ืืืจ ืคืึธืจืืขืฆื ืฆื ืืงืกืคึผืึทื ื ืืื ืืืขืจ ืืึทืจืง. ืืืจ ืืขืฆืื ืก ืืขืจืฆืืืื ืืืจ ืืื , ืืื ืื ืืืึธื ืืจืืคึผืึทื ืืจืืืก ืืื ืืื ืืืขืจ ืืึทืจืง.
ืืืจ ืืึธืื ืืืจ ืืืึธืก ืืืจ ืืืืกืืขืจืืืืืื ืืื ืืื ืืื ืื ืืืื ืืื ืืืฉืืคื.
ืืจืืคึผืึทื - ืึท ืืึทืงืืืขื ืืื ืฉืืึทืจืง ืคึผืืึทืืคืึธืจืืข ืคึฟืึทืจ ืงืจืืืืืื ื ืงืืื ืืืคึผ ืคืื ืืืขืืืืืื: ืคึฟืื ืืืงืจืึธืกืืืขืก ืืื ืืืึธืืก ืฆื ืืจืืืก ืืขืืขืืฉืึทืคืืืขื ืคึผืจืึทืืืฉืขืงืก, ืืืื ืืขื ืืฆื ืืื ืึท ืืงืขืจ ืคึฟืึทืจ ืืืขื ืึทืคึผืืึทืงืืืฉืึทื ื, ืืขืฉืจืืื ืืื PHP ืืื ื ืืฆื ืจืืืืืฉืึทื ืึทื ืืึทืืึทืืืืกืื ืืื ืึท ืืึทืื ืกืืึธืจืืืืฉ.
ืืจืืคึผืึทื 9 ืืืื ืึทืืข ืื ืคึฟืขืึดืงืืืื ืืึทืงืขื ืขื ืืื ืืืขืจืกืืข 8.9. ืืขืจ ืฉืืืกื ืืืืืง ืฆืืืืฉื ืืืขืจืกืืข 9 ืืื ืืืขืจืกืืข 8 ืืื ืึทื ืื ืคึผืืึทืืคืึธืจืืข ืืืขื ืคืึธืจืืขืฆื ืฆื ืืึทืงืืืขื ืืขืจืืืึทื ืืืงืื ืืขื ืืื ืืืืขืจืืืื ืคืืงืกืื ื ืึธื ื ืืืืขืืืขืจ 2021. ืืืขืจืกืืข 9 ืืืื ืกืืืคึผืืึทืคืืื ืื ืืขืจืืืึทื ืืืงื ืคึผืจืึธืฆืขืก, ืืืื ืืขื ืคึผืจืึธืฆืขืก ืคืื ืึทืคึผืืจืืืืื ื ืคึฟืื ืืืขืจืกืืข 8 ืืคืืื ืืจืื ืืขืจ.
ืกืขืจืืืืจืขืจ ืืืืขืจืคืขื ืืฉื
ืฆื ื ืืฆื ืืจืืคึผืึทื, ืขืก ืืื ืจืขืงืึทืืขื ืืื ืฆื ื ืืฆื 2 ืืืืืืืื ืืึทืจืึทื ืืื 2 ืงืคึผื ืงืึธืจืขืก.
ืื ืืืืคึผื ืืจืืคึผืึทื ืืขืงืขืก ื ืขืืขื ืืืขืื 100 ืืขืืืืืืื, ืืื ืึทืืืฉืึทื ืืืจ ืืืขื ืืึทืจืคึฟื ืคึผืืึทืฅ ืฆื ืงืจืึธื ืืืืืขืจ, ืืึทืืึทืืืืก, ืืขืืขืก, ื ืึธื ืืึทืืืฉืืื ืืื ืืึทืงืึทืคึผืก, ืืืึธืก ืืืขื ืึธืคืขื ืืขื ืืืืฃ ืื ืืจืืืก ืคืื ืืืื ืคึผืืึทืฅ.
ืืจืืคึผืึทื 9 ืจืืงืืืืืขืจื PHP 7.4 ืึธืืขืจ ืืขืืขืจ ืืื ืึท ืืื ืืืื ืืึทืืจืขื ืขืฆืื ื (memory_limit) ืคึฟืึทืจ 64 ืื ืืึผืจืื; ืืืื ื ืึธื ืืึทืืืฉืืื ืืขื ืขื ืืขื ืืฆื, ืขืก ืืื ืจืขืงืึทืืขื ืืื ืฆื ืื ืกืืึทืืืจื 128 ืืขืืืืืืื.
