Robert
4 days ago
parent
c17f89bc96
commit
c405cd67aa
@ -0,0 +1,2 @@ |
||||
See file: |
||||
/var/www/mygoals/protected/docs/etc/nginx/sites-enable.txt |
||||
@ -0,0 +1 @@ |
||||
certutil -d sql:$HOME/.pki/nssdb -A -t "P,," -n "localhost" -i localhost.crt |
||||
@ -0,0 +1,26 @@ |
||||
|
||||
fastcgi_param QUERY_STRING $query_string; |
||||
fastcgi_param REQUEST_METHOD $request_method; |
||||
fastcgi_param CONTENT_TYPE $content_type; |
||||
fastcgi_param CONTENT_LENGTH $content_length; |
||||
|
||||
fastcgi_param SCRIPT_NAME $fastcgi_script_name; |
||||
fastcgi_param REQUEST_URI $request_uri; |
||||
fastcgi_param DOCUMENT_URI $document_uri; |
||||
fastcgi_param DOCUMENT_ROOT $document_root; |
||||
fastcgi_param SERVER_PROTOCOL $server_protocol; |
||||
fastcgi_param REQUEST_SCHEME $scheme; |
||||
fastcgi_param HTTPS $https if_not_empty; |
||||
|
||||
fastcgi_param GATEWAY_INTERFACE CGI/1.1; |
||||
fastcgi_param SERVER_SOFTWARE nginx/$nginx_version; |
||||
|
||||
fastcgi_param REMOTE_ADDR $remote_addr; |
||||
fastcgi_param REMOTE_PORT $remote_port; |
||||
fastcgi_param REMOTE_USER $remote_user; |
||||
fastcgi_param SERVER_ADDR $server_addr; |
||||
fastcgi_param SERVER_PORT $server_port; |
||||
fastcgi_param SERVER_NAME $server_name; |
||||
|
||||
# PHP only, required if PHP was built with --enable-force-cgi-redirect |
||||
fastcgi_param REDIRECT_STATUS 200; |
||||
@ -0,0 +1,49 @@ |
||||
[req] |
||||
default_bits = 2048 |
||||
default_keyfile = localhost.key |
||||
distinguished_name = req_distinguished_name |
||||
req_extensions = req_ext |
||||
x509_extensions = v3_ca |
||||
|
||||
[req_distinguished_name] |
||||
countryName = Country Name (2 letter code) |
||||
countryName_default = US |
||||
stateOrProvinceName = State or Province Name (full name) |
||||
stateOrProvinceName_default = OK |
||||
localityName = Locality Name (eg, city) |
||||
localityName_default = Here |
||||
organizationName = Organization Name (eg, company) |
||||
organizationName_default = localhost |
||||
organizationalUnitName = organizationalunit |
||||
organizationalUnitName_default = Development |
||||
commonName = Website Domain |
||||
commonName_default = *.home.local |
||||
commonName_max = 64 |
||||
|
||||
[req_ext] |
||||
subjectAltName = @alt_names |
||||
|
||||
[v3_ca] |
||||
subjectAltName = @alt_names |
||||
basicConstraints = critical, CA:false |
||||
keyUsage = digitalSignature, keyEncipherment |
||||
extendedKeyUsage = serverAuth |
||||
|
||||
[alt_names] |
||||
DNS.1 = *.home.local |
||||
DNS.2 = home.local |
||||
DNS.3 = localhost |
||||
IP.1 = 127.0.0.1 |
||||
IP.2 = 127.0.0.2 |
||||
IP.3 = 127.0.0.3 |
||||
IP.4 = 127.0.0.4 |
||||
IP.5 = 127.0.0.5 |
||||
IP.6 = 127.0.0.6 |
||||
IP.7 = 127.0.0.7 |
||||
IP.8 = 127.0.0.8 |
||||
IP.9 = 127.0.0.9 |
||||
IP.10 = 127.0.0.10 |
||||
IP.11 = 127.0.0.11 |
||||
IP.12 = 127.0.0.12 |
||||
IP.13 = 127.0.0.13 |
||||
|
||||
@ -0,0 +1,5 @@ |
||||
#!/bin/bash |
||||
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout localhost.key -out localhost.crt -config localhost.conf |
||||
cp localhost.crt /etc/ssl/certs/localhost.crt |
||||
cp localhost.key /etc/ssl/private/localhost.key |
||||
openssl dhparam -out /etc/ssl/certs/dhparam.pem 4096 |
||||
@ -0,0 +1,88 @@ |
||||
user www-data; |
||||
worker_processes auto; |
||||
pid /run/nginx.pid; |
||||
worker_rlimit_nofile 65535; |
||||
include /etc/nginx/modules-enabled/*.conf; |
||||
|
||||
events { |
||||
# worker_connections 768; |
||||
worker_connections 65535; |
||||
multi_accept on; |
||||
} |
||||
|
||||
http { |
||||
charset utf-8; |
||||
## |
||||
# Basic Settings |
||||
## |
||||
sendfile on; |
||||
tcp_nopush on; |
||||
tcp_nodelay on; |
||||
types_hash_max_size 2048; |
||||
server_tokens off; |
||||
|
||||
# Limits |
||||
limit_req_log_level warn; |
||||
limit_req_zone $binary_remote_addr zone=login:10m rate=10r/m; |
||||
|
||||
|
||||
## Start: Size Limits & Buffer Overflows ## |
||||
#client_body_buffer_size 1K; |
||||
#client_header_buffer_size 1k; |
||||
#client_max_body_size 1k; |
||||
#large_client_header_buffers 2 1k; |
||||
## END: Size Limits & Buffer Overflows ## |
||||
|
||||
## Start: Timeouts ## |
||||
client_body_timeout 10; |
||||
client_header_timeout 10; |
||||
keepalive_timeout 5 5; |
||||
send_timeout 10; |
||||
## End: Timeouts ## |
||||
|
||||
# server_names_hash_bucket_size 64; |
||||
# server_name_in_redirect off; |
||||
|
||||
include /etc/nginx/mime.types; |
||||
default_type application/octet-stream; |
||||
|
||||
## |
||||
# SSL Settings |
||||
## |
||||
|
||||
ssl_session_timeout 1d; |
||||
ssl_session_cache shared:SSL:10m; |
||||
ssl_session_tickets off; |
||||
ssl_protocols TLSv1.2 TLSv1.3; |
||||
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384; |
||||
|
||||
# ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3; # Dropping SSLv3, ref: POODLE |
||||
