Настройка веб-сервера для Flute CMS

<VirtualHost *:80>
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot /var/www/flute-cms/public
    
    <Directory /var/www/flute-cms/public>
        AllowOverride All
        Require all granted
        
        # Включить mod_rewrite
        RewriteEngine On
        
        # Обработка всех запросов через index.php
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule ^(.*)$ index.php [QSA,L]
    </Directory>
    
    # Запретить доступ к служебным папкам
    <Directory /var/www/flute-cms/storage>
        Require all denied
    </Directory>
    
    <Directory /var/www/flute-cms/config>
        Require all denied
    </Directory>
    
    # Логи
    ErrorLog ${APACHE_LOG_DIR}/flute-cms-error.log
    CustomLog ${APACHE_LOG_DIR}/flute-cms-access.log combined
</VirtualHost>

<VirtualHost *:443>
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot /var/www/flute-cms/public
    
    # SSL настройки
    SSLEngine on
    SSLCertificateFile /path/to/certificate.crt
    SSLCertificateKeyFile /path/to/private.key
    SSLCertificateChainFile /path/to/chain.crt
    
    # Остальная конфигурация аналогична HTTP
    <Directory /var/www/flute-cms/public>
        AllowOverride All
        Require all granted
        RewriteEngine On
        RewriteCond %{REQUEST_FILENAME} !-f
        RewriteCond %{REQUEST_FILENAME} !-d
        RewriteRule ^(.*)$ index.php [QSA,L]
    </Directory>
</VirtualHost>

<IfModule mod_rewrite.c>
    RewriteEngine On
    
    # Перенаправление на HTTPS (опционально)
    # RewriteCond %{HTTPS} off
    # RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
    
    # Обработка запросов
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.*)$ index.php [QSA,L]
</IfModule>
 
# Безопасность
<Files "*.env">
    Require all denied
</Files>
 
<Files "composer.*">
    Require all denied
</Files>
 
# Кэширование статических файлов
<IfModule mod_expires.c>
    ExpiresActive On
    ExpiresByType text/css "access plus 1 month"
    ExpiresByType application/javascript "access plus 1 month"
    ExpiresByType image/png "access plus 1 month"
    ExpiresByType image/jpg "access plus 1 month"
    ExpiresByType image/jpeg "access plus 1 month"
    ExpiresByType image/gif "access plus 1 month"
    ExpiresByType image/svg+xml "access plus 1 month"
</IfModule>

server {
    listen 80;
    listen [::]:80;
    server_name example.com www.example.com;
    root /var/www/flute-cms/public;
    index index.php index.html;
    
    # Логи
    access_log /var/log/nginx/flute-cms-access.log;
    error_log /var/log/nginx/flute-cms-error.log;
    
    # Основная обработка запросов
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    
    # Обработка PHP файлов
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
    
    # Запрет доступа к служебным файлам
    location ~ /\. {
        deny all;
    }
    
    location ~ ^/(storage|config|vendor)/ {
        deny all;
    }
    
    location ~ \.(env|composer\.(json|lock))$ {
        deny all;
    }
    
    # Кэширование статических файлов
    location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {
        expires 1M;
        add_header Cache-Control "public, immutable";
        try_files $uri =404;
    }
    
    # Сжатие
    gzip on;
    gzip_vary on;
    gzip_min_length 1024;
    gzip_types text/plain text/css text/xml text/javascript application/javascript application/xml+rss application/json;
}

server {
    listen 443 ssl http2;
    listen [::]:443 ssl http2;
    server_name example.com www.example.com;
    root /var/www/flute-cms/public;
    index index.php index.html;
    
    # SSL сертификаты
    ssl_certificate /path/to/certificate.crt;
    ssl_certificate_key /path/to/private.key;
    ssl_trusted_certificate /path/to/chain.crt;
    
    # SSL настройки
    ssl_protocols TLSv1.2 TLSv1.3;
    ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384;
    ssl_prefer_server_ciphers off;
    ssl_session_cache shared:SSL:10m;
    ssl_session_timeout 10m;
    
    # HSTS
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
    
    # Остальная конфигурация аналогична HTTP блоку
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
    
    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
    
    # Остальные location блоки...
}
 
# Перенаправление HTTP на HTTPS
server {
    listen 80;
    listen [::]:80;
    server_name example.com www.example.com;
    return 301 https://$server_name$request_uri;
}

# Создайте символическую ссылку
sudo ln -s /etc/nginx/sites-available/flute-cms /etc/nginx/sites-enabled/
 
# Проверьте конфигурацию
sudo nginx -t
 
# Перезагрузите Nginx
sudo systemctl reload nginx

# Основные настройки
server.modules = (
    "mod_access",
    "mod_alias",
    "mod_compress",
    "mod_redirect",
    "mod_rewrite",
    "mod_fastcgi",
    "mod_expire"
)

server.document-root = "/var/www/flute-cms/public"
server.upload-dirs = ( "/var/cache/lighttpd/uploads" )
server.errorlog = "/var/log/lighttpd/error.log"
server.pid-file = "/var/run/lighttpd.pid"
server.username = "www-data"
server.groupname = "www-data"
server.port = 80

