1: 前言 以前debian作开发机server是apache，工作需要切换到nginx，有时候两个都要使用。作个简单的笔记。注意，本文仅仅是在debian 7（wheezy） 上。其它os有其它os的配置和安装，不能保证一致性。apache的安装配置就参考前面发的文章了。 2: 安装 nginx ph
1:前言
 以前debian作开发机server是apache，工作需要切换到nginx，有时候两个都要使用。作个简单的笔记。注意，本文仅仅是在debian 7（wheezy） 上。其它os有其它os的配置和安装，不能保证一致性。apache的安装配置就参考前面发的文章了。
2:安装 nginx  php5-cgi php5-fpm spawn-fcgi 
#apt-get install nginx nginx-full nginx-common php5-cgi php5-fpm spawn-fcgi
3:配置各个的php.ini 
可以#cd /etc/php5 里面看见，
有
/etc/php5/apache2/php.ini   
/etc/php5/cgi/php.ini 
/etc/php5/cli/php.ini 
/etc/php5/fpm/php.ini 分别对应不同的php.ini 配置
#vim /etc/php5/cgi/php.ini  去掉cgi.fix-pathinfo=1 的注释
4:配置nginx.conf
在/etc/nginx/nginx.conf
把下面的复制进去, 或者你可以对比下修改
user www-data;worker_processes 12;pid /var/run/nginx.pid;worker_rlimit_nofile 51200;events { worker_connections 30760; # multi_accept on;}http { ## # basic settings ## sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 60; types_hash_max_size 2048; client_max_body_size 80m; # server_tokens off; # server_names_hash_bucket_size 64; # server_name_in_redirect off; include /etc/nginx/mime.types; default_type application/octet-stream; ## # logging settings ## access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; fastcgi_connect_timeout 300; fastcgi_send_timeout 300; fastcgi_read_timeout 300; fastcgi_buffer_size 64k; fastcgi_buffers 4 64k; fastcgi_busy_buffers_size 128k; fastcgi_temp_file_write_size 128k; ## # gzip settings ## gzip on; gzip_disable msie6; gzip_vary on; gzip_min_length 1k; # gzip_proxied any; gzip_comp_level 2; gzip_buffers 4 16k; gzip_http_version 1.1; gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript; ## # nginx-naxsi config ## # uncomment it if you installed nginx-naxsi ## #include /etc/nginx/naxsi_core.rules; ## # nginx-passenger config ## # uncomment it if you installed nginx-passenger ## #passenger_root /usr; #passenger_ruby /usr/bin/ruby; ## # virtual host configs ## include /etc/nginx/conf.d/*.conf; include /etc/nginx/sites-enabled/*;}#mail {# # see sample authentication script at:# # http://wiki.nginx.org/imapauthenticatewithapachephpscript# # # auth_http localhost/auth.php;# # pop3_capabilities top user;# # imap_capabilities imap4rev1 uidplus;# # server {# listen localhost:110;# protocol pop3;# proxy on;# }# # server {# listen localhost:143;# protocol imap;# proxy on;# }#}
5: 配置default
在/etc/nginx/sites-available/default, 注意，下面我的配置文件写了两个 注释掉了  php5-cgi  的， 打开了php5-fpm的。 我这里用的是php5-fpm
如果你需要用spawn-fcgi，就需要php5-cgi 加########的那段。/home/www 是我的www目录。你可以对着改成你的www目录。root  /home/www 这里也是。 我打开了自动索引，autoindex这个。