ssl_prefer_server_ciphers on; |
||||
|
||||
## |
||||
# Logging Settings |
||||
## |
||||
|
||||
access_log off; |
||||
error_log /dev/null; |
||||
|
||||
## |
||||
# Gzip Settings |
||||
## |
||||
|
||||
# gzip on; |
||||
|
||||
# gzip_vary on; |
||||
# gzip_proxied any; |
||||
# gzip_comp_level 6; |
||||
# gzip_buffers 16 8k; |
||||
# gzip_http_version 1.1; |
||||
# gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript; |
||||
|
||||
## |
||||
# Virtual Host Configs |
||||
## |
||||
|
||||
include /etc/nginx/conf.d/*.conf; |
||||
include /etc/nginx/sites-enabled/*; |
||||
} |
||||
@ -0,0 +1,41 @@ |
||||
map $http_accept_language $lang { |
||||
default en; |
||||
~de de; |
||||
#... |
||||
} |
||||
|
||||
server { |
||||
listen 80; |
||||
server_name goals.dev.local; |
||||
return 301 https://$host$request_uri; |
||||
} |
||||
server { |
||||
listen 443 ssl http2; |
||||
include snippets/self-signed.conf; |
||||
include snippets/ssl-params.conf; |
||||
|
||||
index main.page; |
||||
|
||||
error_log /var/log/nginx/goals.log warn; |
||||
access_log /var/log/nginx/access.log combined buffer=512k flush=1m; |
||||
|
||||
server_name goals.dev.local; |
||||
|
||||
set $base /var/www/mygoals; |
||||
root $base/public; |
||||
|
||||
include snippets/error-page.conf; |
||||
include snippets/scripts404.conf; |
||||
include snippets/general.conf; |
||||
|
||||
location / { |
||||
try_files $uri /main.page/$is_args$args; |
||||
} |
||||
|
||||
location /main.page { |
||||
fastcgi_pass php-fpm85; |
||||
include fastcgi_params; |
||||
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; |
||||
} |
||||
|
||||
} |
||||
@ -0,0 +1,37 @@ |
||||
# Install nginx... |
||||
|
||||
# Backup the etc/nginx folder to another folder... |
||||
$ sudo cp -r /etc/nginx/ /etc/nginx_Backups/ |
||||
|
||||
# Install PHP 8.5... and then Back it up... |
||||
$ sudo cp -r /etc/php/8.5/ /etc/php/85_Backups/ |
||||
|
||||
# Now, Copy the docs folder into the System paths... |
||||
$ sudo cp -r /var/www/mygoals/protected/docs/var/www/errors/ /var/www/errors/ |
||||
$ sudo cp /var/www/mygoals/protected/docs/etc/php/8.5/php.ini /etc/php/8.5/ |
||||
$ sudo cp /var/www/mygoals/protected/docs/etc/php/8.5/fpm/pool.d/www.conf /etc/php/8.5/pool.d/ |
||||
$ sudo cp -r /var/www/mygoals/protected/docs/etc/nginx/ /etc/nginx/ |
||||
|
||||
# Fix PERMS... |
||||
$ sudo chown -R $USER:www-data /var/www/errors |
||||
$ sudo chown -R root:root /etc/php/ |
||||
$ sudo chown -R root:root /etc/nginx/ |
||||
|
||||
# Setup goals site |
||||
$ sudo ln -s /etc/nginx/sites-available/goals /etc/nginx/sites-enabled/ |
||||
|
||||
$ cd /etc/nginx |
||||
|
||||
# If on a developers computer NOT Cloud or LIVE, then make local CERTS |
||||
$ ./make_localhost_CERTs.sh |
||||
|
||||
# Test nginx Config files for Errors first: |
||||
$ nginx -t |
||||
|
||||
$ sudo service nginx status |
||||
# start or restart |
||||
$ sudo service nginx start |
||||
|
||||
$ sudo service php8.5-fpm status |
||||
# start or restart |
||||
$ sudo service php8.5-fpm start |
||||
@ -0,0 +1,14 @@ |
||||
error_page 404 /errors/html/$lang/404.html; |
||||
error_page 403 /errors/html/$lang/forbidden.html; |
||||
error_page 500 502 503 504 /errors/html/$lang/50x.html; |
||||
location /errors/ { |
||||
alias /var/www/errors/; |
||||
allow all; |
||||
internal; # Only Intrenal Errors can use this |
||||
} |
||||
location ~ ^/error_images/.*\.(jpg|jpeg|png|gif)$ { |
||||
root /var/www/errors/; |
||||
expires 30d; # Cache the image for 30 days |
||||
autoindex off; |
||||
# access_log /var/log/nginx/404_errors_access.log; |
||||
} |
||||
@ -0,0 +1,27 @@ |
||||
# favicon.ico |
||||
location = /favicon.ico { |
||||
log_not_found off; |
||||
} |
||||
|
||||
# robots.txt |
||||
location = /robots.txt { |
||||
log_not_found off; |
||||
} |
||||
|
||||
# assets, media |
||||
location ~* \.(?:css(\.map)?|js(\.map)?|jpe?g|png|gif|ico|cur|heic|webp|tiff?|mp3|m4a|aac|ogg|midi?|wav|mp4|mov|webm|mpe?g|avi|ogv|flv|wmv)$ { |
||||
expires 7d; |
||||
} |
||||
|
||||
# svg, fonts |
||||
location ~* \.(?:svgz?|ttf|ttc|otf|eot|woff2?)$ { |
||||
add_header Access-Control-Allow-Origin "*"; |
||||
expires 7d; |
||||
} |
||||
|
||||
# gzip |
||||
gzip on; |
||||
gzip_vary on; |
||||
gzip_proxied any; |
||||
gzip_comp_level 6; |
||||
gzip_types text/plain text/css text/xml application/json application/javascript application/rss+xml application/atom+xml image/svg+xml; |
||||
@ -0,0 +1,3 @@ |
||||
location ~ \.(asp|aspx|axd|asx|asmx|ashx|cfm|cs|kt|flash|yaws|swf|xhtml|htm|jhtml|java|jsp|wss|do|action|perl|pl|php|php5|php7|php8|php9|phtml|php3|php4|python|py|ruby|rb|rhtml|ssi|shtml|ts|c|cpp|cgi|dll|so)$ { |
||||
return 404; |
||||
} |
||||
@ -0,0 +1,4 @@ |
||||
ssl_certificate /etc/ssl/certs/localhost.crt; |
||||