ืืจืืคึผืึทื ืงืขื ืขื ื ืืฆื Apache ืึธืืขืจ Nginx ืืื ืึท ืืืขื ืกืขืจืืืขืจ, ืืื MySQL, PostgreSQL ืึธืืขืจ SQLite ืืื ืึท ืืึทืืึทืืืืก.
ืืืจ ืืืขืื ืื ืกืืึทืืืจื Drupal ืืื Nginx ืืื MySQL.
ืื ืกืืึทืืืจืื ื
ืืึธืืืจ ืืขืจืืืึทื ืืืงื ืื ืืื ืกืืึทืืืจื ืคึผืึทืงืึทืืืฉืึทื ืฆื ืื ืืขืฆืืข ืืืขืจืกืืข:
sudo dnf update -yืืึธืืืจ ืืืืื ืฉืืขื ืืืง ืืขืจืืืืืขื ืืฉ ืคึฟืึทืจ ืื ืงืึทืืื ื ืคืึทืจืงืขืจ ืฆื http/80 ืืื https/443 ืคึผืึธืจืฅ:
sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=httpsืืึธืืืจ ืฆืืืืืื ืื ื ืืึทืข ืคืืืจืืืึทื ืึผืืืื:
sudo systemctl reload firewalldืืึธืืืจ ืื ืกืืึทืืืจื Nginx:
sudo dnf install nginx -yืืึธืืืจ ืึธื ืืืืื ืืื ืืขืื ืื Nginx ืกืขืจืืืขืจ:
sudo systemctl start nginx
sudo systemctl enable nginx
ืืื ื ืื ืืืืคึผื Centos ืจืืคึผืึทืืึทืืึธืจื ืืขืจืืืืึทื ื ืืฆื PHP 7.2, ืืึธืื ืืื ืื ืืืืื ืึท REMI ืจืืคึผืึทืืึทืืึธืจื ืืื PHP 7.4 (ืืื ืืืื ืืืขืจืกืืข ืคึฟืึทืจ ืืจืืคึผืึทื 9).
ืฆื ืืึธื ืืึธืก, ืืืืื ืื EPEL ืจืืคึผืึทืืึทืืึธืจื (ืคืืจืืื ืื ืืืจื ืื REMI ืจืืคึผืึทืืึทืืึธืจื):
rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpmืืึธืืืจ ืืืืื ืื REMI ืจืืคึผืึทืืึทืืึธืจื:
sudo dnf install -y https://rpms.remirepo.net/enterprise/remi-release-8.rpm
ืืึธืืืจ ืืขืื ืื php:remi-7.4 ืืึธืืืืข ืฆื ืื ืกืืึทืืืจื php 7.4:
sudo dnf module enable php:remi-7.4 -yืื ืกืืึทืืืจื php-fpm ืืื php-cli:
sudo dnf install -y php-fpm php-cliืืึธืืืจ ืื ืกืืึทืืืจื ืื PHP ืืึทืืืฉืืื ืคืืจืืื ืื ืคึฟืึทืจ ืืจืืคึผืึทื ืฆื ืึทืจืืขืื:
sudo dnf install -y php-mysqlnd php-date php-dom php-filter php-gd php-hash php-json php-pcre php-pdo php-session php-simplexml php-spl php-tokenizer php-xmlืืืจ ืืืขืื ืืืื ืื ืกืืึทืืืจื ืื ืจืขืงืึทืืขื ืืื PHP mbstring opcache ืืึทืืืฉืืื:
sudo dnf install -y php-mbstring php-opcacheืืึธืืืจ ืื ืกืืึทืืืจื ืื MySQL ืกืขืจืืืขืจ:
sudo dnf install mysql-server -yืืื ืก ืงืขืจ ืืืืฃ ืืื ืึธื ืืืื ืื MySQL ืกืขืจืืืขืจ:
sudo systemctl start mysqld
sudo systemctl enable mysqldืืื ื ืืืจ ืืึทืื ืึท ืืืกืืขืจ ืคึฟืึทืจ VDS, ืืื ืืื ืงืขื ืขื ืืืื ืคึผืึทืืขืืขื, ืืืจ ืืืขืื ืืืืื ืึท Mysqld ืึธื ืืืื ืคืึทืจืืึทืืื ืคืื 30 ืกืขืงืื ืืขืก, ืึทื ืืขืจืฉ ืขืก ืงืขื ืืืื ืคึผืจืึธืืืขืืก ืืื ืื ืกืขืจืืืขืจ ืกืืึทืจืืื ื ืืขืฉืึทืก ืื ืขืจืฉื ืกืืกืืขื ืฉืืืืื:
