain
\nuseradd -m -s \/sbin\/nologin $domain;
\nusermod -G nginx $domain
\nmkdir -p \/home\/$domain\/www;
\nmkdir -p \/home\/$domain\/log;
\nmkdir -p \/home\/$domain\/tmp\/session;
\nchown -R nginx:nginx \/home\/$domain
\ncat > \/etc\/nginx\/conf.d\/$domain.conf <<EOF
\nserver {
\nlisten 80;
\nserver_name www.$domain;
\naccess_log \/home\/$domain\/log\/access.log;
\nerror_log \/home\/$domain\/log\/error.log;
\nroot \/home\/$domain\/www;
\nindex index.php index.html index.htm;
\nlocation = \/favicon.ico {
\nlog_not_found off;
\naccess_log off;
\n}
\n#include \/home\/$domain\/rewrite.conf;
\nlocation = \/robots.txt {
\nallow all;
\nlog_not_found off;
\naccess_log off;
\n}<\/p>\n
#error_page 404 \/404.html;<\/p>\n
# redirect server error pages to the static page \/50x.html
\n#
\nerror_page 500 502 503 504 \/50x.html;
\nlocation = \/50x.html {
\nroot \/usr\/share\/nginx\/html;
\n}<\/p>\n
# pass the PHP scripts to FastCGI server listening on sock
\n#
\nlocation ~ \\.php\\$ {
\ntry_files \\$uri =404;
\nfastcgi_pass unix:\/var\/run\/php-fpm\/$domain.sock;
\nfastcgi_index index.php;
\nfastcgi_param SCRIPT_FILENAME \\$document_root\\$fastcgi_script_name;
\ninclude fastcgi_params;
\n}<\/p>\n
# Deny all attempts to access hidden files such as .htaccess
\n# Deny access to any files with a .php extension in the uploads directory
\n#
\nlocation ~ \/\\. {
\ndeny all;
\n}
\nlocation ~* \/(?:uploads|files|data|upload)\/.*\\.php\\$ {
\ndeny all;
\n}<\/p>\n
location ~* \\.(gif|jpg|jpeg|png|bmp|txt|zip|jar|swf)\\$ {
\nexpires 30d;
\naccess_log off;
\nvalid_referers none blocked *.$domain server_names ~\\.google\\. ~\\.baidu\\. ~\\.bing\\. ~\\.yahoo\\. ~\\.soso\\. ~\\.sogou\\. ~\\.alexa\\. ~\\.haosou\\. ~\\.youdao\\.;
\nif (\\$invalid_referer) {
\n#return 403;
\nrewrite ^\/ http:\/\/www.$domain\/403.png;
\n}
\n}
\nrewrite ^\/sitemap.xml\\$ \/sitemap.php last;
\n}<\/p>\n
server {
\nserver_name $domain;
\nrewrite ^\/(.*)\\$ http:\/\/www.\\$host\/$1 permanent;
\n}
\nEOF
\ncat > \/etc\/php-fpm.d\/$domain.conf <<EOF
\n[$domain]
\nlisten = \/var\/run\/php-fpm\/$domain.sock
\nlisten.allowed_clients = 127.0.0.1
\nlisten.owner = nginx
\nlisten.group = nginx
\nlisten.mode = 0660<\/p>\n
user = nginx
\ngroup = nginx<\/p>\n
pm = dynamic
\npm.max_children = 50
\npm.start_servers = 5
\npm.min_spare_servers = 5
\npm.max_spare_servers = 35<\/p>\n
chdir = \/
\nslowlog = \/var\/log\/php-fpm\/www-slow.log
\nphp_value[session.save_handler] = files
\nphp_value[session.save_path] = \/home\/$domain\/tmp\/session
\nphp_admin_value[open_basedir] = \/home\/$domain\/www:\/home\/$domain\/tmp:\/usr\/share\/php:\/tmp
\nphp_admin_value[upload_tmp_dir] = \/home\/$domain\/tmp
\nEOF
\n# cat > \/etc\/logrotate.d\/$domain <<EOF
\n#\/data\/$domain\/log\/*.log {
\n#daily
\n#missingok
\n#rotate 7
\n#compress
\n#delaycompress
\n#notifempty
\n#create 640 nginx adm
