Nginx多站点虚拟主机实现单独启动停止php-fpm、单独控制权限设置

最新推荐文章于 2025-10-30 16:47:09 发布

转载最新推荐文章于 2025-10-30 16:47:09 发布 · 2.1k 阅读

LNMP 专栏收录该内容

4 篇文章

订阅专栏

源: http://www.osyunwei.com/archives/3743.html

nginx用于部署web应用，当可以打开站点中的测试index.html，说明nginx设置ok；

php-fpm用于解析php文件展示，当可以打开站点中的测试index.php，说明php-fpm设置ok；

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~转载开始~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Nginx多站点虚拟主机实现单独启动停止php-fpm、单独控制权限设置

2012年05月01日 ⁄ LNMP ⁄ 评论数 5 ⁄ 被围观 16,397次+

说明：

站点1：bbs.osyunwei.com 程序所在目录/data/osyunwei/bbs

站点2：sns.osyunwei.com 程序所在目录/data/osyunwei/sns

相关配置文件目录：

nginx主配置文件：/usr/local/nginx/conf/nginx.conf

php安装目录：/usr/local/php5/

站点1虚拟主机配置配置文件：/usr/local/nginx/conf/vhost/bbs.conf

站点2虚拟主机配置配置文件：/usr/local/nginx/conf/vhost/sns.conf

实现目的：

1、可以对站点1和站点2单独启动、停止php-fpm

2、站点1和站点2的php运行权限相互隔离，不能跨目录浏览，即站点1内的php木马不能访问站点2中的内容，

同理，站2内的php木马不能访问站点1中的内容。

实现方法：

一、为每个站点创建php-fpm.pid文件

cd /usr/local/php5/var/run

touch php-fpm-bbs.pid

touch php-fpm-sns.pid

二、为每个站点创建php-fpm.conf文件

cd /usr/local/php5/etc/

cp php-fpm.conf php-fpm-bbs.conf

cp php-fpm.conf php-fpm-sns.conf

三、为每个站点建立php-cgi.sock文件

touch /tmp/php-cgi-bbs.sock #建立php-cgi.sock文件

chown www.www /tmp/php-cgi-bbs.sock #设置文件所有者为www（必须与nginx的用户一致）

touch /tmp/php-cgi-sns.sock

chown www.www /tmp/php-cgi-sns.sock

四、编辑相关文件

vi /usr/local/php5/etc/php-fpm-bbs.conf

pid = run/php-fpm-bbs.pid

listen =/tmp/php-cgi-bbs.sock;

vi /usr/local/php5/etc/php-fpm-sns.conf

pid = run/php-fpm-sns.pid

listen =/tmp/php-cgi-sns.sock;

vi /etc/rc.d/init.d/php-fpm

vhost=$2

php_fpm_CONF=${prefix}/etc/php-fpm-$vhost.conf

php_fpm_PID=${prefix}/var/run/php-fpm-$vhost.pid

php_opts="-d open_basedir=/data/osyunwei/$vhost/:/tmp/ --fpm-config $php_fpm_CONF"

vi /usr/local/nginx/conf/vhost/bbs.conf

fastcgi_pass unix:/tmp/php-cgi-bbs.sock;

vi /usr/local/nginx/conf/vhost/sns.conf

fastcgi_pass unix:/tmp/php-cgi-sns.sock;

cd /home

vi start.sh #编辑开机启动脚本

#!/bin/bash

auto=$1

/bin/bash /etc/rc.d/init.d/php-fpm $auto bbs

/bin/bash /etc/rc.d/init.d/php-fpm $auto sns

chmod +x start.sh #添加脚本执行权限

vi /etc/rc.local #编辑开机启动文件

sh /home/start.sh start #加入开机启动

service nginx start

/etc/rc.d/init.d/php-fpm start bbs #单独启动站点bbs.osyunwei.com

/etc/rc.d/init.d/php-fpm start sns

/etc/rc.d/init.d/php-fpm stop bbs #单独停止站点sns.osyunwei.com

/etc/rc.d/init.d/php-fpm stop sns

五、相关配置文件内容

/usr/local/nginx/conf/nginx.conf

 
user  www www;
 
worker_processes  2;
 
