أوامر إعداد سيرفر VPS لمشروع Laravel

sudo nano ~/.ssh/authorized_keys (add public key)
sudo service ssh restart

sudo ufw allow ssh
sudo ufw allow http
sudo ufw allow https
sudo ufw allow webmin
sudo ufw allow OpenSSH
sudo ufw enable or sudo ufw reload

sudo apt update
sudo nano /etc/apt/sources.list
deb http://download.webmin.com/download/repository sarge contrib (add on bottom)
wget -q -O- http://www.webmin.com/jcameron-key.asc | sudo apt-key add
sudo apt update
sudo apt upgrade
sudo apt install webmin
sudo /usr/share/webmin/changepass.pl /etc/webmin root [new password]
sudo systemctl status webmin

sudo apt update
sudo apt install nginx
sudo ufw app list
sudo ufw allow 'Nginx HTTP'
sudo ufw status
sudo systemctl [stop-start-restart-reload-disable-enable] nginx
sudo mkdir -p /var/www/YOUR_DOMAIN/html
sudo chown -R $USER:$USER /var/www/YOUR_DOMAIN/html
sudo chmod -R 755 /var/www/YOUR_DOMAIN/html

sudo nano /etc/nginx/sites-available/YOUR_DOMAIN

server {
listen 80;
listen [::]:80;

        root /var/www/YOUR_DOMAIN/html;
        index index.html index.htm index.nginx-debian.html;

        server_name YOUR_DOMAIN www.YOUR_DOMAIN;

        location / {
                try_files $uri $uri/ =404;
        }

}

sudo ln -s /etc/nginx/sites-available/YOUR_DOMAIN /etc/nginx/sites-enabled/
sudo unlink /etc/nginx/sites-enabled/default

sudo nano /etc/nginx/nginx.conf

server_names_hash_bucket_size 64 (enable);
sudo nano /etc/hosts
167.99.244.85 YOUR_DOMAIN www.YOUR_DOMAIN
sudo nginx -t
sudo systemctl restart nginx

sudo apt install certbot python3-certbot-nginx
sudo nano /etc/nginx/sites-available/YOUR_DOMAIN
sudo nginx -t
sudo ufw allow 'Nginx Full'
sudo ufw delete allow 'Nginx HTTP'
sudo certbot --nginx -d YOUR_DOMAIN -d www.YOUR_DOMAIN
sudo systemctl status certbot.timer
sudo certbot renew --dry-run

sudo apt install software-properties-common -y
sudo add-apt-repository ppa:ondrej/php
sudo apt update
sudo apt install php8.2-fpm php8.2-mysql php8.2-curl php8.2-dom php8.2-mbstring php8.2-xml php8.2-bcmath

sudo nano /etc/nginx/sites-available/YOUR_DOMAIN

(sites-avaliable) server {

    root /var/www/YOUR_DOMAIN/html/public;

    server_name YOUR_DOMAIN www.YOUR_DOMAIN;

    add_header X-Frame-Options "SAMEORIGIN";
    add_header X-XSS-Protection "1; mode=block";
    add_header X-Content-Type-Options "nosniff";

    index index.html index.htm index.php;

    charset utf-8;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }

    error_page 404 /index.php;

    location ~ \.php$ {
        fastcgi_pass unix:/var/run/php/php8.2-fpm.sock;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        include fastcgi_params;
    }

    location ~ /\.(?!well-known).* {
        deny all;
    }

curl -sS https://getcomposer.org/installer | sudo php -- --install-dir=/usr/local/bin --filename=composer (install latest composer)

sudo apt install mariadb-server
sudo mysql_secure_installation
sudo systemctl enable mariadb.service

sudo chown -R www-data:www-data /var/www/YOUR_DOMAIN/html/storage
sudo chown -R www-data:www-data /var/www/YOUR_DOMAIN/html/bootstrap/cache