71 lines
2.4 KiB
Markdown
71 lines
2.4 KiB
Markdown
#Setting up nginx for PHP-fpm
|
|
|
|
## Use flags
|
|
Recommended USE flags for nginx - put these in `/etc/portage/package.use` rather than `/etc/make.conf` to make this easier to change if need be. Recommended nginx flags:
|
|
|
|
http http-cache ipv6 pcre ssl pcre-jit
|
|
|
|
### Modules Variable
|
|
To specify the modules to compile for nginx, you can add a `NGINX_MODULES_HTTP` variable to the `make.conf` file. Some recommended flags are below:
|
|
|
|
spdy gzip_static gunzip access auth_basic charset fastcgi gzip limit_conn limit_req
|
|
proxy rewrite ssl headers_more flv mp4 upload_progress
|
|
|
|
|
|
## Mod Pagespeed
|
|
|
|
Mod Pagespeed is a google module to enable various web page optimizations on the fly. To set up the module, see the [Nginx mod_pagespeed github page](https://github.com/pagespeed/ngx_pagespeed). Skip the installing nginx part for the moment.
|
|
|
|
To compile nginx with the new module, add the following variable to `make.conf`
|
|
|
|
NGINX_ADD_MODULES="/path/to/mod_pagespeed"
|
|
|
|
You can then compile nginx with `emerge nginx`;
|
|
|
|
## Config
|
|
|
|
### FastCGI Setup
|
|
|
|
I recommend first duplicating `fastcgi.conf` in the `/etc/nginx/` folder as `php.conf`.
|
|
|
|
### Pathinfo Fix
|
|
|
|
Pathinfo isn't properly passed to php by default. To generally apply the fix, add this location block to the server blocks you want set up. The easiest setup is to use an included file for each site.
|
|
|
|
location ~ \.php {
|
|
|
|
fastcgi_split_path_info ^(.+\.php)(/.+)$;
|
|
|
|
fastcgi_param PATH_INFO $fastcgi_path_info;
|
|
fastcgi_param PATH_TRANSLATED $document_root$fastcgi_path_info;
|
|
|
|
}
|
|
|
|
|
|
### Sites
|
|
Each site should have a pattern like this
|
|
|
|
server {
|
|
listen 80;
|
|
listen 443 ssl spdy;
|
|
|
|
server_name ~^example\.com$;
|
|
keepalive_timeout 70;
|
|
|
|
ssl_certificate /path/to/ssl/certificate;
|
|
ssl_certificate_key /path/to/generated/key;
|
|
ssl_session_cache shared:SSL:10m;
|
|
ssl_session_timeout 10m;
|
|
ssl_ciphers ECDHE-RSA-AES256-SHA256:AES256-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH;
|
|
ssl_prefer_server_ciphers on;
|
|
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
|
|
|
|
root /path/to/root/dir/;
|
|
|
|
include "php.conf";
|
|
}
|
|
|
|
For non-ssl sites, the second listen line, and each line prefixed with ssl can be omitted.
|
|
|
|
#### SPDY
|
|
SPDY is essentially HTTP 2.0. It allows piplining different files into one request, and compresses HTTP headers making page loads much quicker. Firefox, Chrome, and Opera all support SPDY. The downside is that it requires SSL. For browsers that don't support SPDY, the server sends an HTTP request instead. |