# you may add here your# server {# ...# }# statements for each of your virtual hosts to this file### you should look at the following url's in order to grasp a solid understanding# of nginx configuration files in order to fully unleash the power of nginx.# http://wiki.nginx.org/pitfalls# http://wiki.nginx.org/quickstart# http://wiki.nginx.org/configuration## generally, you will want to move this file somewhere, and start with a clean# file but keep this around for reference. or just disable in sites-enabled.## please see /usr/share/doc/nginx-doc/examples/ for more detailed examples.##log_format access '$remote_addr - $remote_user [$time_local] $request ' '$status $body_bytes_sent $http_referer ' '$http_user_agent $http_x_forwarded_for';server { #listen 80; ## listen for ipv4; this line is default and implied #listen [::]:80 default_server ipv6only=on; ## listen for ipv6 root /home/www; index index.html index.htm index.php; # make site accessible from http://localhost/ server_name localhost; charset utf-8; #server_name _test1.com _test2.com _test3.com #error_page 400 /errpage/400.html; #error_page 403 /errpage/403.html; #error_page 404 /errpage/404.html; location ~ .*\.(git|jpg|jpeg|png|bmp|swf)$ { expires 1d; } location ~ .*\.(js|css)?$ { expires 1h; } location / { autoindex on; autoindex_exact_size on; autoindex_localtime on; # first attempt to serve request as file, then # as directory, then fall back to displaying a 404. try_files $uri $uri/ /index.html; # uncomment to enable naxsi on this location # include /etc/nginx/naxsi.rules } location /doc/ { alias /usr/share/doc/; autoindex on; allow 127.0.0.1; allow ::1; deny all; } # only for nginx-naxsi used with nginx-naxsi-ui : process denied requests #location /requestdenied { # proxy_pass http://127.0.0.1:8080; #} #error_page 404 /404.html; # redirect server error pages to the static page /50x.html # #error_page 500 502 503 504 /50x.html; #location = /50x.html { # root /usr/share/nginx/www; #} # pass the php scripts to fastcgi server listening on 127.0.0.1:9000 # #location ~ \.php$ { # fastcgi_split_path_info ^(.+\.php)(/.+)$; # # note: you should have cgi.fix_pathinfo = 0; in php.ini # # # with php5-cgi alone: # fastcgi_pass 127.0.0.1:9000; # # with php5-fpm: # fastcgi_pass unix:/var/run/php5-fpm.sock; # fastcgi_index index.php; # include fastcgi_params; #} location ~ \.php$ { #######with php5-cgi#################### #fastcgi_pass 127.0.0.1:9000; ######################################## #######with php5-fpm#################### fastcgi_pass unix:/var/run/php5-fpm.sock; ######################################## fastcgi_index index.php; fastcgi_param script_filename /home/www$fastcgi_script_name; include fastcgi_params; } access_log /var/log/nginx/access.log access; # deny access to .htaccess files, if apache's document root # concurs with nginx's one # #location ~ /\.ht { # deny all; #}}# another virtual host using mix of ip-, name-, and port-based configuration##server {# listen 8000;# listen somename:8080;# server_name somename alias another.alias;# root html;# index index.html index.htm;## location / {# try_files $uri $uri/ =404;# }#}# https server##server {# listen 443;# server_name localhost;## root html;# index index.html index.htm;## ssl on;# ssl_certificate cert.pem;# ssl_certificate_key cert.key;## ssl_session_timeout 5m;## ssl_protocols sslv3 tlsv1;# ssl_ciphers all:!adh:!export56:rc4+rsa:+high:+medium:+low:+sslv3:+exp;# ssl_prefer_server_ciphers on;## location / {# try_files $uri $uri/ =404;# }#}
6:启动
