如何在Ubuntu上手动部署适合WordPress的LNMP环境,并安装SSL证书？

apt update
apt upgrade

#新建用户
adduser your_user
#给新建用户添加sudo权限
adduser your_user sudo 

#上传公匙
ssh-copy-id -i ~/.ssh/id_rsa.pub [email protected]_ip
#编辑SSH设置文件
sudo vi /etc/ssh/sshd_config
PermitRootLogin no                       #禁止root登陆
PasswordAuthentication no                #禁止使用密码登陆
#重启SSH服务
sudo service ssh restart

#安装Nginx
sudo apt install nginx
#编辑Nginx配置文件
sudo vi /etc/nginx/nginx.conf
#修改或添加以下内容
#开启gzip
gzip on;
gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
gzip_disable "MSIE [1-6]\.";
#开启Nginx缓存
location ~* ^.+\.(eot|ttf|otf|woff|svg)$ {
    access_log   off;
    expires max;
}
location ~* ^.+\.(ico|gif|jpg|jpeg|png)$ {
    access_log   off;
    expires      30d;
}                  
location ~* ^.+\.(css|js|txt|xml|swf|wav)$ {
    access_log   off;
    expires      2d;
}                
location ~* ^.+\.(html|htm)$ {
    expires      1h;
}
#保存退出
#重启Nginx服务
sudo service nginx restart

sudo apt install mysql-server-5.7
sudo mysql_secure_installation
sudo mysql
SELECT user,authentication_string,plugin,host FROM mysql.user;
ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'password’;   #password 改成你的强密码
#这里为你的网站添加一个数据库
CREATE DATABASE wordpress DEFAULT CHARACTER SET utf8 COLLATE utf8_unicode_ci;
#设置数据库的用户名和密码
GRANT ALL ON wordpress.* TO 'yourusername'@'localhost' IDENTIFIED BY 'yourpassword';
FLUSH PRIVILEGES;
exit;         #退出MySQL

#安装PHP以及wordpress必需的插件
sudo apt install php-fpm php-mysql php-curl php-gd php-intl php-mbstring php-soap php-xml php-xmlrpc php-zip
#编辑php.ini
sudo vi /etc/php/7.2/fpm/php.ini
#找到cgi.fix_pathinfo并修改为cgi.fix_pathinfo=0
#编辑Opcache配置文件
sudo vi /etc/php.d/opcache.ini
#修改以下内容
zend_extension=opcache.so
opcache.enable=1
opcache.enable_cli=1
#保存退出
#安装redis
sudo apt install redis
#启动redis
systemctl start redis.service
#重启PHP
sudo service php7.2-fpm restart    
#重启Nginx
sudo service nginx restart

sudo vi /etc/nginx/sites-available/huwencai.com   #新建虚拟主机配置文件
#添加一下内容：
server
{
listen 80;
listen [::]:80; ## listen for ipv6
root /var/www/html;
index index.php index.html index.htm index.nginx-debian.html;
server_name huwencai.com www.huwencai.com;

location /
{
try_files $uri $uri/ =404; }

location ~ .php$
{
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
}

location ~ /.ht
{
deny all;
}

}
#保存退出
sudo nginx -t     #检查配置文件有何错误
sudo ln -s /etc/nginx/sites-available/huwencai.com /etc/nginx/sites-enabled/
sudo systemctl reload nginx
sudo vi /var/www/html/info.php      #在网站目录添加一个php文件
#添加一下内容
<?php
phpinfo();
#保存退出
#访问这个文件看是否能够正常运行，如果可以正常运行
sudo rm -f /var/www/html/info.php      #切记删除它

sudo add-apt-repository ppa:certbot/certbot
sudo apt install python-certbot-nginx
sudo certbot --nginx -d huwencai.com -d www.huwencai.com
#一路同意yes就行
sudo vi /etc/nginx/sites-available/huwencai.com  #修改虚拟主机配置
#修改为以下内容
server {
listen 80;
listen [::]:80; ## listen for ipv6
server_name huwencai.com www.huwencai.com;
return 301 https://$server_name$request_uri;
}

server {
listen 443 ssl http2;
listen [::]:443 ssl http2; # managed by Certbot
server_name huwencai.com www.huwencai.com;

root /var/www/html;
index index.php index.html index.htm index.nginx-debian.html;
location = /favicon.ico { log_not_found off; access_log off; }
location = /robots.txt { log_not_found off; access_log off; allow all; }
location ~* \.(css|gif|ico|jpeg|jpg|js|png|woff)$ {
expires max;
log_not_found off;
}

location / {
try_files $uri $uri/ /index.php$is_args$args;
}

location ~ \.php$ {
include snippets/fastcgi-php.conf;
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
}

location ~ /\.ht {
deny all;
}

ssl_certificate /etc/letsencrypt/live/huwencai.com/fullchain.pem; # managed $
ssl_certificate_key /etc/letsencrypt/live/huwencai.com/privkey.pem; # manage$
include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot

ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

}
#保存退出
sudo nginx -t     #检查配置
sudo service nginx restart     #重启nginx服务
#这里检验以下SSL有没有起效
#letsencrypt一般90天就得过期，这里设置自动更新
sudo crontab -e
18 18 * * 1 certbot renew --post-hook "systemctl reload nginx

sudo ufw allow 22
sudo ufw allow http
sudo ufw allow https
sudo ufw enable
sudo ufw status

cd /tmp
wget https://wordpress.org/latest.tar.gz
tar xzvf latest.tar.gz
sudo cp -a /tmp/wordpress/. /var/www/html
sudo chown -R www-data:www-data /var/www/html
#访问你的域名完成安装
#安装Redis Object Cache插件，拷贝object-cache.php到wp-content目录
cp wordpress/wp-content/plugins/redis-cache/includes/object-cache.php wordpress/wp-content/object-cache.php
#刷新网站然后测试缓存工作没有
redis-cli -h 127.0.0.1 -p 6379