1.lnmp實現多個虛擬主機，部署wordpress和phpmyadmin，併爲後一個主機提供https。
2.配置rewrite，即使用戶使用http協議訪問phpmyadmin的站點，最終也會使用https重新請求資源。
-------------------------------------------------------------------------------------------
一、安裝nginx
方法一：編譯安裝
1.下載nginx程序包，傳導至CentOS主機中，並解壓。
2.進入解壓目錄
3.~]# ./configure --prefix=/usr/local/nginx--sbin-path=/usr/sbin/nginx --conf-path=/etc/nginx/nginx.conf--error-log-path=/var/log/nginx/error.log--http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid--lock-path=/var/lock/subsys/nginx.lock --user=nginx --group=nginx--with-http_ssl_module --with-http_v2_module --with-http_dav_module--with-threads --with-file-aio --with-http_stub_status_module
4. make -j 4 && make install
注意：1.啓動服務需要事先創建nginx用戶和nginx組；
2.若編譯錯誤提示缺少編譯軟件可以 yum -y install gcc gcc-c++autoconf automake make
方法二：EPEL源的安裝包
[root@zj06 ~]# cd /etc/yum.repos.d/
[[email protected]]# vim nginx.repo
[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0
enabled=1
[root@zj06 yum.repos.d]# yum install -y nginx
二、創建虛擬機
[root@zj06 ~]# mkdir -pv/var/www/vhost{1,2}
[root@zj06 ~]# echo"www1.zrs.com" >> /var/www/vhost1/index.html
[root@zj06 ~]# echo"www2.zrs.com" >> /var/www/vhost2/index.html
[root@zj06 ~]# vim /etc/nginx/nginx.conf
server {
listen 80;
server_name www1.zrs.com;
location / {
root /var/www/vhost1;
index index.php index.html index.htm;
}
}
server {
listen 80;
server_name www2.zrs.com;
location / {
root /var/www/vhost2;
index index.php index.html index.htm;
}
}
[root@zj06 ~]#nginx -t ///檢查語法沒問題
[root@zj06~]# nginx -s reload ///重啓服務
客戶端測試
三、安裝php和mariadb，測試連接
[root@zj06 ~]# yum install -y php-fpm mariadb-server mariadb
配置nginx支持php解析
[root@zj06 ~]# vim /etc/nginx/nginx.conf
server {
listen 80;
server_name www1.zrs.com;
location / {
root /var/www/vhost1;
index index.php index.html index.htm;
}
location ~ \.php$ {
root /var/www/vhost1;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /var/www/vhost1/$fastcgi_script_name;
include fastcgi_params;
}
}
server {
listen 80;
server_name www2.zrs.com;
location / {
root /var/www/vhost2;
index index.php index.html index.htm;
}
location ~ \.php$ {
root /var/www/vhost2;
fastcgi_pass 127.0.0.1:9000;
fastcgi_index index.php;
fastcgi_param SCRIPT_FILENAME /var/www/vhost2/$fastcgi_script_name;
include fastcgi_params;
}
}
[root@zj06 ~]# nginx -t ///檢查語法沒問題
[root@zj06 ~]# nginx -s reload ///重啓服務
修改兩個主頁index.html爲index.php
並添加測試段內容：
<?php
Phpinfo();
?>
客戶端測試
創建數據庫，授權用戶，並刷新
MariaDB [(none)]> create database wpsdb;
MariaDB [(none)]> grant all on wpsdb.*TO 'wpuser'@'172.16.%.%'IDENTIFIED BY'123456';
MariaDB [(none)]> create database pma;
MariaDB [(none)]> grant all on pma.* TO'pmauser'@'172.16.%.%'IDENTIFIED BY'123456';
MariaDB [(none)]> FLUSH PRIVILEGES;
測試php和數據庫能否正常連接
[root@zj06 ~]# vim/var/www/vhost1/index.php
vhost2也同樣設置成這樣，相關數據庫內容要改爲pma的。
客戶端測試
四、部署wordpress和phpmyadmin
下載這兩個應用並導入虛擬機中，分別解壓
[root@zj06 ~]# unzipwordpress-3.9-zh_CN.zip
[root@zj06 ~]# tar -zxvfphpMyAdmin-4.0.10.20.tar.gz
1.部署wordpress
[root@zj06 ~]# mv wordpress/var/www/vhost1/
[root@zj06 ~]# cd /var/www/vhost1/wordpress/
[root@zj06 wordpress]# mvwp-config-sample.php wp-config.php
[root@zj06 wordpress]# vim wp-config.php ///修改配置文件
/** WordPress數據庫的名稱*/
define('DB_NAME', 'wpsdb');
/** MySQL數據庫用戶名 */
define('DB_USER', 'wpuser');
/** MySQL數據庫密碼 */
define('DB_PASSWORD', '123456');
/** MySQL主機 */
define('DB_HOST', '172.16.1.6');
客戶端測試 
2. 部署phpmyadmin
