{"id":13873,"date":"2019-04-06T12:45:24","date_gmt":"2019-04-06T12:45:24","guid":{"rendered":"http:\/\/www.appservgrid.com\/paw92\/?p=13873"},"modified":"2019-04-06T12:45:24","modified_gmt":"2019-04-06T12:45:24","slug":"how-to-install-nginx-mariadb-10-php-7-lemp-stack-in-16-10-16-04","status":"publish","type":"post","link":"https:\/\/www.appservgrid.com\/paw92\/index.php\/2019\/04\/06\/how-to-install-nginx-mariadb-10-php-7-lemp-stack-in-16-10-16-04\/","title":{"rendered":"How To Install Nginx, MariaDB 10, PHP 7 (LEMP Stack) in 16.10\/16.04"},"content":{"rendered":"

The\u00a0LEMP<\/strong>\u00a0stack is an acronym which represents is a group of packages (Linux OS, Nginx web server, MySQL\\MariaDB database and PHP server-side dynamic programming language) which are used to deploy dynamic web applications and web pages.<\/p>\n

This tutorial will guide you on how to install a LEMP stack with\u00a0MariaDB 10<\/strong>,\u00a0PHP 7<\/strong>\u00a0and\u00a0HTTP 2.0<\/strong>\u00a0Support for\u00a0Nginx<\/strong>\u00a0on\u00a0Ubuntu 16.10<\/strong>\u00a0and\u00a0Ubuntu 16.04<\/strong>\u00a0server\/desktop editions.<\/p>\n

Requirements<\/h4>\n
    \n
  1. Installation of Ubuntu 16.04 Server Edition<\/a>\u00a0[instructions also works on\u00a0Ubuntu 16.10<\/strong>]<\/li>\n<\/ol>\n

    Step 1: Install the Nginx Web Server<\/h3>\n

    1.<\/strong>\u00a0Nginx is a modern and resources efficient web server used to display web pages to visitors on the internet. We\u2019ll start by installing Nginx web server from Ubuntu official repositories by using the\u00a0apt command line<\/a>.<\/p>\n

    $ sudo apt-get install nginx\r\n<\/pre>\n
    \n
    \"Install<\/a><\/p>\n
    Install Nginx on Ubuntu 16.04<\/p>\n<\/div>\n
    2.<\/strong>\u00a0Next, issue the\u00a0netstat<\/a>\u00a0and\u00a0systemctl<\/a>\u00a0commands in order to confirm if\u00a0Nginx<\/strong>\u00a0is started and binds on port\u00a080<\/strong>.<\/p>\n
    $ netstat -tlpn\r\n<\/pre>\n
    \n
    \"Check<\/a><\/p>\n
    Check Nginx Network Port Connection<\/p>\n<\/div>\n
    $ sudo systemctl status nginx.service\r\n<\/pre>\n
    \n
    \"Check<\/a><\/p>\n
    Check Nginx Service Status<\/p>\n<\/div>\n
    Once you have the confirmation that the server is started you can open a browser and navigate to your server IP address or DNS record using HTTP protocol in order to visit Nginx default web page.<\/p>\n
    http:\/\/IP-Address\r\n<\/pre>\n
    \n
    \"Verify<\/a><\/p>\n
    Verify Nginx Webpage<\/p>\n<\/div>\n
    Step 2: Enable Nginx HTTP\/2.0 Protocol<\/h3>\n
    3.<\/strong>\u00a0The\u00a0HTTP\/2.0<\/strong>\u00a0protocol which is build by default in the latest release of Nginx binaries on\u00a0Ubuntu 16.04<\/strong>\u00a0works only in conjunction with SSL and promises a huge speed improvement in loading web SSL web pages.<\/p>\n
    To enable the protocol in Nginx on\u00a0Ubuntu 16.04<\/strong>, first navigate to Nginx available sites configuration files and backup the default configuration file by issuing the below command.<\/p>\n
    $ cd \/etc\/nginx\/sites-available\/\r\n$ sudo mv default default.backup\r\n<\/pre>\n
    \n
    \"Backup<\/a><\/p>\n
    Backup Nginx Sites Configuration File<\/p>\n<\/div>\n
    4.<\/strong>\u00a0Then, using a text editor create a new default page with the below instructions:<\/p>\n