sudo sed -i '/Group=mysql/a
ExecStartPre=/bin/sleep 30
' /usr/lib/systemd/system/mysqld.serviceืืึธืืืจ ืืืืฉื ืื ืืจืืคึผืข ืืื ืืึทื ืืฆืขืจ ืืื ืืขืจ ืืืึธืก nginx ืืืขื ืืืืคื ืืืจื ืืึทืื ืขื ืืขืจืื ืืขื ืฆื /etc/php-fpm.d/www.conf:
sudo sed -i --follow-symlinks 's/user = apache/user = nginx/g' /etc/php-fpm.d/www.conf
sudo sed -i --follow-symlinks 's/group = apache/group = nginx/g' /etc/php-fpm.d/www.confืืึธืืืจ ืืืืฉื ืื ืืึทืืืฆืขืจ ืคืื ืื PHP ืกืขืฉืึทื ื ืืืขืืืืืึทืืขืจ ืฆื nginx ืึทืงืึธืจืืื ืืื:
sudo chown -R nginx. /var/lib/php/sessionืืึธืืืจ ืึทืจืึธืคึผื ืขืืขื ืื ืฉืืจืืช ืืื ืืึทืืขืจืงืื ืืขื ืคืื ืื ืงืึทื ืคืืืืขืจืืืฉืึทื ืืขืงืข /etc/nginx/nginx.conf (ืึทืืื ืขืก ืืขื ืขื ืงืืื ืืึธืคึผื ืืจืืืขืจื ืคึฟืึทืจ ืกืขื):
sudo sed -i -e '/^[ t]*#/d' /etc/nginx/nginx.confืืืื ืzip ืงืึทืืคึผืจืขืฉืึทื ืกืขืืืื ืืก ืฆื /etc/nginx/nginx.conf
sudo sed -i '/types_hash_max_size 2048;/a
gzip on;
gzip_static on;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/javascript image/x-icon image/svg+xml application/x-font-ttf;
gzip_comp_level 9;
gzip_proxied any;
gzip_min_length 1000;
gzip_disable "msie6";
gzip_vary on;
' /etc/nginx/nginx.confืืึธืืืจ ืืืืื ืื ืกืขืืืื ืืก ืคืื ืื ืืื ืืขืงืก ืืขืงืข index.php ืฆื /etc/nginx/nginx.conf:
sudo sed -i '/ root /usr/share/nginx/html;/a
index index.php index.html index.htm;
' /etc/nginx/nginx.confืืึธืืืจ ืืืืื ืกืขืืืื ืืก ืคึฟืึทืจ ืื ืคืขืืืงืืึทื ืกืขืจืืืขืจ: ืคืคึผ ืคึผืจืึทืกืขืกืื ื ืืืจื ืื ืคืคึผ-ืคืคึผื ืืึธืืขื, ืืืกืืืืึทื ืื ืงืืึธืฅ ืคึฟืึทืจ ืกืืึทืืืง ืืขืงืขืก, ืคืึทืจืืจืขืกืขืจื ืื ืืืกืืืื ืฆืืื, ืืืกืืืืึทื ืื ืึทืงืกืขืก ืืื ืืขืืช ืงืืึธืฅ ืคึฟืึทืจ favicon.ico ืืื robots.txt, ืืื ืืืืงืขื ืขื ืึทืงืกืขืก ืฆื .ht ืืขืงืขืก ืคึฟืึทืจ ืึทืืขืืขื:
sudo sed -i '/ location / {/a
try_files $uri $uri/ /index.php?q=$uri&$args;
}
location ~* ^.+.(js|css|png|jpg|jpeg|gif|ico|woff)$ {
access_log off;
expires max;
}
location ~ .php$ {
try_files $uri =404;
fastcgi_pass unix:/run/php-fpm/www.sock;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_intercept_errors on;