[root@zj06 ~]# mkdir/var/www/vhost2/phpmyadmin
[root@zj06 ~]# mv phpMyAdmin-4.0.10.20-all-languages/*/var/www/vhost2/phpmyadmin/
[root@zj06 ~]# cd /var/www/vhost2/phpmyadmin/
[root@zj06 phpmyadmin]# mvconfig.sample.inc.php config.inc.php
[root@zj06 phpmyadmin]# vim config.inc.php ///修改這個文件中的下面一行配置爲主機地址
$cfg['Servers'][$i]['host'] = '172.16.1.6';
客戶端測試
五、爲phpmyadmin提供https
在主機上安裝mod_ssl模塊
[root@zj06 ~]# yum -y install mod_ssl
切換到CA目錄下，生成密鑰和自簽證書
[root@zj06 ~]# cd /etc/pki/CA
[root@zj06 CA]# (umask 077; openssl genrsa -out private/cakey.pem 2048)
Generating RSA private key, 2048 bit longmodulus
.......+++
...................................+++
e is 65537 (0x10001)
[root@zj06 CA]# openssl req -new -x509 -keyprivate/cakey.pem -out cacert.pem
You are about to be asked to enterinformation that will be incorporated
into your certificate request.
What you are about to enter is what iscalled a Distinguished Name or a DN.
There are quite a few fields but you canleave some blank
For some fields there will be a defaultvalue,
If you enter '.', the field will be leftblank.
-----
Country Name (2 letter code) [XX]:CN
State or Province Name (full name) []:Hebei
Locality Name (eg, city) [DefaultCity]:QinHuangdao
Organization Name (eg, company) [DefaultCompany Ltd]:Link
Organizational Unit Name (eg, section)[]:ops
Common Name (eg, your name or your server'shostname) []:ca.link.com
Email Address []:[email protected]
提供輔助文件
[root@zj06 CA]# touch index.txt
[root@zj06 CA]# echo 01 > serial
生成私鑰並且生成證書籤署請求
[root@zj06~]# mkdir -pv /etc/nginx/ssl
[root@zj06~]# cd /etc/nginx/ssl
[root@zj06 ssl]# (umask 077; openssl genrsa-out nginx.key 1024) ///生成私鑰
Generating RSA private key, 1024 bit longmodulus
....++++++
...............................++++++
e is 65537 (0x10001)
[root@zj06 ssl]# openssl req -new -keynginx.key -out nginx.csr ///生成證書請求
You are about to be asked to enterinformation that will be incorporated
into your certificate request.
What you are about to enter is what iscalled a Distinguished Name or a DN.
There are quite a few fields but you canleave some blank
For some fields there will be a defaultvalue,
If you enter '.', the field will be leftblank.
-----
Country Name (2 letter code) [XX]:CN
State or Province Name (full name)[]:Hebei
Locality Name (eg, city) [DefaultCity]:QinHuangdao
Organization Name (eg, company) [DefaultCompany Ltd]:Link
Organizational Unit Name (eg, section)[]:ops
Common Name (eg, your name or your server'shostname) []:ca.link.com
Email Address []:[email protected]
Please enter the following 'extra'attributes
to be sent with your certificate request
A challenge password []:
An optional company name []:
簽發證書
[root@zj06 ssl]# cp nginx.csr /tmp/
[root@zj06 ssl]# openssl ca -in/tmp/nginx.csr -out /etc/pki/CA/certs/nginx.crt ///根據提示連續按兩個“y”
[root@zj06 ssl]# cp/etc/pki/CA/certs/nginx.crt /etc/nginx/ssl/ ///把簽署好的證書發給請求者
修改nginx配置文件，添加支持ssl
[root@zj06 ssl]# vim /etc/nginx/nginx.conf
server {
listen 443 ssl;
server_name www2.zrs.com;
ssl_certificate /etc/nginx/ssl/nginx.crt;
ssl_certificate_key /etc/nginx/ssl/nginx.key;
ssl_session_cache shared:SSL:1m;
ssl_session_timeout 5m;
ssl_ciphers HIGH:!aNULL:!MD5;
ssl_prefer_server_ciphers on;
location / {
root html;
index index.php index.html index.htm;
}
}
客戶端測試
六、配置rewrite，即使用戶使用http協議訪問phpmyadmin的站點，最終也會使用https重新請求資源
當用戶訪問www2.zrs.com的時候自動跳轉到https://www2.zrs.com，直接用rewrite功能即可
在www2.zrs.com主機的配置文件中添加rewrite即可
客戶端測試