#/etc/ssl/certs/nginx-selfsigned.crt; |
||||
ssl_certificate_key /etc/ssl/private/localhost.key; |
||||
#/etc/ssl/private/nginx-selfsigned.key; |
||||
@ -0,0 +1,24 @@ |
||||
# from https://cipherli.st/ |
||||
# and https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html |
||||
# https://ssl-config.mozilla.org & https://observatory.mozilla.org |
||||
# https://securityheaders.com |
||||
# TLSv1.2 |
||||
ssl_protocols TLSv1.3; # Requires nginx >= 1.13.0 else use TLSv1.2 |
||||
ssl_prefer_server_ciphers off; |
||||
#ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384; |
||||
#ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0 |
||||
ssl_session_cache shared:SSL:10m; |
||||
ssl_session_tickets off; |
||||
ssl_stapling off; # Turn on Prod systems |
||||
ssl_stapling_verify off; |
||||
resolver 127.0.0.1 valid=300s; |
||||
resolver_timeout 5s; |
||||
# Disable preloading HSTS for now. You can use the commented out header line that includes |
||||
# the "preload" directive if you understand the implications. |
||||
#add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"; |
||||
#add_header Strict-Transport-Security "max-age=63072000; includeSubdomains" always; |
||||
|
||||
ssl_dhparam /etc/ssl/certs/dhparam.pem; |
||||
|
||||
# IMPORTANT: disable HSTS in dev (or explicitly clear it) |
||||
add_header Strict-Transport-Security "max-age=0" always; |
||||
@ -0,0 +1,491 @@ |
||||
; Start a new pool named 'www'. |
||||
; the variable $pool can be used in any directive and will be replaced by the |
||||
; pool name ('www' here) |
||||
[www] |
||||
|
||||
; Per pool prefix |
||||
; It only applies on the following directives: |
||||
; - 'access.log' |
||||
; - 'slowlog' |
||||
; - 'listen' (unixsocket) |
||||
; - 'chroot' |
||||
; - 'chdir' |
||||
; - 'php_values' |
||||
; - 'php_admin_values' |
||||
; When not set, the global prefix (or /usr) applies instead. |
||||
; Note: This directive can also be relative to the global prefix. |
||||
; Default Value: none |
||||
;prefix = /path/to/pools/$pool |
||||
|
||||
; Unix user/group of the child processes. This can be used only if the master |
||||
; process running user is root. It is set after the child process is created. |
||||
; The user and group can be specified either by their name or by their numeric |
||||
; IDs. |
||||
; Note: If the user is root, the executable needs to be started with |
||||
; --allow-to-run-as-root option to work. |
||||
; Default Values: The user is set to master process running user by default. |
||||
; If the group is not set, the user's group is used. |
||||
user = www-data |
||||
group = www-data |
||||
|
||||
; The address on which to accept FastCGI requests. |
||||
; Valid syntaxes are: |
||||
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on |
||||
; a specific port; |
||||
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on |
||||
; a specific port; |
||||
; 'port' - to listen on a TCP socket to all addresses |
||||
; (IPv6 and IPv4-mapped) on a specific port; |
||||
; '/path/to/unix/socket' - to listen on a unix socket. |
||||
; Note: This value is mandatory. |
||||
listen = /run/php/php8.5-fpm.sock |
||||
|
||||
; Set listen(2) backlog. |
||||
; Default Value: 511 (-1 on Linux, FreeBSD and OpenBSD) |
||||
;listen.backlog = 511 |
||||
|
||||
; Set permissions for unix socket, if one is used. In Linux, read/write |
||||
; permissions must be set in order to allow connections from a web server. Many |
||||
; BSD-derived systems allow connections regardless of permissions. The owner |
||||
; and group can be specified either by name or by their numeric IDs. |
||||
; Default Values: Owner is set to the master process running user. If the group |
||||
; is not set, the owner's group is used. Mode is set to 0660. |
||||
listen.owner = www-data |
||||
listen.group = www-data |
||||
;listen.mode = 0660 |
||||
|
||||
; When POSIX Access Control Lists are supported you can set them using |
||||
; these options, value is a comma separated list of user/group names. |
||||
; When set, listen.owner and listen.group are ignored |
||||
;listen.acl_users = |
||||
;listen.acl_groups = |
||||
|
||||
; List of addresses (IPv4/IPv6) of FastCGI clients which are allowed to connect. |
||||
; Equivalent to the FCGI_WEB_SERVER_ADDRS environment variable in the original |
||||
; PHP FCGI (5.2.2+). Makes sense only with a tcp listening socket. Each address |
||||
; must be separated by a comma. If this value is left blank, connections will be |
||||
; accepted from any ip address. |
||||
; Default Value: any |
||||
;listen.allowed_clients = 127.0.0.1 |
||||
|
||||
; Set the associated the route table (FIB). FreeBSD only |
||||
; Default Value: -1 |
||||
;listen.setfib = 1 |
||||
|
||||
; Specify the nice(2) priority to apply to the pool processes (only if set) |
||||
