分主机部署lamp
httpd主机：192.168.152.140
10余年的囊谦网站建设经验，针对设计、前端、开发、售后、文案、推广等六对一服务，响应快，48小时及时工作处理。成都全网营销推广的优势是能够根据用户设备显示端的尺寸不同，自动调整囊谦建站的显示方式，使网站能够适用不同显示终端，在浏览器中调整网站的宽度，无论在任何一种浏览器上浏览网站，都能展现优雅布局与设计，从而大程度地提升浏览体验。成都创新互联从事“囊谦网站设计”,“囊谦网站推广”以来，每个客户项目都认真落实执行。
php-fpm主机：192.168.152.141
mariadb主机：192.168.152.142
httpd
yum -y install httpd
vim /etc/httpd/conf.d/vhosts.conf
AddType application/x-httpd-php .php
DirectoryIndex index.php index.html
ServerName www.test.com.
DocumentRoot /http/vhosts/test.com
ProxyPassMatch ^/(.*\.php)$ fcgi://192.168.152.141:9000/var/www/test.com/$1 #192.168.152.141为php-fpm主机地址
Options none
AllowOverride none
Require all granted
ServerName www.test1.com
DocumentRoot /http/vhosts/test1.com
ProxyPassMatch ^/(.*\.php)$ fcgi://192.168.152.141:9000/var/www/test1.com/$1
Options FollowSymLinks
AllowOverride none
Require all granted
注释掉/etc/httpd/conf/httpd.conf中的DocumentRoot
mkdir -pv /http/vhosts/test.com
php
yum -y install php php-fpm php-MySQL
vim /etc/php-fpm.d/www.conf
listen = 192.168.152.141:9000 #此ip为监听php-fpm本机的9000端口，如只保留端口号即为监听任意ip的9000端口
listen.allowed_clients = 192.168.152.140 #此ip为允许访问php-fpm的主机，即httpd主机，注释掉表示允许任意主机访问
mkdir -pv /var/www/test.com
vim /var/www/test.com/index.php
访问140主机出现php信息页说明httpd和php部署成功
mariadb
yum -y install mariadb-server
vim /etc/my.cnf
[mysqld]
innodb_file_per_table = ON
skip_name_resolve = ON
mysql
GRANT ALL PRIVILEGES ON *.* TO 'root'@'192.168.152.141' IDENTIFIED BY PASSWORD 'passwd' #ip为需要访问mysql的php-fpm的主机地址，即授权php-fpm主机可以访问mariadb
编辑141主机,测试php-mysql连通性
vim /var/www/test.com/index.php
页面出现Success即为成功
xcache
yum -y groupinstall "Development Tools" "Server Platform Development"
yum install php-devel
wget xcache-3.2
tar xf xcache-3.2.tar.bz2
cd xcache-3.2.0
phpize #generate configure script to php environment
./configure --enable-xcache --with-php-config=/usr/bin/php-config
make && make install
cp xcache.ini /etc/php.d/
vim /etc/php.d/xcache.ini #makesure xcache.admin.enable_auth = ON;xcache.size = 60M
systemctl restart httpd.service
wordpress
192.168.152.140
cd /http/vhosts/test.com
wget https://cn.wordpress.org/wordpress-4.5-zh_CN.tar.gz
tar xf wordpress-4.5-zh_CN.tar.gz
cd wordpress/
cp wp-config-sample.php wp-config.php
vim wp-config.php
/** WordPress数据库的名称 */
define('DB_NAME', 'wordpressdb');
/** MySQL数据库用户名 */
define('DB_USER', 'wpuser');
/** MySQL数据库密码 */
define('DB_PASSWORD', '12345678');
/** MySQL主机 */
define('DB_HOST', '127.0.0.1');192.168.152.141
cd /var/www/test.com
wget https://cn.wordpress.org/wordpress-4.5-zh_CN.tar.gz
tar xf wordpress-4.5-zh_CN.tar.gz
cd wordpress/
cp wp-config-sample.php wp-config.php
vim wp-config.php
/** WordPress数据库的名称 */
define('DB_NAME', 'wordpressdb');
/** MySQL数据库用户名 */
define('DB_USER', 'wpuser');
/** MySQL数据库密码 */
define('DB_PASSWORD', '12345678');
/** MySQL主机 */
define('DB_HOST', '127.0.0.1');phpmyadmin
192.168.152.141
yum -y install php-mbstring
cd /var/www/test1.com
wget https://files.phpmyadmin.net/phpMyAdmin/4.4.15.5/phpMyAdmin-4.4.15.5-all-languages.tar.bz2
tar xf phpMyAdmin-4.4.15.5-all-languages.tar.bz2
ln -sv phpMyAdmin-4.4.15.5-all-languages pma
cd phpMyAdmin-4.4.15.5-all-languages/
cp config.sample.inc.php config.inc.php
yum -y install php-mbstring
openssl rand -base64 20
vim config.inc.php
$cfg['blowfish_secret'] = '4Nf696qH4QG/rZM5EOkkSJyXFBs'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
192.168.152.140
cd /http/vhosts/test.com
wget https://files.phpmyadmin.net/phpMyAdmin/4.4.15.5/phpMyAdmin-4.4.15.5-all-languages.tar.bz2
tar xf phpMyAdmin-4.4.15.5-all-languages.tar.bz2
ln -sv phpMyAdmin-4.4.15.5-all-languages pma
cd phpMyAdmin-4.4.15.5-all-languages/
cp config.sample.inc.php config.inc.php
yum -y install php-mbstring
openssl rand -base64 20
vim config.inc.php
$cfg['blowfish_secret'] = '4Nf696qH4QG/rZM5EOkkSJyXFBs'; /* YOU MUST FILL IN THIS FOR COOKIE AUTH! */
https
为phpmyadmin添加https访问
192.168.152.141作CA
192.168.152.140作SERVER
CA
cd /etc/pki/CA
(umask 077;openssl genrsa -out private/cakey.pem 2048)
openssl req -new -x509 -key private/cakey.pem -out cacert.pem -days 3655
country name
state or province name
locality name
organization name
organization unit name
common name
email address
touch serial index.txt
echo 01 > serial
SERVER
cd /etc/httpd/
mkdir ssl
(umask 077;openssl genrsa -out httpd.key 1024)
openssl req -new -key httpd.key -out httpd.csr
country name
state or province name
locality name
organization name
organization unit name
common name
email address
把生成的证书签署请求httpd.csr发送到CA端作签署
CA端签署证书
openssl ca -in /任意目录/httpd.csr -out /etc/pki/CA/certs/httpd.crt
把签署完的证书发还到SERVER
在SERVER端
yum -y install mod_ssl #安装支持ssl的模块
vim /etc/httpd/conf.d/ssl.conf #编辑ssl配置文件 编辑前做好备份
ServerName www.test1.com
DocumentRoot /http/vhosts/test1.com
ProxyPassMatch ^/(.*\.php)$ fcgi://192.168.152.141:9000/var/www/test1.com/$1
Options FollowSymLinks
AllowOverride none
Require all granted
SSLEngine on
SSLCertificateFile /etc/httpd/ssl/httpd.crt
SSLCertificateKeyFile /etc/httpd/ssl/httpd.key
把/etc/httpd/conf.d/vhosts.conf配置文件中第二个VirtualHost注释掉避免冲突
httpd -t #检查语法错误
systemctl restart httpd.service #重启httpd服务使配置生效
网页题目：分布式部署LAMP
标题路径：
http://jkwzsj.com/article/pecocg.html
