本站配置

井水玉藻

2233.CONF

server {
    listen 80;
    listen [::]:80;
    server_name love4z.cn;
    return 301 https://$host$request_uri;
}

server {
    listen 443 ssl;
    listen [::]:443 ssl;

    listen 443 quic reuseport;
    listen [::]:443 quic reuseport;

    http2 on;

    server_name love4z.cn;
    root /home/2233;
    index index.php index.html index.htm;

    ssl_certificate /etc/nginx/ssl/2233/love4z.cn.crt;
    ssl_certificate_key /etc/nginx/ssl/2233/love4z.cn.key;

    ssl_protocols TLSv1.3;
    ssl_conf_command Options PrioritizeChaCha;
    
    ssl_session_cache shared:SSL:50m;
    ssl_session_timeout 1d;
    ssl_session_tickets off;

    ssl_early_data on;

    proxy_set_header Early-Data $ssl_early_data;

    sendfile on;
    tcp_nopush on;
    tcp_nodelay on;
    keepalive_timeout 65;
    keepalive_requests 10000;

    access_log /var/log/nginx/2233_access.log;
    error_log /var/log/nginx/2233_error.log;

    add_header Alt-Svc 'h3=":443"; ma=86400; persist=1' always;
    add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
    add_header X-Frame-Options "SAMEORIGIN" always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header Referrer-Policy "strict-origin-when-cross-origin" always;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        try_files $uri =404;
        fastcgi_pass unix:/run/php/php8.5-fpm.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
        
        fastcgi_param HTTP_EARLY_DATA $ssl_early_data;
 
        fastcgi_buffers 16 16k; 
        fastcgi_buffer_size 32k;
        fastcgi_hide_header X-Powered-By;
 
        add_header Alt-Svc 'h3=":443"; ma=86400; persist=1' always;
        add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
        add_header X-Frame-Options "SAMEORIGIN" always;
        add_header X-Content-Type-Options "nosniff" always;
        add_header Referrer-Policy "strict-origin-when-cross-origin" always;
        
        add_header X-FastCGI-Cache $upstream_cache_status;
    }

    location ~* \.(?:js|css|map|json|scss|woff2|woff|ttf|svg|webp|png|jpg|jpeg|gif|ico)$ {
        expires 30d;
        access_log off;
        
        add_header Alt-Svc 'h3=":443"; ma=86400; persist=1' always;
        add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
        add_header X-Frame-Options "SAMEORIGIN" always;
        add_header X-Content-Type-Options "nosniff" always;
        add_header Referrer-Policy "strict-origin-when-cross-origin" always;

        add_header Cache-Control "public, no-transform, immutable";
        
        try_files $uri =404; 
    }

    location ~* ^/(?:\.git|\.env|composer\.(json|lock)|auth\.json|config\.php|storage|vendor) {
        return 404;
    }

    location ~ /\.(?!well-known).* {
        return 404;
    }

    location /app {
        proxy_pass             http://localhost:6001;
        proxy_read_timeout     60;
        proxy_connect_timeout  60;
        proxy_redirect         off;

        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'Upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
        
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
    }
}

井水玉藻

NGINX.CONF

user  www-data;
worker_processes  auto;

load_module modules/ngx_http_zstd_filter_module.so;
load_module modules/ngx_http_zstd_static_module.so;

error_log  /var/log/nginx/error.log notice;
pid        /run/nginx.pid;

thread_pool default threads=32 max_queue=65536;

events {
    worker_connections  1024;
    multi_accept on;
}

http {
    include       /etc/nginx/mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile    on;
    tcp_nopush  on;
    tcp_nodelay on;

    keepalive_timeout  65;
    keepalive_requests 1000;

    server_tokens off;

    zstd  on;
    zstd_comp_level 1;
    zstd_min_length 1024;
    zstd_buffers 16 8k;
    zstd_static on; 
    zstd_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.api+json application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/javascript text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;

    include /etc/nginx/conf.d/*.conf;
}

井水玉藻

WWW.CONF

[www]
user = www-data
group = www-data

listen = /run/php/php8.5-fpm.sock

listen.owner = www-data
listen.group = www-data
listen.mode = 0660

pm = dynamic
pm.max_children = 20
pm.start_servers = 5
pm.min_spare_servers = 5
pm.max_spare_servers = 10
pm.max_requests = 500

request_slowlog_timeout = 5s
slowlog = /var/log/php8.5-fpm.slow.log

php_admin_value[early_data] = $ssl_early_data
php_admin_flag[display_errors] = off