\n#sharedscripts
\n#postrotate
\n# [ -f \/var\/run\/nginx.pid ] && kill -USR1 `cat \/var\/run\/nginx.pid`
\n#endscript
\n#}
\n#EOF
\nnginx -t
\nsystemctl restart nginx
\nsystemctl restart php-fpm
\nsystemctl status nginx
\nsystemctl status php-fpm
\necho “successful!”;
\nexit;
\nelif [ “$selected” == ‘addxxx’ ]; then
\nunset domain
\necho “input domain”;
\nread domain
\nunset sdomain
\necho “input second domain [need add . at end]”;
\nread sdomain
\nuseradd -m -s \/sbin\/nologin $sdomain$domain;
\nusermod -G nginx $sdomain$domain
\nmkdir -p \/home\/$sdomain$domain\/www;
\nmkdir -p \/home\/$sdomain$domain\/log;
\nmkdir -p \/home\/$sdomain$domain\/tmp\/session;
\nchown -R nginx:nginx \/home\/$sdomain$domain
\ncat > \/etc\/nginx\/conf.d\/$sdomain$domain.conf <<EOF
\nserver {
\nlisten 80;
\nserver_name $sdomain$domain;
\naccess_log \/home\/$sdomain$domain\/log\/access.log;
\nerror_log \/home\/$sdomain$domain\/log\/error.log;
\nroot \/home\/$sdomain$domain\/www;
\nindex index.php index.html index.htm;
\nlocation = \/favicon.ico {
\nlog_not_found off;
\naccess_log off;
\n}
\n#include \/home\/$sdomain$domain\/rewrite.conf;
\nlocation = \/robots.txt {
\nallow all;
\nlog_not_found off;
\naccess_log off;
\n}<\/p>\n
#error_page 404 \/404.html;<\/p>\n
# redirect server error pages to the static page \/50x.html
\n#
\nerror_page 500 502 503 504 \/50x.html;
\nlocation = \/50x.html {
\nroot \/usr\/share\/nginx\/html;
\n}<\/p>\n
# pass the PHP scripts to FastCGI server listening on sock
\n#
\nlocation ~ \\.php\\$ {
\ntry_files \\$uri =404;
\nfastcgi_pass unix:\/var\/run\/php-fpm\/$sdomain$domain.sock;
\nfastcgi_index index.php;
\nfastcgi_param SCRIPT_FILENAME \\$document_root\\$fastcgi_script_name;
\ninclude fastcgi_params;
\n}<\/p>\n
# Deny all attempts to access hidden files such as .htaccess
\n# Deny access to any files with a .php extension in the uploads directory
\n#
\nlocation ~ \/\\. {
\ndeny all;
\n}
\nlocation ~* \/(?:uploads|files|data|upload)\/.*\\.php\\$ {
\ndeny all;
\n}<\/p>\n
location ~* \\.(gif|jpg|jpeg|png|bmp|txt|zip|jar|swf)\\$ {
\nexpires 30d;
\naccess_log off;
\nvalid_referers none blocked *.$sdomain$domain server_names ~\\.google\\. ~\\.baidu\\. ~\\.bing\\. ~\\.yahoo\\. ~\\.soso\\. ~\\.sogou\\. ~\\.alexa\\. ~\\.haosou\\. ~\\.youdao\\.;
\nif (\\$invalid_referer) {
\n#return 403;
\nrewrite ^\/ http:\/\/www.$domain\/403.png;
\n}
\n}
\nrewrite ^\/sitemap.xml\\$ \/sitemap.php last;
\n}
\nEOF
\ncat > \/etc\/php-fpm.d\/$sdomain$domain.conf <<EOF
\n[$sdomain$domain]
\nlisten = \/var\/run\/php-fpm\/$sdomain$domain.sock
\nlisten.allowed_clients = 127.0.0.1
\nlisten.owner = nginx
\nlisten.group = nginx
\nlisten.mode = 0660<\/p>\n
user = nginx
\ngroup = nginx<\/p>\n
pm = dynamic
\npm.max_children = 50
\npm.start_servers = 5
\npm.min_spare_servers = 5
\npm.max_spare_servers = 35<\/p>\n
chdir = \/