    server {\r\n        listen 443 ssl http2 default_server;\r\n        listen [::]:443 ssl http2 default_server;\r\n\r\n        root \/var\/www\/html;\r\n\r\n        index index.html index.htm index.php;\r\n\r\n        server_name 192.168.1.13;\r\n\r\n        location \/ {\r\n                try_files $uri $uri\/ =404;\r\n        }\r\n\r\n        ssl_certificate \/etc\/nginx\/ssl\/nginx.crt;\r\n        ssl_certificate_key \/etc\/nginx\/ssl\/nginx.key;\r\n\r\n        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;\r\n        ssl_prefer_server_ciphers on;\r\n        ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;\r\n        ssl_dhparam  \/etc\/nginx\/ssl\/dhparam.pem;\r\n        ssl_session_cache shared:SSL:20m;\r\n        ssl_session_timeout 180m;\r\n        resolver 8.8.8.8 8.8.4.4;\r\n        add_header Strict-Transport-Security \"max-age=31536000;\r\n        #includeSubDomains\" always;\r\n\r\n\r\n        location ~ \\.php$ {\r\n                include snippets\/fastcgi-php.conf;\r\n                fastcgi_pass unix:\/run\/php\/php7.0-fpm.sock;\r\n        }\r\n\r\n        location ~ \/\\.ht {\r\n                deny all;\r\n        }\r\n\r\n}\r\n\r\nserver {\r\n       listen         80;\r\n       listen    [::]:80;\r\n       server_name    192.168.1.13;\r\n       return         301 https:\/\/$server_name$request_uri;\r\n}\r\n<\/pre>\n
    \n
    \"Enable<\/a><\/p>\n
    Enable Nginx HTTP 2 Protocol<\/p>\n<\/div>\n
    The above configuration snippet enables the use of\u00a0HTTP\/2.0<\/strong>\u00a0by adding the\u00a0http2<\/code>\u00a0parameter to all SSL listen directives.<\/p>\n
    Also, the last part of the excerpt enclosed in server directive is used to redirect all non-SSL traffic to SSL\/TLS default host. Also, replace the\u00a0server_name<\/code>\u00a0directive to match your own IP address or DNS record (FQDN preferably).<\/p>\n
    5.<\/strong>\u00a0Once you finished editing Nginx default configuration file with the above settings, generate and list the SSL certificate file and key by executing the below commands.<\/p>\n
    Fill the certificate with your own custom settings and pay attention to\u00a0Common Name<\/strong>\u00a0setting to match your DNS FQDN record or your server IP address that will be used to access the web page.<\/p>\n
    $ sudo mkdir \/etc\/nginx\/ssl\r\n$ sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout \/etc\/nginx\/ssl\/nginx.key -out \/etc\/nginx\/ssl\/nginx.crt\r\n$ ls \/etc\/nginx\/ssl\/\r\n<\/pre>\n
    \n
    \"Generate<\/a><\/p>\n
    Generate SSL Certificate and Key for Nginx<\/p>\n<\/div>\n
    6.<\/strong>\u00a0Also, create a strong\u00a0DH cypher<\/strong>, which was changed on the above configuration file on\u00a0ssl_dhparam<\/code>instruction line, by issuing the below command:<\/p>\n
    $ sudo openssl dhparam -out \/etc\/nginx\/ssl\/dhparam.pem 2048\r\n<\/pre>\n
    \n
    \"Create<\/a><\/p>\n
    Create Diffie-Hellman Key<\/p>\n<\/div>\n
    7.<\/strong>\u00a0Once the\u00a0Diffie-Hellman<\/strong>\u00a0key has been created, verify if Nginx configuration file is correctly written and can be applied by Nginx web server and restart the daemon to reflect changes by running the below commands.<\/p>\n
    $ sudo nginx -t\r\n$ sudo systemctl restart nginx.service\r\n<\/pre>\n
    \n
    \"Check<\/a><\/p>\n
    Check Nginx Configuration<\/p>\n<\/div>\n
    8.<\/strong>\u00a0In order to test if Nginx uses\u00a0HTTP\/2.0<\/strong>\u00a0protocol issue the below command. The presence of\u00a0h2<\/code>\u00a0advertised protocol confirms that Nginx has been successfully configured to use HTTP\/2.0 protocol. All modern up-to-date browsers should support this protocol by default.<\/p>\n
