Formed in 2009, the Archive Team (not to be confused with the archive.org Archive-It Team) is a rogue archivist collective dedicated to saving copies of rapidly dying or deleted websites for the sake of history and digital heritage. The group is 100% composed of volunteers and interested parties, and has expanded into a large amount of related projects for saving online and digital history.
Superfast LEMP Configuration for WordPress
Last update: 12/01/2019
Overview
WordPress has become the most popular and used CMS in the world and it's no secret. We will be covering up each topic individually so it's easier for you to continue from where you had left off.
In this guide, we will be helping you build your sites faster with LEMP stack.
Table of Contents
- Superfast LEMP Configuration for WordPress
Essentials
Login to the server
ssh root@142.93.200.70Add new user
adduser tharinduGrant superuser privileges to the newly created user
usermod -aG sudo tharindu
sudo su - tharinduCreate SSH credentials
mkdir ~/.ssh
chmod 700 ~/.ssh
nano ~/.ssh/authorized_keys
# Paste the contents from pbcopy < ~/.ssh/id_rsa.pub
chmod 600 ~/.ssh/authorized_keysSecure root login
sudo nano /etc/ssh/sshd_config
# Set 'PermitRootLogin yes' to `PermitRootLogin no` and `PasswordAuthentication yes` to `PasswordAuthentication no`.
sudo service ssh restartUpdate ubuntu
sudo apt-get update && sudo apt-get upgrade -y
sudo apt-get autoremove -y
sudo rebootInstall Nginx and Configure
Install nginx
sudo add-apt-repository ppa:nginx/development -y
sudo apt-get update
sudo apt-get install nginx -y
sudo systemctl status nginxConfigure nginx for optimum performance
sudo nano /etc/nginx/nginx.conf# Change number 2 to match with the number of cores you have
worker_processes 2;
# multiply number of cores from the output of this command `ulimit -n`
worker_connections 2048;
use epoll;
keepalive_timeout 10;
# uncomment this line and set to off
server_tokens off;
client_max_body_size 64m;
# Add the following lines to the config file
client_body_buffer_size 128k;
client_header_buffer_size 10k;
client_max_body_size 10m;
large_client_header_buffers 4 256k;Install PHP
sudo add-apt-repository ppa:ondrej/php -y
sudo apt-get update
sudo apt-get install php7.2-fpm php7.2-common php7.2-mysql php7.2-xml php7.2-xmlrpc php7.2-curl php7.2-gd php7.2-imagick php7.2-cli php7.2-dev php7.2-imap php7.2-mbstring php7.2-opcache php7.2-redis php7.2-soap php7.2-zip -y
systemctl status php7.2-fpm
sudo systemctl restart nginxsudo sed -i 's/;cgi.fix_pathinfo=1/cgi.fix_pathinfo=0/g' /etc/php/7.2/fpm/php.inisudo nano /etc/php/7.2/fpm/php.ini
# Add these following items to match 'client_max_body_size 64m'
# upload_max_filesize = 64M
# post_max_size = 64M
sudo php-fpm7.2 -t
sudo service php7.2-fpm restartChange the permission to www-data to your username. In my case it's tharindu.
