Skip to content

Commit 9ef23a0

Browse files
shmilylbelvashmilylbelva
committed
Initial commit
dnmp
0 parents  commit 9ef23a0

31 files changed

Lines changed: 3295 additions & 0 deletions

‎.gitignore‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,2 @@
1+
.*
2+
!.gitignore

‎LICENSE‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
MIT License
2+
3+
Copyright (c) 2017 Gary Meng
4+
5+
Permission is hereby granted, free of charge, to any person obtaining a copy
6+
of this software and associated documentation files (the "Software"), to deal
7+
in the Software without restriction, including without limitation the rights
8+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9+
copies of the Software, and to permit persons to whom the Software is
10+
furnished to do so, subject to the following conditions:
11+
12+
The above copyright notice and this permission notice shall be included in all
13+
copies or substantial portions of the Software.
14+
15+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21+
SOFTWARE.

‎README.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
# dnmp

‎conf/conf.d/certs/site2/gencert.sh‎

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
#!/bin/sh
2+
3+
# create self-signed server certificate:
4+
5+
read -p "Enter your domain [www.example.com]: " DOMAIN
6+
7+
echo "Create server key..."
8+
9+
openssl genrsa -des3 -out $DOMAIN.key 1024
10+
11+
echo "Create server certificate signing request..."
12+
13+
SUBJECT="/C=US/ST=Mars/L=iTranswarp/O=iTranswarp/OU=iTranswarp/CN=$DOMAIN"
14+
15+
openssl req -new -subj $SUBJECT -key $DOMAIN.key -out $DOMAIN.csr
16+
17+
echo "Remove password..."
18+
19+
mv $DOMAIN.key $DOMAIN.origin.key
20+
openssl rsa -in $DOMAIN.origin.key -out $DOMAIN.key
21+
22+
echo "Sign SSL certificate..."
23+
24+
openssl x509 -req -days 3650 -in $DOMAIN.csr -signkey $DOMAIN.key -out $DOMAIN.crt
25+
26+
echo "Done!"

‎conf/conf.d/certs/site2/www.site2.com.crt‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
-----BEGIN CERTIFICATE-----
2+
MIICXTCCAcYCCQDUfCsIlxsBEjANBgkqhkiG9w0BAQsFADBzMQswCQYDVQQGEwJV
3+
UzENMAsGA1UECAwETWFyczETMBEGA1UEBwwKaVRyYW5zd2FycDETMBEGA1UECgwK
4+
aVRyYW5zd2FycDETMBEGA1UECwwKaVRyYW5zd2FycDEWMBQGA1UEAwwNd3d3LnNp
5+
dGUyLmNvbTAeFw0xNzA0MjYwNzQ4NDBaFw0yNzA0MjQwNzQ4NDBaMHMxCzAJBgNV
6+
BAYTAlVTMQ0wCwYDVQQIDARNYXJzMRMwEQYDVQQHDAppVHJhbnN3YXJwMRMwEQYD
7+
VQQKDAppVHJhbnN3YXJwMRMwEQYDVQQLDAppVHJhbnN3YXJwMRYwFAYDVQQDDA13
8+
d3cuc2l0ZTIuY29tMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDYR7OaGflm
9+
bJYEMuTLyUBwolobX//LPmCV3iVeY+UEtBVrMRTEei2hz5tK+UNuF9XIPVuy9Zk0
10+
PeG3AUVAix1nbwhj88GNSSsDS+uL5DbscuFHXQWDPPKSSooSQpgd6PpzFSrH4ru8
11+
u2Dv6Z9MF2Nq0sGAiUJ/Ehv/ouXSeGYWYwIDAQABMA0GCSqGSIb3DQEBCwUAA4GB
12+
ADYUW57PfmQvEWbWf29yC7PGVqoKZWMeIOgVETFLAa8HiKHf7WG3S0LAh5R5j9g3
13+
zhkNKwpYYNwp2EOgCZWJaHfHPABEy07MkGA2yEr76UvL2MQzpFx9C4ecw2N5m84m
14+
GozggSniKhaHo1lD3BAEz1p5yIsUzflrFZRnUCfIMl1A
15+
-----END CERTIFICATE-----

‎conf/conf.d/certs/site2/www.site2.com.csr‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,12 @@
1+
-----BEGIN CERTIFICATE REQUEST-----
2+
MIIBszCCARwCAQAwczELMAkGA1UEBhMCVVMxDTALBgNVBAgMBE1hcnMxEzARBgNV
3+
BAcMCmlUcmFuc3dhcnAxEzARBgNVBAoMCmlUcmFuc3dhcnAxEzARBgNVBAsMCmlU
4+
cmFuc3dhcnAxFjAUBgNVBAMMDXd3dy5zaXRlMi5jb20wgZ8wDQYJKoZIhvcNAQEB
5+
BQADgY0AMIGJAoGBANhHs5oZ+WZslgQy5MvJQHCiWhtf/8s+YJXeJV5j5QS0FWsx
6+
FMR6LaHPm0r5Q24X1cg9W7L1mTQ94bcBRUCLHWdvCGPzwY1JKwNL64vkNuxy4Udd
7+
BYM88pJKihJCmB3o+nMVKsfiu7y7YO/pn0wXY2rSwYCJQn8SG/+i5dJ4ZhZjAgMB
8+
AAGgADANBgkqhkiG9w0BAQsFAAOBgQAAJOQiKhccwmpkH7u9RekfzPDp3buPQXpr
9+
rHBh7GtKzndqts3miBNi5SFrzxdsfh311fgZp9ACEbkDG5syQSrHME+vVzyxbjaY
10+
G6wrEH3qLonlk+DorbWgHIzIiaQB5f36hMuiIgF+KX6KMcBxZgyEtSL4aVZoYkwI
11+
J40xlntNKg==
12+
-----END CERTIFICATE REQUEST-----