fastcgi_ignore_client_abort off;
fastcgi_connect_timeout 60;
fastcgi_send_timeout 180;
fastcgi_read_timeout 180;
fastcgi_buffer_size 128k;
fastcgi_buffers 4 256k;
fastcgi_busy_buffers_size 256k;
fastcgi_temp_file_write_size 256k;
}
location = /favicon.ico {
log_not_found off;
access_log off;
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
location ~ /.ht {
deny all;' /etc/nginx/nginx.confืื ืกืืึทืืืจื wget ืคืืจืืื ืื ืคึฟืึทืจ ืื ืกืืึธืืื ื certbot:
sudo dnf install wget -yืืจืืคืงืืคืืข ืื certbot ืขืงืกืขืงืืืึทืืืข ืืขืงืข ืคึฟืื ืื ืึธืคืคืืืข:
cd ~
wget https://dl.eff.org/certbot-autoืืึทื ืกืขืจืืืึธื ืฆื /usr/local/bin/:
mv certbot-auto /usr/local/bin/certbot-autoืืื ืืึธืื ืืื ืื ืืึทืฉืืืืขื ืื ืจืขืื ืืื ืื ืืึทืืืฆืขืจ ืฆื ืืืึธืจืฆื:
chown root /usr/local/bin/certbot-auto
chmod 0755 /usr/local/bin/certbot-autoืืึธืืืจ ืื ืกืืึทืืืจื ืื ืกืขืจืืืึธื ืืืคึผืขื ืืึทื ืกืื ืืื ืืื ืืขื ืืื ืข ืืืขืจืจืืึทืกื ืืืึทื ืึทืจืืขื (ืึทื ืกืืืขืจืก: ื, C):
certbot-autoืืึธืืืจ ืืจืืคืงืืคืืข ืื ืึทืจืงืืืื ืืื ืื ืืขืฆืืข ืืืขืจืกืืข ืคืื โโโโDrupal 9 ืคึฟืื ืื ืึธืคืคืืืข:
cd ~
wget https://www.drupal.org/download-latest/tar.gzืื ืกืืึทืืืจื ืืึทืจ ืฆื ืึทื ืคึผืึทืง ืืขื ืึทืจืงืืืื:
sudo dnf install tar -yืืื ืก ืืืกืืขืงื ืื ืคืขืืืงืืึทื ืืขืงืขืก ืืื ืื /usr/share/nginx/html/ ืืืขืืืืืึทืืขืจ:
rm -rf /usr/share/nginx/html/*ืืื ืก ืึทื ืคึผืึทืง ืื ืืขืงืขืก ืืื ืื ืืืขื ืกืขืจืืืขืจ ืืืขืืืืืึทืืขืจ:
tar xf tar.gz -C /usr/share/nginx/html/ืืื ืก ืืึทื ืื ืืขืงืขืก ืคืื ืื ืกืืืืืจืขืงืืึธืจื ืฆื ืื ืืืึธืจืฆื ืืืขืืืืืึทืืขืจ ืคืื ืื ืืืขื ืกืขืจืืืขืจ:
mv /usr/share/nginx/html/drupal-9.0.7/* /usr/share/nginx/html/ืืื ืก ืืืกืืขืงื ืื ืกืืืืืจืขืงืืึธืจื:
rm -rf /usr/share/nginx/html/drupal-9.0.7ืืื ืก ืืืกืืขืงื ืื ืึทืจืงืืืื ืืื ืืึทื ืืึธื ืืืจืื ื ืืขืงืขืก:
rm -f ./tar.gzืืึธืืืจ ืืึทืฉืืืืขื ืื ืืึทืืืฆืขืจ ืคืื ืื nginx ืืขืงืขืก:
chown -R nginx. /usr/share/nginx/htmlืืื ืืขื ืืื ืข ืืืจ ืืืขืื ืงืขืจ ืึทืืืขืง ืื ืกืขืจืืืขืจ ืืื ื ืขืืขื ืึท ืืึธืืขื ืืืืื:
shutdown -h nowื ืึธื ืืึธื ืืฉืื ื ืื VDS ืคึฟืื ืื ืืึธืืขื ืืืืื, ืืืจ ืืืขืื ืืืจืืคืืจื ืื ืขืจืฉื ืกืขืืึทืคึผ ืคืื ืื MySQL ืกืขืจืืืขืจ ืืืจื ืืืืคื ืื ืฉืจืืคื:
mysql_secure_installationืืื ืก ืืขืื ืื ืคึผืึทืจืึธื ืืืึทืืืืึทืืึธืจ:
Would you like to setup VALIDATE PASSWORD component? : yืืึธืืืจ ืฉืืขืื ืื ืคึผืึทืจืึธื ืคึฟืึทืจ ืื MySQL ืืืึธืจืฆื ืืึทื ืืฆืขืจ:
New password:
Re-enter new password:ืืืืืจ ืืจืืคื ืขืืขื ืื ืื ืืืข ืืื ืืฆืขืจ:
Remove anonymous users? (Press y|Y for Yes, any other key for No) : yืืื ืก ืคืึทืจืืืึทืื ืืืึธืจืฆื ืคืื ืงืึทื ืขืงืืื ื ืจืืืึธืืืื:
Disallow root login remotely? (Press y|Y for Yes, any other key for No) : yืืึธืืืจ ืืืกืืขืงื ืื ืคึผืจืึธืืข ืืึทืืึทืืืืก:
Remove test database and access to it? (Press y|Y for Yes, any other key for No) : yืืึธืืืจ ืจืืืึธืื ืื ืคึผืจืืืืืืขืืืข ืืืฉื:
Reload privilege tables now? (Press y|Y for Yes, any other key for No) : y
ื ืึธื ืืขื, ืฆื ืคืึทืจืขื ืืืงื ืื ืื ืกืืึทืืืจืื ื, ืืืจ ืงืขื ืขื ืืืื ืฆื
ืืื ืืขื ืึทืืจืขืก ืืืจ ืืืขืื ืืขื ืื ืืจืืคึผืึทื ืื ืกืืึทืืืจืื ื ืืืึทื.
ืืึธืืืจ ืืืืกืงืืืึทืื ืื ืฉืคึผืจืึทื ืฆื ื ืืฆื. ืืืฉื: ืจืืกืืฉ. ืืจืืงื "ืืื ืืื ืคืึธืจืืขืฆื"
ืืึธืืืจ ืกืขืืขืงืืืจื ืึท ืืึทื ืืึธื ืืืจืื ื ืคึผืจืึธืคืื (ืื ืืขืืึธ ืืื ืืขื ืืฆื ืืืืื ืฆื ืืึทืงืขื ืขื ืืื ืืื ืื ืกืืกืืขื). ืืื ืืื ืืืขืจ ืคืึทื, ืืึธืื ืขืก ืืืื "ื ืึธืจืืึทื".
ืืืืฃ ืืขืจ ืืืืึทืืขืจ ืืืึทื ืืืจ ืืขืื ืึท ื ืึธืืขื ืฆื ืื ืืึทืืึทืืืืก, ืืืฉื "ืืจืืคึผืึทื". ืืื ืก ืึธื ืืืืึทืื ืื ืืึทืืึทืืืืก ืืึทื ืืฆืขืจ ื ืึธืืขื ืืืึธืจืฆื ืืื ืื ืคึผืึทืจืึธื ืืขืืขืื ืฆื ืืื ืืืขื ืคืืืกื ืืืง mysql_secure_installation. ืืจืืงื "ืืื ืืื ืคืึธืจืืขืฆื."
ืืึธืืืจ ืืืึทืจืื ืืื ืื ืืึทื ืืึธื ืืืจืื ื ืืื ืืขืจืืืึทื ืืืงื ืคืื ืืืืขืจืืขืฆืื ืืขื ืืื ืืขืขื ืืืงื (ืืขืจ ืคึผืจืึธืฆืขืก ืงืขื ื ืขืืขื ืขืืืขืืข ืืื ืื).
ืืืจ ืืืขืื ืึธื ืืืืึทืื ืื ื ืึธืืขื ืคืื ืืขื ืคึผืืึทืฅ, ืฉืืขืื ืื ืคึผืืึทืฅ E- ืืจืืื (ืืืืฃ ืืืืึทืฃ ืคืื ืืืึธืก ืคึผืืึทืฅ ื ืึธืืืึทืคืึทืงืืืฉืึทื ื ืืืขื ืืืื ืืขืฉืืงื), ืืึธืืื, ืคึผืึทืจืึธื ืืื E- ืืจืืื ืคืื ืื ืืจืืคึผืึทื ืึทืืืื ืืกืืจืึทืืึธืจ ืืฉืืื. ืืืจ ืืืขืื ืืืื ืฉืืขืื ืื ืืืื ื ืืื ืฆืืื ืืึธื ืข ืืื ืื ืจืขืืืึธื ืึทื ืกืขืืืื ืืก. ืืื ืคืึทืจืขื ืืืงื ืื ืื ืกืืึทืืืจืื ื ืืืจื ืืขืื ืึท ืงืืืง "ืืื ืืื ืคืึธืจืืขืฆื".