sudo nano /etc/php/7.2/fpm/pool.d/www.conf
# user = www-data
# group = www-data
# listen.owner = www-data
# listen.group = www-dataSetup UFW Firewall
Install UFW Firewall
sudo apt-get install ufw
sudo ufw app list
sudo ufw allow OpenSSH
sudo ufw allow 'Nginx Full'
sudo ufw show added
sudo ufw enable
sudo ufw status verboseInstall and enable fail2ban
sudo apt-get install fail2ban -y
sudo service fail2ban startConfigure nginx server blocks
/var/www/
├── wpsnappy.com
│ └── public_html
│ └── cache
│ └── logs
├── stackpartner.com
│ └── public_html
│ └── cache
│ └── logs
├── htmlsudo mkdir -p /var/www/wpsnappy.com/{public_html,cache,logs}sudo chown -R tharindu: /var/www/wpsnappy.comsudo rm -f /etc/nginx/sites-enabled/defaultcd /etc/nginx/sites-available
sudo cp /etc/nginx/sites-available/default /etc/nginx/sites-available/wpsnappy.com
sudo ln -s /etc/nginx/sites-available/wpsnappy.com /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl restart nginxDatabase setup
Install mariadb
sudo apt-key adv --recv-keys --keyserver hkp://keyserver.ubuntu.com:80 0xF1656F24C74CD1D8
sudo add-apt-repository 'deb [arch=amd64,arm64,ppc64el] http://suro.ubaya.ac.id/mariadb/repo/10.3/ubuntu bionic main'
sudo apt-get update
sudo apt-get install mariadb-server
sudo systemctl status mariadb
sudo mysql_secure_installationCreate database
mysql -u root -p
CREATE DATABASE h0571n63xpl0r3r CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_520_ci;
CREATE USER 'h0571n6u'@'localhost' IDENTIFIED BY '#cu9yVlFSwZu&KHg1o*6';
GRANT ALL PRIVILEGES ON h0571n63xpl0r3r.* TO 'h0571n6u'@'localhost';
FLUSH PRIVILEGES;
exit;Install WordPress
cd /tmp
wget https://wordpress.org/latest.tar.gz
tar xf latest.tar.gz
sudo mv /tmp/wordpress/* /var/www/wpsnappy.com/public_htmlInstall Redis
sudo apt-get install redis-serversudo nano /etc/nginx/sites-available/wpsnappy.com
# Add 'fastcgi_cache_path /var/www/wpsnappy.com/cache levels=1:2 keys_zone=wpsnappy.com:100m inactive=60m;' before the server blockHTTPS and HTTPS/2
sudo add-apt-repository ppa:certbot/certbot
sudo apt-get update
sudo apt-get install python-certbot-nginx
sudo certbot --nginx certonly
sudo certbot --manual -d *.wpsnappy.com -d wpsnappy.com --server https://acme-v02.api.letsencrypt.org/directory --preferred-challenges dns-01 certonlysudo nano /etc/nginx/sites-available/wpsnappy.comssl_certificate /etc/letsencrypt/live/wpsnappy.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/wpsnappy.com/privkey.pem;fastcgi_cache_path /var/www/wpsnappy.com/cache levels=1:2 keys_zone=wpsnappy.com:100m inactive=60m;
server {
listen 443 ssl http2;
listen [::]:443 ssl http2;
ssl_certificate /etc/letsencrypt/live/wpsnappy.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/wpsnappy.com/privkey.pem;
root /var/www/wpsnappy.com/public_html;
index index.php;
server_name www.wpsnappy.com;
set $skip_cache 0;
# POST requests and urls with a query string should always go to PHP
if ($request_method = POST) {
set $skip_cache 1;
}
if ($query_string != "") {
set $skip_cache 1;
}
# Don’t cache uris containing the following segments
if ($request_uri ~* "/wp-admin/|/xmlrpc.php|wp-.*.php|/feed/|index.php|sitemap(_index)?.xml") {
set $skip_cache 1;
}
# Don’t use the cache for logged in users or recent commenters
if ($http_cookie ~* "comment_author|wordpress_[a-f0-9]+|wp-postpass|wordpress_no_cache|wordpress_logged_in") {
set $skip_cache 1;
}
location / {
try_files $uri $uri/ =404;
}
location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
fastcgi_cache_bypass $skip_cache;
fastcgi_no_cache $skip_cache;
fastcgi_cache hostingexplorer.com;
fastcgi_cache_valid 60m;
}
}
server {
listen 80;
listen [::]:80;
listen 443 ssl;
listen [::]:443 ssl;
server_name wpsnappy.com;
return 301 https://www.$server_name$request_uri;
}Useful commands
- Restart Nginx
sudo systemctl restart nginx - Restart PHP
sudo service php7.2-fpm restart - Copy remote file content
ssh tharindu@206.189.203.233 "cat /etc/nginx/sites-available/stackpartner.com"|pbcopy