「Install MediaWiki 1.35 on FreeBSD 12.2」修訂間的差異
跳至導覽
跳至搜尋
| 行 41: | 行 41: | ||
=== 測試 nginx & TLS === |
=== 測試 nginx & TLS === |
||
| + | |||
| + | 使用以下測試nginx配置: |
||
| + | |||
| + | worker_processes 1; |
||
| + | |||
| + | events { |
||
| + | worker_connections 1024; |
||
| + | } |
||
| + | |||
| + | http { |
||
| + | server { |
||
| + | listen 80; |
||
| + | listen [::]:80; |
||
| + | server_name chevyne.at.tw; |
||
| + | return 301 https://$server_name$request_uri; |
||
| + | } |
||
| + | server { |
||
| + | listen 443; |
||
| + | listen [::]:443; |
||
| + | server_name chevyne.at.tw; |
||
| + | |||
| + | ssl on; |
||
| + | ssl_certificate /usr/local/www/tls/chevyne.at.tw.crt; |
||
| + | ssl_certificate_key /usr/local/www/tls/chevyne.at.tw.key; |
||
| + | ssl_session_cache shared:SSL:1m; |
||
| + | ssl_session_timeout 5m; |
||
| + | |||
| + | ssl_ciphers HIGH:!aNULL:!MD5; |
||
| + | ssl_prefer_server_ciphers on; |
||
| + | |||
| + | location / { |
||
| + | root /usr/local/www/nginx; |
||
| + | index index.html index.htm; |
||
| + | } |
||
| + | } |
||
| + | } |
||
| + | |||
| + | 啟動 nginx: |
||
| + | |||
| + | service nginx start |
||
| + | |||
| + | 確定一切正常。 |
||
| + | |||
| + | == 啟用 wiki == |
||
於 2020年12月31日 (四) 21:43 的修訂
安裝 MediaWiki 在 FreeBSD
安裝說明
本站安裝的環境
- FreeBSD 12.2
- Nginx 1.18.0
- PHP 7.4.13
- MediaWiki 1.35.0
- SQLite 3.33.0
先決條件
- 網址 - 本站使用
chevyne.at.tw - 網址的 TLS憑證 (申請中, 所以目前沒有HTTPS)
- 已完成 FreeBSD 安裝後步驟
安裝套件
pkg install -y nginx mediawiki135-php74 git php74-pdo_sqlite php74-pecl-APCu php74-pecl-imagick php74-gd php74-openssl sysrc nginx_enable="YES" sysrc php_fpm_enable="YES"
配置 PHP
配置PHP,以使用unix domain socket而不是TCP/IP。
編輯 /usr/local/etc/php-fpm.conf 並更改listen指令:
listen = /var/run/php-fpm.sock listen.owner = www listen.group = www listen.mode = 0660
啟動 PHP
service php-fpm start
測試 nginx & TLS
使用以下測試nginx配置:
worker_processes 1;
events {
worker_connections 1024;
}
http {
server {
listen 80;
listen [::]:80;
server_name chevyne.at.tw;
return 301 https://$server_name$request_uri;
}
server {
listen 443;
listen [::]:443;
server_name chevyne.at.tw;
ssl on;
ssl_certificate /usr/local/www/tls/chevyne.at.tw.crt;
ssl_certificate_key /usr/local/www/tls/chevyne.at.tw.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root /usr/local/www/nginx;
index index.html index.htm;
}
}
}
啟動 nginx:
service nginx start
確定一切正常。