於CentOS7安裝 Nginx + php7 + php-fpm + Laravel5.6

陳孜穎

10 min readMar 1, 2018

Laravel Logo. From: https://commons.wikimedia.org/wiki/File:LaravelLogo.png

Laravel 需求

PHP >= 7.1.3
OpenSSL PHP Extension
PDO PHP Extension
Mbstring PHP Extension
Tokenizer PHP Extension
XML PHP Extension
Ctype PHP Extension
JSON PHP Extension

Laravel 官網連結:
https://laravel.com/docs/5.6/installation#installation

安裝Nginx

預設repo中無Ngnix，要自行新增，請參考Nginx官網。新增/etc/yum.repos.d/nginx.repo ，並加入以下內容：

[nginx]
name=nginx repo
baseurl=http://nginx.org/packages/centos/7/$basearch/
gpgcheck=0
enabled=1

2. 用yum安裝Nginx

yum install nginx

3. 預設開機開啟Nginx

systemctl enable nginx

4. 啟動Nginx

systemctl start nginx

5. 設定防火牆永久允許HTTP

firewall-cmd --permanent --zone=public --add-service=http;firewall-cmd --reload;

CentoOS中Nginx的預設root directory在 /usr/share/nginx/html

這時候應該可以透過browser看到Ngnix的預設畫面了

安裝php7

如果直接從Centos7預設的repository安裝，會安裝成php5，要安裝php7得先安裝兩個常用的repo: Remi 和 EPEL

從官網取得Remi和EPEL rpm的連結，並安裝

rpm -Uvh https://rpms.remirepo.net/enterprise/remi-release-7.rpm;
rpm -Uvh https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm;

2. 開啟remi-php72(現在php最新release為7.2.2)

yum-config-manager –enable remi-php71

3. 安裝php及Laravel必須的套件

yum install php php-ctype php-json php-openssl php-nette-tokenizer php-pecl-zip php-pdo php-mbstring php-xml

安裝與設定php-fpm

安裝php-fpm

yum install php-fpm

2. 設定php-fpm，修改 /etc/php-fpm.d/www.conf

修改user和group，為nginx

user = nginx
group = nginx

如果要改為使用socket file(預設使用127.0.0.1:9000)，則需開啟並修改listen設定為下方樣子

listen = /path/to/unix/socketlisten.owner = nobody
listen.group = nobody
listen.mode = 0666

3. 如果在debug階段，想要開啟display error，則修改以下設定

php_flag[display_errors] = on
php_flag[display_startup_errors] = on

4. 預設開機開啟php-fpm

systemctl enable php-fpm

5. 啟動php-fpm

systemctl start php-fpm

設定Nginx

修改 /etc/nginx/conf.d/default.conf ，以連接php-fpm，以下為範例

server {
    listen       80;
    server_name  localhost;    #charset koi8-r;
    #access_log  /var/log/nginx/host.access.log  main;    root   /usr/share/nginx/html;
    index  index.html index.htm index.php;    location / {
    #   autoindex on; // 如果想要開啟顯示資夾目錄的話加入這條
                      // 建議只在debug階段開啟
        try_files $uri $uri/ /index.php?$query_string;
    }    #error_page  404              /404.html;    # redirect server error pages to the static page /50x.html
    #
    error_page   500 502 503 504  /50x.html;
    location = /50x.html {
        root   /usr/share/nginx/html;
    }    # proxy the PHP scripts to Apache listening on 127.0.0.1:80
    #
    #location ~ \.php$ {
    #    proxy_pass   http://127.0.0.1;
    #}# pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
    #
    location ~ \.php$ {
        fastcgi_pass   127.0.0.1:9000
        // 若使用file socket則改成下面這行
        #   fastcgi_pass   unix:/var/run/php-fpm/php-fpm.sock; 
        fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
        include        fastcgi_params;
    }    # deny access to .htaccess files, if Apache's document root
    # concurs with nginx's one
    #
    #location ~ /\.ht {
    #    deny  all;
    #}
}

2. 重新載入Nginx的設定

nginx -s reload

現在可以試著在Nginx的root directory加入index.php，內容如下。看是否能透過瀏覽器取得php的資訊

安裝Laraval

請參考Laraval官網步驟

安裝composer，這裡安裝成global的方式。詳細見官網

php -r "copy('https://getcomposer.org/installer', 'composer-setup.php');";
php -r "if (hash_file('SHA384', 'composer-setup.php') === '544e09ee996cdf60ece3804abc52599c22b1f40f4323403c44d44fdfdd586475ca9813a858088ffbc1f233e9b180f061') { echo 'Installer verified'; } else { echo 'Installer corrupt'; unlink('composer-setup.php'); } echo PHP_EOL;";
php composer-setup.php;
php -r "unlink('composer-setup.php');";// 移動執行檔至環境路徑資料夾
mv composer.phar /usr/bin/composer

2. 用composer下載Laravel安裝檔

composer global require "laravel/installer"

3. 產生新的Laravel專案

// laravel 的安裝檔位於~/.config/composer/vendor/laravel/installer
cd ~/.config/composer/vendor/laravel/installer
laravel new project-name// 若不想切換目錄則使用以下指令
cd ~
.config/composer/vendor/laravel/installerㄥlaravel new project-name

4. 移動Laravel資料夾至Nginx的網頁根目錄(如先前有更改過根目錄，請放至更改後的目錄中)

mv project-name /usr/share/nginx/html/project-name

5. 由於CentOS使用SELinux對作業系統進行防護，所以需要給Laravel的資料夾相對應的tag，讓web server可以存取Laravel中的檔案

// 移動至ngnix的網頁根目錄
cd /usr/share/nginx/html// 查看現在的tag
ls -Z project-name// 修改laravel專案的tag
chcon -R -t httpd_sys_content_t project-name

6. httpd_sys_content_t 是讓資料夾或檔案可透過http取得，但Laravel在運行中會記錄log及存取本機檔案，所以要再修改其存取本機檔案的資料夾的tag

chcon -R -t httpd_sys_rw_content_t project-name/storage

7. 最後修改Nginx的root directory為Laravel的index.php位置

server {
    #上方略    root   /usr/share/nginx/html/project-name/public;
    index  index.html index.htm index.php;    #下方略
}

8. 重新載入Nginx的設定

nginx -s reload

9. 大功告成！現在應該可以透過瀏覽器看到Laravel的預設畫面囉！

參考資料

在 CentOS 7 安裝 Nginx、PHP-FPM、MariaDB
http://xyz.cinc.biz/2015/05/centos7-install-nginx-php-fpm-mariadb.html
RHEL / CentOS 7 安裝 PHP 7.0 及 7.1
https://www.phpini.com/linux/rhel-centos-7-install-php-7
请给你的 Laravel 一份更好的 Nginx 配置
https://yii.im/posts/the-right-way-to-set-nginx-for-laravel/
Configuring SELinux Policies for Apache Web Servers
http://www.serverlab.ca/tutorials/linux/web-servers-linux/configuring-selinux-policies-for-apache-web-servers/
CentOS, Nginx: 403 Forbidden in Laravel’s folder
https://stackoverflow.com/questions/48986258/centos-nginx-403-forbidden-in-laravels-folder
Laravel — The PHP Framework For Web Artisans
https://laravel.com