ubuntu22.4配置nginx和php-陌上烟雨遥

实验操作步骤

安装ngix
这里使用命令：
sudo apt install nginx


<span class="token number">2</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> <span class="token function">apt</span> <span class="token function">install</span> nginx <span class="token number">3</span>. <span class="token punctuation">[</span>sudo<span class="token punctuation">]</span> icestone 的密码： <span class="token number">4</span>. 正在读取软件包列表<span class="token punctuation">..</span>. 完成 <span class="token number">5</span>. 正在分析软件包的依赖关系树<span class="token punctuation">..</span>. 完成 <span class="token number">6</span>. 正在读取状态信息<span class="token punctuation">..</span>. 完成 <span class="token number">7</span>. 将会同时安装下列软件： <span class="token number">8</span>. libnginx-mod-http-geoip2 libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-stream-geoip2 nginx-common nginx-core <span class="token number">9</span>. 下列【新】软件包将被安装： <span class="token number">10</span>. libnginx-mod-http-geoip2 libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-stream-geoip2 nginx nginx-common nginx-core <span class="token number">11</span>. 升级了 <span class="token number">0</span> 个软件包，新安装了 <span class="token number">9</span> 个软件包，要卸载 <span class="token number">0</span> 个软件包，有 <span class="token number">2</span> 个软件包未被升级。 <span class="token number">12</span>. 需要下载 <span class="token number">696</span> kB 的归档。 <span class="token number">13</span>. 解压缩后会消耗 <span class="token number">2,395</span> kB 的额外空间。 <span class="token number">14</span>. 您希望继续执行吗？ <span class="token punctuation">[</span>Y/n<span class="token punctuation">]</span> Y <span class="token number">2</span>.调整防火墙： <span class="token function">sudo</span> ufw app list <span class="token number">15</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw allow <span class="token string">'Nginx HTTP'</span> <span class="token number">16</span>. 规则已添加 <span class="token number">17</span>. 规则已添加 <span class="token punctuation">(</span>v6<span class="token punctuation">)</span> <span class="token number">18</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw allow <span class="token string">'Nginx HTTPS'</span> <span class="token number">19</span>. 规则已添加 <span class="token number">20</span>. 规则已添加 <span class="token punctuation">(</span>v6<span class="token punctuation">)</span> <span class="token number">21</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw allow <span class="token string">'Nginx Full'</span> <span class="token number">22</span>. 规则已添加 <span class="token number">23</span>. 规则已添加 <span class="token punctuation">(</span>v6<span class="token punctuation">)</span> 
<span class="token number">2</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> <span class="token function">apt</span> <span class="token function">install</span> nginx <span class="token number">3</span>. <span class="token punctuation">[</span>sudo<span class="token punctuation">]</span> icestone 的密码： <span class="token number">4</span>. 正在读取软件包列表<span class="token punctuation">..</span>. 完成 <span class="token number">5</span>. 正在分析软件包的依赖关系树<span class="token punctuation">..</span>. 完成 <span class="token number">6</span>. 正在读取状态信息<span class="token punctuation">..</span>. 完成 <span class="token number">7</span>. 将会同时安装下列软件： <span class="token number">8</span>. libnginx-mod-http-geoip2 libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-stream-geoip2 nginx-common nginx-core <span class="token number">9</span>. 下列【新】软件包将被安装： <span class="token number">10</span>. libnginx-mod-http-geoip2 libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-stream-geoip2 nginx nginx-common nginx-core <span class="token number">11</span>. 升级了 <span class="token number">0</span> 个软件包，新安装了 <span class="token number">9</span> 个软件包，要卸载 <span class="token number">0</span> 个软件包，有 <span class="token number">2</span> 个软件包未被升级。 <span class="token number">12</span>. 需要下载 <span class="token number">696</span> kB 的归档。 <span class="token number">13</span>. 解压缩后会消耗 <span class="token number">2,395</span> kB 的额外空间。 <span class="token number">14</span>. 您希望继续执行吗？ <span class="token punctuation">[</span>Y/n<span class="token punctuation">]</span> Y <span class="token number">2</span>.调整防火墙： <span class="token function">sudo</span> ufw app list <span class="token number">15</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw allow <span class="token string">'Nginx HTTP'</span> <span class="token number">16</span>. 规则已添加 <span class="token number">17</span>. 规则已添加 <span class="token punctuation">(</span>v6<span class="token punctuation">)</span> <span class="token number">18</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw allow <span class="token string">'Nginx HTTPS'</span> <span class="token number">19</span>. 规则已添加 <span class="token number">20</span>. 规则已添加 <span class="token punctuation">(</span>v6<span class="token punctuation">)</span> <span class="token number">21</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw allow <span class="token string">'Nginx Full'</span> <span class="token number">22</span>. 规则已添加 <span class="token number">23</span>. 规则已添加 <span class="token punctuation">(</span>v6<span class="token punctuation">)</span> 
2. icestone@icestone-nb:~$ sudo apt install nginx 3. [sudo] icestone 的密码： 4. 正在读取软件包列表... 完成 5. 正在分析软件包的依赖关系树... 完成 6. 正在读取状态信息... 完成 7. 将会同时安装下列软件： 8. libnginx-mod-http-geoip2 libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-stream-geoip2 nginx-common nginx-core 9. 下列【新】软件包将被安装： 10. libnginx-mod-http-geoip2 libnginx-mod-http-image-filter libnginx-mod-http-xslt-filter libnginx-mod-mail libnginx-mod-stream libnginx-mod-stream-geoip2 nginx nginx-common nginx-core 11. 升级了 0 个软件包，新安装了 9 个软件包，要卸载 0 个软件包，有 2 个软件包未被升级。 12. 需要下载 696 kB 的归档。 13. 解压缩后会消耗 2,395 kB 的额外空间。 14. 您希望继续执行吗？ [Y/n] Y 2.调整防火墙： sudo ufw app list 15. icestone@icestone-nb:~$ sudo ufw allow 'Nginx HTTP' 16. 规则已添加 17. 规则已添加 (v6) 18. icestone@icestone-nb:~$ sudo ufw allow 'Nginx HTTPS' 19. 规则已添加 20. 规则已添加 (v6) 21. icestone@icestone-nb:~$ sudo ufw allow 'Nginx Full' 22. 规则已添加 23. 规则已添加 (v6)

