Then, issuing the certificate you will need to configure Nginx . You must save the primary, intermediate certificates and private key to a folder on the server

After that, you need to open the nginx configuration file. Usually, it is located in the following way: /etc/nginx/sites-available. As a rule, the file should be called default.

IMPORTANT!

You need to create two independent configurations for the HTTP and HTTPS protocols. A domain must address both protocols. If you do not register the connection via HTTPS, then your site will not be protected, and if it will not be registered through HTTP, the site will not open.

In the default configuration file you need to make changes. In order for your HTTPS to be present in the configuration file, you need to specify the following:

server {
 listen              443 ssl;
 server_name         www.example.com;
 ssl_certificate     etc/ssl/ctr/ca_bundle
 ssl_certificate_key etc/ssl/crt/private.key

 ...

*In this case, server_name is your existing domain (site), where both port 80 and port 443 will be referred to.

• Ca_bundle – Public server certificate. It is sent to each client connecting to the server
• Private.key – The private key should be stored in a file with limited access (permissions should allow the main nginx process to read this file).

After configuration, you must restart nginx:

systemctl restart nginx

On the Hostry website, in the services section, you can select a server with LAMP already installed, you will not need to additionally install it.

Once you have selected this option, you will need to configure a few things to get Drupal up and running.

Configuring Nginx for this CMS

The first step is to make changes to your default Nginx server configuration block to use the PHP processor. This is because we will be using the IP address to access the portal:

nano /etc/nginx/sites-available/default

You need to replace the entire contents of the file with the text shown below. Then change the IP address of the example (192.1.3.4) to the IP address of your server.

server {
    listen 80 default_server;
    listen [::]:80 default_server;

    root /var/www/html/drupal;

    index index.html index.htm index.nginx-debian.html index.php;

    server_name 192.1.3.4;

    location / {
        try_files $uri $uri/ /index.php$is_args$args;
    }

    location = /favicon.ico { log_not_found off; access_log off; }
    location = /robots.txt { log_not_found off; access_log off; allow all; }
    location ~* \.(css|gif|ico|jpeg|jpg|js|png)$ {
        expires max;
        log_not_found off;
    }

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }
}

Then, after a successful change, you can try testing:

nginx -t

Restart your Nginx so that all changes are successfully updated

systemctl restart nginx

Configuring MariaDB for Drupal

First you need to log into MariaDB

mariadb

Create a database named

CREATE DATABASE drupal;

Then you need to grant privileges to the drupal database

GRANT ALL ON drupal.* TO 'drupal'@'localhost' IDENTIFIED BY 'StrongPassword';

Then you need to update for the changes to take effect:

FLUSH PRIVILEGES;

The last step is to log out of MariaDB

\q

Installing Drupal

If you don’t have unzip installed yet, you can install it as follows:

apt install unzip

Download the latest version of Drupal from the Drupal download page

https://www.drupal.org/download

Extract the compressed file and browse to it.

unzip drupal-9.1.4.zip
cd drupal-9.1.4

Create directory /var/www/html/drupal

mkdir /var/www/html/drupal

Move all files in the current directory to /var/www/html/drupal directory

mv * /var/www/html/drupal

Go to var/www/html/drupal/sites/default directory and copy the default.settings.php config file to settings.php

cd /var/www/html/drupal/sites/default
cp default.settings.php settings.php

Set the ownership of the drupal directory for the current user and group

chown -R www-data:www-data /var/www/html/drupal/
chmod -R 755 /var/www/html/drupal/

Access the Drupal page through a browser using your IP address. For example:

http://192.1.3.4

In order to install nginx you will need to enter the following command:

# pacman -S nginx-mainline

To start Nginx after each boot you need to enter:

# systemctl enable --now nginx

Then we check the functionality of Nginx. Visit http:// YOUR-SERVER-WEB-ADDRESS-OR-IP and you will see its welcome page. (Run ip addr if you need to know, find the IP address.)

Nginx configuration files are located in/etc/nginx, and its main file is nginx.conf. The string server.location.root/usr/share/nginx/html; sets where it will search for web files

Virtual host configuration

On a web server, you can host several domain names at once and serve them with different content and in different directions. You need to create a folder in order to store the settings of your virtual host

# mkdir /etc/nginx/sites-enabled

Next, you need to create a configuration file for each virtual host; Example: /etc/nginx/sites-enabled/EXAMPLE.COM and fill it with the following configuration:

server {
    listen 80;
    server_name EXAMPLE.COM;

    location / {
        root /usr/share/nginx/YOUR-DOMAIN-NAME.com;
        index  index.html index.htm;
    }
}

At the end of the http block /etc/nginx/nginx.conf, add the following line:

include sites-enabled/*;

Then you need to restart Nginx:

# systemctl restart nginx

Requests received by Nginx, EXAMPLE.COM will be processed by /usr/share/nginx/EXAMPLE.COM

portsnap fetch extract

It usually takes a few minutes to download, and after the download is complete, you will proceed to the next step, which will be described.

