「Install MediaWiki 1.35 on FreeBSD 12.2」修訂間的差異
		
		
		
		
		
		跳至導覽
		跳至搜尋
		
				
		
		
	
| 行 41: | 行 41: | ||
=== 測試 nginx & TLS ===  | 
  === 測試 nginx & TLS ===  | 
||
| + | |||
| + | 使用以下測試nginx配置:  | 
||
| + | |||
| + |  worker_processes 1;  | 
||
| + | |||
| + |  events {  | 
||
| + |  	worker_connections  1024;  | 
||
| + |  }  | 
||
| + | |||
| + |  http {  | 
||
| + |  	server {  | 
||
| + |  		listen 80;  | 
||
| + |  		listen [::]:80;  | 
||
| + |  		server_name chevyne.at.tw;  | 
||
| + |  		return 301 https://$server_name$request_uri;  | 
||
| + |  	}  | 
||
| + |  	server {  | 
||
| + |  		listen 443;  | 
||
| + |  		listen [::]:443;  | 
||
| + |  		server_name chevyne.at.tw;  | 
||
| + | |||
| + |  		ssl on;  | 
||
| + |  		ssl_certificate /usr/local/www/tls/chevyne.at.tw.crt;  | 
||
| + |  		ssl_certificate_key /usr/local/www/tls/chevyne.at.tw.key;  | 
||
| + |  		ssl_session_cache shared:SSL:1m;  | 
||
| + |  		ssl_session_timeout 5m;  | 
||
| + | |||
| + |  		ssl_ciphers HIGH:!aNULL:!MD5;  | 
||
| + |  		ssl_prefer_server_ciphers on;  | 
||
| + | |||
| + |  		location / {  | 
||
| + |  			root /usr/local/www/nginx;  | 
||
| + |  			index index.html index.htm;  | 
||
| + |  		}  | 
||
| + |  	}  | 
||
| + |  }  | 
||
| + | |||
| + | 啟動 nginx:  | 
||
| + | |||
| + |  service nginx start  | 
||
| + | |||
| + | 確定一切正常。  | 
||
| + | |||
| + | == 啟用 wiki ==  | 
||
於 2020年12月31日 (四) 21:43 的修訂
安裝 MediaWiki 在 FreeBSD
安裝說明
本站安裝的環境
- FreeBSD 12.2
 - Nginx 1.18.0
 - PHP 7.4.13
 - MediaWiki 1.35.0
 - SQLite 3.33.0
 
先決條件
- 網址 - 本站使用 
chevyne.at.tw - 網址的 TLS憑證 (申請中, 所以目前沒有HTTPS)
 - 已完成 FreeBSD 安裝後步驟
 
安裝套件
pkg install -y nginx mediawiki135-php74 git php74-pdo_sqlite php74-pecl-APCu php74-pecl-imagick php74-gd php74-openssl sysrc nginx_enable="YES" sysrc php_fpm_enable="YES"
配置 PHP
配置PHP,以使用unix domain socket而不是TCP/IP。
編輯 /usr/local/etc/php-fpm.conf 並更改listen指令:
listen = /var/run/php-fpm.sock listen.owner = www listen.group = www listen.mode = 0660
啟動 PHP
service php-fpm start
測試 nginx & TLS
使用以下測試nginx配置:
worker_processes 1;
events {
	worker_connections  1024;
}
http {
	server {
		listen 80;
		listen [::]:80;
		server_name chevyne.at.tw;
		return 301 https://$server_name$request_uri;
	}
	server {
		listen 443;
		listen [::]:443;
		server_name chevyne.at.tw;
		ssl on;
		ssl_certificate /usr/local/www/tls/chevyne.at.tw.crt;
		ssl_certificate_key /usr/local/www/tls/chevyne.at.tw.key;
		ssl_session_cache shared:SSL:1m;
		ssl_session_timeout 5m;
		ssl_ciphers HIGH:!aNULL:!MD5;
		ssl_prefer_server_ciphers on;
		location / {
			root /usr/local/www/nginx;
			index index.html index.htm;
		}
	}
}
啟動 nginx:
service nginx start
確定一切正常。