; The value can vary from -19 (highest priority) to 20 (lower priority) |
||||
; Note: - It will only work if the FPM master process is launched as root |
||||
; - The pool processes will inherit the master process priority |
||||
; unless it specified otherwise |
||||
; Default Value: no set |
||||
; process.priority = -19 |
||||
|
||||
; Set the process dumpable flag (PR_SET_DUMPABLE prctl for Linux or |
||||
; PROC_TRACE_CTL procctl for FreeBSD) even if the process user |
||||
; or group is different than the master process user. It allows to create process |
||||
; core dump and ptrace the process for the pool user. |
||||
; Default Value: no |
||||
; process.dumpable = yes |
||||
|
||||
; Choose how the process manager will control the number of child processes. |
||||
; Possible Values: |
||||
; static - a fixed number (pm.max_children) of child processes; |
||||
; dynamic - the number of child processes are set dynamically based on the |
||||
; following directives. With this process management, there will be |
||||
; always at least 1 children. |
||||
; pm.max_children - the maximum number of children that can |
||||
; be alive at the same time. |
||||
; pm.start_servers - the number of children created on startup. |
||||
; pm.min_spare_servers - the minimum number of children in 'idle' |
||||
; state (waiting to process). If the number |
||||
; of 'idle' processes is less than this |
||||
; number then some children will be created. |
||||
; pm.max_spare_servers - the maximum number of children in 'idle' |
||||
; state (waiting to process). If the number |
||||
; of 'idle' processes is greater than this |
||||
; number then some children will be killed. |
||||
; pm.max_spawn_rate - the maximum number of rate to spawn child |
||||
; processes at once. |
||||
; ondemand - no children are created at startup. Children will be forked when |
||||
; new requests will connect. The following parameter are used: |
||||
; pm.max_children - the maximum number of children that |
||||
; can be alive at the same time. |
||||
; pm.process_idle_timeout - The number of seconds after which |
||||
; an idle process will be killed. |
||||
; Note: This value is mandatory. |
||||
pm = dynamic |
||||
|
||||
; The number of child processes to be created when pm is set to 'static' and the |
||||
; maximum number of child processes when pm is set to 'dynamic' or 'ondemand'. |
||||
; This value sets the limit on the number of simultaneous requests that will be |
||||
; served. Equivalent to the ApacheMaxClients directive with mpm_prefork. |
||||
; Equivalent to the PHP_FCGI_CHILDREN environment variable in the original PHP |
||||
; CGI. The below defaults are based on a server without much resources. Don't |
||||
; forget to tweak pm.* to fit your needs. |
||||
; Note: Used when pm is set to 'static', 'dynamic' or 'ondemand' |
||||
; Note: This value is mandatory. |
||||
pm.max_children = 5 |
||||
|
||||
; The number of child processes created on startup. |
||||
; Note: Used only when pm is set to 'dynamic' |
||||
; Default Value: (min_spare_servers + max_spare_servers) / 2 |
||||
pm.start_servers = 2 |
||||
|
||||
; The desired minimum number of idle server processes. |
||||
; Note: Used only when pm is set to 'dynamic' |
||||
; Note: Mandatory when pm is set to 'dynamic' |
||||
pm.min_spare_servers = 1 |
||||
|
||||
; The desired maximum number of idle server processes. |
||||
; Note: Used only when pm is set to 'dynamic' |
||||
; Note: Mandatory when pm is set to 'dynamic' |
||||
pm.max_spare_servers = 3 |
||||
|
||||
; The number of rate to spawn child processes at once. |
||||
; Note: Used only when pm is set to 'dynamic' |
||||
; Note: Mandatory when pm is set to 'dynamic' |
||||
; Default Value: 32 |
||||
;pm.max_spawn_rate = 32 |
||||
|
||||
; The number of seconds after which an idle process will be killed. |
||||
; Note: Used only when pm is set to 'ondemand' |
||||
; Default Value: 10s |
||||
;pm.process_idle_timeout = 10s; |
||||
|
||||
; The number of requests each child process should execute before respawning. |
||||
; This can be useful to work around memory leaks in 3rd party libraries. For |
||||
; endless request processing specify '0'. Equivalent to PHP_FCGI_MAX_REQUESTS. |
||||
; Default Value: 0 |
||||
;pm.max_requests = 500 |
||||
|
||||
; The URI to view the FPM status page. If this value is not set, no URI will be |
||||
; recognized as a status page. It shows the following information: |
||||
; pool - the name of the pool; |
||||
; process manager - static, dynamic or ondemand; |
||||
; start time - the date and time FPM has started; |
||||
; start since - number of seconds since FPM has started; |
||||
; accepted conn - the number of request accepted by the pool; |
||||
; listen queue - the number of request in the queue of pending |
||||