#error_log  logs/error.log;
 
#error_log  logs/error.log  notice;
 
#error_log  logs/error.log  info;
 
#pid        logs/nginx.pid;
 
 
 
events {
 
    use epoll;
 
    worker_connections  65535;
 
}
 
 
 
http {
 
    include       mime.types;
 
    default_type  application/octet-stream;
 
 
 
    #log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
 
    #                  '$status $body_bytes_sent "$http_referer" '
 
    #                  '"$http_user_agent" "$http_x_forwarded_for"';
 
 
 
    #access_log  logs/access.log  main;
 
    server_names_hash_bucket_size 128;
 
    client_header_buffer_size 32k;
 
    large_client_header_buffers 4 32k;
 
    client_max_body_size 300m;
 
    sendfile        on;
 
    tcp_nopush     on;
 
    fastcgi_connect_timeout 300;
 
    fastcgi_send_timeout 300;
 
    fastcgi_read_timeout 300;
 
    fastcgi_buffer_size 64k;
 
    fastcgi_buffers 4 64k;
 
    fastcgi_busy_buffers_size 128k;
 
    fastcgi_temp_file_write_size 128k;
 
    #keepalive_timeout  0;
 
    keepalive_timeout  60;
 
    tcp_nodelay on;
 
    server_tokens off;
 
    gzip  on;
 
    gzip_min_length  1k;
 
    gzip_buffers     4 16k;
 
    gzip_http_version 1.1;
 
    gzip_comp_level 2;
 
    gzip_types       text/plain application/x-javascript text/css application/xml;
 
    gzip_vary on;
 
   server
 
       {
 
     listen       80 default;
 
     server_name  _;
 
     location / {
 
     root   html;
 
     return 404;
 
                    }
 
     location ~ /.ht {
 
     deny  all;
 
                      }
 
       }
 
   server
 
        {
 
     listen       80;
 
     #server_name localhost;
 
     index index.php default.php index.html index.htm default.html default.htm ;
 
    
 
                location /status {
 
                        stub_status on;
 
                        access_log   off;
 
                }
 
 
 
                location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
 
                        {
 
                                expires      30d;
 
                        }
 
                location ~ .*\.(js|css)?$
 
                        {
 
                                expires      12h;
 
                        }
 
 
 
                access_log off;
 
        }
 
 
 
include  vhost/*.conf;
 
}

vi /usr/local/nginx/conf/vhost/bbs.conf

 
server
 
        {
 
                listen       80;
 
                server_name bbs.osyunwei.com;
 
                index index.php index.html index.htm default.html default.htm default.php;
 
                root  /data/osyunwei/bbs;
 
location ~ .*\.(php|php5)?$
 
                        {
 
                                fastcgi_pass  unix:/tmp/php-cgi-bbs.sock;
 
                                fastcgi_index index.php;
 
                                include fcgi.conf;
 
                        }
 
                location /status {
 
                        stub_status on;
 
                        access_log   off;
 
                }
 
 
 
                location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
 
                        {
 
                                expires      30d;
 
                        }
 
                location ~ .*\.(js|css)?$
 
                        {
 
                                expires      12h;
 
                        }
 
 
 
                access_log off;
 
        }

vi /usr/local/nginx/conf/vhost/sns.conf

 
server
 
        {
 
                listen       80;
 
                server_name sns.osyunwei.com;
 
                index index.php index.html index.htm default.html default.htm default.php;
 
                root  /data/osyunwei/sns;
 
location ~ .*\.(php|php5)?$
 
                        {
 
                                fastcgi_pass  unix:/tmp/php-cgi-sns.sock;
 
                                fastcgi_index index.php;
 