‎conf/conf.d/certs/site2/www.site2.com.key‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,15 @@
1+
-----BEGIN RSA PRIVATE KEY-----
2+
MIICXAIBAAKBgQDYR7OaGflmbJYEMuTLyUBwolobX//LPmCV3iVeY+UEtBVrMRTE
3+
ei2hz5tK+UNuF9XIPVuy9Zk0PeG3AUVAix1nbwhj88GNSSsDS+uL5DbscuFHXQWD
4+
PPKSSooSQpgd6PpzFSrH4ru8u2Dv6Z9MF2Nq0sGAiUJ/Ehv/ouXSeGYWYwIDAQAB
5+
AoGAEaA+TdfCEIvW6f6v0L/VBZjlmQeI1CqAOpaBGyEu/+QhPrwgQibm4yIFOOX5
6+
jdZZcNk3SO1lD/HfHEf5OdpcifQK5AHXeNqq1+A4QoB+Ium6iQMPW6Azx8q6vXAT
7+
TcXo4KQrtbTyGPUUnWtKJrSNy26lAZvgOIYPdp3CHYAhQ6ECQQD1J+s/FTr/McLU
8+
hlgl2xs4WWv384I23qLhenoctRiSS+cl+TOytJ5SawyrIhna+Ldd6XgAEXJdViHv
9+
afMLmeOzAkEA4djM1nELlXrIlnK7ZoSu3lZz1clbAvFgjSCmWC3M9h4OTfwLskQX
10+
f9gZOBY9j9dD/t1LKnCikr4RmZDm8DxqkQJASlQGESRAtOrDZWguBZw+zoDeKVkd
11+
G8G4pKBbsaR+hKyasnqx3/a/IcHvH1vBdxB9l+2XQn4HrKDWvR3kYJoR3QJARp4P
12+
jo3SXW8DAWfmiOu78fF+Tr6jIoxu8DHhUXkguWQ0fNXuolMANg1P9WWe4jchH7P6
13+
KM8HRnL/9dCFJWD+wQJBAMga5Ki6umcncAznpMidBDaydgD4H5atJvkEdp7Q0kK+
14+
xWcCBLYMbNd1Ufwn5L7JlxCc9fnbP1jql3FCBIjWi0Y=
15+
-----END RSA PRIVATE KEY-----

‎conf/conf.d/certs/site2/www.site2.com.origin.key‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
-----BEGIN RSA PRIVATE KEY-----
2+
Proc-Type: 4,ENCRYPTED
3+
DEK-Info: DES-EDE3-CBC,2EC3F8DD9D75EEFF
4+
5+
7XeA060wH1/449vbW9YBawIHhMvtggBBrQfYm/pOuT43yj8IYFLww4+hN5R+PrMh
6+
lAp95s+vfhoE2DHXAWfAl/rojVXCrKaTfJQHUCFaNnXqgQql/vyp0AG902Sqf1bA
7+
FZkat9+MmiXoZU9rXJuSIbtyJ6okgteKgw3687WNBeSzqWvMilZGzLA3ktcstf3/
8+
mD3KKgmDpcqqOO4U2LWpMLI8TPNbab6uTWCqjVzWEWc9z7dFyqIxltyyn9YFqAXW
9+
UXyUEMJTtdHGRyPv7OUkrcOkbrNaL5W7ElEmIYAyrnh0zKmmjbz6yXVVDr6J3UfO
10+
7zs2UplhjbDjvqEQZhgQaqwbIkBn+F6CfrtfPjru1xSfNHvql5Ekrzmb5EZXXx7z
11+
Q2ZDsZs2vcCLd6t7uBUoc087vBAUBP9zEzcqfqr6g3b1XpS310ltF56V9ENv8BlQ
12+
v0LT0F0ddCsLmVyY9OBP9G90lSxYRmDJH9tSsz7JKBSuUAk3DU68/Np5yrHZOSaS
13+
Ru8xhMaLCKlGAzvdoWnRBznSgw6RzrEYBeM0SU4J0x7T7lq/msL9pn1CQpjc89Gw
14+
mZPHxE/E8mjCLs0A6g1ER7lmJXi7r1oJfmBV+CFbJKisHhbO49NJDVnMQ/yi4ZQr
15+
GdQh5IHuXwiEBUWh8kH1cq8CPNVgpcNnp+X7S4uVIs9XIIJVaNpgm83g8iZBFXit
16+
nH1wevYuUuCT6KyHBzrvNVtPPXPnwIqpx2SDyrvertTv3FJNkBoSetYNj8Ex2W7D
17+
21NEELRgq2GU/QhNNjR5LhSwn16p/KNNEsw3Ru9Ku7wBguHZn2E1kQ==
18+
-----END RSA PRIVATE KEY-----