查看结果：
sudo ufw status


<span class="token number">24</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw status <span class="token number">25</span>. 状态： 激活 <span class="token number">26</span>. <span class="token number">27</span>. 至 动作 来自 <span class="token number">28</span>. - -- -- <span class="token number">29</span>. ALLOW Anywhere <span class="token number">30</span>. <span class="token number">80</span>/tcp ALLOW Anywhere <span class="token number">31</span>. <span class="token number">443</span>/tcp ALLOW Anywhere 
<span class="token number">24</span>. icestone@icestone-nb:~$ <span class="token function">sudo</span> ufw status <span class="token number">25</span>. 状态： 激活 <span class="token number">26</span>. <span class="token number">27</span>. 至 动作 来自 <span class="token number">28</span>. - -- -- <span class="token number">29</span>. ALLOW Anywhere <span class="token number">30</span>. <span class="token number">80</span>/tcp ALLOW Anywhere <span class="token number">31</span>. <span class="token number">443</span>/tcp ALLOW Anywhere 
24. icestone@icestone-nb:~$ sudo ufw status 25. 状态： 激活 26. 27. 至 动作 来自 28. - -- -- 29. ALLOW Anywhere 30. 80/tcp ALLOW Anywhere 31. 443/tcp ALLOW Anywhere