; connections (see backlog in listen(2)); |
||||
; max listen queue - the maximum number of requests in the queue |
||||
; of pending connections since FPM has started; |
||||
; listen queue len - the size of the socket queue of pending connections; |
||||
; idle processes - the number of idle processes; |
||||
; active processes - the number of active processes; |
||||
; total processes - the number of idle + active processes; |
||||
; max active processes - the maximum number of active processes since FPM |
||||
; has started; |
||||
; max children reached - number of times, the process limit has been reached, |
||||
; when pm tries to start more children (works only for |
||||
; pm 'dynamic' and 'ondemand'); |
||||
; Value are updated in real time. |
||||
; Example output: |
||||
; pool: www |
||||
; process manager: static |
||||
; start time: 01/Jul/2011:17:53:49 +0200 |
||||
; start since: 62636 |
||||
; accepted conn: 190460 |
||||
; listen queue: 0 |
||||
; max listen queue: 1 |
||||
; listen queue len: 42 |
||||
; idle processes: 4 |
||||
; active processes: 11 |
||||
; total processes: 15 |
||||
; max active processes: 12 |
||||
; max children reached: 0 |
||||
; |
||||
; By default the status page output is formatted as text/plain. Passing either |
||||
; 'html', 'xml' or 'json' in the query string will return the corresponding |
||||
; output syntax. Example: |
||||
; http://www.foo.bar/status |
||||
; http://www.foo.bar/status?json |
||||
; http://www.foo.bar/status?html |
||||
; http://www.foo.bar/status?xml |
||||
; |
||||
; By default the status page only outputs short status. Passing 'full' in the |
||||
; query string will also return status for each pool process. |
||||
; Example: |
||||
; http://www.foo.bar/status?full |
||||
; http://www.foo.bar/status?json&full |
||||
; http://www.foo.bar/status?html&full |
||||
; http://www.foo.bar/status?xml&full |
||||
; The Full status returns for each process: |
||||
; pid - the PID of the process; |
||||
; state - the state of the process (Idle, Running, ...); |
||||
; start time - the date and time the process has started; |
||||
; start since - the number of seconds since the process has started; |
||||
; requests - the number of requests the process has served; |
||||
; request duration - the duration in µs of the requests; |
||||
; request method - the request method (GET, POST, ...); |
||||
; request URI - the request URI with the query string; |
||||
; content length - the content length of the request (only with POST); |
||||
; user - the user (PHP_AUTH_USER) (or '-' if not set); |
||||
; script - the main script called (or '-' if not set); |
||||
; last request cpu - the %cpu the last request consumed |
||||
; it's always 0 if the process is not in Idle state |
||||
; because CPU calculation is done when the request |
||||
; processing has terminated; |
||||
; last request memory - the max amount of memory the last request consumed |
||||
; it's always 0 if the process is not in Idle state |
||||
; because memory calculation is done when the request |
||||
; processing has terminated; |
||||
; If the process is in Idle state, then information is related to the |
||||
; last request the process has served. Otherwise information is related to |
||||
; the current request being served. |
||||
; Example output: |
||||
; ************************ |
||||
; pid: 31330 |
||||
; state: Running |
||||
; start time: 01/Jul/2011:17:53:49 +0200 |
||||
; start since: 63087 |
||||
; requests: 12808 |
||||
; request duration: 1250261 |
||||
; request method: GET |
||||
; request URI: /test_mem.php?N=10000 |
||||
; content length: 0 |
||||
; user: - |
||||
; script: /home/fat/web/docs/php/test_mem.php |
||||
; last request cpu: 0.00 |
||||
; last request memory: 0 |
||||
; |
||||
; Note: There is a real-time FPM status monitoring sample web page available |
||||
; It's available in: /usr/share/php/8.5/fpm/status.html |
||||
; |
||||
; Note: The value must start with a leading slash (/). The value can be |
||||
; anything, but it may not be a good idea to use the .php extension or it |
||||
; may conflict with a real PHP file. |
||||
; Default Value: not set |
||||
;pm.status_path = /status |
||||
|
||||
; The address on which to accept FastCGI status request. This creates a new |
||||
; invisible pool that can handle requests independently. This is useful |
||||
; if the main pool is busy with long running requests because it is still possible |
||||
; to get the status before finishing the long running requests. |
||||
; |
||||
; Valid syntaxes are: |
||||
; 'ip.add.re.ss:port' - to listen on a TCP socket to a specific IPv4 address on |
||||
; a specific port; |
||||
; '[ip:6:addr:ess]:port' - to listen on a TCP socket to a specific IPv6 address on |
||||
; a specific port; |
||||
