yum install binutils compat-libstdc++-33 elfutils-libelf elfutils-libelf-devel expat gcc gcc-c++ glibc glibc-common glibc-devel glibc-headers libaio libaio-devel libgcc libstdc++ libstdc++-devel make pdksh sysstat unixODBC unixODBC-devel
Hits: 1106
Hits: 782
Linux version 4.20.0-1.el7.elrepo.x86_64 (mockbuild@Build64R7) (gcc version 4.8.5 20150623 (Red Hat 4.8.5-36) (GCC)) #1 SMP Sun Dec 23 20:11:51 EST 2018
清单一览
| 系统/软件 | 版本 |
|---|---|
| Centos | CentOS Linux release 7.6.1810 (Core) |
| Http(apache) | 2.4.6-88.el7.centos |
| Php | 5.4.16-46.el7 |
| Postfix | 2:2.10.1-7.el7 |
| Dovecot | 1:2.2.36-3.el7 |
| Openssl | 1:1.0.2k-16.el7 |
| Opendkim | 2.11.0-0.1.el7 |
| Roundcube Webmail | 1.2.9 |
| Mariadb | 1:5.5.60-1.el7_5 |
下文中出现的yourdomain.com与192.168.0.1为你的域名和实际外网地址。
列出二级主机头的不可删减，仅列出域的不可增加。
同时提醒，DNS解析和PTR应尽量预先设置好。
Type Host Destination Priority TTL
MX @ mail.yourdomain.com 10 3600
A mail 192.168.0.1 3600
cmd > nslookup mail.yourdomain.com 8.8.8.8
服务器: google-public-dns-a.google.com
Address: 8.8.8.8
非权威应答:
名称: mail.yourdomain.com
Address: 192.168.0.1
cmd > nslookup -qt=mx yourdomain.com 8.8.8.8
服务器: google-public-dns-a.google.com
Address: 8.8.8.8
非权威应答:
yourdomain.com MX preference = 10, mail exchanger = mail.yourdomain.com
[root@mail ~]# hostnamectl set-hostname mail.yourdomian.com
[root@mail ~]# hostname
mail.yourdomian.com
查看主机条目
[root@mail ~]# vi /etc/hosts
在尾部增加一行条目，对应DNS解析
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.0.1 mail.yourdomain.com
[root@mail ~]# yum -y update
[root@mail ~]# yum -y install postfix
[root@mail ~]# mkdir /etc/postfix/ssl
[root@mail ~]# cd /etc/postfix/ssl
[root@mail ~]# yum -y install openssl
[root@mail ~]# openssl req -x509 -nodes -newkey rsa:2048 -keyout server.key -out server.crt -nodes -days 365
需要提供一些信息创建证书
Generating a 2048 bit RSA private key
..........................+++
...........................+++
writing new private key to 'server.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:CN
State or Province Name (full name) []:GD
Locality Name (eg, city) [Default City]:
Organization Name (eg, company) [Default Company Ltd]:
Organizational Unit Name (eg, section) []:My Unit
Common Name (eg, your name or your server's hostname) []:mail.yourdomain.com
Email Address []:master@yourdomain.com
这将生成密钥文件和证书，然后将保存在/etc/postfix/ssl目录中。
myhostname = mail.yourdomain.com
mydomain = yourdomain.com
myorigin = $mydomain
home_mailbox = mail/
#如果有ipv6的地址下面的内容需要变更为 127.0.0.0/8 [::1]/128 否则可能无法正常收发信
mynetworks = 127.0.0.0/8
inet_interfaces = all
inet_protocols = all
mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtp_tls_security_level = may