success

3.检查web服务：
systemctl status nginx


<span class="token number">32</span>. icestone@icestone-nb:~$ systemctl status nginx <span class="token number">33</span>. ● nginx.service - A high performance web server and a reverse proxy server <span class="token number">34</span>. Loaded: loaded <span class="token punctuation">(</span>/lib/systemd/system/nginx.service<span class="token punctuation">;</span> enabled<span class="token punctuation">;</span> vendor preset: enabled<span class="token punctuation">)</span> <span class="token number">35</span>. Active: active <span class="token punctuation">(</span>running<span class="token punctuation">)</span> since Thu <span class="token number">2022</span>-11-10 <span class="token number">23</span>:07:21 CST<span class="token punctuation">;</span> 1h 14min ago <span class="token number">36</span>. Docs: man:nginx<span class="token punctuation">(</span><span class="token number">8</span><span class="token punctuation">)</span> <span class="token number">37</span>. Process: <span class="token number">21371</span> <span class="token assign-left variable">ExecStartPre</span><span class="token operator">=</span>/usr/sbin/nginx <span class="token parameter variable">-t</span> <span class="token parameter variable">-q</span> <span class="token parameter variable">-g</span> daemon on<span class="token punctuation">;</span> master_process on<span class="token punctuation">;</span> <span class="token punctuation">(</span>code<span class="token operator">=</span>exited, <span class="token assign-left variable">status</span><span class="token operator">=</span><span class="token number">0</span>/SUCCESS<span class="token punctuation">)</span> <span class="token number">38</span>. Process: <span class="token number">21374</span> <span class="token assign-left variable">ExecStart</span><span class="token operator">=</span>/usr/sbin/nginx <span class="token parameter variable">-g</span> daemon on<span class="token punctuation">;</span> master_process on<span class="token punctuation">;</span> <span class="token punctuation">(</span>code<span class="token operator">=</span>exited, <span class="token assign-left variable">status</span><span class="token operator">=</span><span class="token number">0</span>/SUCCESS<span class="token punctuation">)</span> 
<span class="token number">32</span>. icestone@icestone-nb:~$ systemctl status nginx <span class="token number">33</span>. ● nginx.service - A high performance web server and a reverse proxy server <span class="token number">34</span>. Loaded: loaded <span class="token punctuation">(</span>/lib/systemd/system/nginx.service<span class="token punctuation">;</span> enabled<span class="token punctuation">;</span> vendor preset: enabled<span class="token punctuation">)</span> <span class="token number">35</span>. Active: active <span class="token punctuation">(</span>running<span class="token punctuation">)</span> since Thu <span class="token number">2022</span>-11-10 <span class="token number">23</span>:07:21 CST<span class="token punctuation">;</span> 1h 14min ago <span class="token number">36</span>. Docs: man:nginx<span class="token punctuation">(</span><span class="token number">8</span><span class="token punctuation">)</span> <span class="token number">37</span>. Process: <span class="token number">21371</span> <span class="token assign-left variable">ExecStartPre</span><span class="token operator">=</span>/usr/sbin/nginx <span class="token parameter variable">-t</span> <span class="token parameter variable">-q</span> <span class="token parameter variable">-g</span> daemon on<span class="token punctuation">;</span> master_process on<span class="token punctuation">;</span> <span class="token punctuation">(</span>code<span class="token operator">=</span>exited, <span class="token assign-left variable">status</span><span class="token operator">=</span><span class="token number">0</span>/SUCCESS<span class="token punctuation">)</span> <span class="token number">38</span>. Process: <span class="token number">21374</span> <span class="token assign-left variable">ExecStart</span><span class="token operator">=</span>/usr/sbin/nginx <span class="token parameter variable">-g</span> daemon on<span class="token punctuation">;</span> master_process on<span class="token punctuation">;</span> <span class="token punctuation">(</span>code<span class="token operator">=</span>exited, <span class="token assign-left variable">status</span><span class="token operator">=</span><span class="token number">0</span>/SUCCESS<span class="token punctuation">)</span> 
32. icestone@icestone-nb:~$ systemctl status nginx 33. ● nginx.service - A high performance web server and a reverse proxy server 34. Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled) 35. Active: active (running) since Thu 2022-11-10 23:07:21 CST; 1h 14min ago 36. Docs: man:nginx(8) 37. Process: 21371 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process on; (code=exited, status=0/SUCCESS) 38. Process: 21374 ExecStart=/usr/sbin/nginx -g daemon on; master_process on; (code=exited, status=0/SUCCESS)

success
39. 访问;
http://localhost/
在这里插入图片描述

2.开启https：
40. 修改配置文件
这里由于使用的ubuntu22.04
修改 /etc/nginx/sites-available/default
添加：


<span class="token number">41</span>.  <span class="token number">42</span>. server<span class="token punctuation">{<!-- --></span> <span class="token number">43</span>. listen <span class="token number">443</span> ssl<span class="token punctuation">;</span> <span class="token number">44</span>. listen <span class="token punctuation">[</span>::<span class="token punctuation">]</span>:443 ssl<span class="token punctuation">;</span> <span class="token number">45</span>. root /app/<span class="token punctuation">;</span> <span class="token number">46</span>. index index.html<span class="token punctuation">;</span> <span class="token number">47</span>. server_name laotie666.xyz www.laotie666.xyz<span class="token punctuation">;</span> <span class="token number">48</span>. <span class="token punctuation">}</span> 
<span class="token number">41</span>.  <span class="token number">42</span>. server<span class="token punctuation">{<!-- --></span> <span class="token number">43</span>. listen <span class="token number">443</span> ssl<span class="token punctuation">;</span> <span class="token number">44</span>. listen <span class="token punctuation">[</span>::<span class="token punctuation">]</span>:443 ssl<span class="token punctuation">;</span> <span class="token number">45</span>. root /app/<span class="token punctuation">;</span> <span class="token number">46</span>. index index.html<span class="token punctuation">;</span> <span class="token number">47</span>. server_name laotie666.xyz www.laotie666.xyz<span class="token punctuation">;</span> <span class="token number">48</span>. <span class="token punctuation">}</span> 
41.  42. server{ 43. listen 443 ssl; 44. listen [::]:443 ssl; 45. root /app/; 46. index index.html; 47. server_name laotie666.xyz www.laotie666.xyz; 48. }

2.申请一个自签证书：


<span class="token number">49</span>. icestone@icestone-nb:/app$ openssl req <span class="token parameter variable">-new</span> <span class="token parameter variable">-x509</span> <span class="token parameter variable">-nodes</span> <span class="token parameter variable">-out</span> server.crt <span class="token parameter variable">-keyout</span> server.key <span class="token number">50</span>. <span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.+<span class="token punctuation">..</span>+.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span>+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*<span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span>+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>. 
<span class="token number">49</span>. icestone@icestone-nb:/app$ openssl req <span class="token parameter variable">-new</span> <span class="token parameter variable">-x509</span> <span class="token parameter variable">-nodes</span> <span class="token parameter variable">-out</span> server.crt <span class="token parameter variable">-keyout</span> server.key <span class="token number">50</span>. <span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.+<span class="token punctuation">..</span>+.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span>+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*<span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span>.+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span>+<span class="token punctuation">..</span>+<span class="token punctuation">..</span>.+<span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span><span class="token punctuation">..</span>. 
49. icestone@icestone-nb:/app$ openssl req -new -x509 -nodes -out server.crt -keyout server.key 50. ...+.........+...+......+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.+..+.+...+..+...+.........+...+..................+....+......+..+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++*.....+.....+...+....+..+...+...................

查看当前目录：


<span class="token number">51</span>. icestone@icestone-nb:/app$ ll <span class="token number">52</span>. 总用量 <span class="token number">20</span> <span class="token number">53</span>. drwxrwxrwx <span class="token number">3</span> root root <span class="token number">4096</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:29 ./ <span class="token number">54</span>. drwxr-xr-x <span class="token number">25</span> root root <span class="token number">4096</span> <span class="token number">11</span>月 <span class="token number">11</span> 00:39 <span class="token punctuation">..</span>/ <span class="token number">55</span>. -rw------- <span class="token number">1</span> icestone icestone <span class="token number">0</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:27 ca.key <span class="token number">56</span>. lrwxrwxrwx <span class="token number">1</span> icestone icestone <span class="token number">20</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:26 openssl.cnf -<span class="token operator">></span> /etc/ssl/openssl.cnf* <span class="token number">57</span>. -rw-rw-r-- <span class="token number">1</span> icestone icestone <span class="token number">1363</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:29 server.crt <span class="token number">58</span>. -rw------- <span class="token number">1</span> icestone icestone <span class="token number">1704</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:29 server.key 
<span class="token number">51</span>. icestone@icestone-nb:/app$ ll <span class="token number">52</span>. 总用量 <span class="token number">20</span> <span class="token number">53</span>. drwxrwxrwx <span class="token number">3</span> root root <span class="token number">4096</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:29 ./ <span class="token number">54</span>. drwxr-xr-x <span class="token number">25</span> root root <span class="token number">4096</span> <span class="token number">11</span>月 <span class="token number">11</span> 00:39 <span class="token punctuation">..</span>/ <span class="token number">55</span>. -rw------- <span class="token number">1</span> icestone icestone <span class="token number">0</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:27 ca.key <span class="token number">56</span>. lrwxrwxrwx <span class="token number">1</span> icestone icestone <span class="token number">20</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:26 openssl.cnf -<span class="token operator">></span> /etc/ssl/openssl.cnf* <span class="token number">57</span>. -rw-rw-r-- <span class="token number">1</span> icestone icestone <span class="token number">1363</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:29 server.crt <span class="token number">58</span>. -rw------- <span class="token number">1</span> icestone icestone <span class="token number">1704</span> <span class="token number">11</span>月 <span class="token number">11</span> 02:29 server.key 
51. icestone@icestone-nb:/app$ ll 52. 总用量 20 53. drwxrwxrwx 3 root root 4096 11月 11 02:29 ./ 54. drwxr-xr-x 25 root root 4096 11月 11 00:39 ../ 55. -rw------- 1 icestone icestone 0 11月 11 02:27 ca.key 56. lrwxrwxrwx 1 icestone icestone 20 11月 11 02:26 openssl.cnf -> /etc/ssl/openssl.cnf* 57. -rw-rw-r-- 1 icestone icestone 1363 11月 11 02:29 server.crt 58. -rw------- 1 icestone icestone 1704 11月 11 02:29 server.key

crt和key文件生成了，将其配置在nginx的配置中：
修改/etc/nginx/sites-available/default：
在与原来server上修改


<span class="token number">59</span>. sserver <span class="token punctuation">{<!-- --></span> <span class="token number">60</span>. listen <span class="token number">443</span> ssl<span class="token punctuation">;</span> <span class="token number">61</span>. index index.html index.htm index.nginx-debian.html<span class="token punctuation">;</span> <span class="token number">62</span>. <span class="token number">63</span>. server_name icestone.art www.icestone.art<span class="token punctuation">;</span> <span class="token number">64</span>. <span class="token number">65</span>. location ~ <span class="token punctuation">\</span>.php$ <span class="token punctuation">{<!-- --></span> <span class="token number">66</span>. fastcgi_split_path_info ^<span class="token punctuation">(</span>.+<span class="token punctuation">\</span>.php<span class="token punctuation">)</span><span class="token punctuation">(</span>/.+<span class="token punctuation">)</span>$<span class="token punctuation">;</span> <span class="token number">67</span>. fastcgi_pass unix:/run/php-fpm/www.sock<span class="token punctuation">;</span> <span class="token number">68</span>. fastcgi_param SCRIPT_FILENAME <span class="token variable">$document_root</span><span class="token variable">$fastcgi_script_name</span><span class="token punctuation">;</span> <span class="token number">69</span>. fastcgi_index index.php<span class="token punctuation">;</span> <span class="token number">70</span>. include fastcgi_params<span class="token punctuation">;</span> <span class="token number">71</span>. <span class="token punctuation">}</span> <span class="token number">72</span>. ssl_certificate /app/server.crt<span class="token punctuation">;</span> <span class="token number">73</span>. ssl_certificate_key /app/server.key<span class="token punctuation">;</span> <span class="token number">74</span>. <span class="token punctuation">}</span> 
<span class="token number">59</span>. sserver <span class="token punctuation">{<!-- --></span> <span class="token number">60</span>. listen <span class="token number">443</span> ssl<span class="token punctuation">;</span> <span class="token number">61</span>. index index.html index.htm index.nginx-debian.html<span class="token punctuation">;</span> <span class="token number">62</span>. <span class="token number">63</span>. server_name icestone.art www.icestone.art<span class="token punctuation">;</span> <span class="token number">64</span>. <span class="token number">65</span>. location ~ <span class="token punctuation">\</span>.php$ <span class="token punctuation">{<!-- --></span> <span class="token number">66</span>. fastcgi_split_path_info ^<span class="token punctuation">(</span>.+<span class="token punctuation">\</span>.php<span class="token punctuation">)</span><span class="token punctuation">(</span>/.+<span class="token punctuation">)</span>$<span class="token punctuation">;</span> <span class="token number">67</span>. fastcgi_pass unix:/run/php-fpm/www.sock<span class="token punctuation">;</span> <span class="token number">68</span>. fastcgi_param SCRIPT_FILENAME <span class="token variable">$document_root</span><span class="token variable">$fastcgi_script_name</span><span class="token punctuation">;</span> <span class="token number">69</span>. fastcgi_index index.php<span class="token punctuation">;</span> <span class="token number">70</span>. include fastcgi_params<span class="token punctuation">;</span> <span class="token number">71</span>. <span class="token punctuation">}</span> <span class="token number">72</span>. ssl_certificate /app/server.crt<span class="token punctuation">;</span> <span class="token number">73</span>. ssl_certificate_key /app/server.key<span class="token punctuation">;</span> <span class="token number">74</span>. <span class="token punctuation">}</span> 
59. sserver { 60. listen 443 ssl; 61. index index.html index.htm index.nginx-debian.html; 62. 63. server_name icestone.art www.icestone.art; 64. 65. location ~ \.php$ { 66. fastcgi_split_path_info ^(.+\.php)(/.+)$; 67. fastcgi_pass unix:/run/php-fpm/www.sock; 68. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; 69. fastcgi_index index.php; 70. include fastcgi_params; 71. } 72. ssl_certificate /app/server.crt; 73. ssl_certificate_key /app/server.key; 74. }

这里icestone.art使我们即将使用的域名，域名在、etc/hosts下直接添加并刷新即可，
要注意Linux下回环地址是0.0.0.0
75. https访问：
在这里插入图片描述