‎conf/conf.d/site1.conf‎

Lines changed: 64 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,64 @@
1+
server {
2+
listen 80;
3+
server_name localhost www.site1.com;
4+
root /var/www/html/site1;
5+
index index.php index.html index.htm;
6+
#charset koi8-r;
7+
location / {
8+
index index.php index.html index.htm;
9+
#如果请求既不是一个文件，也不是一个目录，则执行一下重写规则
10+
if (!-e $request_filename)
11+
{
12+
#地址作为将参数rewrite到index.php上。
13+
rewrite ^/(.*)$ /index.php?s=$1;
14+
#若是子目录则使用下面这句，将subdir改成目录名称即可。
15+
#rewrite ^/subdir/(.*)$ /subdir/index.php?s=$1;
16+
}
17+
}
18+
access_log /dev/null;
19+
#access_log /var/log/dnmp/nginx.site1.access.log main;
20+
error_log /var/log/dnmp/nginx.site1.error.log warn;
21+
22+
#error_page 404 /404.html;
23+
24+
# redirect server error pages to the static page /50x.html
25+
#
26+
error_page 500 502 503 504 /50x.html;
27+
location = /50x.html {
28+
root /usr/share/nginx/html;
29+
}
30+
31+
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
32+
#
33+
#location ~ \.php$ {
34+
# proxy_pass http://127.0.0.1;
35+
#}
36+
37+
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
38+
#
39+
location ~ \.php$ {
40+
include fastcgi_params;
41+
set $path_info "";
42+
#定义变量 $real_script_name，用于存放真实地址
43+
set $real_script_name $fastcgi_script_name;
44+
fastcgi_pass php:9000;
45+
fastcgi_index index.php;
46+
include fastcgi_params;
47+
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
48+
if ($fastcgi_script_name ~ "^(.+?\.php)(/.+)$") {
49+
#将文件地址赋值给变量 $real_script_name
50+
set $real_script_name $1;
51+
#将文件地址后的参数赋值给变量 $path_info
52+
set $path_info $2;
53+
}
54+
fastcgi_intercept_errors on;
55+
}
56+
57+
# deny access to .htaccess files, if Apache's document root
58+
# concurs with nginx's one
59+
#
60+
#location ~ /\.ht {
61+
# deny all;
62+
#}
63+
}
64+

‎conf/conf.d/site2.conf‎

Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
server {
2+
listen 80;
3+
server_name site2.com www.site2.com;
4+
add_header Strict-Transport-Security max-age=31536000;
5+
return 301 https://www.site2.com$request_uri;
6+
}
7+
8+
server {
9+
listen 443 ssl http2;
10+
server_name www.site2.com;
11+
root /var/www/html/site2;
12+
index index.php index.html index.htm;
13+
#charset koi8-r;
14+
15+
access_log /dev/null;
16+
#access_log /var/log/dnmp/nginx.site2.access.log main;
17+
error_log /var/log/dnmp/nginx.site2.error.log warn;
18+
19+
#error_page 404 /404.html;
20+
21+
ssl on;
22+
ssl_certificate /etc/nginx/conf.d/certs/site2/www.site2.com.crt;
23+
ssl_certificate_key /etc/nginx/conf.d/certs/site2/www.site2.com.key;
24+
ssl_prefer_server_ciphers on;
25+
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
26+
ssl_ciphers "EECDH+ECDSA+AESGCM EECDH+aRSA+AESGCM EECDH+ECDSA+SHA384 EECDH+ECDSA+SHA256 EECDH+aRSA+SHA384 EECDH+aRSA+SHA256 EECDH+aRSA+RC4 EECDH EDH+aRSA !aNULL !eNULL !LOW !3DES !MD5 !EXP !PSK !SRP !DSS !RC4";
27+
add_header Strict-Transport-Security max-age=31536000;
28+
29+
# redirect server error pages to the static page /50x.html
30+
#
31+
error_page 500 502 503 504 /50x.html;
32+
location = /50x.html {
33+
root /usr/share/nginx/html;
34+
}
35+
36+
# proxy the PHP scripts to Apache listening on 127.0.0.1:80
37+
#
38+
#location ~ \.php$ {
39+
# proxy_pass http://127.0.0.1;
40+
#}
41+
42+
# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
43+
#
44+
location ~ \.php$ {
45+
fastcgi_pass php:9000;
46+
fastcgi_index index.php;
47+
include fastcgi_params;
48+
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
49+
}
50+
51+
# deny access to .htaccess files, if Apache's document root
52+
# concurs with nginx's one
53+
#
54+
#location ~ /\.ht {
55+
# deny all;
56+
#}
57+
}
58+

0 commit comments

Comments
 (0)