\nslowlog = \/var\/log\/php-fpm\/www-slow.log
\nphp_value[session.save_handler] = files
\nphp_value[session.save_path] = \/home\/$sdomain$domain\/tmp\/session
\nphp_admin_value[open_basedir] = \/home\/$sdomain$domain\/www:\/home\/$sdomain$domain\/tmp:\/usr\/share\/php:\/tmp
\nphp_admin_value[upload_tmp_dir] = \/home\/$sdomain$domain\/tmp
\nEOF
\n# cat > \/etc\/logrotate.d\/$sdomain$domain <<EOF
\n#\/data\/$sdomain$domain\/log\/*.log {
\n#daily
\n#missingok
\n#rotate 7
\n#compress
\n#delaycompress
\n#notifempty
\n#create 640 nginx adm
\n#sharedscripts
\n#postrotate
\n# [ -f \/var\/run\/nginx.pid ] && kill -USR1 `cat \/var\/run\/nginx.pid`
\n#endscript
\n#}
\n#EOF
\nsystemctl restart nginx
\nsystemctl restart php-fpm
\nsystemctl status nginx
\nsystemctl status php-fpm
\necho “successful!”;
\nexit;
\nelif [ “$selected” == ‘del’ ]; then
\necho “input domain”;
\nread domain
\necho “input second domain [need add . at end]”;
\nread sdomain
\nrm \/etc\/nginx\/conf.d\/$sdomain$domain.conf
\ntar zcvf \/home\/bakdel$sdomain$domain.tar.gz \/home\/www\/$sdomain$domain
\nrm \/home\/www\/$sdomain$domain -rf
\nexit;
\nelif [ “$selected” == ‘exit’ ]; then
\nexit;
\nfi;<\/p>\n
‘>>\/usr\/sbin\/vhost<\/p>\n
chmod +x \/usr\/sbin\/vhost
\necho -e “\\033[46mneed set mysql mysql_secure_installation\\nset dropbox key! go \/root\/dropbox_uploader.sh info\\ncrontab -e [0 5 * * * \/bin\/bash \/root\/tools\/backup.sh]\\npanel and vhost command can help you \\033[0m”<\/p>\n","protected":false},"excerpt":{"rendered":"
\u8fd9\u4e2a\u811a\u672c\u4e3b\u8981\u662f\u6211\u7528\u6765\u4e00\u952e\u914d\u7f6e\u670d\u52a1\u5668\u7528\u7684\u3002 \u4e3b\u8981\u5305\u62ecnginx1.10 php5.6 mysql5.6\u00a0post … \u95b1\u8b80\u5168\u6587 Centos7 \u5b89\u88c5MySQL5.6 php5.6 nginx1.10 \u90ae\u4ef6\u670d\u52a1 \u4ee5\u53cavhost\u811a\u672c<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"_links":{"self":[{"href":"https:\/\/nby.me\/index.php?rest_route=\/wp\/v2\/posts\/74"}],"collection":[{"href":"https:\/\/nby.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nby.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nby.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nby.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=74"}],"version-history":[{"count":2,"href":"https:\/\/nby.me\/index.php?rest_route=\/wp\/v2\/posts\/74\/revisions"}],"predecessor-version":[{"id":76,"href":"https:\/\/nby.me\/index.php?rest_route=\/wp\/v2\/posts\/74\/revisions\/76"}],"wp:attachment":[{"href":"https:\/\/nby.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=74"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nby.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=74"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nby.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=74"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}