smtpd_tls_security_level = may
smtp_tls_note_starttls_offer = yes
smtpd_tls_loglevel = 1
smtpd_tls_key_file = /etc/postfix/ssl/server.key
smtpd_tls_cert_file = /etc/postfix/ssl/server.crt
smtpd_tls_received_header = yes
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom
#
# Postfix master process configuration file. For details on the format
# of the file, see the master(5) manual page (command: "man 5 master").
#
# Do not forget to execute "postfix reload" after editing this file.
#
# ==========================================================================
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
# ==========================================================================
smtp inet n - n - - smtpd
#smtp inet n - n - 1 postscreen
#smtpd pass - - n - - smtpd
#dnsblog unix - - n - 0 dnsblog
#tlsproxy unix - - n - 0 tlsproxy
submission inet n - n - - smtpd
-o syslog_name=postfix/submission
# -o smtpd_tls_security_level=encrypt
-o smtpd_sasl_auth_enable=yes
# -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions
# -o smtpd_helo_restrictions=$mua_helo_restrictions
# -o smtpd_sender_restrictions=$mua_sender_restrictions
-o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING
smtps inet n - n - - smtpd
-o syslog_name=postfix/smtps
# -o smtpd_tls_wrappermode=yes
-o smtpd_sasl_auth_enable=yes
# -o smtpd_reject_unlisted_recipient=no
# -o smtpd_client_restrictions=$mua_client_restrictions
# -o smtpd_helo_restrictions=$mua_helo_restrictions
# -o smtpd_sender_restrictions=$mua_sender_restrictions
-o smtpd_recipient_restrictions=permit_sasl_authenticated,reject
-o milter_macro_daemon_name=ORIGINATING
[root@mail ~]# yum -y install dovecot
# Postfix smtp-auth
unix_listener /var/spool/postfix/private/auth {
mode = 0660
user = postfix
group = postfix
}
# Space separated list of wanted authentication mechanisms:
# plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi otp skey
# gss-spnego
# NOTE: See also disable_plaintext_auth setting.
auth_mechanisms = plain login
# See doc/wiki/Variables.txt for full list. Some examples:
#
# mail_location = maildir:~/Maildir
# mail_location = mbox:~/mail:INBOX=/var/mail/%u
# mail_location = mbox:/var/mail/%d/%1n/%n:INDEX=/var/indexes/%d/%1n/%n
#
# <doc/wiki/MailLocation.txt>
#
mail_location = maildir:~/mail
# Note that Outlook 2003 seems to have problems with %v.%u format which was
# Dovecot's default, so if you're building a new server it would be a good
# idea to change this. %08Xu%08Xv should be pretty fail-safe.
#
pop3_uidl_format = %08Xu%08Xv
[root@mail ~]# systemctl restart postfix
[root@mail ~]# systemctl enable postfix
[root@mail ~]# systemctl restart dovecot
[root@mail ~]# systemctl enable dovecot
[root@mail ~]# firewall-cmd --permanent --add-service=smtp
[root@mail ~]# firewall-cmd --permanent --add-port=587/tcp
[root@mail ~]# firewall-cmd --permanent --add-port=465/tcp
[root@mail ~]# firewall-cmd --permanent --add-port=110/tcp
[root@mail ~]# firewall-cmd --permanent --add-service=pop3s
[root@mail ~]# firewall-cmd --permanent --add-port=143/tcp
[root@mail ~]# firewall-cmd --permanent --add-service=imaps
[root@mail ~]# firewall-cmd --permanent --add-service=http
[root@mail ~]# firewall-cmd --permanent --add-service=https
[root@mail ~]# firewall-cmd --reload
[root@mail ~]# yum -y install httpd mod_ssl php
[root@mail ~]# systemctl start httpd
[root@mail ~]# systemctl enable httpd
默认站点在 /var/www/html 此处省略配置。
[root@mail ~]# useradd -m master -s /sbin/nologin
[root@mail ~]# passwd master
[root@mail ~]# cd /var/www
[root@mail ~]# wget http://snapshots.squirrelmail.org/squirrelmail-20190109_0200-SVN.devel.tar.gz
[root@mail ~]# tar -xvf squirrelmail-20190109_0200-SVN.devel.tar.gz
[root@mail ~]# chown -R apache:apache /var/www/squirrelmail.devel
[root@mail ~]# vi /etc/httpd/conf.d/vhost.conf
<IfModule dir_module>
DirectoryIndex index.html index.php
</IfModule>
写入以下内容
#First VirtualHost is a default host,
<VirtualHost *:80>
ServerAdmin webmaster@localhost
ServerName localhost
DocumentRoot "/var/www/html/"
ErrorLog /var/log/httpd/error_log.log
CustomLog /var/log/httpd/access.log combined
</VirtualHost>
<VirtualHost *:80>
ServerAdmin webmaster@localhost
ServerName mail.yourdomain.com
ServerAlias mail.yourdomain.com
# Redirect permanent / https://www.yourdomain.com/
DocumentRoot "/var/www/squirrelmail.devel/"
ErrorLog /var/log/httpd/mail_error.log
CustomLog /var/log/httpd/mail_access.log combined
</VirtualHost>
[root@mail ~]# systemctl restart httpd
http://192.168.0.1 访问的是/var/www/html
http://mail.yourdomain.com 访问的是/var/www/squirrelmail.devel
[root@mail ~]# yum -y install perl
[root@mail ~]# cd /var/www/squirrelmail.devel/config
[root@mail ~]# ./conf.pl
SquirrelMail Configuration : Read: config_default.php
Config version 1.5.0; SquirrelMail version 1.5.2 [SVN]
---------------------------------------------------------
Main Menu --
1. Organization Preferences
2. Server Settings
3. Folder Defaults
4. General Options
5. User Interface
6. Address Books
7. Message of the Day (MOTD)
8. Plugins
9. Database
10. Language settings
11. Tweaks
D. Set pre-defined settings for specific IMAP servers
C Turn color on
S Save data
Q Quit
Server Settings
General
-------
1. Domain : yourdomain.com
2. Invert Time : false
3. Sendmail or SMTP : SMTP
A. Update IMAP Settings : localhost:143 (other)
B. Update SMTP Settings : localhost:25
R Return to Main Menu
C Turn color on
S Save data
Q Quit
Could not create initial preference file! /var/local/squirrelmail/data/ should be writable by the user that the web server is running as. Please contact your system administrator and report this error.
[root@mail ~]# mkdir -p /var/local/squirrelmail/data
[root@mail ~]# chown -R apache:apache /var/local/squirrelmail/data
Your mail has been sent.
Jan 9 08:26:26 guest postfix/smtpd[6027]: connect from mail.xxxx.com[97.xxx.xxx.44]
Jan 9 08:26:26 guest postfix/smtpd[6027]: Anonymous TLS connection established from mail.xxxxx.com[97.xxxx.xxx.44]: TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)
Jan 9 08:26:26 guest postfix/smtpd[6027]: AD92A205BB: client=mail.xxxx.com[97.xxx.xxx.44]
Jan 9 08:26:26 guest postfix/cleanup[6029]: AD92A205BB: message-id=<e952db7a66032789245f9de951eac7ee@xxxxxx.com>
Jan 9 08:26:26 guest postfix/qmgr[5423]: AD92A205BB: from=<master@xxxxxx.com>, size=1635, nrcpt=1 (queue active)
Jan 9 08:26:26 guest postfix/local[6030]: AD92A205BB: to=<master@yourdomain.com>, relay=local, delay=0.1, delays=0.09/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir)
Jan 9 08:26:26 guest postfix/qmgr[5423]: AD92A205BB: removed
Jan 9 08:26:26 guest postfix/smtpd[6027]: disconnect from mail.xxxxx.com[97.xxxx.xxxx.44]
Type Host Destination Priority TTL
TXT @ v=spf1 a mx ip4:192.168.0.1 -all 3600
Type Host Destination Priority TTL
TXT @ v=spf1 a mx ip4:192.168.0.1 ip6:X:X:X:X:X:X:X:X -all 3600
cmd > nslookup -qt=txt yourdomain.com
v=spf1 a mx ip4:192.168.0.1 -all
[root@mail ~]# vi /etc/yum.repos.d/epel.repo
[epel]
name=Extra Packages for Enterprise Linux 7 - $basearch
#baseurl=http://download.fedoraproject.org/pub/epel/7/$basearch
metalink=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch
failovermethod=priority
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7
[root@mail ~]# yum -y install opendkim
[root@mail ~]# opendkim-default-keygen
Generating default DKIM keys:
Default DKIM keys for yourdomain.com created in /etc/opendkim/keys.
