Skip to content

Instantly share code, notes, and snippets.

@butschster
Last active June 17, 2022 10:24
Show Gist options
  • Save butschster/48d33bd1e3a8192ca4059d8e6a459118 to your computer and use it in GitHub Desktop.
Save butschster/48d33bd1e3a8192ca4059d8e6a459118 to your computer and use it in GitHub Desktop.
LEMP server configured for Laravel (MySQL, NGINX, php7.2-fpm, Redis, Websocket server, MongoDB, Composer)
# ================================================
# PHP 7.2
#
# See https://www.colinodell.com/blog/201711/installing-php-72
# ================================================
apt-get install -y apt-transport-https lsb-release ca-certificates
wget -O /etc/apt/trusted.gpg.d/php.gpg https://packages.sury.org/php/apt.gpg
echo "deb https://packages.sury.org/php/ $(lsb_release -sc) main" | tee /etc/apt/sources.list.d/php.list
apt-get update
apt-get install -y php7.2-cli php7.2-gd php7.2-mbstring php7.2-curl php7.2-xml php7.2-zip
# Check what user PHP-FPM is running as (it's www-data)
ps aux | grep php
# ================================================
# MongoDB
#
# Documentation: https://docs.mongodb.com/
# ================================================
apt-get install php7.2-mongodb
# Check mongodb extension is enabled
php --ini
# ...
# /etc/php/7.2/cli/conf.d/30-mongodb.ini
apt-get install mongodb-server
# Test if MongoDB is working properly
netstat -ln | grep 27017
# tcp 0 0 127.0.0.1:27017 0.0.0.0:* LISTEN
# ================================================
# Nginx
#
# See https://laravel.com/docs/5.6/deployment
# Documentation: https://nginx.ru/en/docs/
# ================================================
apt-get install -y nginx php7.2-fpm
systemctl stop nginx.service
systemctl stop php7.2-fpm.service
# use config from file nginx-host.conf
nano /etc/nginx/sites-available/default
systemctl start nginx.service
systemctl start php7.2-fpm.service
# Test if Ngixn is working properly
netstat -ln | grep 80
# tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
# ================================================
# MySQL
#
# Documentation: https://dev.mysql.com/doc/
# ================================================
apt-get install -y mysql-server php7.2-mysql
mysql
# Create new database and user from file mysql.conf
# Test if MySQL is working properly
netstat -ln | grep 3306
# tcp 0 0 127.0.0.1:3306 0.0.0.0:* LISTEN
# ================================================
# Redis
#
# Documentation: https://redis.io/documentation
# ================================================
apt-get install -y build-essential tcl software-properties-common
# From redis PPA repository
#
# See https://linode.com/docs/databases/redis/how-to-install-a-redis-server-on-ubuntu-or-debian8/
add-apt-repository ppa:chris-lea/redis-server
wget https://www.dotdeb.org/dotdeb.gpg
apt-key add dotdeb.gpg
apt-get update
apt-get install redis-server
# From sources
#
# See https://www.hugeserver.com/kb/install-redis-4-debian-9-stretch/
wget http://download.redis.io/releases/redis-stable.tar.gz
tar xvzf redis-stable.tar.gz
cd redis-stable/
make && make install
make test
cd utils/
bash install_server.sh
systemctl start redis_6379
systemctl enable redis_6379
# Test if Redis is working properly
netstat -ln | grep 6379
# tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN
cd ../../
rm redis-stable -Rf
rm redis-stable.tar.gz
# Note:
# Use Horizon to queues monitor
# https://laravel.com/docs/5.6/horizon
# ================================================
# Composer
#
# See https://getcomposer.org/doc/00-intro.md#installation-linux-unix-osx
# Documentation: https://getcomposer.org/doc/
# ================================================
curl -sS https://getcomposer.org/installer | php
mv composer.phar /usr/local/bin/composer
chmod +x /usr/local/bin/composer
# ================================================
# Laravel
#
# See https://laravel.com/docs/5.6/installation
# See https://laravel.com/docs/5.6/filesystem#the-public-disk
# Documentation: https://laravel.com/docs/
# ================================================
apt-get install -y git
# Clone your project into /var/www
git clone ... /var/www
# Change folders permissons
chown -R www-data.www-data /var/www
chmod -R 755 /var/www
chmod -R 777 /var/www/storage