井水玉藻

PHP.INI

[PHP]
engine = On

short_open_tag = Off

precision = 14

output_buffering = 4096

zlib.output_compression = Off

implicit_flush = Off

unserialize_callback_func =

serialize_precision = -1

disable_functions =

zend.enable_gc = On
zend.exception_ignore_args = On
zend.exception_string_param_max_len = 0

expose_php = Off

max_execution_time = 5

max_input_time = 60

memory_limit = 256M
max_memory_limit = -1

error_reporting = E_ALL & ~E_DEPRECATED
display_errors = Off
display_startup_errors = Off
log_errors = On
ignore_repeated_errors = Off

ignore_repeated_source = Off

variables_order = "GPCS"

request_order = "GP"

auto_globals_jit = On

post_max_size = 8M

auto_prepend_file =
auto_append_file =

default_mimetype = "text/html"
default_charset = "UTF-8"

doc_root =

user_dir =

enable_dl = Off

file_uploads = On
upload_max_filesize = 2M
max_file_uploads = 20
allow_url_fopen = On
allow_url_include = Off

default_socket_timeout = 60

[CLI Server]
cli_server.color = On

[Date]
date.timezone = Asia/Shanghai

[filter]
; https://php.net/filter.default
;filter.default = unsafe_raw

; https://php.net/filter.default-flags
;filter.default_flags =

[iconv]

[intl]

[sqlite3]

[Pcre]

[Pdo]

[Pdo_mysql]
pdo_mysql.default_socket = /var/run/mysqld/mysqld.sock

[Phar]

[mail function]
SMTP = localhost
smtp_port = 25
mail.add_x_header = Off
mail.mixed_lf_and_crlf = Off
mail.cr_lf_mode = crlf

[ODBC]
odbc.allow_persistent = On
odbc.check_persistent = On
odbc.max_persistent = -1
odbc.max_links = -1
odbc.defaultlrl = 4096
odbc.defaultbinmode = 1

[MySQLi]
mysqli.default_socket = /var/run/mysqld/mysqld.sock
mysqli.max_persistent = -1
mysqli.allow_persistent = On
mysqli.max_links = -1
mysqli.default_port = 3306
mysqli.default_socket =
mysqli.default_host =
mysqli.default_user =
mysqli.default_pw =

[mysqlnd]
mysqlnd.collect_statistics = off
mysqlnd.collect_memory_statistics = Off

[PostgreSQL]
pgsql.allow_persistent = On
pgsql.auto_reset_persistent = Off
pgsql.max_persistent = -1
pgsql.max_links = -1
pgsql.ignore_notice = 0
pgsql.log_notice = 0

[bcmath]
bcmath.scale = 0

[browscap]

[Session]
session.save_handler = files
session.use_strict_mode = 1
session.use_cookies = 1
session.use_only_cookies = 1
session.name = sid
session.auto_start = 0
session.cookie_lifetime = 0
session.cookie_path = /
session.cookie_domain =
session.cookie_httponly = 1
session.cookie_samesite = Lax
session.serialize_handler = php
session.gc_probability = 1
session.gc_divisor = 1000
session.gc_maxlifetime = 1440
session.referer_check =
session.cache_limiter = nocache
session.use_trans_sid = 0
session.trans_sid_tags = "a=href,area=href,frame=src,form="

[Assertion]
zend.assertions = -1

[COM]

[mbstring]

[gd]

[exif]

[Tidy]
tidy.clean_output = Off

[soap]
soap.wsdl_cache_enabled=1
soap.wsdl_cache_dir="/tmp"
soap.wsdl_cache_ttl=86400
soap.wsdl_cache_limit = 5

[sysvshm]

[ldap]
ldap.max_links = -1

[dba]

[opcache]
opcache.enable=1
opcache.enable_cli=1
opcache.memory_consumption=128
opcache.interned_strings_buffer=8
opcache.max_accelerated_files=10000
opcache.revalidate_freq=60

[curl]


[openssl]

[ffi]

