• 实验环境

• mysql服务端配置：
  安装mariadb服务，创建wordpress所需数据库及用户名

yum install -y mariadb-server
[root@centos8-node1 ~]# mysql
MariaDB [(none)]> grant all  on wordpress.* to wordpress@'172.16.2.%' identified by '123456';
MariaDB [(none)]> flush privileges;

nginx+php端配置：
安装php-fpm、php-mysql（新版的php需要配置yum源）

yum install -y php74-php-fpm php74-php-mysql

编辑php配置文件

# 新建nginx系统用户
[root@node1 yum.repos.d]# groupadd -r nginx  
[root@node1 yum.repos.d]# useradd -r -g nginx -s /sbin/nologin nginx

# 编辑php配置文件
 [root@node1 yum.repos.d]# vim /etc/opt/remi/php74/php-fpm.d/www.conf
# 修改组和用户
user = nginx
group = nginx
#修改侦听地址及端口
listen = 127.0.0.1:9001
#如需通过网络访问php服务可以注释一下选项
;listen.allowed_clients = 127.0.0.1
启动服务
[root@node1 yum.repos.d]# systemctl start php74-php-fpm.service

编译安装nginx

[root@node1 ~]# yum install gcc pcre-devel openssl-devel zlib-devel
[root@node1 ~]# tar xvf nginx-1.16.1.tar.gz
[root@node1 ~]# cd nginx-1.16.1/
[root@node1 ~]# ./configure --prefix=/apps/nginx --user=nginx --group=nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_stub_status_module --with-http_gzip_static_module --with-pcre --with-stream --with-stream_ssl_module --with-stream_realip_module
[root@node1 ~]# make -j 2 && make install

准备wordpress

[root@node1 ~]# tar xvf wordpress-4.7.4-zh_CN.tar.gz
[root@node1 ~]# mkdir /data
[root@node1 ~]# mv wordpress /data/
# 给予nginx读写权限
[root@node1 ~]# setfacl -R -m u:nginx:rwx /data/wordpress
[root@node1 ~]# mv /data/wordpress/wp-config-sample.php /data/wordpress/wp-config.php
# 修改配置文件里数据库相关内容
[root@node1 ~]# vim /data/wordpress/wp-config.php
// ** MySQL 设置 - 具体信息来自您正在使用的主机 ** //
/** WordPress数据库的名称 */
define('DB_NAME', 'wordpress');

/** MySQL数据库用户名 */
define('DB_USER', 'wordpress');

/** MySQL数据库密码 */
define('DB_PASSWORD', '123456');

/** MySQL主机 */
define('DB_HOST', '172.16.2.135');

准备自签证书

[root@node1 certs]# cd /etc/pki/tls/certs/
[root@node1 certs]# make www.test.com.crt
umask 77 ; \
/usr/bin/openssl genrsa -aes128 2048 > www.test.com.key
Generating RSA private key, 2048 bit long modulus
.......+++
.....................................................................+++
e is 65537 (0x10001)
Enter pass phrase:
Verifying - Enter pass phrase:
umask 77 ; \
/usr/bin/openssl req -utf8 -new -key test.key -x509 -days 365 -out test.crt
Enter pass phrase for test.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:CN
State or Province Name (full name) []:Shanghai
Locality Name (eg, city) [Default City]:Shanghai
Organization Name (eg, company) [Default Company Ltd]:test
Organizational Unit Name (eg, section) []:test
Common Name (eg, your name or your server's hostname) []:www.test.com //此处是网站域名
Email Address []:

[root@node1 nginx]# mkdir /apps/nginx/ssl
[root@node1 nginx]# mv /etc/pki/tls/certs/www.test.com* /apps/nginx/ssl/

新建错误页面

[root@node1 ~]# mkdir /apps/nginx/error
[root@node1 error]# vim /apps/nginx/error/error.html
这是一个自定义错误页面

编辑nginx配置文件

[root@node1 ~]# vim /apps/nginx/conf/nginx.conf
# 在主配置文件http下加如一下内容（独立的配置文件便于管理及排错）
 include /apps/nginx/conf.d/*.conf;
# 编辑独立配置文件
[root@node1 ~]# vim /apps/nginx/conf.d/wordpress.conf
# 定义json日志格式
log_format access_json '{"@timestamp":"$time_iso8601",'
'"host":"$server_addr",'
'"clientip":"$remote_addr",'
'"size":$body_bytes_sent,'
'"responsetime":$request_time,'
'"upstreamtime":"$upstream_response_time",'
'"upstreamhost":"$upstream_addr",'
'"http_host":"$host",'
'"uri":"$uri",'
'"domain":"$host",'
'"xff":"$http_x_forwarded_for",'
'"referer":"$http_referer",'
'"tcp_xff":"$proxy_protocol_addr",'
'"http_user_agent":"$http_user_agent",'
'"status":"$status"}';
# 配置虚拟主机
server {
        # 监听端口
        listen 80;
        # 开启https
        listen 443 ssl;
#       ssl on;
        # 指定ssl证书
        ssl_certificate /apps/nginx/ssl/www.test.com.crt;
        ssl_certificate_key /apps/nginx/ssl/www.test.com.key;
        # 指定ssl缓存时间
        ssl_session_cache shared:sslcache:20m;
        ssl_session_timeout 10m;
        # 虚拟主机头
        server_name www.test.com;
        #根目录
        root /data/wordpress;
        index index.php;
        charset utf-8;
        # 针对php文件的fastcgi反向代理
        location ~* \.php$ {
                root /data/wordpress; #$document_root 调用root目录
                fastcgi_pass 127.0.0.1:9001;
                fastcgi_index index.php;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                #fastcgi_param SCRIPT_FILENAME /data/wordpress$fastcgi_script_name;
                #如果SCRIPT_FILENAME是绝对路径,则可以省略root /data/php;
                include fastcgi_params;
        }
        # 自定义访问日志
        access_log /apps/nginx/logs/access_test.com.log access_json;
}
server {
        listen 80;
        server_name admin.test.com;
        root /data/wordpress/wp-admin;
        index index.php;
        location ~* \.php$ {
                root /data/wordpress/wp-admin; #$document_root 调用root目录
                fastcgi_pass 127.0.0.1:9001;
                fastcgi_index index.php;
                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                #fastcgi_param SCRIPT_FILENAME /data/wordpress$fastcgi_script_name;
                #如果SCRIPT_FILENAME是绝对路径,则可以省略root /data/php;
                include fastcgi_params;
        }
        # 自定义错误页面
        error_page 500 502 503 504 404 /error.html;
        location = /error.html {
                root /apps/nginx/error;
        }
        access_log /apps/nginx/logs/access_admin.test.com.log access_json;

}
# 启动服务
[root@node1 ~]# nginx

• 验证：
  客户端访问网站可能需要修改hosts文件
  访问首页

  
  
  image

访问后台

image

访问自定义错误页面

image.png

用https访问网站

image.png