    $ openssl s_client -connect localhost:443 -nextprotoneg ''\r\n<\/pre>\n
    \n
    \"Test<\/a><\/p>\n
    Test Nginx HTTP 2.0 Protocol<\/p>\n<\/div>\n
    Step 3: Install PHP 7 Interpreter<\/h3>\n
    Nginx can be used with PHP dynamic processing language interpreter to generate dynamic web content with the help of FastCGI process manager obtained by installing the\u00a0php-fpm<\/strong>\u00a0binary package from Ubuntu official repositories.<\/p>\n
    9.<\/strong>\u00a0In order to grab\u00a0PHP7.0<\/strong>\u00a0and the additional packages that will allow PHP to communicate with Nginx web server issue the below command on your server console:<\/p>\n
    $ sudo apt install php7.0 php7.0-fpm \r\n<\/pre>\n
    \n
    \"Install<\/a><\/p>\n
    Install PHP 7 and PHP-FPM for Ngin<\/p>\n<\/div>\n
    10.<\/strong>\u00a0Once the\u00a0PHP7.0<\/strong>\u00a0interpreter has been successfully installed on your machine, start and check\u00a0php7.0-fpm<\/strong>daemon by issuing the below command:<\/p>\n
    $ sudo systemctl start php7.0-fpm\r\n$ sudo systemctl status php7.0-fpm\r\n<\/pre>\n
    \n
    \"Start<\/a><\/p>\n
    Start and Verify php-fpm Service<\/p>\n<\/div>\n
    11.<\/strong>\u00a0The current configuration file of Nginx is already configured to use\u00a0PHP FastCGI<\/strong>\u00a0process manager in order to server dynamic content.<\/p>\n
    The server block that enables Nginx to use PHP interpreter is presented on the below excerpt, so no further modifications of default Nginx configuration file are required.<\/p>\n
    location ~ \\.php$ {\r\n                include snippets\/fastcgi-php.conf;\r\n                fastcgi_pass unix:\/run\/php\/php7.0-fpm.sock;\r\n        }\r\n<\/pre>\n
    Below is a screenshot of what instructions you need to uncomment and modify is case of an original Nginx default configuration file.<\/p>\n
    \n
    \"Enable<\/a><\/p>\n
    Enable PHP FastCGI for Nginx<\/p>\n<\/div>\n
    12.<\/strong>\u00a0To test Nginx web server relation with PHP FastCGI process manager create a PHP\u00a0info.php<\/code>\u00a0test configuration file by issuing the below command and verify the settings by visiting this configuration file using the below address:\u00a0http:\/\/IP_or domain\/info.php<\/code>.<\/p>\n
    $ sudo su -c 'echo \"<?php phpinfo(); ?>\" |tee \/var\/www\/html\/info.php'\r\n<\/pre>\n
    \n
    \"Create<\/a><\/p>\n
    Create PHP Info File<\/p>\n<\/div>\n
    \n
    \"Verify<\/a><\/p>\n
    Verify PHP FastCGI Info<\/p>\n<\/div>\n
    Also check if\u00a0HTTP\/2.0<\/strong>\u00a0protocol is advertised by the server by locating the line\u00a0$_SERVER[\u2018SERVER_PROTOCOL\u2019]<\/code>\u00a0on PHP Variables block as illustrated on the below screenshot.<\/p>\n
    \n
    \"Check<\/a><\/p>\n
    Check HTTP 2.0 Protocol Info<\/p>\n<\/div>\n
    13.<\/strong>\u00a0In order to install extra\u00a0PHP7.0<\/strong>\u00a0modules use the\u00a0apt search php7.0<\/code>\u00a0command to find a PHP module and install it.<\/p>\n
    Also, try to install the following PHP modules which can come in handy in case you are planning to\u00a0install WordPress<\/a>\u00a0or other CMS.<\/p>\n
    $ sudo apt install php7.0-mcrypt php7.0-mbstring\r\n<\/pre>\n
    \n
    \"Install<\/a><\/p>\n
    Install PHP 7 Modules<\/p>\n<\/div>\n
    14.<\/strong>\u00a0To register the PHP extra modules just restart\u00a0PHP-FPM<\/strong>\u00a0daemon by issuing the below command.<\/p>\n
    $ sudo systemctl restart php7.0-fpm.service\r\n<\/pre>\n