ื ืึธื ืืขื, ืืืจ ืงืขื ืขื ืืืื ืฆื ืื ืงืึธื ืืจืึธื ืืึทืคืืืข ืืื ืื ืืืฉืืคื ืืจืืคึผืึทื ืึทืืืื ืืกืืจืึทืืึธืจ ืืึธืืื ืืื ืคึผืึทืจืึธื.
ืืึทืฉืืขืืืงื HTTPS (ืึทืคึผืฉืึทื ืึทื)
ืฆื ืงืึทื ืคืืืืขืจ ืืืืคึผืก, ืื VDS ืืืื ืืึธืื ืึท ืืืืืืง ืื ืก ื ืึธืืขื, ืกืคึผืขืฆืืคืืฆืืจื ืืื
/etc/nginx/nginx.confืืื ืื ืกืขืจืืืขืจ ืึธืคึผืืืืืื ื ืื ืกืขืจืืืขืจ ื ืึธืืขื (ืืืฉื):
server_name domainname.ru;ืืึธืืืจ ืจืืกืืึทืจื nginx:
service nginx restartืืึธืืืจ ืึธื ืืืืื certbot:
sudo /usr/local/bin/certbot-auto --nginxืึทืจืืึทื ืืืื E- ืคึผืึธืกื, ืฉืืืืขื ืฆื ืื ืืขืจืืื ืขื ืคืื ืืื ืกื (ื), ืึทืืึธื ืืจื ืฆื ืื ื ืืืืขืืขืจ (ืึทืคึผืฉืึทื ืึทื) (N), ืืืืกืงืืืึทืื ืื ืคืขืื ื ืขืืขื ืคึฟืึทืจ ืืืึธืก ืืืจ ืืืืื ืฆื ืึทืจืืืกืืขืื ืึท ืืึทืืืืึทืื (ืึทืจืืึทื ืคึฟืึทืจ ืึทืืขืืขื).
ืืืื ืึทืืฅ ืืื ืืขืืืขื ืึธื ืขืจืจืึธืจืก, ืืืจ ืืืขืื ืืขื ืึท ืึธื ืืึธื ืืืขืื ืื ืืขืจืึธืื ืืฉืืึทื ืก ืคืื ืกืขืจืืืคืืงืึทืฅ ืืื ืกืขืจืืืขืจ ืงืึทื ืคืืืืขืจืืืฉืึทื:
Congratulations! You have successfully enabled ...ื ืึธื ืืขื, ืงืึทื ืขืงืฉืึทื ื ืฆื ืคึผืึธืจื 80 ืืืขื ืืืื ืจืืืขืจืขืงืืื ืฆื 443 (https).
ืืืื ืฆื /etc/crontab ืฆื ืืืืืึธืืึทืืืฉ ืืขืจืืืึทื ืืืงื ืกืขืจืืืคืืงืึทืฅ:
# Cert Renewal
30 2 * * * root /usr/local/bin/certbot-auto renew --post-hook "nginx -s reload"ืืึทืฉืืขืืืงื Trusted Host Security (ืจืขืงืึทืืขื ืืื)
ืื ืืึทืฉืืขืืืงื ืืื ืืืขื ืืื ืึท ืืืืืื ื ืฆื ืืขื ืคึผืจืึธืืืขื ืคึฟืึทืจืืื ืื ืืื ืืื ืึทืืืฉ ืืึทืืข_ืืจื ืคืขืกืืงืืึทื, ืืื ืืื ืืืืืื ื ืฆื ืคืึทืจืืืึทืื HTTP HOST ืืขืืขืจ ืื ืคืืื (ืืืขื ืืืื ืคึผืืึทืฅ ืืืื ื ืึทื ืขืก ืืื ืขืืขืฆืขืจ ืึทื ืืขืจืฉ).