点查看证书：
在这里插入图片描述
强制访问：

76. 安装php
sudo apt install php libapache2-mod-php


<span class="token number">77</span>. icestone@icestone-nb:/app$ <span class="token function">sudo</span> <span class="token function">apt</span> <span class="token function">install</span> php-fpm <span class="token number">78</span>. 正在读取软件包列表<span class="token punctuation">..</span>. 完成 <span class="token number">79</span>. 正在分析软件包的依赖关系树<span class="token punctuation">..</span>. 完成 <span class="token number">80</span>. 正在读取状态信息<span class="token punctuation">..</span>. 完成 <span class="token number">81</span>. 将会同时安装下列软件： <span class="token number">82</span>. php8.1-fpm 
<span class="token number">77</span>. icestone@icestone-nb:/app$ <span class="token function">sudo</span> <span class="token function">apt</span> <span class="token function">install</span> php-fpm <span class="token number">78</span>. 正在读取软件包列表<span class="token punctuation">..</span>. 完成 <span class="token number">79</span>. 正在分析软件包的依赖关系树<span class="token punctuation">..</span>. 完成 <span class="token number">80</span>. 正在读取状态信息<span class="token punctuation">..</span>. 完成 <span class="token number">81</span>. 将会同时安装下列软件： <span class="token number">82</span>. php8.1-fpm 
77. icestone@icestone-nb:/app$ sudo apt install php-fpm 78. 正在读取软件包列表... 完成 79. 正在分析软件包的依赖关系树... 完成 80. 正在读取状态信息... 完成 81. 将会同时安装下列软件： 82. php8.1-fpm

注意这里显示安装的是php8.1-fpm，运行检查：
systemctl status php8.1-fpm


<span class="token number">83</span>. icestone@icestone-nb:/app$ systemctl status php8.1-fpm <span class="token number">84</span>. ● php8.1-fpm.service - The PHP <span class="token number">8.1</span> FastCGI Process Manager <span class="token number">85</span>. Loaded: loaded <span class="token punctuation">(</span>/lib/systemd/system/php8.1-fpm.service<span class="token punctuation">;</span> enabled<span class="token punctuation">;</span> vendor preset: enabled<span class="token punctuation">)</span> 
<span class="token number">83</span>. icestone@icestone-nb:/app$ systemctl status php8.1-fpm <span class="token number">84</span>. ● php8.1-fpm.service - The PHP <span class="token number">8.1</span> FastCGI Process Manager <span class="token number">85</span>. Loaded: loaded <span class="token punctuation">(</span>/lib/systemd/system/php8.1-fpm.service<span class="token punctuation">;</span> enabled<span class="token punctuation">;</span> vendor preset: enabled<span class="token punctuation">)</span> 
83. icestone@icestone-nb:/app$ systemctl status php8.1-fpm 84. ● php8.1-fpm.service - The PHP 8.1 FastCGI Process Manager 85. Loaded: loaded (/lib/systemd/system/php8.1-fpm.service; enabled; vendor preset: enabled)

success
配置php运行端口和允许端口：
修改 /etc/php/8.1/pool.d/www.conf
修改下面三个：


<span class="token number">86</span>. <span class="token punctuation">;</span>下面这个注释掉 <span class="token number">87</span>. <span class="token punctuation">;</span>listen <span class="token operator">=</span> /run/php/php8.1-fpm.sock <span class="token number">88</span>. <span class="token punctuation">;</span>修改： <span class="token number">89</span>. listen <span class="token operator">=</span> localhost:81 <span class="token number">90</span>. listen.allowed_clients <span class="token operator">=</span> <span class="token number">127.0</span>.0.1 
<span class="token number">86</span>. <span class="token punctuation">;</span>下面这个注释掉 <span class="token number">87</span>. <span class="token punctuation">;</span>listen <span class="token operator">=</span> /run/php/php8.1-fpm.sock <span class="token number">88</span>. <span class="token punctuation">;</span>修改： <span class="token number">89</span>. listen <span class="token operator">=</span> localhost:81 <span class="token number">90</span>. listen.allowed_clients <span class="token operator">=</span> <span class="token number">127.0</span>.0.1 
86. ;下面这个注释掉 87. ;listen = /run/php/php8.1-fpm.sock 88. ;修改： 89. listen = localhost:81 90. listen.allowed_clients = 127.0.0.1

修改nginx中监听php的端口;
修改 /etc/nginx/sites-available/default
主要修改80端口和443端口下启动页面，监听php的端口：