    Step 4: Install MariaDB Database<\/h3>\n
    15.<\/strong>\u00a0Finally, in order to complete our\u00a0LEMP<\/strong>\u00a0stack we need the MariaDB database component to store and manage website data.<\/p>\n
    Install\u00a0MariaDB<\/strong>\u00a0database management system by running the below command and restart\u00a0PHP-FPM<\/strong>\u00a0service in order to use MySQL module to access the database.<\/p>\n
    $ sudo apt install mariadb-server mariadb-client php7.0-mysql\r\n$ sudo systemctl restart php7.0-fpm.service\r\n<\/pre>\n
    \n
    \"Install<\/a><\/p>\n
    Install MariaDB for Nginx<\/p>\n<\/div>\n
    16.<\/strong>\u00a0To secure the MariaDB installation, run the security script provided by the binary package from Ubuntu repositories which will ask you set a root password, remove anonymous users, disable root login remotely and remove test database.<\/p>\n
    Run the script by issuing the below command and answer all questions with\u00a0yes<\/code>. Use the below screenshot as a guide.<\/p>\n
    $ sudo mysql_secure_installation\r\n<\/pre>\n
    \n
    \"Secure<\/a><\/p>\n
    Secure MariaDB Installation for Nginx<\/p>\n<\/div>\n
    17.<\/strong>\u00a0To configure MariaDB so that ordinary users can access the database without system\u00a0sudo<\/strong>\u00a0privileges, go to MySQL command line interface with root privileges and run the below commands on MySQL interpreter:<\/p>\n
    $ sudo mysql \r\nMariaDB> use mysql;\r\nMariaDB> update user set plugin=\u2019\u2018 where User=\u2019root\u2019;\r\nMariaDB> flush privileges;\r\nMariaDB> exit\r\n<\/pre>\n
    \n
    \"MariaDB<\/a><\/p>\n
    MariaDB User Permissions<\/p>\n<\/div>\n
    Finally, login to MariaDB database and run an arbitrary command without root privileges by executing the below command:<\/p>\n
    $ mysql -u root -p -e 'show databases'\r\n<\/pre>\n
    \n
    \"Check<\/a><\/p>\n
    Check MariaDB Databases<\/p>\n<\/div>\n
    That\u2019 all! Now you have a\u00a0LEMP<\/strong>\u00a0stack configured on\u00a0Ubuntu 16.10<\/strong>\u00a0and\u00a0Ubuntu 16.04<\/strong>\u00a0server that allows you to deploy complex dynamic web applications that can interact with databases.<\/p>\n
    Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
    The\u00a0LEMP\u00a0stack is an acronym which represents is a group of packages (Linux OS, Nginx web server, MySQL\\MariaDB database and PHP server-side dynamic programming language) which are used to deploy dynamic web applications and web pages. This tutorial will guide you on how to install a LEMP stack with\u00a0MariaDB 10,\u00a0PHP 7\u00a0and\u00a0HTTP 2.0\u00a0Support for\u00a0Nginx\u00a0on\u00a0Ubuntu 16.10\u00a0and\u00a0Ubuntu 16.04\u00a0server\/desktop editions. … <\/p>\n
    Continue reading “How To Install Nginx, MariaDB 10, PHP 7 (LEMP Stack) in 16.10\/16.04”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-13873","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/13873","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/comments?post=13873"}],"version-history":[{"count":1,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/13873\/revisions"}],"predecessor-version":[{"id":13874,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/13873\/revisions\/13874"}],"wp:attachment":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/media?parent=13873"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/categories?post=13873"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/tags?post=13873"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}