                                include fcgi.conf;
 
                        }
 
                location /status {
 
                        stub_status on;
 
                        access_log   off;
 
                }
 
 
 
                location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
 
                        {
 
                                expires      30d;
 
                        }
 
                location ~ .*\.(js|css)?$
 
                        {
 
                                expires      12h;
 
                        }
 
 
 
                access_log off;
 
        }

vi /usr/local/nginx/conf/fcgi.conf

 
      1 fastcgi_param  GATEWAY_INTERFACE  CGI/1.1;
 
      2 fastcgi_param  SERVER_SOFTWARE    nginx/$nginx_version;
 
      3  
 
      4 fastcgi_param  QUERY_STRING       $query_string;
 
      5 fastcgi_param  REQUEST_METHOD     $request_method;
 
      6 fastcgi_param  CONTENT_TYPE       $content_type;
 
      7 fastcgi_param  CONTENT_LENGTH     $content_length;
 
      8  
 
      9 fastcgi_param  SCRIPT_FILENAME    $document_root$fastcgi_script_name;
 
      10 fastcgi_param  SCRIPT_NAME        $fastcgi_script_name;
 
      11 fastcgi_param  REQUEST_URI        $request_uri;
 
      12 fastcgi_param  DOCUMENT_URI       $document_uri;
 
      13 fastcgi_param  DOCUMENT_ROOT      $document_root;
 
      14 fastcgi_param  SERVER_PROTOCOL    $server_protocol;
 
      15  
 
      16 fastcgi_param  REMOTE_ADDR        $remote_addr;
 
      17 fastcgi_param  REMOTE_PORT        $remote_port;
 
      18 fastcgi_param  SERVER_ADDR        $server_addr;
 
      19 fastcgi_param  SERVER_PORT        $server_port;
 
      20 fastcgi_param  SERVER_NAME        $server_name;
 
      21  
 
      22 # PHP only, required if PHP was built with --enable-force-cgi-redirect
 
      23 fastcgi_param  REDIRECT_STATUS    200;
 
      ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~转载结束~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    
      一、很久之前的版本，不同域名使用php-fpm不同配置文件用不同的pid。现版本为同一个pid即ok。
    
      二、tcp socket & unix socket，监听的研究
    
     请参看URL:http://blog.csdn.net/liv2005/article/details/7741732
    
      目前简易采用tcp socket，轮询900X端口
    
      /usr/local/nginx/conf/vhost.conf 文件内容如下：
    
      upstream backend  {
     
   server   localhost:9000;
     
   server   localhost:9001;
     
   server   localhost:9002;
     
   server   localhost:9003;
     
   server   localhost:9004;
     
   server   localhost:9005;
     
   server   localhost:9006;
     
   server   localhost:9007;
     
 }
     
 include /usr/local/nginx/conf/vhost/*.conf;
     
      nginx的vhost配置文件如下：
    
     /usr/local/nginx/conf/vhost/sap2w01.com.conf;
     
      server {
     
     listen 80;
     
     server_name www.
     sap2w01
     .com;
     
     access_log /usr/local/nginx/logs/
     sap2w01
     .com.log yundns_log;
     
     index index.php index.html;
     
     root /home/
     sap2w01
     .com;
     
     location ~^(.+\.php)(.*)$ {
     
     proxy_pass
       http://127.0.0.1:8080;
     
     #fastcgi_pass  unix:/tmp/php-cgi-
     sap2w01
     .com.sock;
     
     #fastcgi_pass
       127.0.0.1:9000;
     
     fastcgi_pass backend;
     
     fastcgi_index index.php;
     
     include fastcgi.conf;
     
     }
     
     error_page 403 /403.html;
     
     error_page 404 /404.html;
     
     error_page 500 /500.html;
     
     error_page 503 /503.html;
     
 }
     
      #
     php_admin_value[open_basedir]的安全设置：
    
     请参看URL:http://www.iamle.com/archives/1854.html