98 lines
2.3 KiB
Markdown
98 lines
2.3 KiB
Markdown
# LNMP+Wordpress
|
|
|
|
Deploy nginx, mysql, php + discuz.
|
|
|
|
## Usage
|
|
|
|
1. Start the db container.
|
|
|
|
```bash
|
|
docker-compose --env-file ./.env up -d db
|
|
```
|
|
|
|
2. Start the nginx and discuz container.
|
|
|
|
```bash
|
|
docker-compose --env-file ./.env up -d discuz nginx
|
|
```
|
|
|
|
3. Access [https://127.0.0.1/wp-admin](https://127.0.0.1/wp-admin).
|
|
|
|
## Data path
|
|
|
|
* `discuz_data`: data for discuz.
|
|
* `discuz_config`: config for discuz.
|
|
* `db_data`: config for discuz.
|
|
|
|
|
|
## Generate ssl certs
|
|
|
|
```bash
|
|
openssl req -x509 -outform pem -out server.pem -keyout privkey.pem \
|
|
-newkey rsa:4096 -nodes -sha256 -days 3650 \
|
|
-subj '/CN=localhost' -extensions EXT -config <( \
|
|
printf "[dn]\nCN=localhost\n[req]\ndistinguished_name = dn\n[EXT]\nsubjectAltName=DNS:localhost\nkeyUsage=digitalSignature\nextendedKeyUsage=serverAuth")
|
|
```
|
|
|
|
## Apply ssl certs from Let's Encrypt
|
|
|
|
Set `/etc/nginx/conf.d/default.conf` as the following:
|
|
|
|
```bash
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name _;
|
|
root /usr/share/nginx/html;
|
|
|
|
# Load configuration files
|
|
include /etc/nginx/default.d/*.conf;
|
|
|
|
# Let's Encrypt authentication
|
|
location ~ /.well-known {
|
|
root /usr/share/nginx;
|
|
allow all;
|
|
}
|
|
}
|
|
```
|
|
|
|
Restart nginx.
|
|
|
|
```bash
|
|
nginx -s reload
|
|
service nginx restart
|
|
```
|
|
|
|
Apply ssl cert and key pair with certbot.
|
|
|
|
```bash
|
|
certbot certonly --webroot --agree-tos -v -t --email xxx@xxx.com -w /usr/share/nginx/ -d xxx.com
|
|
```
|
|
|
|
The new cert will be saved under `/etc/letsencrypt/live/`.
|
|
|
|
Renew cert when it's expired.
|
|
|
|
```bash
|
|
certbot renew --pre-hook "service nginx stop" --post-hook "service nginx start"
|
|
```
|
|
|
|
## Common discuz configs
|
|
|
|
* permanent link: use article title only;
|
|
* theme: astra;
|
|
* plugins:
|
|
* Akismet: anti spam posts;
|
|
* AMP: improve page experience;
|
|
* Contact Form 7 + Flamingo: contact information form;
|
|
* Insert Headers and Footers: insert header/footer to every page;
|
|
* elementor website builder
|
|
* Limit Login Attempts Reloaded: limit login attempts;
|
|
* ModuloBox: show figure in large view;
|
|
* Pinyin Slugs: convert Chinese article title to pinyin in permlink;
|
|
* Post Views Counter: count page view number;
|
|
* Sucuri: security protection and audit;
|
|
* Super Cache: cache support;
|
|
* Updraft: backup discuz data;
|
|
* WP User Profile Avatar: User avatar
|