[Core]
realpath_cache_size = 4096K
realpath_cache_ttl = 600

井水玉藻

PHP-FPM.CONF

[global]
pid = /var/run/php/php8.5-fpm.pid
error_log = /var/log/php8.5-fpm.log

emergency_restart_threshold = 3
emergency_restart_interval = 1m

rlimit_files = 65535

include = /etc/php/8.5/fpm/pool.d/*.conf

井水玉藻

FLARUM.CONFIG.PHP

<?php return array (
  'debug' => false,
  'database' => 
  array (
    'driver' => 'mysql',
    'database' => '2233',
    'prefix' => '',
    'prefix_indexes' => true,
    'host' => 'localhost',
    'port' => 3306,
    'username' => '2233',
    'password' => '',
    'charset' => 'utf8mb4',
    'collation' => 'utf8mb4_unicode_ci',
    'engine' => 'InnoDB',
    'strict' => false,
  ),
  'url' => 'https://love4z.cn',
  'paths' => 
  array (
    'api' => 'api',
    'admin' => 'admin',
  ),
  'headers' => 
  array (
    'poweredByHeader' => true,
    'referrerPolicy' => 'same-origin',
  ),
  'queue' => 
  array (
    'driver' => 'sync',
  ),
  'websocket' => [
    'server-host' => '127.0.0.1',
    'server-port' => 6001,
    
    'js-client-host' => 'love4z.cn',
    'js-client-port' => 443,
    'js-client-secure' => true,
    
    'php-client-host' => 'localhost',
    'php-client-port' => 6001,
    'php-client-secure' => false,
    'php-client-timeout' => 3,
  ],
);

井水玉藻

FLARUM.EXTEND.PHP

<?php
use Flarum\Extend;
return [
    new FoF\Redis\Extend\Redis([
        'host' => 'localhost',
        'password' => null,
        'port' => 6379,
        'database' => 1
    ])
];

井水玉藻

COMPOSER.JSON

{
    "name": "flarum/flarum",
    "description": "Delightfully simple forum software.",
    "type": "project",
    "keywords": [
        "forum",
        "discussion"
    ],
    "homepage": "https://flarum.org/",
    "license": "MIT",
    "authors": [
        {
            "name": "Flarum",
            "email": "info@flarum.org",
            "homepage": "https://flarum.org/team"
        }
    ],
    "support": {
        "issues": "https://github.com/flarum/core/issues",
        "source": "https://github.com/flarum/flarum",
        "docs": "https://docs.flarum.org/"
    },
    "require": {
        "datlechin/flarum-passkey": "*",
        "flarum-lang/chinese-simplified": "*",
        "flarum/approval": "*",
        "flarum/bbcode": "*",
        "flarum/core": "^2.0",
        "flarum/emoji": "*",
        "flarum/extension-manager": "*",
        "flarum/flags": "*",
        "flarum/gdpr": "*",
        "flarum/likes": "*",
        "flarum/lock": "*",
        "flarum/markdown": "*",
        "flarum/mentions": "*",
        "flarum/messages": "*",
        "flarum/nicknames": "*",
        "flarum/realtime": "*",
        "flarum/statistics": "*",
        "flarum/sticky": "*",
        "flarum/subscriptions": "*",
        "flarum/suspend": "*",
        "flarum/tags": "*",
        "fof/best-answer": "*",
        "fof/default-user-preferences": "*",
        "fof/links": "*",
        "fof/merge-discussions": "*",
        "fof/move-posts": "*",
        "fof/pages": "*",
        "fof/photoswipe": "*",
        "fof/polls": "*",
        "fof/profile-image-crop": "*",
        "fof/redis": "*",
        "fof/share-social": "*",
        "fof/sitemap": "*",
        "fof/socialprofile": "*",
        "fof/synopsis": "*",
        "fof/terms": "*",
        "fof/upload": "*",
        "fof/user-bio": "*",
        "forumaker/magicbb": "*",
        "forumaker/magicdice": "*",
        "forumaker/profile-cover": "*",
        "guzzlehttp/guzzle": "*",
        "huseyinfiliz/stickiest": "*",
        "ianm/log-viewer": "*",
        "ianm/syndication": "*",
        "ianm/twofactor": "*",
        "linkrobins/clipboard": "*",
        "ramon/backup": "*",
        "ramon/stickers": "*",
        "ramon/verified": "*",
        "web-auth/webauthn-lib": "*"
    },
    "config": {
        "preferred-install": "dist",
        "sort-packages": true,
        "allow-plugins": {
            "php-http/discovery": true
        }
    },
    "prefer-stable": true,
    "minimum-stability": "dev",
    "repositories": []
}