; 'port' - to listen on a TCP socket to all addresses |
||||
; (IPv6 and IPv4-mapped) on a specific port; |
||||
; '/path/to/unix/socket' - to listen on a unix socket. |
||||
; Default Value: value of the listen option |
||||
;pm.status_listen = 127.0.0.1:9001 |
||||
|
||||
; The ping URI to call the monitoring page of FPM. If this value is not set, no |
||||
; URI will be recognized as a ping page. This could be used to test from outside |
||||
; that FPM is alive and responding, or to |
||||
; - create a graph of FPM availability (rrd or such); |
||||
; - remove a server from a group if it is not responding (load balancing); |
||||
; - trigger alerts for the operating team (24/7). |
||||
; Note: The value must start with a leading slash (/). The value can be |
||||
; anything, but it may not be a good idea to use the .php extension or it |
||||
; may conflict with a real PHP file. |
||||
; Default Value: not set |
||||
;ping.path = /ping |
||||
|
||||
; This directive may be used to customize the response of a ping request. The |
||||
; response is formatted as text/plain with a 200 response code. |
||||
; Default Value: pong |
||||
;ping.response = pong |
||||
|
||||
; The access log file |
||||
; Default: not set |
||||
;access.log = log/$pool.access.log |
||||
|
||||
; The access log format. |
||||
; The following syntax is allowed |
||||
; %%: the '%' character |
||||
; %C: %CPU used by the request |
||||
; it can accept the following format: |
||||
; - %{user}C for user CPU only |
||||
; - %{system}C for system CPU only |
||||
; - %{total}C for user + system CPU (default) |
||||
; %d: time taken to serve the request |
||||
; it can accept the following format: |
||||
; - %{seconds}d (default) |
||||
; - %{milliseconds}d |
||||
; - %{milli}d |
||||
; - %{microseconds}d |
||||
; - %{micro}d |
||||
; %e: an environment variable (same as $_ENV or $_SERVER) |
||||
; it must be associated with embraces to specify the name of the env |
||||
; variable. Some examples: |
||||
; - server specifics like: %{REQUEST_METHOD}e or %{SERVER_PROTOCOL}e |
||||
; - HTTP headers like: %{HTTP_HOST}e or %{HTTP_USER_AGENT}e |
||||
; %f: script filename |
||||
; %l: content-length of the request (for POST request only) |
||||
; %m: request method |
||||
; %M: peak of memory allocated by PHP |
||||
; it can accept the following format: |
||||
; - %{bytes}M (default) |
||||
; - %{kilobytes}M |
||||
; - %{kilo}M |
||||
; - %{megabytes}M |
||||
; - %{mega}M |
||||
; %n: pool name |
||||
; %o: output header |
||||
; it must be associated with embraces to specify the name of the header: |
||||
; - %{Content-Type}o |
||||
; - %{X-Powered-By}o |
||||
; - %{Transfert-Encoding}o |
||||
; - .... |
||||
; %p: PID of the child that serviced the request |
||||
; %P: PID of the parent of the child that serviced the request |
||||
; %q: the query string |
||||
; %Q: the '?' character if query string exists |
||||
; %r: the request URI (without the query string, see %q and %Q) |
||||
; %R: remote IP address |
||||
; %s: status (response code) |
||||
; %t: server time the request was received |
||||
; it can accept a strftime(3) format: |
||||
; %d/%b/%Y:%H:%M:%S %z (default) |
||||
; The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag |
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t |
||||
; %T: time the log has been written (the request has finished) |
||||
; it can accept a strftime(3) format: |
||||
; %d/%b/%Y:%H:%M:%S %z (default) |
||||
; The strftime(3) format must be encapsulated in a %{<strftime_format>}t tag |
||||
; e.g. for a ISO8601 formatted timestring, use: %{%Y-%m-%dT%H:%M:%S%z}t |
||||
; %u: basic auth user if specified in Authorization header |
||||
; |
||||
; Default: "%R - %u %t \"%m %r\" %s" |
||||
;access.format = "%R - %u %t \"%m %r%Q%q\" %s %f %{milli}d %{kilo}M %C%%" |
||||
|
||||
; A list of request_uri values which should be filtered from the access log. |
||||
; |
||||
; As a security precaution, this setting will be ignored if: |
||||
; - the request method is not GET or HEAD; or |
||||
; - there is a request body; or |
||||
; - there are query parameters; or |
||||
; - the response code is outwith the successful range of 200 to 299 |
||||
; |
||||
; Note: The paths are matched against the output of the access.format tag "%r". |
||||
; On common configurations, this may look more like SCRIPT_NAME than the |
||||
; expected pre-rewrite URI. |
||||
; |
||||
; Default Value: not set |
||||
;access.suppress_path[] = /ping |
||||
;access.suppress_path[] = /health_check.php |
||||
|
||||
; The log file for slow requests |
||||
; Default Value: not set |
||||
; Note: slowlog is mandatory if request_slowlog_timeout is set |
||||
;slowlog = log/$pool.log.slow |
||||
|
||||
; The timeout for serving a single request after which a PHP backtrace will be |