Upgrade pkg

To install these ports that were recently downloaded, you need to update pgk by running the following command:

cd /usr/ports/ports-mgmt/pkg
make reinstall

Then you can already run the command to clean the directory from all temporary files:

make clean

Nginx installation

This command configures, compiles, and installs the Nginx web server

cd /usr/ports/www/nginx
make config-recursive

You will get the configuration pop up, and when you can choose the following: HTTP_GZIP_STATIC, HTTP_SSL, HTTP_DAV_EXT. It may be desirable to include other modules for compiling with Nginx. Then, install Nginx

make install

After the installation is complete, you will need to run the following to clear the directory of any files that will be created by this step:

make clean 

Configure Аutorun

To start nginx when your server boots up, edit /etc/rc.conf. You can edit this file by running ee /etc/rc.conf. Alternatively you can use nano. Nano can be installed by running pkg install nano

In /etc/rc.conf. you need to add nginx_enable = “YES” to the end of the file. Once this is done, you can proceed to the next step.

Starting Nginx

To start, enter the command:

service nginx start

If the launch was successful, you can see the output, which will be approximately the following:

Performing sanity check on nginx configuration:
nginx: the configuration file /usr/local/etc/nginx/nginx.conf syntax is ok
nginx: configuration file /usr/local/etc/nginx/nginx.conf test is successful
Starting nginx.

To make sure Nginx is configured correctly, you can go to your IP address in a web browser. Go to http://0.0.0.0 (change the IP accordingly). If successful, you will see the “Welcome to Nginx!” Page

NGINX – is Web server, which is inherent in open source. It has very powerful features that balance the load of reverse proxy and caching. Initially, it was designed to solve the problem of scaling and concurrency with existing web servers. We will consider the installation of this web server on the Ubuntu 18.04 Operating System, which is already included in the Ubuntu repository.

What you need to do

The first is to update the command

apt update

Then install the NGINX web server

apt install nginx

The configuration file will be located will be located in /etc/nginx/sites-available, indicated by the references /etc/nginx/sites-enabled/ Next you need to create a separate source file in the sites-available directory for each domain or subdomain and set up the sites-enabled link

1. Copy the default configuration file. Replace example.com with your domain name;

/etc/nginx/sites-available/default /etc/nginx/sites-available/example.com

2. On the installed web server, disable the default configuration. You must use the following direction: /etc/nginx/sites-enabled/

unlink /etc/nginx/sites-enabled/default

3. Next, open your site’s configuration file in a text editor. Replace example.com in the server_name directive with your domain name or IP address of your site.

Verification after installation

Check for errors

sudo nginx -t

Reboot

sudo nginx -s reload

Today there are many web services that are vulnerable to this Logiam attack. We will try to understand how it can be done to secure your server. We will be talking about servers with the operating system CentOS, version 6 and 7.

Specific actions

First, check to see if your server is actually vulnerable by checking Qualys SSL. If your server is vulnerable, there will be a message at the top of the page. After you confirm that the server is vulnerable, enter the NGINX installation directory

cd /etc/nginx/
mkdir keygroup
cd keygroup

Next, you need to run the following command to create a key group

openssl dhparam -out dhsecure.pem 2048

The next step is to add a new key group to your NGINX configuration

cd /etc/nginx/
vi .conf

Next, add ssl_dhparam ... a line of code that is visible below inside each SSL server block and then update all server blocks. Update all blocks of your SSL server accordingly

server {
listen 443 ssl;
...
location / {
...
ssl_dhparam /etc/nginx/keygroup/dhsecure.pem
...
}

Then a reboot of the NGINX web server should follow

service nginx reload

Finally, test the server again with SSL certificate verification

Initial stage

The first thing you should start with is backing up the old configuration and all its data. Having done this, you can use the following command

cd ~
mkdir nginx
cp -r /etc/nginx ~/nginx

Next is the removal of the Nginx web server itself

yum remove nginx

Next up is the installation of OpenSSL and all its dependencies

yum install zlib-devel pcre-devel openssl libssl-devel make gcc gcc-c++ -y

Compiling Nginx

Important! You need to use wget in order to be able to get the source code of Nginx

cd ~ wget https://nginx.org/download/nginx-1.8.0.tar.gz

Following is the unpacking of the archive

tar -xvf nginx-1.8.0.tar.gz

Next step is the assembly and installation of the Nginx web server

cd ~/nginx-1.8.0 ./configure --with-http_spdy_module --with-http_ssl_module --with-http_gzip_static_module make install

Configuring Nginx as a working service. For this, it is recommended to use a third-party script from GitHub for the init.d service

cd /etc/init.d wget https://gist.githubusercontent.com/sairam/5892520/raw/b8195a71e944d46271c8a49f2717f70bcd04bf1a/nginx chmod +x nginx

Configuring Nginx

At this point you can move the old configuration back to the folder в /etc/nginx

Web server loading

service nginx start

Nginx Configuration Editing

vi /etc/nginx/nginx.conf

In the “http” block, you need to add the following:

gzip_vary on;

gzip_proxied any;

gzip_comp_level 6;

gzip_buffers 16 8k;

gzip_http_version 1.1;

gzip_types text/plain text/css text/JavaScript;

Exit and save the file by pressing the ESC key :wq, then typing, then press Enter

Reload Nginx

service nginx reload