ืฆื ืืึธื ืืึธืก, ืืืจ ืืึทืจืคึฟื ืฆื ืกืคึผืขืฆืืคืืฆืืจื ืืจืึทืกืืื ืคืขืื ื ืขืืขื ืคึฟืึทืจ ืื ืคึผืืึทืฅ ืืื ืื ืกืขืืืื ืืก ืืขืงืข.
ืืื ืืขืงืข
/usr/share/nginx/html/sites/default/settings.php ืืึธืื ืืื ืื ืึธืคึผืฉืึทืฆื ืึธืืขืจ ืืืืื ืึท ืืึทืฉืืขืืืงื ืืื ืคึผืึทืืขืจื ื ืคืื ืคืึทืงืืืฉ ืคึผืืึทืฅ ื ืขืืขื, ืืืฉื:
$settings['trusted_host_patterns'] = [
'^www.mydomain.ru$',
];
ืื ืกืืึธืืื ื PHP APCu (ืจืขืงืึทืืขื ืืื)
ืืจืืคึผืึทื ืฉืืืฆื APCu - ืึทืืืขืจื ืึทืืืืืข PHP User Cache, ืืืขืจืกืืขืก 8 ืืื 9 ืืึทืื ืึท ืืจืขืกืขืจืข ื ืืฆื ืคืื APCu ืืื ืึท ืงืืจืฅ-ืืขืจืืื ืืืืข ืงืึทืฉ ืืื ืคืจืืขืจืืืงืข ืืืขืจืกืืขืก. ืื ืคืขืืืงืืึทื ืงืึทืฉ ืืจืืืก (32 ืืขืืืืืืื) ืืื ืคึผืึทืกืืง ืคึฟืึทืจ ืจืืึฟ ืืืืืืขื ืืื ืงืขื ืขื ื ืืฉื ืืงืกืื 512 ืืขืืืืืืื.
ืฆื ืึทืงืืึทืืืืื, ืื ืกืืึทืืืจื ืื PHP APCu ืืึธืืืืข:
dnf -y install php-pecl-apcuืจืืกืืึทืจื nginx ืืื php-fpm:
service nginx restart
service php-fpm restartืืืื ืืืจ ื ืืฆื ืื ืจืืกืืฉืข ืฉืคึผืจืึทื ืืื APCu ืืื ืื ืจืขืงืึทืืขื ืืื ืืืงืึธืจื ืืจืืืก ืคึฟืึทืจ ืื ืงืึทืฉ, ืืืจ ืงืขื ืืขื ืึท ืืืืจืขื ืื ื ืืื ืื ืงืึธื ืืจืึธื ืืึทืคืืืข ืึทื ืื ืืจืืืก ืคืื ืื ืึทืืึทืงืืืืื ืืึผืจืื ืคึฟืึทืจ ืื ืงืึทืฉ ืืื ืึทื ืืขืจืฉ ืคืื ืื ืจืขืงืึทืืขื ืืื, ืึธืืขืจ ืืื ืคืึทืงื ืึทืืฅ ืึทืจืืขื ืจืืืืืง, ืืื ืื ืืืืจืขืื ืืืืจืขื ืื ื ืืืขื ืจืืึฟ ืืกืชึผืื ืืืื ืงืขืจืขืงืืึทื ืืื ืื ืืืืึทืืขืจ ืืขืจืืืึทื ืืืงืื ืืขื.
ืึธืืขืจ ืืืื ืื ืืืืจืขื ืื ื ืืขืจืฅ ืืืื ืืืืื, ืืืจ ืงืขื ืขื ื ืืฆื .
ืืืจ ืืืึธืื ืืื ืฆื ืืขืจืืึธื ืขื ืืืจ ืึทื ืืืจ ืงืขื ืขื ืืืื ืืึทืื ืึท ืืืื ืคึฟืึทืจ ืืื ืื
ืขืก ืืขื ืขื ืืจืื ืึธืคึผืฆืืขืก ืคึฟืึทืจ ืืื ืฆื ืึธื ืืืื ื ืขืืขื.