# MIME типы
mimetype.assign = (
    ".html" => "text/html",
    ".txt" => "text/plain",
    ".jpg" => "image/jpeg",
    ".png" => "image/png",
    ".css" => "text/css",
    ".js" => "application/javascript"
)

# Индексные файлы
index-file.names = ( "index.php", "index.html" )

# Обработка PHP
fastcgi.server = ( ".php" =>
    ((
        "bin-path" => "/usr/bin/php-cgi",
        "socket" => "/tmp/php.socket",
        "max-procs" => 2,
        "idle-timeout" => 20,
        "bin-environment" => (
            "PHP_FCGI_CHILDREN" => "4",
            "PHP_FCGI_MAX_REQUESTS" => "10000"
        ),
        "bin-copy-environment" => (
            "PATH", "SHELL", "USER"
        ),
        "broken-scriptfilename" => "enable"
    ))
)

# URL rewriting для Flute CMS
url.rewrite-once = (
    "^/(.*\.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot))$" => "/$1",
    "^/(.*)$" => "/index.php"
)

# Запрет доступа к служебным файлам
$HTTP["url"] =~ "^/(storage|config|vendor)/" {
    url.access-deny = ( "" )
}

$HTTP["url"] =~ "\.(env|composer\.(json|lock))$" {
    url.access-deny = ( "" )
}

# Сжатие
compress.cache-dir = "/var/cache/lighttpd/compress/"
compress.filetype = ( "application/javascript", "text/css", "text/html", "text/plain" )

# Кэширование
expire.url = (
    "/css/" => "access plus 1 months",
    "/js/" => "access plus 1 months",
    "/images/" => "access plus 1 months"
)

version: '3.8'
 
services:
  web:
    build:
      context: .
      dockerfile: Dockerfile
    container_name: flute_web
    ports:
      - "80:80"
      - "443:443"
    volumes:
      - .:/var/www/html
      - ./docker/nginx.conf:/etc/nginx/sites-available/default
      - ./docker/ssl:/etc/ssl/certs
    depends_on:
      - db
      - redis
    environment:
      - PHP_OPCACHE_ENABLE=1
      - PHP_OPCACHE_MEMORY_CONSUMPTION=256
      - PHP_OPCACHE_MAX_ACCELERATED_FILES=20000
 
  db:
    image: mysql:8.0
    container_name: flute_db
    environment:
      MYSQL_ROOT_PASSWORD: root_password
      MYSQL_DATABASE: flute_cms
      MYSQL_USER: flute_user
      MYSQL_PASSWORD: flute_password
    ports:
      - "3306:3306"
    volumes:
      - mysql_data:/var/lib/mysql
      - ./docker/mysql.cnf:/etc/mysql/conf.d/custom.cnf
 
  redis:
    image: redis:7-alpine
    container_name: flute_redis
    ports:
      - "6379:6379"
    volumes:
      - redis_data:/data
 
  phpmyadmin:
    image: phpmyadmin/phpmyadmin
    container_name: flute_phpmyadmin
    environment:
      PMA_HOST: db
      PMA_USER: root
      PMA_PASSWORD: root_password
    ports:
      - "8080:80"
    depends_on:
      - db
 
volumes:
  mysql_data:
  redis_data:

FROM php:8.2-fpm-alpine
 
# Установка системных зависимостей
RUN apk add --no-cache \
    nginx \
    supervisor \
    freetype-dev \
    libjpeg-turbo-dev \
    libpng-dev \
    libzip-dev \
    icu-dev \
    gmp-dev \
    oniguruma-dev
 
# Установка PHP расширений
RUN docker-php-ext-configure gd --with-freetype --with-jpeg \
    && docker-php-ext-install -j$(nproc) \
        gd \
        pdo_mysql \
        zip \
        ioncube \
        intl \
        bcmath \
        gmp \
        opcache
 
# Копирование конфигураций
COPY docker/nginx.conf /etc/nginx/sites-available/default
COPY docker/php.ini /usr/local/etc/php/conf.d/custom.ini
COPY docker/supervisord.conf /etc/supervisor/conf.d/supervisord.conf
 
# Установка Composer
COPY --from=composer:latest /usr/bin/composer /usr/bin/composer
 
# Рабочая директория
WORKDIR /var/www/html
 
# Копирование файлов приложения
COPY . .
 
# Установка зависимостей
RUN composer install --no-dev --optimize-autoloader
 
# Права доступа
RUN chown -R www-data:www-data /var/www/html \
    && chmod -R 755 storage \
    && chmod -R 755 public/uploads
 
EXPOSE 80 443
 
CMD ["/usr/bin/supervisord", "-c", "/etc/supervisor/conf.d/supervisord.conf"]

server {
    listen 80;
    server_name localhost;
    root /var/www/html/public;
    index index.php index.html;
 
    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }
 
    location ~ \.php$ {
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }
 
    location ~ /\. {
        deny all;
    }
}