<span class="token number">91</span>. server <span class="token punctuation">{<!-- --></span> <span class="token number">92</span>. listen <span class="token number">80</span> default_server<span class="token punctuation">;</span> <span class="token number">93</span>. listen <span class="token punctuation">[</span>::<span class="token punctuation">]</span>:80 default_server<span class="token punctuation">;</span> <span class="token number">94</span>. index index.php index.html index.htm index.nginx-debian.html<span class="token punctuation">;</span> <span class="token number">95</span>. root /app/www/<span class="token punctuation">;</span> <span class="token number">96</span>. server_name icestone.art www.icestone.art _<span class="token punctuation">;</span> <span class="token number">97</span>. location / <span class="token punctuation">{<!-- --></span> <span class="token number">98</span>. try_files <span class="token variable">$uri</span> <span class="token variable">$uri</span>/ /index.php<span class="token variable">$is_args</span><span class="token variable">$args</span><span class="token punctuation">;</span> <span class="token number">99</span>. <span class="token punctuation">}</span> <span class="token number">100</span>. location ~ <span class="token punctuation">\</span>.php$ <span class="token punctuation">{<!-- --></span> <span class="token number">101</span>. fastcgi_split_path_info ^<span class="token punctuation">(</span>.+<span class="token punctuation">\</span>.php<span class="token punctuation">)</span><span class="token punctuation">(</span>/.+<span class="token punctuation">)</span>$<span class="token punctuation">;</span> <span class="token number">102</span>. fastcgi_pass localhost:81<span class="token punctuation">;</span> <span class="token number">103</span>. fastcgi_param SCRIPT_FILENAME <span class="token variable">$document_root</span><span class="token variable">$fastcgi_script_name</span><span class="token punctuation">;</span> <span class="token number">104</span>. fastcgi_index index.php<span class="token punctuation">;</span> <span class="token number">105</span>. include fastcgi_params<span class="token punctuation">;</span> <span class="token number">106</span>. <span class="token punctuation">}</span> <span class="token number">107</span>. <span class="token punctuation">}</span> <span class="token number">108</span>. <span class="token number">109</span>. server <span class="token punctuation">{<!-- --></span> <span class="token number">110</span>. listen <span class="token number">443</span> ssl<span class="token punctuation">;</span> <span class="token number">111</span>. index index.php index.html index.htm index.nginx-debian.html<span class="token punctuation">;</span> <span class="token number">112</span>. root /app/www/<span class="token punctuation">;</span> <span class="token number">113</span>. server_name icestone.art www.icestone.art<span class="token punctuation">;</span> <span class="token number">114</span>. location / <span class="token punctuation">{<!-- --></span> <span class="token number">115</span>. try_files <span class="token variable">$uri</span> <span class="token variable">$uri</span>/ /index.php<span class="token variable">$is_args</span><span class="token variable">$args</span><span class="token punctuation">;</span> <span class="token number">116</span>. <span class="token punctuation">}</span> <span class="token number">117</span>. location ~ <span class="token punctuation">\</span>.php$ <span class="token punctuation">{<!-- --></span> <span class="token number">118</span>. fastcgi_split_path_info ^<span class="token punctuation">(</span>.+<span class="token punctuation">\</span>.php<span class="token punctuation">)</span><span class="token punctuation">(</span>/.+<span class="token punctuation">)</span>$<span class="token punctuation">;</span> <span class="token number">119</span>. fastcgi_pass localhost:81<span class="token punctuation">;</span> <span class="token number">120</span>. fastcgi_param SCRIPT_FILENAME <span class="token variable">$document_root</span><span class="token variable">$fastcgi_script_name</span><span class="token punctuation">;</span> <span class="token number">121</span>. fastcgi_index index.php<span class="token punctuation">;</span> <span class="token number">122</span>. include fastcgi_params<span class="token punctuation">;</span> <span class="token number">123</span>. <span class="token punctuation">}</span> <span class="token number">124</span>. ssl_certificate /app/server.crt<span class="token punctuation">;</span> <span class="token number">125</span>. ssl_certificate_key /app/server.key<span class="token punctuation">;</span> <span class="token number">126</span>. <span class="token punctuation">}</span> <span class="token number">127</span>. 