||||
; dumped to the 'slowlog' file. A value of '0s' means 'off'. |
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) |
||||
; Default Value: 0 |
||||
;request_slowlog_timeout = 0 |
||||
|
||||
; Depth of slow log stack trace. |
||||
; Default Value: 20 |
||||
;request_slowlog_trace_depth = 20 |
||||
|
||||
; The timeout for serving a single request after which the worker process will |
||||
; be killed. This option should be used when the 'max_execution_time' ini option |
||||
; does not stop script execution for some reason. A value of '0' means 'off'. |
||||
; Available units: s(econds)(default), m(inutes), h(ours), or d(ays) |
||||
; Default Value: 0 |
||||
;request_terminate_timeout = 0 |
||||
|
||||
; The timeout set by 'request_terminate_timeout' ini option is not engaged after |
||||
; application calls 'fastcgi_finish_request' or when application has finished and |
||||
; shutdown functions are being called (registered via register_shutdown_function). |
||||
; This option will enable timeout limit to be applied unconditionally |
||||
; even in such cases. |
||||
; Default Value: no |
||||
;request_terminate_timeout_track_finished = no |
||||
|
||||
; Set open file descriptor rlimit. |
||||
; Default Value: system defined value |
||||
;rlimit_files = 1024 |
||||
|
||||
; Set max core size rlimit. |
||||
; Possible Values: 'unlimited' or an integer greater or equal to 0 |
||||
; Default Value: system defined value |
||||
;rlimit_core = 0 |
||||
|
||||
; Chroot to this directory at the start. This value must be defined as an |
||||
; absolute path. When this value is not set, chroot is not used. |
||||
; Note: you can prefix with '$prefix' to chroot to the pool prefix or one |
||||
; of its subdirectories. If the pool prefix is not set, the global prefix |
||||
; will be used instead. |
||||
; Note: chrooting is a great security feature and should be used whenever |
||||
; possible. However, all PHP paths will be relative to the chroot |
||||
; (error_log, sessions.save_path, ...). |
||||
; Default Value: not set |
||||
;chroot = |
||||
|
||||
; Chdir to this directory at the start. |
||||
; Note: relative path can be used. |
||||
; Default Value: current directory or / when chroot |
||||
;chdir = /var/www |
||||
|
||||
; Redirect worker stdout and stderr into main error log. If not set, stdout and |
||||
; stderr will be redirected to /dev/null according to FastCGI specs. |
||||
; Note: on highloaded environment, this can cause some delay in the page |
||||
; process time (several ms). |
||||
; Default Value: no |
||||
;catch_workers_output = yes |
||||
|
||||
; Decorate worker output with prefix and suffix containing information about |
||||
; the child that writes to the log and if stdout or stderr is used as well as |
||||
; log level and time. This options is used only if catch_workers_output is yes. |
||||
; Settings to "no" will output data as written to the stdout or stderr. |
||||
; Default value: yes |
||||
;decorate_workers_output = no |
||||
|
||||
; Clear environment in FPM workers |
||||
; Prevents arbitrary environment variables from reaching FPM worker processes |
||||
; by clearing the environment in workers before env vars specified in this |
||||
; pool configuration are added. |
||||
; Setting to "no" will make all environment variables available to PHP code |
||||
; via getenv(), $_ENV and $_SERVER. |
||||
; Default Value: yes |
||||
;clear_env = no |
||||
|
||||
; Limits the extensions of the main script FPM will allow to parse. This can |
||||
; prevent configuration mistakes on the web server side. You should only limit |
||||
; FPM to .php extensions to prevent malicious users to use other extensions to |
||||
; execute php code. |
||||
; Note: set an empty value to allow all extensions. |
||||
; Default Value: .php |
||||
;security.limit_extensions = .php .php3 .php4 .php5 .php7 |
||||
|
||||
security.limit_extensions = .page .php |
||||
|
||||
; Pass environment variables like LD_LIBRARY_PATH. All $VARIABLEs are taken from |
||||
; the current environment. |
||||
; Default Value: clean env |
||||
;env[HOSTNAME] = $HOSTNAME |
||||
;env[PATH] = /usr/local/bin:/usr/bin:/bin |
||||
;env[TMP] = /tmp |
||||
;env[TMPDIR] = /tmp |
||||
;env[TEMP] = /tmp |
||||
|
||||
; Additional php.ini defines, specific to this pool of workers. These settings |
||||
; overwrite the values previously defined in the php.ini. The directives are the |
||||
; same as the PHP SAPI: |
||||
; php_value/php_flag - you can set classic ini defines which can |
||||
; be overwritten from PHP call 'ini_set'. |
||||
; php_admin_value/php_admin_flag - these directives won't be overwritten by |
||||
; PHP call 'ini_set' |
||||
; For php_*flag, valid values are on, off, 1, 0, true, false, yes or no. |
||||
|
||||