ืฆืืืจืืืื ืื ืืืื ืืื ืืื ืืึทืงืืืขื 3000 ืจืืื ืฆื ืืืื ืืืึธื
ืืืื ืืืจ ืืขื ื ืืจืืื ืฆื ืืื ืงืึทืืืฉ ืืื ืฉืืึทืื ืืื ืืึทืื ืื ืืืื ืืืึธืก ืืืจ ืคืขืื ืืื, ืืืจ ืืืขืื ืงืจืขืืื ืืืจ ืืื 3000 ืจืืื ืฆื ืืืื ืื ืขืจืืขื ืืืึธื - ืืืจ ืงืขื ืขื ืคืึทืจืืจืขื ืืขื ืขืก ืืืืฃ ืกืขืจืืืขืจืก.
ืืื ืฆื ืฉืึทืคึฟื ืืืื ืืืืืขื ืข ืืืื:
- ืฉืึทืคึฟื ืึท ืืฉืืื ืืื ืืื ืื ืืืืฃ
- ืืึธืื ืฉืืืฆื ืืืืกื ืึทื ืืืจ ืืืขื ืืึทืื ืืื ืคึผืจืืืืจื ืืืืืขืจ
- ืืืจ ืืืขืื ืงืจืขืืื ืืืจ 3000 ืจืืื ืืื ืืขืื ืื ืคืืืืงืืื ืฆื ืฉืึทืคึฟื ืกื ืึทืคึผืฉืึทืฅ
- ืกืืจ ืึท ืืืืจืืืึทื ืกืขืจืืืขืจ ืืื ืึท ืจืืื ืึธืคึผืขืจืืืืื ื ืกืืกืืขื
- ืื ืกืืึทืืืจื ืื ืืืืืืืืืจื ืืืืฃ ืืขื VPS ืืื ืฉืืขืื ืขืก ืึทืจืืืฃ
- ืฉืจืืื ืื ืกืืจืึทืงืฉืึทื ื ืึธืืขืจ ืฉืจืืคื ืคึฟืึทืจ ืืืืืืืืืจื ืืืคึผืืืืืึทื ื
- ืฉืึทืคึฟื ืึท ืืึธืืขื ืืืืื ืคึฟืึทืจ ืื ืงืึทื ืคืืืืขืจื ืกืขืจืืืขืจ
- ืกืืจ ืึท ื ืืึท ืืืืจืืืึทื ืกืขืจืืืขืจ ืืืจื ืกืขืืขืงืืืจื ืืขื ืคืจืืขืจ ืืืฉืืคื ืืึธืืขื ืืืืื ืืื ืื "ืกืขืจืืืืจืขืจ ืืืกืืขืจ" ืคืึทืื-ืึทืจืึธืคึผ ืจืฉืืื
- ืืืื ืืขืจ ืกืขืจืืืขืจ ืืื ืืฆืืื ืืืฉืืคื, ืึทืจืืืขืจืคืืจื ืื ืืึทืืขืจืืึทืืก ืืืงืืืขื ืืื ืืื ืข 6 ืฆื ืืขืื ืืฉ ืฉืืืฆื
- ืืื ืคืึทื ืคืื ืึท ืืขืืช, ืืืจ ืงืขื ืขื ืงืึธื ืืจืึธืืืจื ืืื ืฉืืืฆื ืคึฟืึทืจ ืื ืกืืื ืืื ืืืืขืจืืืจื ืื ืกืขืืึทืคึผ
ืคึฟืึทืจ ืืขืฉืขืคื ืึธืื ืขืจื: ืคืึธืจืฉืืึธืื ืืืื ืืืืืืืืืจื
ืืืื ืืืจ ืืขื ื ืึท ืืืืืืืืืจื ืืขืืืขืืึธืคึผืขืจ ืืืึธืก ืืื ืืืคึผืืืื ืืื ืืขืืืืื ื ืืืืฃ VPS, ืืืจ ืงืขื ืขื ืึทืจืืึทื ื ืขืืขื ืืืจ ืืื ืื ืืึทืจืง. ืืึธืก ืืื ืืื ืืืจ ืงืขื ืขื ืืขืืคึฟื ืืืจ ืืจืขื ืืขื ื ืืึทืข ืงืึทืกืืึทืืขืจื, ืคืึทืจืงืขืจ ืืื ืืืืกืืงืืึทื.
ืืขืจืฆืืืื ืืื ืื ืืื ืื ืืึทืืขืจืงืื ืืขื ืืืึธืก ืืืื ืืืจ ืคืขืื ืืืง?
ืืื ืืืจ ืืืขืื ืขืก ืืื ืฆืืืจืืืื
ืืงืืจ: www.habr.com