Ce tuto propose la configuration du serveur nginx avec drupal 8.
L'architecture que je vous propose est relativement simple :
- Un répertoire contenant drupal 8 en multisite
- Un fichier de configuration pour drupal 8
- Une base de donnée par site
Pour commencer, il faut créer un fichier dans /etc/nginx/sites-available avec le contenu suivant :
server {
server_name localhost; // si drupal est seul sur le serveur nginx enlever la ligne
root /home/www-data;
location = /favicon.ico {
log_not_found off;
access_log off;
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
# Very rarely should these ever be accessed outside of your lan
location ~* \.(txt|log)$ {
allow 192.168.0.0/16;
deny all;
}
location ~ \..*/.*\.php$ {
return 403;
}
location ~ ^/sites/.*/private/ {
return 403;
}
# Allow "Well-Known URIs" as per RFC 5785
location ~* ^/.well-known/ {
allow all;
}
# Block access to "hidden" files and directories whose names begin with a
# period. This includes directories used by version control systems such
# as Subversion or Git to store control files.
location ~ (^|/)\. {
return 403;
}
location / {
# try_files $uri @rewrite; # For Drupal <= 6
try_files $uri /index.php?$query_string; # For Drupal >= 7
}
location @rewrite {
rewrite ^/(.*)$ /index.php?q=$1;
}
# Don't allow direct access to PHP files in the vendor directory.
location ~ /vendor/.*\.php$ {
deny all;
return 404;
}
# In Drupal 8, we must also match new paths where the '.php' appears in
# the middle, such as update.php/selection. The rule we use is strict,
# and only allows this pattern with the update.php front controller.
# This allows legacy path aliases in the form of
# blog/index.php/legacy-path to continue to route to Drupal nodes. If
# you do not have any paths like that, then you might prefer to use a
# laxer rule, such as:
# location ~ \.php(/|$) {
# The laxer rule will continue to work if Drupal uses this new URL
# pattern with front controllers other than update.php in a future
# release.
location ~ '\.php$|^/update.php' {
fastcgi_split_path_info ^(.+?\.php)(|/.*)$;
# Security note: If you're running a version of PHP older than the
# latest 5.3, you should have "cgi.fix_pathinfo = 0;" in php.ini.
# See http://serverfault.com/q/627903/94922 for details.
include fastcgi_params;
# Block httpoxy attacks. See https://httpoxy.org/.
fastcgi_param HTTP_PROXY "";
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param QUERY_STRING $query_string;
fastcgi_intercept_errors on;
# PHP 5 socket location.
#fastcgi_pass unix:/var/run/php5-fpm.sock;
# PHP 7 socket location.
fastcgi_pass unix:/var/run/php/php7.2-fpm.sock;
}
# Fighting with Styles? This little gem is amazing.
# location ~ ^/sites/.*/files/imagecache/ { # For Drupal <= 6
location ~ ^/sites/.*/files/styles/ { # For Drupal >= 7
try_files $uri @rewrite;
}
# Handle private files through Drupal. Private file's path can come
# with a language prefix.
location ~ ^(/[a-z\-]+)?/system/files/ { # For Drupal >= 7
try_files $uri /index.php?$query_string;
}
location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
try_files $uri @rewrite;
expires max;
log_not_found off;
}
}
Attention au chemin vers le socket php dans le paramètre fastcgi_pass selon la version que vous utilisez, il est réglé pour ubuntu dans ce fichier.
Ensuite il faut créer lien vers ce fichier dans /etc/sites-enabled :
ls -s /etc/nginx/sites-available/drupal /etc/nginx/sites-enabled/drupal
puis créer le répertoire et y placer les sources de drupal 8 :
mkdir /home/www-data
chgrp www-data /home/www-data
chmod g+w /home/www-data
cd /home/www-data
composer update
Mon fichier composer est le suivant :
{
"name": "jeanseb/bootstrap",
"description": "Drupal 8 bootstrap",
"require": {
"composer/installers": "^1.5",
"drupal/core": "8.6.2",
"drupal-composer/drupal-scaffold": "^2.4",
"drupal/scheduler": "1.0",
"drupal/sitemap": "1.4",
"drupal/captcha": "1.0-beta1",
"drupal/adsense": "1.0",
"drupal/rules": "3.0-alpha4",
"drupal/ctools": "3.0",
"drupal/views_slideshow": "4.6",
"drupal/social_post_twitter": "2.0.0-alpha3",
"drupal/devel": "1.2",
"abraham/twitteroauth": "~0",
"drupal/social_post": "2.0-beta2",
"league/oauth2-client": "~2.0",
"drupal/adaptivetheme": "3.1",
"drupal/at_tools": "3.2",
"drupal/metatag": "1.7",
"drupal/migrate_plus": "4.0",
"drupal/migrate_manifest": "1.8",
"drupal/migrate_tools": "4.0",
"drupal/features": "3.8",
"drupal/entity": "1.0-rc1",
"drupal/migrate_ui": "1.1",
"drupal/ds": "3.1",
"drupal/colorbutton": "1.1",
"drupal/google_analytics": "2.3",
"drupal/workflow": "1.1",
"drupal/eu_cookie_compliance": "1.2",
"drupal/social_auth": "2.0-beta4",
"drupal/social_auth_twitter": "2.0-alpha2",
"drupal/structure_sync": "1.13",
"drupal/colorbox_inline": "1.1",
"drupal/colorbox": "1.4",
"drupal/colorbox_field_formatter": "1.0",
"drupal/pathauto": "1.2",
"drupal/address": "1.4",
"drupal/contact_storage": "~1.0",
"drupal/contact_link": "1.1",
"drupal/recaptcha": "2.3",
"drupal/codesnippet": "1.6",
"drupal/ckeditor_scayt": "1.0-alpha2"
},
"authors": [
{
"name": "jeanseb.valette",
"email": "jeanseb@jeanseb.free.fr"
}
],
"minimum-stability": "dev",
"repositories": [
{
"type": "composer",
"url": "https://packages.drupal.org/8"
}
]
}
Puis dans le répertoire site il faut créer le fichier sites.php avec un contenu selon le modèle suivant :
<?php
$sites = array(
'localhost' => 'default',
);
?>
Si nginx sert autre chose que le drupal 8 est configuré selon ce tuto il faut une directive server_name par site.
Ne pas oublier de relancer le service nginx et de créer la base.