; Defining 'extension' will load the corresponding shared extension from |
||||
; extension_dir. Defining 'disable_functions' will not overwrite previously |
||||
; defined php.ini values, but will append the new value instead. |
||||
|
||||
; Note: path INI options can be relative and will be expanded with the prefix |
||||
; (pool, global or /usr) |
||||
|
||||
; Default Value: nothing is defined by default except the values in php.ini and |
||||
; specified at startup with the -d argument |
||||
;php_admin_value[sendmail_path] = /usr/sbin/sendmail -t -i -f www@my.domain.com |
||||
;php_flag[display_errors] = off |
||||
;php_admin_value[error_log] = /var/log/fpm-php.www.log |
||||
;php_admin_flag[log_errors] = on |
||||
;php_admin_value[memory_limit] = 32M |
||||
File diff suppressed because it is too large
Load Diff
|
After Width: | Height: | Size: 37 KiB |
@ -0,0 +1,30 @@ |
||||
<html lang="en"> |
||||
<head> |
||||
<meta charset="utf-8"> |
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0"> |
||||
<meta name="language" content="english"> |
||||
<meta name="robots" content="no-follow"> |
||||
<title>404 Page not found!</title> |
||||
<style> |
||||
@media only screen and (max-width: 600px) { |
||||
#nopage { |
||||
height: 150px; |
||||
width: 300px; |
||||
} |
||||
} |
||||
@media only screen and (min-width: 600px) { |
||||
#nopage { |
||||
height: 500px; |
||||
width: 1500px; |
||||
} |
||||
} |
||||
</style> |
||||
</head> |
||||
<body> |
||||
<div id="wrap"> |
||||
<img src="/error_images/404page.jpg" alt="404 Error Page not found." id="nopage"/> |
||||
<header><h1>404 Page not found!<h1></header> |
||||
<h3>Our apologies for the temporary inconvenience.</h3> |
||||
</div> |
||||
</body> |
||||
</html> |
||||
@ -0,0 +1 @@ |
||||
50x Server Error...Sorry, we had a processing error on our end. |
||||
@ -0,0 +1 @@ |
||||
Dude, get out.... |
||||
@ -0,0 +1,43 @@ |
||||
<?php |
||||
|
||||
declare(strict_types=1); |
||||
|
||||
/** |
||||
* @author Robert Strutts |
||||
* @copyright (c) 2026, Robert Strutts |
||||
* @license MIT |
||||
*/ |
||||
|
||||
namespace IOcornerstone; |
||||
|
||||
use IOcornerstone\Framework\Configure; |
||||
|
||||
enum ErrorCodes: int |
||||
{ |
||||
case DB_Connection_Error = 1000; |
||||
|
||||
public static function getErrorCodeFor( |
||||
ErrorCodes $codeNumber, |
||||
\Throwable $err, |
||||
bool $throwMe = false, |
||||
// bool $logAlert = true, |
||||
): string |
||||
{ |
||||
$live = (Configure::get('IOcornerstone', 'live')) ?? true; |
||||
|
||||
$returnMessage = match ($live) { |
||||
true => "Error Code# " . $codeNumber->value, |
||||
false => "[".$codeNumber->name . "]; Code# " . $codeNumber->value . PHP_EOL . "Error Message: " . $err->getMessage(), |
||||
default => "UnKnown Error", |
||||
}; |
||||
|
||||
if ($throwMe) { |
||||
Throw new \Exception( |
||||
"[" . $codeNumber->name . "]; " . $err->getMessage(), |
||||
$codeNumber->value |
||||
); |
||||
} |
||||
|
||||
return $returnMessage; |
||||
} |
||||
} |
||||
@ -0,0 +1,16 @@ |
||||
<?php |
||||
|
||||
declare(strict_types=1); |
||||
|
||||
/** |
||||
* @author Robert Strutts |
||||
* @copyright (c) 2026, Robert Strutts |
||||
* @license MIT |
||||
*/ |
||||
|
||||
|
||||
use IOcornerstone\Framework\Configure as Config; |
||||
|
||||
Config::set('html_purifier', [ |
||||
"enable_file_caching" => false |
||||
]); |
||||
@ -0,0 +1,17 @@ |
||||
<?php |
||||
|
||||
declare(strict_types=1); |
||||
|
||||
/** |
||||
* @author Robert Strutts |
||||
* @copyright (c) 2026, Robert Strutts |
||||
* @license MIT |
||||
*/ |
||||
|
||||
use IOcornerstone\Framework\Configure as Config; |
||||
|
||||
Config::set('security', [ |
||||
'max_last_login_age' => 172800, // 2 Days Login |
||||
'max_token_age' => 7200, // 2 Hours |
||||
'token_life' => 7300, |
||||
]); |
||||
@ -0,0 +1,20 @@ |
||||
<?php |
||||
|
||||
declare(strict_types=1); |
||||
|
||||
/** |
||||
* @author Robert Strutts |
||||
* @copyright (c) 2026, Robert Strutts |
||||
* @license MIT |
||||
*/ |
||||
|
||||
use IOcornerstone\Framework\Registry as Reg; |
||||
use IOcornerstone\Framework\Configure as Config; |
||||
|
||||
Reg::get('di')->register('html_filter', function() { |
||||
|
||||
$use_file_cache = Config::get('html_purifier', "enable_file_caching") ?? false; |
||||
return new IOcornerstone\Framework\Services\HtmlFilter( |
||||
$use_file_cache |
||||
); |
||||
}); |
||||
@ -0,0 +1,15 @@ |
||||
<?php |
||||
|
||||
declare(strict_types=1); |
||||
|
||||
/** |
||||
* @author Robert Strutts |
||||
* @copyright (c) 2026, Robert Strutts |
||||
* @license MIT |
||||
*/ |
||||
|
||||
?> |
||||
|
||||
<h1><?= $html->getHeader(); ?></h1>
|
||||
|
||||
<p>Thanks, for using the StickingToGoals.com site. I hope you enjoyed your stay...</p> |
||||
|
After Width: | Height: | Size: 37 KiB |
Loading…
Reference in new issue