启动模式有几种，可以是spawn-fcgi 或者是php5-fpm  或者还是apache
如果是自启动php-fpm ,
可以通过sysv-rc-conf 工具查看是否在开机启动里面 (#apt-get install sysv-rc-conf),  默认是在的
关掉spawn-fcgi 或者php5-fpm
spawn-fcgi
#netstat -anp | grep 9000
#killall -hup php5-cgi
php5-fpm
#/etc/init.d/php5-fpm stop
如果想要spawn-fcgi 支持/etc/init.d/
开机自启动spawn-fcgi 模式
#vim /etc/rc.local 增加
/usr/bin/spawn-fcgi -a 127.0.0.1 -p 9000 -u www-data -g www-data -f /usr/bin/php5-cgi -p /var/run/fastcgi-php.pid -c 4
参数根据你机器性能来，我这里是测试机。
创建系统启动停止命令
#cd /etc/init.d/
#touch fastcgi
把下面的文件保存到刚才创建的fastcgi, 就可以支持 /etc/init.d/fastcgi start|stop|reload 等操作了
#!/bin/bash# desc: nginx php5 fastcgi(spawn-fcgi) init shell scriptprovides=php5-cgilighttpd_fcgi=/usr/bin/spawn-fcgiserver_ip=127.0.0.1server_port=9000server_user=www-dataserver_group=www-dataphp_cgi=/usr/bin/php5-cgikillall=/usr/bin/killall. /lib/lsb/init-functionscmd=$1pcgi_start(){ echo starting $provides... $lighttpd_fcgi -a $server_ip -p $server_port -u $server_user -g $server_group -f $php_cgi -c 15 -p /var/run/fastcgi-php.pid echo done.}pcgi_stop(){ echo killing $provides... $killall $provides echo done.}pcgi_restart(){ pcgi_stop pcgi_start}pcgi_status(){ status_of_proc -p /var/run/fastcgi-php.pid /usr/bin/php5-cgi php5-cgi && exit 0 || exit $?}pcgi_help(){ echo usage: $0 {start|stop|restart|status}}case ${cmd} in [ss][tt][aa][rr][tt]) pcgi_start;; [ss][tt][oo][pp]) pcgi_stop;; [rr][ee][ss][tt][aa][rr][tt]) pcgi_restart;; [ss][tt][aa][tt][uu][ss]) pcgi_status ;; *) pcgi_help ;;esac
如果要停止php5-fpm切换到spawn-fcgi
#/etc/init.d/php5-fpm stop
编辑/etc/nginx/sites-available/default 把php5-fpm
#fastcgi_pass unix:/var/run/php5-fpm.sock;  
注释掉，打开php5-fcgi 那个
fastcgi_pass 127.0.0.1:9000;
保存
重启nginx 配置
#/etc/init.d/nginx reload
查看phpinfo
如果要停止掉php5-fpm 类似，如果要关掉nginx启用apache更简单了
#/etc/init.d/nginx stop
#/etc/init.d/apache2 restart
7: 如果需要配置多个不同的项目，可以在/etc/nginx/nginx.conf 里面的 
include /etc/nginx/sites-enabled/*; 这里改成其他的子配置文件，到时根据需求方便切换。然后/etc/init.d/nginx reload 就可以了
8: 如果想要apache和nginx都同时可以工作, 这里我们让nginx走80端口, apache走8080, 修改/etc/apache/ports.conf文件, 改80为8080, 同理还要修改/etc/apache/site-available/里面的虚拟主机的端口为8080
namevirtualhost *:8080
listen 8080
重启apache即可通过xxx.xxx.xxx.xxx:8080来访问了
9: 如果nginx 和php5-fpm 搭配的时候访问php页面报502, 检查/etc/php5/fpm/pool.d/www.conf 里面的配置,
比如, 因为我的www目录授权是给的tom, 所以这里要修改. 保存后重启fpm和nginx即可.
listen.owner = tom
listen.group = tom
listen = /var/run/php5-fpm.sock;
listen.allowed_clients = 127.0.0.1
10: 如果要关掉nginx和php的版本号显示, 防止别人来嗅探对应的版本的漏洞.
nginx在http那段, 把 server_tokens off; 开启 
并且把对应的/etc/nginx/fastcgi_params  删除掉$nginx_version
fastcgi_param server_software nginx;
然后去关掉所有的php的版本, 找到php.ini(cgi的,fpm的,cli的,apache的 一共有四份不同的php.ini对应不同的)
把下面的on关闭为off 重启对应的fpm/cgi/apache 和nginx服务器就可以了.
expose_php = off
curl --head http://127.0.0.1/info.php 
会看不到nginx和php的版本信息了.