kevin/server-configs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Increase the maximum upload size to 30 megs in php and nginx, and update the let's encrypt renewal service

Browse source
This commit is contained in:
Kevin MacMartin 2016-09-12 18:41:03 -04:00
parent 1e84ed524f
commit d0bba32cfc
6 changed files with 20 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
README.md
View file

@ -29,7 +29,7 @@ nginx, php, systemd
8. Run `systemctl start php-fpm nginx` to start the web services and `systemctl status php-fpm` and `systemctl status nginx` to check for errors 8. Run `systemctl start php-fpm nginx` to start the web services and `systemctl status php-fpm` and `systemctl status nginx` to check for errors
9. If there were no errors in the previous command, run `systemctl enable php-fpm nginx` to enable the web services at boot 9. If there were no errors in the previous command, run `systemctl enable php-fpm nginx` to enable the web services at boot
10. Ensure the public web directory exists and run `systemctl start letsencrypt` to generate the SSL certificates 10. Ensure the public web directory exists and run `systemctl start letsencrypt` to generate the SSL certificates
11. Run `systemctl enable letsencrypt.timer` to enable the auto-renewal process 11. Run `systemctl start certbot-renewal.timer` and `systemctl enable certbot-renewal.timer` to start and enable the auto-renewal process
### MySQL Config ### MySQL Config

1
nginx/nginx.conf
View file

@ -15,6 +15,7 @@ http {
keepalive_timeout 65; keepalive_timeout 65;
types_hash_max_size 2048; types_hash_max_size 2048;
server_names_hash_bucket_size 64; server_names_hash_bucket_size 64;
client_max_body_size 30M;
gzip on; gzip on;
gzip_disable "msie6"; gzip_disable "msie6";

4
php/php.ini
View file

@ -653,7 +653,7 @@ auto_globals_jit = On
; Its value may be 0 to disable the limit. It is ignored if POST data reading ; Its value may be 0 to disable the limit. It is ignored if POST data reading
; is disabled through enable_post_data_reading. ; is disabled through enable_post_data_reading.
; http://php.net/post-max-size ; http://php.net/post-max-size
post_max_size = 10M post_max_size = 30M
; Automatically add files before PHP document. ; Automatically add files before PHP document.
; http://php.net/auto-prepend-file ; http://php.net/auto-prepend-file
@ -795,7 +795,7 @@ file_uploads = On
; Maximum allowed size for uploaded files. ; Maximum allowed size for uploaded files.
; http://php.net/upload-max-filesize ; http://php.net/upload-max-filesize
upload_max_filesize = 10M upload_max_filesize = 30M
; Maximum number of files that can be uploaded via a single request ; Maximum number of files that can be uploaded via a single request
max_file_uploads = 20 max_file_uploads = 20

7
systemd/system/certbot-renewal.service Normal file
View file

@ -0,0 +1,7 @@
[Unit]
Description=Let's Encrypt renewal
[Service]
Type=oneshot
ExecStart=/usr/bin/certbot renew --rsa-key-size 4096
ExecStartPost=/bin/systemctl reload nginx.service

9
systemd/system/certbot-renewal.timer Normal file
View file

@ -0,0 +1,9 @@
[Unit]
Description=Daily renewal of Let's Encrypt's certificates
[Timer]
OnCalendar=daily
Persistent=true
[Install]
WantedBy=timers.target

9
systemd/system/letsencrypt.timer
View file

@ -1,9 +0,0 @@
[Unit]
Description=Monthly renewal on letsencrypt's certificates
[Timer]
OnCalendar=monthly
Persistent=true
[Install]
WantedBy=timers.target