<span class="token number">91</span>. server <span class="token punctuation">{<!-- --></span> <span class="token number">92</span>. listen <span class="token number">80</span> default_server<span class="token punctuation">;</span> <span class="token number">93</span>. listen <span class="token punctuation">[</span>::<span class="token punctuation">]</span>:80 default_server<span class="token punctuation">;</span> <span class="token number">94</span>. index index.php index.html index.htm index.nginx-debian.html<span class="token punctuation">;</span> <span class="token number">95</span>. root /app/www/<span class="token punctuation">;</span> <span class="token number">96</span>. server_name icestone.art www.icestone.art _<span class="token punctuation">;</span> <span class="token number">97</span>. location / <span class="token punctuation">{<!-- --></span> <span class="token number">98</span>. try_files <span class="token variable">$uri</span> <span class="token variable">$uri</span>/ /index.php<span class="token variable">$is_args</span><span class="token variable">$args</span><span class="token punctuation">;</span> <span class="token number">99</span>. <span class="token punctuation">}</span> <span class="token number">100</span>. location ~ <span class="token punctuation">\</span>.php$ <span class="token punctuation">{<!-- --></span> <span class="token number">101</span>. fastcgi_split_path_info ^<span class="token punctuation">(</span>.+<span class="token punctuation">\</span>.php<span class="token punctuation">)</span><span class="token punctuation">(</span>/.+<span class="token punctuation">)</span>$<span class="token punctuation">;</span> <span class="token number">102</span>. fastcgi_pass localhost:81<span class="token punctuation">;</span> <span class="token number">103</span>. fastcgi_param SCRIPT_FILENAME <span class="token variable">$document_root</span><span class="token variable">$fastcgi_script_name</span><span class="token punctuation">;</span> <span class="token number">104</span>. fastcgi_index index.php<span class="token punctuation">;</span> <span class="token number">105</span>. include fastcgi_params<span class="token punctuation">;</span> <span class="token number">106</span>. <span class="token punctuation">}</span> <span class="token number">107</span>. <span class="token punctuation">}</span> <span class="token number">108</span>. <span class="token number">109</span>. server <span class="token punctuation">{<!-- --></span> <span class="token number">110</span>. listen <span class="token number">443</span> ssl<span class="token punctuation">;</span> <span class="token number">111</span>. index index.php index.html index.htm index.nginx-debian.html<span class="token punctuation">;</span> <span class="token number">112</span>. root /app/www/<span class="token punctuation">;</span> <span class="token number">113</span>. server_name icestone.art www.icestone.art<span class="token punctuation">;</span> <span class="token number">114</span>. location / <span class="token punctuation">{<!-- --></span> <span class="token number">115</span>. try_files <span class="token variable">$uri</span> <span class="token variable">$uri</span>/ /index.php<span class="token variable">$is_args</span><span class="token variable">$args</span><span class="token punctuation">;</span> <span class="token number">116</span>. <span class="token punctuation">}</span> <span class="token number">117</span>. location ~ <span class="token punctuation">\</span>.php$ <span class="token punctuation">{<!-- --></span> <span class="token number">118</span>. fastcgi_split_path_info ^<span class="token punctuation">(</span>.+<span class="token punctuation">\</span>.php<span class="token punctuation">)</span><span class="token punctuation">(</span>/.+<span class="token punctuation">)</span>$<span class="token punctuation">;</span> <span class="token number">119</span>. fastcgi_pass localhost:81<span class="token punctuation">;</span> <span class="token number">120</span>. fastcgi_param SCRIPT_FILENAME <span class="token variable">$document_root</span><span class="token variable">$fastcgi_script_name</span><span class="token punctuation">;</span> <span class="token number">121</span>. fastcgi_index index.php<span class="token punctuation">;</span> <span class="token number">122</span>. include fastcgi_params<span class="token punctuation">;</span> <span class="token number">123</span>. <span class="token punctuation">}</span> <span class="token number">124</span>. ssl_certificate /app/server.crt<span class="token punctuation">;</span> <span class="token number">125</span>. ssl_certificate_key /app/server.key<span class="token punctuation">;</span> <span class="token number">126</span>. <span class="token punctuation">}</span> <span class="token number">127</span>. 
91. server { 92. listen 80 default_server; 93. listen [::]:80 default_server; 94. index index.php index.html index.htm index.nginx-debian.html; 95. root /app/www/; 96. server_name icestone.art www.icestone.art _; 97. location / { 98. try_files $uri $uri/ /index.php$is_args$args; 99. } 100. location ~ \.php$ { 101. fastcgi_split_path_info ^(.+\.php)(/.+)$; 102. fastcgi_pass localhost:81; 103. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; 104. fastcgi_index index.php; 105. include fastcgi_params; 106. } 107. } 108. 109. server { 110. listen 443 ssl; 111. index index.php index.html index.htm index.nginx-debian.html; 112. root /app/www/; 113. server_name icestone.art www.icestone.art; 114. location / { 115. try_files $uri $uri/ /index.php$is_args$args; 116. } 117. location ~ \.php$ { 118. fastcgi_split_path_info ^(.+\.php)(/.+)$; 119. fastcgi_pass localhost:81; 120. fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; 121. fastcgi_index index.php; 122. include fastcgi_params; 123. } 124. ssl_certificate /app/server.crt; 125. ssl_certificate_key /app/server.key; 126. } 127.