APhpWeb建站教程 - 4、Ubuntu下php7.3版本LNMP环境搭建

1、切换国内软件源：

cp /etc/apt/sources.list  /etc/apt/sources.list.bak
vim /etc/apt/sources.list

这里使用阿里源：

deb http://mirrors.aliyun.com/ubuntu/ bionic main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ bionic-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ bionic-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ bionic-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ bionic-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ bionic main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ bionic-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ bionic-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ bionic-proposed main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ bionic-backports main restricted universe multiverse

然后保存退出，更新apt-get：

apt-get update

---

2、创建www用户，添加sudo权限：不要使用root用户权限运行web服务,www换成别的用户名

adduser www
usermod -aG sudo www

2-1、sshd配置：创建用户后，禁止root用户进行ssh连接

#禁止root用户连接
PermitRootLogin No
ssh自动断开连接配置#
ClientAliveInterval 60
ClientAliveCountMax 3

---

3、软件安装：

# nginx web 服务器安装
apt-get install nginx

# mariadb mysql 服务器安装
apt-get install mariadb-server

# php7.3 查找、安装
apt-get install software-properties-common
add-apt-repository ppa:ondrej/php
apt-cache search php7.3
apt-get install php7.3 php7.3-common php7.3-fpm php7.3-pdo php7.3-opcache php7.3-mysql php7.3-gd php7.3-mbstring php7.3-dom php7.3-curl php7.3-zip

# redis nosql服务器安装
add-apt-repository ppa:chris-lea/redis-server -y
apt-get install redis-server

# beanstalked 消息队列安装
apt-get install libevent-dev
add-apt-repository ppa:jernej/beanstalkd -y
apt-get install beanstalked

# 其他软件安装
apt-get install git unzip zip vim tree

---

4、服务开机自启： 经过测试，redis和beanstalked需要配置开机自启

#编辑 /etc/rc.local 文件，加入如下内容
service redis-server restart
service beanstalkd restart

---

5、防火墙配置，开启默认对外服务端口：Ubuntu 使用 ufw命令配置防火墙

#开启防火墙
sudo ufw enable
#默认禁止全部端口
sudo ufw default deny

#开启ssh端口
sudo ufw allow 22/tcp
#开启web服务端口 8080端口备案前临时开启
sudo ufw allow 80/tcp
sudo ufw allow 443/tcp
sudo ufw allow 8080/tcp
#查看防火墙状态
sudo ufw status