[root@mail keys]# cd /etc/opendkim/keys/
[root@mail keys]# ll
total 8
-rw-r----- 1 root opendkim 887 Jan 9 09:07 default.private
-rw-r--r-- 1 root opendkim 321 Jan 9 09:07 default.txt
## Selects operating modes. Valid modes are s (sign) and v (verify). Default is v.
## Must be changed to s (sign only) or sv (sign and verify) in order to sign outgoing
## messages.
Mode sv
## Create a socket through which your MTA can communicate.
Socket inet:8891@127.0.0.1
## Selects the canonicalization method(s) to be used when signing messages.
Canonicalization relaxed/simple
## Domain(s) whose mail should be signed by this filter. Mail from other domains will
## be verified rather than being signed. Uncomment and use your domain name.
## This parameter is not required if a SigningTable is in use.
Domain yourdomain.com
## Gives the location of a private key to be used for signing ALL messages. This
## directive is ignored if KeyTable is enabled.
#KeyFile /etc/opendkim/keys/default.private
## Gives the location of a file mapping key names to signing keys. In simple terms,
## this tells OpenDKIM where to find your keys. If present, overrides any KeyFile
## directive in the configuration file. Requires SigningTable be enabled.
KeyTable refile:/etc/opendkim/KeyTable
## Defines a table used to select one or more signatures to apply to a message based
## on the address found in the From: header field. In simple terms, this tells
## OpenDKIM how to use your keys. Requires KeyTable be enabled.
SigningTable refile:/etc/opendkim/SigningTable
## Identifies a set of "external" hosts that may send mail through the server as one
## of the signing domains without credentials as such.
ExternalIgnoreList refile:/etc/opendkim/TrustedHosts
## Identifies a set "internal" hosts whose mail should be signed rather than verified.
InternalHosts refile:/etc/opendkim/TrustedHosts
# OPENDKIM KEY TABLE
# To use this file, uncomment the #KeyTable option in /etc/opendkim.conf,
# then uncomment the following line and replace example.com with your domain
# name, then restart OpenDKIM. Additional keys may be added on separate lines.
#default._domainkey.example.com example.com:default:/etc/opendkim/keys/default.private
default._domainkey.yourdomain.com yourdomain.com:default:/etc/opendkim/keys/default.private
# OPENDKIM SIGNING TABLE
# This table controls how to apply one or more signatures to outgoing messages based
# on the address found in the From: header field. In simple terms, this tells
# OpenDKIM "how" to apply your keys.
# To use this file, uncomment the SigningTable option in /etc/opendkim.conf,
# then uncomment one of the usage examples below and replace example.com with your
# domain name, then restart OpenDKIM.
# WILDCARD EXAMPLE
# Enables signing for any address on the listed domain(s), but will work only if
# "refile:/etc/opendkim/SigningTable" is included in /etc/opendkim.conf.
# Create additional lines for additional domains.
*@yourdomain.com default._domainkey.yourdomain.com
# NON-WILDCARD EXAMPLE
# If "file:" (instead of "refile:") is specified in /etc/opendkim.conf, then
# wildcards will not work. Instead, full user@host is checked first, then simply host,
# then user@.domain (with all superdomains checked in sequence, so "foo.example.com"
# would first check "user@foo.example.com", then "user@.example.com", then "user@.com"),
# then .domain, then user@*, and finally *. See the opendkim.conf(5) man page under
# "SigningTable" for more details.
#example.com default._domainkey.example.com
# OPENDKIM TRUSTED HOSTS
# To use this file, uncomment the #ExternalIgnoreList and/or the #InternalHosts
# option in /etc/opendkim.conf then restart OpenDKIM. Additional hosts
# may be added on separate lines (IP addresses, hostnames, or CIDR ranges).
# The localhost IP (127.0.0.1) should always be the first entry in this file.
127.0.0.1
::1
#host.example.com
#192.168.1.0/24
mail.yourdomain.com
yourdomain.com
#DKIM
smtpd_milters = inet:127.0.0.1:8891
non_smtpd_milters = $smtpd_milters
milter_default_action = accept
[root@mail keys]# systemctl enable opendkim
[root@mail keys]# systemctl start opendkim
[root@mail keys]# systemctl restart postfix
打开/etc/opendkim/keys/default.txt
default._domainkey IN TXT ( "v=DKIM1; k=rsa; "
"p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDaJp4t7CUdK925qyqPnNtqM5cSvAfzQJSX3WPafluRBHtB62whHuD7GsKRW4XZmifqnGOtMYQUpPFJKOYO/G4gEYUeBOg8ymU5nKFq4hab+Ckc+HHlX0GgSOK+GwLkyZMIn6g9QE2TV+rNQFYvGP/Gzafrd7dmi5YT6Ji8/jCNawIDAQAB" ) ; ----- DKIM key default for yourdomain.com
Type Host Destination Priority TTL
TXT default._domainkey v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDaJp4t7CUdK925qyqPnNtqM5cSvAfzQJSX3WPafluRBHtB62whHuD7GsKRW4XZmifqnGOtMYQUpPFJKOYO/G4gEYUeBOg8ymU5nKFq4hab+Ckc+HHlX0GgSOK+GwLkyZMIn6g9QE2TV+rNQFYvGP/Gzafrd7dmi5YT6Ji8/jCNawIDAQAB 3600
Type Host Destination Priority TTL
TXT _dmarc v=DMARC1; p=none; rua=mailto:postmaster@yourdomain.com 3600
[root@mail keys]# cd /var/www
[root@mail www]# wget https://github.com/roundcube/roundcubemail/releases/download/1.3.8/roundcubemail-1.3.8-complete.tar.gz
[root@mail www]# tar -xvf roundcubemail-1.3.8-complete.tar.gz
[root@mail www]# chown -R apache:apache roundcubemail-1.3.8
DocumentRoot "/var/www/squirrelmail.devel/"
->
DocumentRoot "/var/www/roundcubemail-1.3.8/"
[root@mail www]# systemctl restart httpd
Step 1.
[root@mail www]# yum install php-xml -y
[root@mail www]# yum install php-mysql -y
[root@mail www]# yum install php-mbstring -y
[root@mail www]# systemctl restart httpd
Step 2.
[root@mail www]# yum install mariadb-server
[root@mail www]# systemctl enable mariadb
[root@mail www]# systemctl start mariadb
[root@mail www]# mysql -uroot -p
Enter password: #直接回车
MariaDB[(none)]> SET password=PASSWORD('newpassward');
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> create database roundcubemail;
Query OK, 1 row affected (0.00 sec)
MariaDB [(none)]> show databases;
+--------------------+
| Database |
+--------------------+
| information_schema |
| mysql |
| performance_schema |
| roundcubemail |
| test |
+--------------------+
5 rows in set (0.00 sec)
MariaDB [(none)]> create user roundcubemail@localhost identified by 'roundcubemail';
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> grant all privileges on roundcubemail.* to roundcubemail@localhost identified by 'roundcubemail';
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> exit
Bye
注意，插件additional_message_headers一定要选。
The config file was saved successfully into /var/www/roundcubemail-1.3.8/config directory of your Roundcube installation.
Step 3.
测试SMTP设置(填写发件人和收件人)
Server 127.0.0.1
Port 25
Username (none)
Password (none)
Trying to send email…
SMTP send: OK
测试IMAP设置(使用你的邮箱账户)
Connecting to 127.0.0.1…
IMAP connect: OK(SORT capability: yes)
$config['default_host'] = '192.168.0.1';
$config['mail_domain'] = '%d';
$config['additional_message_headers']['List-Unsubscribe'] = '<http://mail.yourdomain.com/unsubscribe.php?unsubscribe=1>, <mailto:unsubscribe@yourdomain.com?subject=unsubscribe>';
$config['plugins'] = array('additional_message_headers', 'emoticons', 'http_authentication', 'new_user_dialog', 'redundant_attachments', 'userinfo');
参考文档：
1. https://hostpresto.com/community/tutorials/how-to-setup-an-email-server-on-centos7/
2. https://www.linuxtechi.com/configure-domainkeys-with-postfix-on-centos-7/
备注：
1. 如果主机名没有变更的情况下生成的opendkim密钥可能是无效的，所以请参考下列语句进行处理:
mkdir /etc/opendkim/keys/yourdomain.com
opendkim-genkey -D /etc/opendkim/keys/yourdomain.com/ -d yourdomain.com -s default
chown -R opendkim: /etc/opendkim/keys/yourdomain.com
mv /etc/opendkim/keys/yourdomain.com/default.private /etc/opendkim/keys/yourdomain.com/default
声明：本文章所提供之内容仅用于学习与研究，切勿用于非法用途！
转载请保留链接或注明出处
Hits: 4799
Hits: 2074
以下操作均使用 root 账户进行。
vi /etc/yum.repos.d/nginx.repo
内容如下
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/$releasever/$basearch/
gpgcheck=0
enabled=1
rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-7.rpm
yum -y update
yum --enablerepo=remi,remi-php72 install nginx php-fpm php-common
yum --enablerepo=remi,remi-php72 install php-opcache php-pecl-apcu php-cli php-pear php-pdo php-mysqlnd php-pgsql php-pecl-mongodb php-pecl-redis php-pecl-memcache php-pecl-memcached php-gd php-mbstring php-mcrypt php-xml
systemctl enable nginx
systemctl enable php-fpm
systemctl start nginx
systemctl start php-fpm
执行netstat -ntpl
[root@localhost ~]# netstat -ntpl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:9000 0.0.0.0:* LISTEN 991/php-fpm: master
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN 1212/nginx: master
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 993/sshd
tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1078/master
tcp6 0 0 :::22 :::* LISTEN 993/sshd
tcp6 0 0 ::1:25 :::* LISTEN 1078/master
能看到9000 和 80 端口启动就成功了。
备份配置文件
cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bak
cp /etc/nginx/nginx.conf.default /etc/nginx/nginx.conf
修改 /etc/nginx/conf.d/default.conf
server {
listen 80;
server_name localhost;
#charset koi8-r;
#access_log /var/log/nginx/host.access.log main;
location / {
root /usr/share/nginx/html;
index index.php index.html index.htm;
}
#error_page 404 /404.html;
# redirect server error pages to the static page /50x.html
#
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
#
#location ~ \.php$ {
# proxy_pass http://127.0.0.1;
#}
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
#
location ~ \.php$ {
root /usr/share/nginx/html; #该项必须设置并且是全路径
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
include fastcgi_params;
}
# deny access to .htaccess files, if Apache’s document root
# concurs with nginx’s one
#
#location ~ /\.ht {
# deny all;
#}
}
php-fpm 默认使用的账户是apache,我们需要给站点路径设置权限
chown -R apache /usr/share/nginx/html
chmod -R 777 /usr/share/nginx/html
变更配置需要重启服务
systemctl restart nginx
systemctl restart php-fpm
Centos7 默认开启了防火墙，要外部访问需要配置规则
firewall-cmd --permanent --zone=public --add-service=http
firewall-cmd --permanent --zone=public --add-service=https
firewall-cmd --reload
然后使用curl -l localhost访问或者http://ip可以看到页面输出信息.
Hits: 894
欢迎使用WordPress。这是您的第一篇文章。编辑或删除它，然后开始写作吧！
Hits: 10687