cd /var/www
# Install packages via composer
composer install
cp .env.example .env
php artisan key:generate
php artisan storage:link
# Note:
# Use Envoy to run tasks you run on your remote servers.
# https://laravel.com/docs/5.6/envoy
#
# Use Deployer to deployment your laravel application
# https://deployer.org/
# ================================================
# Supervisor
#
# See https://laravel.com/docs/5.6/queues#supervisor-configuration
# Documentation: http://supervisord.org/
# ================================================
apt-get install -y supervisor
touch /etc/supervisor/conf.d/laravel-worker.conf
# use config from file laravel-worker.conf
nano /etc/supervisor/conf.d/laravel-worker.conf
supervisorctl reread
supervisorctl update
supervisorctl start laravel-worker:*
# ================================================
# Websocket server (Echo server)
#
# See https://github.com/tlaverdure/laravel-echo-server
# ================================================
curl -sL https://deb.nodesource.com/setup_9.x | sudo -E bash -
apt-get install -y nodejs
npm install -g laravel-echo-server
cd /var/www
laravel-echo-server init
# use config from file websocket-worker.conf
nano /etc/supervisor/conf.d/websocket-worker.conf
supervisorctl reread
supervisorctl update
supervisorctl start websocket:*
# Test if Websocket server is working properly
netstat -ln | grep 6001
# tcp6 0 0 :::6001 :::* LISTEN
# ================================================
# Crontab
#
# See https://laravel.com/docs/5.6/scheduling#introduction
# ================================================
crontab -e
# Append new line
# * * * * * php /var/www/artisan schedule:run >> /var/www/storage/logs/cron.log 2>&1
# ================================================
# Key based authentication
#
# See https://www.digitalocean.com/community/tutorials/how-to-configure-ssh-key-based-authentication-on-a-linux-server
# ================================================
ssh-keygen
touch ~/.ssh/authorized_keys
cat ~/.ssh/id_rsa.pub >> ~/.ssh/authorized_keys
ssh-copy-id username@remote_host # Example [email protected]
ssh sername@remote_host
nano /etc/ssh/sshd_config
# PasswordAuthentication no
systemctl restart ssh
# Clean apt
apt-get clean
# ================================================
# Change timezone
# ================================================
dpkg-reconfigure tzdata
# ======================================================
# Useful links
# ======================================================
#
# https://tecadmin.net/install-laravel-framework-on-ubuntu/
# https://linuxconfig.org/how-to-install-a-lamp-server-on-debian-9-stretch-linux
# https://gist.github.com/santoshachari/87bf77baeb45a65eb83b553aceb135a3
# https://serversforhackers.com/c/lemp-nginx-php-laravel
# https://deployer.org/
# https://laravel.com/docs/5.6/envoy
# https://github.com/Neilpang/acme.sh
# https://sonikelf.ru/pervichnaya-nastrojka-iptables-dlya-veb-servera-na-primere-centos/
[program:laravel-worker]
process_name=%(program_name)s_%(process_num)02d
command=php /var/www/artisan queue:work --sleep=3 --tries=3
autostart=true
autorestart=true
numprocs=8
redirect_stderr=true
stdout_logfile=/var/www/storage/logs/worker.log
CREATE DATABASE homestead;
GRANT ALL ON homestead.* to 'homestead'@'localhost' IDENTIFIED BY 'secret';
FLUSH PRIVILEGES;
server {
listen 80;
server_name localhost;
root /var/www/public;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Content-Type-Options "nosniff";
index index.php;
location ~* \.(jpg|jpeg|gif|css|png|js|ico|html)$ {
access_log off;
expires max;
log_not_found off;
}
charset utf-8;
location / {
try_files $uri $uri/ /index.php$is_args$args;
}
access_log off;
error_log /var/log/nginx/localhost-error.log error;
client_max_body_size 100m;
location ~ \.php$ {
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_intercept_errors off;
fastcgi_buffer_size 16k;
fastcgi_buffers 4 16k;
}
location ~ /\.ht {
deny all;
}
}
[program:websocket]
directory=/var/www
command=laravel-echo-server start
autostart=true
autorestart=true
redirect_stderr=true
stdout_logfile=/var/www/storage/logs/websocket.log
@butschster
Copy link
Author

awesome, thank you

You're welcome!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment