LNMP新版一键安装包NGINX反代站点加速教程

发布时间：2022 年 09 月 13 日
1214 次浏览
14597字数
分类：技术教程 Site

** Terminus SSH 连接

为什么要反代站点

通过 NGINX 反代可以使源站网络质量加速，可以隐藏源服务器的真实地址，用户可以直接访问反代服务器来获取源服务器的资源，减少源服务器的负载压力。NGINX 反代类似于 NGINX 负载均衡，虽然都能降低源站压力，但配置方法非常不一样，此处不必多说

LNMP 一键安装包下载

下载 - LNMP一键安装包

一键安装

wget http://soft.vpser.net/lnmp/lnmp2.0.tar.gz -cO lnmp2.0.tar.gz && tar zxf lnmp2.0.tar.gz && cd lnmp2.0 && ./install.sh lnmp

安装配置（一）

仅安装NGINX

第一步首先检查系统是否存在 screen 命令，如果提示 screen: command not found 命令不存在可以执行：yum install screen 或 apt-get install screen 安装

反代站点仅需要安装 NGINX 就可以了，不需要额外的 MySQL 数据库及 PHP 的安装，命令如下：

wget http://soft.vpser.net/lnmp/lnmp2.0.tar.gz -cO lnmp2.0.tar.gz && tar zxf lnmp2.0.tar.gz && cd lnmp2.0 && ./install.sh nginx

如果想稍后单独 NGINX 安装，则在安装包目录（/root/lnmp2.0/）下运行：./install.sh nginx 进行安装

添加站点

安装成功后，利用 LNMP 一键安装包的指令来添加我们的站点，具体教程参考如下

新版LNMP一键安装包建站教程-一键安装Web环境自动签发SSL证书 - 挖站否-挖掘建站的乐趣 (wzfou.com)

此处我们选择自行添加 TrustAsia 的 SSL 证书

下载证书，上传至 NGINX 配置文件目录（/usr/local/nginx/conf），放置在新建文件夹处（/usr/local/nginx/conf/cert）

cd /usr/local/nginx/conf
mkdir cert

大概流程如下，实际情况请自行修改

root@VM-16-10-debian:~# lnmp vhost add
+-------------------------------------------+
|    Manager for LNMP, Written by Licess    |
+-------------------------------------------+
|              https://lnmp.org             |
+-------------------------------------------+
Please enter domain(example: www.lnmp.org): microcharon.com
 Your domain: microcharon.com
Enter more domain name(example: lnmp.org sub.lnmp.org): www.microcharon.com
 domain list: microcharon.com www.microcharon.com
Please enter the directory for the domain: microcharon.com
Default directory: /home/wwwroot/microcharon.com: 
Virtual Host Directory: /home/wwwroot/microcharon.com
Allow Rewrite rule? (y/n) n
You choose rewrite: none
Enable PHP Pathinfo? (y/n) n
Disable pathinfo.
Allow access log? (y/n) y
Enter access log filename(Default:microcharon.com.log): 
You access log filename: microcharon.com.log
Enable IPv6? (y/n) n
Disabled IPv6 Support in current Virtualhost.
Add SSL Certificate (y/n) y
1: Use your own SSL Certificate and Key
2: Use Let's Encrypt to create SSL Certificate and Key
3: Use BuyPass to create SSL Certificate and Key
4: Use ZeroSSL to create SSL Certificate and Key
Enter 1, 2, 3 or 4: 1
Please enter full path to SSL Certificate file: /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.crt
Please enter full path to SSL Certificate Key file: /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key
Using 301 to Redirect HTTP to HTTPS? (y/n) n
DO not setting 301 Redirect.

Press any key to start create virtul host...

为站点的vhost配置反代

这是本站点的反代配置，仅供参考，实际情况请自行修改，vhost 配置文件在 /usr/local/nginx/conf/vhost/ 目录

需执行反代的 location 路径写入 server 段

#下面示例中所需的变量

$host: 请求主机头字段，否则为服务器名称
$remote_addr: 客户端的IP地址
$request_uri: 包含请求参数的原始URI，不包含主机名，如："/foo/bar.php?arg=baz"
$proxy_add_x_forwarded_for: 代表附加$remote_addr变量的客户端请求头X-Forwarded-For

反代服务器NGINX配置参考

server
    {
        listen 80;
        listen [::]:80;
        server_name microcharon.com www.microcharon.com;
        index index.html index.htm index.php default.html default.htm default.php;
        root  /home/wwwroot/microcharon.com;

        if ($host ~ '^microcharon.com'){
            return 301 https://www.microcharon.com$request_uri;
        }

        access_log  /home/wwwlogs/microcharon.com.log;
    }

server
    {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name microcharon.com www.microcharon.com;
        index index.html index.htm index.php default.html default.htm default.php;
        root  /home/wwwroot/microcharon.com;

        ssl_certificate /usr/local/nginx/confssl/microcharon.com/microcharon.com.crt;
        ssl_certificate_key /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

        if ($host ~ '^microcharon.com'){
            return 301 https://www.microcharon.com$request_uri;
        }

        #PROXY-START/
        location ^~ /
        {
            proxy_pass https://www.microcharon.com;
            proxy_redirect off;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_ssl_name www.microcharon.com;
            proxy_ssl_server_name on;
        }
        #PROXY-END/

        access_log  /home/wwwlogs/microcharon.com.log;
    }

源站服务器NGINX配置参考

server
    {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name microcharon.com;
        ssl_certificate /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com_bundle.crt;
        ssl_certificate_key /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
        return 301 https://www.microcharon.com$request_uri;
    }


server
    {
        listen 80;
        listen [::]:80;
        server_name microcharon.com www.microcharon.com;
        index index.php index.html index.htm default.php default.html default.htm;
        root  /home/wwwroot/microcharon.com;
        return 301 https://www.microcharon.com$request_uri;

        #include rewrite/typecho.conf;
        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

        include enable-php-pathinfo.conf;

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        access_log  /home/wwwlogs/microcharon.com.log;
    }

server
    {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name www.microcharon.com;
        index index.php index.html index.htm default.php default.html default.htm;
        root  /home/wwwroot/microcharon.com;

        ssl_certificate /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com_bundle.crt;
        ssl_certificate_key /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

        include rewrite/typecho.conf;
        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

        include enable-php-pathinfo.conf;

        include rewrite/typecho.conf;
        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

        include enable-php-pathinfo.conf;

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        access_log  /home/wwwlogs/microcharon.com.log;
    }

下面反代 SSL 选加，如果反代服务器上的站点和源站证书不一致时可用

prox_ssl_name $host;
proxy_ssl_server_name on

然后检查 NGINX 语法是否错误，重载/重启 NGINX 配置，可以使用 lnmp 一键包的命令，如下所示

lnmp nginx configtest #或者 nginx -t
lnmp nginx reload #或者 nginx reload
lnmp nginx restart #或者service nginx restart

修改主机Host

在 etc 目录中可以找到主机的 host 文件，在 localhost 后面加上你的源服务器的 IP 地址，如下所示（1.1.1.1）仅为示例

vi /etc/hosts
1.1.1.1 microcharon.com
1.1.1.1 www.microcharon.com

127.0.0.1 vm9588.ac.com localhost
::1 127.0.0.1 vm9588.ac.com localhost

1.1.1.1 microcharon.com
1.1.1.1 www.microcharon.com

DNS域名解析

以 DNSPod 为例，因为根域名与 www 域名均被反代，因此需要我们再添加两条 A 记录，线路类型视情况而变，记录值填写我们的反代服务器地址，如下所示

DNSPod 增添A记录

安装配置（二）

根据其他大神的修改版，现在可以添加一键添加 NGINX 反代配置。复制以下代码，覆盖掉 /usr/bin/ 目录下的 lnmp 文件，或者是 /usr/sbin 下的 lnmp 文件，然后修改文件权限

给lnmp添加一键反代功能 - 腾讯云开发者社区-腾讯云 (tencent.com)

输入命令 lnmp proxy add ，然后跟命令 lnmp vhost add 一样添加站点即可

添加完后检查语法问题，重启 NGINX ，记得修改主机 Host 以及 DNS 域名配置

Proxy 一键配置

#!/bin/bash
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
export PATH

# Check if user is root
if [ $(id -u) != "0" ]; then
    echo "Error: You must be root to run this script!"
    exit 1
fi

echo "+-------------------------------------------+"
echo "|    Manager for LNMP, Written by Licess    |"
echo "+-------------------------------------------+"
echo "|              https://lnmp.org             |"
echo "+-------------------------------------------+"

PHPFPMPIDFILE=/usr/local/php/var/run/php-fpm.pid

arg1=$1
arg2=$2

lnmp_start()
{
    echo "Starting LNMP..."
    /etc/init.d/nginx start
    /etc/init.d/mysql start
    /etc/init.d/php-fpm start
    for mphpfpm in /etc/init.d/php-fpm[5,7].[0-9]
    do
        if [ -f ${mphpfpm} ]; then
            ${mphpfpm} start
        fi
    done
}

lnmp_stop()
{
    echo "Stoping LNMP..."
    /etc/init.d/nginx stop
    /etc/init.d/mysql stop
    /etc/init.d/php-fpm stop
    for mphpfpm in /etc/init.d/php-fpm[5,7].[0-9]
    do
        if [ -f ${mphpfpm} ]; then
            ${mphpfpm} stop
        fi
    done
}

lnmp_reload()
{
    echo "Reload LNMP..."
    /etc/init.d/nginx reload
    /etc/init.d/mysql reload
    /etc/init.d/php-fpm reload
    for mphpfpm in /etc/init.d/php-fpm[5,7].[0-9]
    do
        if [ -f ${mphpfpm} ]; then
            ${mphpfpm} reload
        fi
    done
}

lnmp_kill()
{
    echo "Kill nginx,php-fpm,mysql process..."
    killall nginx
    killall mysqld
    killall php-fpm
    killall php-cgi
    echo "done."
}

lnmp_status()
{
    /etc/init.d/nginx status
    if [ -f $PHPFPMPIDFILE ]; then
        echo "php-fpm is runing!"
    else
        echo "php-fpm is stop!"
    fi
    /etc/init.d/mysql status
}

Function_Vhost()
{
    case "$1" in
        [aA][dD][dD])
            Add_VHost
            ;;
        [lL][iI][sS][tT])
            List_VHost
            ;;
        [dD][eE][lL])
            Del_VHost
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        *)
            echo "Usage: lnmp vhost {add|list|del}"
            exit 1
            ;;
    esac
}

Function_VhostProxy()
{
    case "$1" in
        [aA][dD][dD])
            Add_VHostProxy
            ;;
        *)
            echo "Usage: lnmp proxy add"
            exit 1
            ;;
    esac
}

Function_NginxConf()
{
    case "$1" in
        [aA][dD][dD])
            Add_VHost
            ;;
        [lL][iI][sS][tT])
            List_VHost
            ;;
        [dD][eE][lL])
            Del_VHost
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        *)
            echo "Usage: lnmp vhost {add|list|del}"
            exit 1
            ;;
    esac
}

Function_Database()
{
    case "$1" in
        [aA][dD][dD])
            Add_Database_Menu
            Add_Database
            ;;
        [lL][iI][sS][tT])
            List_Database
            ;;
        [dD][eE][lL])
            Del_Database
            ;;
        [eE][dD][iI][tT])
            Edit_Database
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        *)
            echo "Usage: lnmp database {add|list|del}"
            exit 1
            ;;
    esac
}

Function_Ftp()
{
    case "$1" in
        [aA][dD][dD])
            Add_Ftp_Menu
            Add_Ftp
            ;;
        [lL][iI][sS][tT])
            List_Ftp
            ;;
        [dD][eE][lL])
            Del_Ftp
            ;;
        [eE][dD][iI][tT])
            Edit_Ftp
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        [sS][hH][oO][wW])
            Show_Ftp
            ;;
        *)
            echo "Usage: lnmp ftp {add|list|del}"
            exit 1
            ;;
    esac
}

Add_VHost_Config()
{
    if [ ! -f /usr/local/nginx/conf/rewrite/${rewrite}.conf ]; then
        echo "Create Virtul Host Rewrite file......"
        touch /usr/local/nginx/conf/rewrite/${rewrite}.conf
        echo "Create rewirte file successful,You can add rewrite rule into /usr/local/nginx/conf/rewrite/${rewrite}.conf."
    else
        echo "You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/${rewrite}.conf"
    fi

    cat >"/usr/local/nginx/conf/vhost/${domain}.conf"<<EOF
server
    {
        listen 80;
        #listen [::]:80;
        server_name ${domain} ${moredomain};
        index index.html index.htm index.php default.html default.htm default.php;
        root  ${vhostdir};

        include rewrite/${rewrite}.conf;
        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

        ${include_enable_php}

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        ${al}
    }
EOF

    echo "Test Nginx configure file......"
    /usr/local/nginx/sbin/nginx -t
    echo "Reload Nginx......"
    /usr/local/nginx/sbin/nginx -s reload
}

Add_VHostProxy_Config()
{
    if [ ! -f /usr/local/nginx/conf/rewrite/${rewrite}.conf ]; then
        echo "Create Virtul Host Rewrite file......"
        touch /usr/local/nginx/conf/rewrite/${rewrite}.conf
        echo "Create rewirte file successful,You can add rewrite rule into /usr/local/nginx/conf/rewrite/${rewrite}.conf."
    else
        echo "You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/${rewrite}.conf"
    fi

    cat >"/usr/local/nginx/conf/vhost/${domain}.conf"<<EOF
upstream ${upstream} {  
    server ${server};  
} 


# 下面这段代码才是 HTTP 完整示例配置文件，注意使用时修改里面的默认域名等信息。
server
 
{
        listen 80;
        server_name ${domain} ${moredomain};
  
        location ~ \.*$ {
        #sub_filter wo.liaobu.de wo.liaobu.de;
        #sub_filter_once off;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        #proxy_set_header Referer 118.24.53.90:9898;
        proxy_set_header Host \$http_host;
        proxy_set_header X-Forwarded-Proto \$scheme;

        proxy_pass http://${upstream};
        }

}   
EOF

    echo "Test Nginx configure file......"
    /usr/local/nginx/sbin/nginx -t
    echo "Reload Nginx......"
    /usr/local/nginx/sbin/nginx -s reload
}

OverWrite_VHostProxy_Config()
{
    if [ ! -f /usr/local/nginx/conf/rewrite/${rewrite}.conf ]; then
        echo "Create Virtul Host Rewrite file......"
        touch /usr/local/nginx/conf/rewrite/${rewrite}.conf
        echo "Create rewirte file successful,You can add rewrite rule into /usr/local/nginx/conf/rewrite/${rewrite}.conf."
    else
        echo "You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/${rewrite}.conf"
    fi

    cat >"/usr/local/nginx/conf/vhost/${domain}.conf"<<EOF
server
    {
        listen 80;
        #listen [::]:80;
        server_name ${domain} ${moredomain};
        index index.html index.htm index.php default.html default.htm default.php;
        root  ${vhostdir};

        include rewrite/${rewrite}.conf;
        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

        ${include_enable_php}

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        ${al}
    }
EOF

    echo "Test Nginx configure file......"
    /usr/local/nginx/sbin/nginx -t
    echo "Reload Nginx......"
    /usr/local/nginx/sbin/nginx -s reload
}

Multiple_PHP_Select()
{
    if [[ ! -s /usr/local/php5.2/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php5.2.conf ]] && [[ ! -s /usr/local/php5.3/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php5.3.conf ]] && [[ ! -s /usr/local/php5.4/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php5.4.conf ]] && [[ ! -s /usr/local/php5.5/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php5.5.conf ]] && [[ ! -s /usr/local/php5.6/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php5.6.conf ]] && [[ ! -s /usr/local/php7.0/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php7.0.conf ]] && [[ ! -s /usr/local/php7.1/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php7.1.conf ]] && [[ ! -s /usr/local/php7.2/sbin/php-fpm && ! -s /usr/local/nginx/conf/enable-php7.2.conf ]]; then
        if [ "${enable_pathinfo}" == "y" ]; then
            include_enable_php="include enable-php-pathinfo.conf;"
        else
            include_enable_php="include enable-php.conf;"
        fi
    else
        echo "Multiple PHP version found, Please select the PHP version."
        Cur_PHP_Version="`/usr/local/php/bin/php-config --version`"
        Echo_Green "1: Default Main PHP ${Cur_PHP_Version}"
        if [[ -s /usr/local/php5.2/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php5.2.conf && -s /etc/init.d/php-fpm5.2 ]]; then
            Echo_Green "2: PHP 5.2 [found]"
        fi
        if [[ -s /usr/local/php5.3/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php5.3.conf && -s /etc/init.d/php-fpm5.3 ]]; then
            Echo_Green "3: PHP 5.3 [found]"
        fi
        if [[ -s /usr/local/php5.4/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php5.4.conf && -s /etc/init.d/php-fpm5.4 ]]; then
            Echo_Green "4: PHP 5.4 [found]"
        fi
        if [[ -s /usr/local/php5.5/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php5.5.conf && -s /etc/init.d/php-fpm5.5 ]]; then
            Echo_Green "5: PHP 5.5 [found]"
        fi
        if [[ -s /usr/local/php5.6/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php5.6.conf && -s /etc/init.d/php-fpm5.6 ]]; then
            Echo_Green "6: PHP 5.6 [found]"
        fi
        if [[ -s /usr/local/php7.0/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php7.0.conf && -s /etc/init.d/php-fpm7.0 ]]; then
            Echo_Green "7: PHP 7.0 [found]"
        fi
        if [[ -s /usr/local/php7.1/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php7.1.conf && -s /etc/init.d/php-fpm7.1 ]]; then
            Echo_Green "8: PHP 7.1 [found]"
        fi
        if [[ -s /usr/local/php7.2/sbin/php-fpm && -s /usr/local/nginx/conf/enable-php7.2.conf && -s /etc/init.d/php-fpm7.2 ]]; then
            Echo_Green "9: PHP 7.2 [found]"
        fi
        Echo_Yellow "Enter your choice (1, 2, 3, 4, 5, 6 ,7, 8 or 9): "
        read php_select
        case "${php_select}" in
            1)
                echo "Current selection: PHP ${Cur_PHP_Version}"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php-pathinfo.conf;"
                else
                    include_enable_php="include enable-php.conf;"
                fi
                ;;
            2)
                echo "Current selection: PHP `/usr/local/php5.2/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php5.2-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php5.2-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.2-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi5.2.sock/g' /usr/local/nginx/conf/enable-php5.2-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php5.2.conf;"
                fi
                ;;
            3)
                echo "Current selection: PHP `/usr/local/php5.3/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php5.3-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php5.3-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.3-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi5.3.sock/g' /usr/local/nginx/conf/enable-php5.3-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php5.3.conf;"
                fi
                ;;
            4)
                echo "Current selection: PHP `/usr/local/php5.4/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php5.4-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php5.4-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.4-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi5.4.sock/g' /usr/local/nginx/conf/enable-php5.4-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php5.4.conf;"
                fi
                ;;
            5)
                echo "Current selection: PHP `/usr/local/php5.5/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php5.5-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php5.5-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.5-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi5.5.sock/g' /usr/local/nginx/conf/enable-php5.5-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php5.5.conf;"
                fi
                ;;
            6)
                echo "Current selection: PHP `/usr/local/php5.6/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php5.6-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php5.6-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.6-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi5.6.sock/g' /usr/local/nginx/conf/enable-php5.6-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php5.6.conf;"
                fi
                ;;
            7)
                echo "Current selection:: PHP `/usr/local/php7.0/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php7.0-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php7.0-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php7.0-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi7.0.sock/g' /usr/local/nginx/conf/enable-php7.0-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php7.0.conf;"
                fi
                ;;
            8)
                echo "Current selection:: PHP `/usr/local/php7.1/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php7.1-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php7.1-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php7.1-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi7.1.sock/g' /usr/local/nginx/conf/enable-php7.1-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php7.1.conf;"
                fi
                ;;
            9)
                echo "Current selection:: PHP `/usr/local/php7.2/bin/php-config --version`"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php7.2-pathinfo.conf;"
                    if [ ! -s /usr/local/nginx/conf/enable-php7.2-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php7.2-pathinfo.conf
                        sed -i 's/php-cgi.sock/php-cgi7.2.sock/g' /usr/local/nginx/conf/enable-php7.2-pathinfo.conf
                    fi
                else
                    include_enable_php="include enable-php7.2.conf;"
                fi
                ;;
            *)
                echo "Default,Current selection: PHP ${Cur_PHP_Version}"
                php_select="1"
                if [ "${enable_pathinfo}" == "y" ]; then
                    include_enable_php="include enable-php-pathinfo.conf;"
                else
                    include_enable_php="include enable-php.conf;"
                fi
                ;;
        esac
    fi
}

Add_VHost()
{
    domain=""
    while :;do
        Echo_Yellow "Please enter domain(example: www.lnmp.org): "
        read domain
        if [ "${domain}" != "" ]; then
            if [ -f "/usr/local/nginx/conf/vhost/${domain}.conf" ]; then
                Echo_Red " ${domain} is exist,please check!"
                exit 1
            else
                echo " Your domain: ${domain}"
            fi
            break
        else
            Echo_Red "Domain name can't be empty!"
        fi
    done

    Echo_Yellow "Enter more domain name(example: lnmp.org *.lnmp.org): "
    read moredomain
    if [ "${moredomain}" != "" ]; then
        echo " domain list: ${moredomain}"
    fi

    vhostdir="/home/wwwroot/${domain}"
    echo "Please enter the directory for the domain: $domain"
    Echo_Yellow "Default directory: /home/wwwroot/${domain}: "
    read vhostdir
    if [ "${vhostdir}" == "" ]; then
        vhostdir="/home/wwwroot/${domain}"
    fi
    echo "Virtual Host Directory: ${vhostdir}"

    Echo_Yellow "Allow Rewrite rule? (y/n) "
    read allow_rewrite
    if [[ "${allow_rewrite}" == "n" || "${allow_rewrite}" == "" ]]; then
        rewrite="none"
    elif [ "${allow_rewrite}" == "y" ]; then
        rewrite="other"
        echo "Please enter the rewrite of programme, "
        echo "wordpress,discuzx,typecho,thinkphp,laravel,codeigniter,yii2 rewrite was exist."
        Echo_Yellow "(Default rewrite: other): "
        read rewrite
        if [ "${rewrite}" == "" ]; then
            rewrite="other"
        fi
    fi
    echo "You choose rewrite: ${rewrite}"

    Echo_Yellow "Enable PHP Pathinfo? (y/n) "
    read enable_pathinfo
    if [[ "${enable_pathinfo}" == "n" || "${enable_pathinfo}" == "" ]]; then
        echo "Disable pathinfo."
        enable_pathinfo="n"
    elif [ "${enable_pathinfo}" == "y" ]; then
        echo "Enable pathinfo."
        enable_pathinfo="y"
    fi

    Echo_Yellow "Allow access log? (y/n) "
    read access_log
    if [[ "${access_log}" == "n" || "${access_log}" == "" ]]; then
        echo "Disable access log."
        al="access_log off;"
    else
        Echo_Yellow "Enter access log filename(Default:${domain}.log): "
        read al_name
        if [ "${al_name}" == "" ]; then
            al_name="${domain}"
        fi
        al="access_log  /home/wwwlogs/${al_name}.log;"
        echo "You access log filename: ${al_name}.log"
    fi

    Multiple_PHP_Select

    if [[ -s /usr/local/mysql/bin/mysql || -s /usr/local/mariadb/bin/mysql ]]; then
        Echo_Yellow "Create database and MySQL user with same name (y/n) "
        read create_database

        if [ "${create_database}" == "y" ]; then
            Verify_DB_Password
            Add_Database_Menu
        fi
    fi

    if [ -s /usr/local/pureftpd/sbin/pure-ftpd ]; then
        Echo_Yellow "Create ftp account (y/n) "
        read create_ftp

        if [ "${create_ftp}" == "y" ]; then
            Add_Ftp_Menu
        fi
    fi

    Echo_Yellow "Add SSL Certificate (y/n) "
    read create_ssl
    if [ "${create_ssl}" == "y" ]; then
        Add_SSL_Menu
    fi

    echo ""
    echo "Press any key to start create virtul host..."
    OLDCONFIG=`stty -g`
    stty -icanon -echo min 1 time 0
    dd count=1 2>/dev/null
    stty ${OLDCONFIG}

    echo "Create Virtul Host directory......"
    mkdir -p ${vhostdir}
    if [ "${access_log}" == "y" ]; then
        touch /home/wwwlogs/${al_name}.log
    fi
    echo "set permissions of Virtual Host directory......"
    chmod -R 755 ${vhostdir}
    chown -R www:www ${vhostdir}

    Add_VHost_Config

    cat >${vhostdir}/.user.ini<<EOF
open_basedir=${vhostdir}:/tmp/:/proc/
EOF
    chmod 644 ${vhostdir}/.user.ini
    chattr +i ${vhostdir}/.user.ini

    /etc/init.d/php-fpm restart

    if [ "${create_database}" == "y" ]; then
        Add_Database
    fi

    if [ "${create_ftp}" == "y" ]; then
        Add_Ftp
    fi

    if [ "${create_ssl}" == "y" ]; then
        Add_SSL
    fi

    Echo_Green "================================================"
    echo "Virtualhost infomation:"
    echo "Your domain: ${domain}"
    echo "Home Directory: ${vhostdir}"
    echo "Rewrite: ${rewrite}"
    if [ "${access_log}" == "n" ]; then
        echo "Enable log: no"
    else
        echo "Enable log: yes"
    fi
    if [ "${create_database}" == "y" ]; then
        echo "Database username: ${database_name}"
        echo "Database userpassword: ${mysql_password}"
        echo "Database Name: ${database_name}"
    else
        echo "Create database: no"
    fi
    if [ "${create_ftp}" == "y" ]; then
        echo "FTP account name: ${ftp_account_name}"
        echo "FTP account password: ${ftp_account_password}"
    else
        echo "Create ftp account: no"
    fi
    if [ "${create_ssl}" == "y" ]; then
        echo "Enable SSL: yes"
        if [ "${ssl_choice}" == "1" ]; then
            echo "  =>Certificate file"
        elif [ "${ssl_choice}" == "2" ]; then
            echo "  =>Let's Encrypt"
        fi
    fi
    Echo_Green "================================================"
}

Add_VHostProxy()
{
    domain=""
    while :;do
        Echo_Yellow "Please enter domain(example: www.lnmp.org): "
        read domain
        if [ "${domain}" != "" ]; then
            if [ -f "/usr/local/nginx/conf/vhost/${domain}.conf" ]; then
                Echo_Red " ${domain} is exist,please check!"
                exit 1
            else
                echo " Your domain: ${domain}"
            fi
            break
        else
            Echo_Red "Domain name can't be empty!"
        fi
    done

    Echo_Yellow "Enter more domain name(example: lnmp.org *.lnmp.org): "
    read moredomain
    if [ "${moredomain}" != "" ]; then
        echo " domain list: ${moredomain}"
    fi
  
    vhostdir="/home/wwwroot/${domain}"
    echo "Please enter the directory for the domain: $domain"
    Echo_Yellow "Default directory: /home/wwwroot/${domain}: "
    read vhostdir
    if [ "${vhostdir}" == "" ]; then
        vhostdir="/home/wwwroot/${domain}"
    fi
    echo "Virtual Host Directory: ${vhostdir}"
  
    Echo_Yellow "Enter upstream(example: liaobu.de is liaobude): "
    read upstream
    if [ "${upstream}" != "" ]; then
        echo " upstream is: ${upstream}"
    else
        Echo_Red "upstream can't be empty!"
    fi
  
    Echo_Yellow "Enter the source station address(example: 1.1.1.1:8080): "
    read server
    if [ "${server}" != "" ]; then
        echo " server is: ${server}"
    else
        Echo_Red "server can't be empty!"
    fi
  
    Echo_Yellow "Allow access log? (y/n) "
    read access_log
    if [[ "${access_log}" == "n" || "${access_log}" == "" ]]; then
        echo "Disable access log."
        al="access_log off;"
    else
        Echo_Yellow "Enter access log filename(Default:${domain}.log): "
        read al_name
        if [ "${al_name}" == "" ]; then
            al_name="${domain}"
        fi
        al="access_log  /home/wwwlogs/${al_name}.log;"
        echo "You access log filename: ${al_name}.log"
    fi

    Multiple_PHP_Select
  
    Echo_Yellow "Add SSL Certificate (y/n) "
    read create_ssl
    if [ "${create_ssl}" == "y" ]; then
        Add_SSL_Menu
    fi

    echo ""
    echo "Press any key to start create virtul host..."
    OLDCONFIG=`stty -g`
    stty -icanon -echo min 1 time 0
    dd count=1 2>/dev/null
    stty ${OLDCONFIG}

    echo "Create Virtul Host directory......"
    mkdir -p ${vhostdir}
    if [ "${access_log}" == "y" ]; then
        touch /home/wwwlogs/${al_name}.log
    fi
    echo "set permissions of Virtual Host directory......"
    chmod -R 755 ${vhostdir}
    chown -R www:www ${vhostdir}

    Add_VHostProxy_Config

    cat >${vhostdir}/.user.ini<<EOF
open_basedir=${vhostdir}:/tmp/:/proc/
EOF
    chmod 644 ${vhostdir}/.user.ini
    chattr +i ${vhostdir}/.user.ini

    /etc/init.d/php-fpm restart


    if [ "${create_ssl}" == "y" ]; then
        Add_ProxySSL
    fi

    Echo_Green "================================================"
    echo "Virtualhost infomation:"
    echo "Your domain: ${domain}"
    if [ "${access_log}" == "n" ]; then
        echo "Enable log: no"
    else
        echo "Enable log: yes"
    fi

    if [ "${create_ssl}" == "y" ]; then
        echo "Enable SSL: yes"
        if [ "${ssl_choice}" == "1" ]; then
            echo "  =>Certificate file"
        elif [ "${ssl_choice}" == "2" ]; then
            echo "  =>Let's Encrypt"
        fi
    fi
    Echo_Green "================================================"
}

List_VHost()
{
    echo "Nginx Virtualhost list:"
    ls /usr/local/nginx/conf/vhost/ | grep ".conf$" | sed 's/.conf//g'
}

Del_VHost()
{
    echo "======================================="
    echo "Current Virtualhost:"
    List_VHost
    echo "======================================="
    domain=""
    while :;do
        Echo_Yellow "Please enter domain you want to delete: "
        read domain
        if [ "${domain}" == "" ]; then
            Echo_Red "Domain name can't be empty."
        else
            break
        fi
    done
    if [ ! -f "/usr/local/nginx/conf/vhost/${domain}.conf" ]; then
        echo "=========================================="
        echo "Domain: ${domain} was not exist!"
        echo "=========================================="
        exit 1
    else
        if [ -f "${vhostdir}/.user.ini" ]; then
            chattr -i "${vhostdir}/.user.ini"
            rm -f "${vhostdir}/.user.ini"
        fi
        rm -f /usr/local/nginx/conf/vhost/${domain}.conf
        echo "========================================================"
        echo "Domain: ${domain} has been deleted."
        echo "Website files will not be deleted for security reasons."
        echo "You need to manually delete the website files."
        echo "========================================================"
    fi
}

Check_DB()
{
    if [[ -s /usr/local/mariadb/bin/mysql && -s /usr/local/mariadb/bin/mysqld_safe && -s /etc/my.cnf ]]; then
        MySQL_Bin="/usr/local/mariadb/bin/mysql"
        MySQL_Ver=`/usr/local/mariadb/bin/mysql_config --version`
    elif [[ -s /usr/local/mysql/bin/mysql && -s /usr/local/mysql/bin/mysqld_safe && -s /etc/my.cnf ]]; then
        MySQL_Bin="/usr/local/mysql/bin/mysql"
        MySQL_Ver=`/usr/local/mysql/bin/mysql_config --version`
    else
        MySQL_Bin="None"
    fi
}

Make_TempMycnf()
{
    cat >~/.my.cnf<<EOF
[client]
user=root
password='$1'
EOF
    chmod 600 ~/.my.cnf
}

Verify_DB_Password()
{
    Check_DB
    status=1
    while [ $status -eq 1 ]; do
        Echo_Yellow "Enter current root password of Database (Password will not shown): "
        read -s DB_Root_Password
        echo
        Make_TempMycnf "${DB_Root_Password}"
        Do_Query ""
        status=$?
    done
    echo "OK, MySQL root password correct."
}

Do_Query()
{
    echo "$1" >/tmp/.mysql.tmp
    chmod 600 /tmp/.mysql.tmp
    Check_DB
    ${MySQL_Bin} --defaults-file=~/.my.cnf </tmp/.mysql.tmp
    return $?
}

TempMycnf_Clean()
{
    if [ -s ~/.my.cnf ]; then
        rm -f ~/.my.cnf
    fi
    if [ -s /tmp/.mysql.tmp ]; then
        rm -f /tmp/.mysql.tmp
    fi
}

Enter_Database_Name()
{
    while :;do
        Echo_Yellow "Enter database name: "
        read database_name
        if [ "${database_name}" == "" ]; then
            Echo_Red "Database Name can't be empty!"
        else
            break
        fi
    done
}

Add_Database_Menu()
{
    Enter_Database_Name
    echo "Your will create a database and MySQL user with same name: ${database_name}"
    Echo_Yellow "Please enter password for mysql user ${database_name}: "
    read mysql_password
    echo "Your password: ${mysql_password} "
}

Add_Database()
{
    if echo "${MySQL_Ver}" | grep -Eqi '^8.0.';then
        cat >/tmp/.add_mysql.sql<<EOF
CREATE USER '${database_name}'@'localhost' IDENTIFIED BY '${mysql_password}';
CREATE USER '${database_name}'@'127.0.0.1' IDENTIFIED BY '${mysql_password}';
GRANT USAGE ON *.* TO '${database_name}'@'localhost';
GRANT USAGE ON *.* TO '${database_name}'@'127.0.0.1';
CREATE DATABASE IF NOT EXISTS \`${database_name}\`;
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO '${database_name}'@'localhost';
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO '${database_name}'@'127.0.0.1';
FLUSH PRIVILEGES;
EOF

    else
        cat >/tmp/.add_mysql.sql<<EOF
CREATE USER '${database_name}'@'localhost' IDENTIFIED BY '${mysql_password}';
CREATE USER '${database_name}'@'127.0.0.1' IDENTIFIED BY '${mysql_password}';
GRANT USAGE ON *.* TO '${database_name}'@'localhost' IDENTIFIED BY '${mysql_password}';
GRANT USAGE ON *.* TO '${database_name}'@'127.0.0.1' IDENTIFIED BY '${mysql_password}';
CREATE DATABASE IF NOT EXISTS \`${database_name}\`;
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO '${database_name}'@'localhost';
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO '${database_name}'@'127.0.0.1';
FLUSH PRIVILEGES;
EOF

    fi
    ${MySQL_Bin} --defaults-file=~/.my.cnf < /tmp/.add_mysql.sql
    [ $? -eq 0 ] && echo "Add database Sucessfully." || echo "Add database failed!"
    rm -f /tmp/.add_mysql.sql
}

List_Database()
{
    ${MySQL_Bin} --defaults-file=~/.my.cnf -e "SHOW DATABASES;"
    [ $? -eq 0 ] && echo "List all databases Sucessfully." || echo "List all databases failed!"
}

Edit_Database()
{
    while :;do
        Echo_Yellow "Enter database username: "
        read database_username
        if [ "${database_username}" == "" ]; then
            Echo_Red "Database Username can't be empty!"
        else
            break
        fi
    done
    while :;do
        Echo_Yellow "Enter NEW Password: "
        read database_username_passwd
        if [ "${database_username_passwd}" == "" ]; then
            Echo_Red "Database Password can't be empty!"
        else
            break
        fi
    done

    if echo "${MySQL_Ver}" | grep -Eqi '^5.7.';then
        Do_Query "UPDATE mysql.user SET authentication_string=PASSWORD('${database_username_passwd}') WHERE User='${database_username}' AND Host IN ('localhost', '127.0.0.1', '::1');"
    elif echo "${MySQL_Ver}" | grep -Eqi '^8.0.';then
        Do_Query "SET PASSWORD FOR '${database_username}'@'127.0.0.1' = '${database_username_passwd}';"
        Do_Query "SET PASSWORD FOR '${database_username}'@'localhost' = '${database_username_passwd}';"
    else
        Do_Query "UPDATE mysql.user SET Password=PASSWORD('${database_username_passwd}') WHERE User='${database_username}' AND Host IN ('localhost', '127.0.0.1', '::1');"
    fi
    [ $? -eq 0 ] && echo "Edit user password Sucessfully." || echo "Edit user password databases failed!"
    Do_Query "FLUSH PRIVILEGES;"
}

Del_Database()
{
    List_Database
    Enter_Database_Name
    if [[ "${database_name}" == "information_schema" || "${database_name}" == "mysql" || "${database_name}" == "performance_schema" ]]; then
        echo "MySQL System Database can't be delete!"
        exit 1
    fi
    echo "Your will delete database and MySQL user with same name: ${database_name}"
    echo "Sleep 10s, Press ctrl+c to cancel..."
    Sleep_Sec 10
    cat >/tmp/.del.mysql.sql<<EOF
DROP USER '${database_name}'@'127.0.0.1';
DROP USER '${database_name}'@'localhost';
DROP DATABASE \`${database_name}\`;
FLUSH PRIVILEGES;
EOF
    ${MySQL_Bin} --defaults-file=~/.my.cnf < /tmp/.del.mysql.sql
    [ $? -eq 0 ] && echo "Delete database: ${database_name} Sucessfully." || echo "Delete database: ${database_name} failed!"
    rm -f /tmp/.del.mysql.sql
}

Enter_Ftp_Name()
{
    while :;do
        Echo_Yellow "Enter ftp account name: "
        read ftp_account_name
        if [ "${ftp_account_name}" == "" ]; then
            Echo_Red "FTP account name can't be empty!"
        else
            break
        fi
    done
}

Add_Ftp_Menu()
{
    Enter_Ftp_Name
    while :;do
        Echo_Yellow "Enter password for ftp account ${ftp_account_name}: "
        read ftp_account_password
        if [ "${ftp_account_password}" == "" ]; then
            Echo_Red "FTP password can't be empty!"
        else
            break
        fi
    done
    if [ "${vhostdir}" == "" ]; then
        while :;do
            Echo_Yellow "Enter directory for ftp account ${ftp_account_name}: "
            read vhostdir
            if [ "${vhostdir}" == "" ]; then
                Echo_Red "Directory can't be empty!"
            else
                break
            fi
        done
    fi
}

Check_Pureftpd()
{
    if [ ! -f /usr/local/pureftpd/sbin/pure-ftpd ]; then
        Echo_Red "Pureftpd was not installed!"
        exit 1
    fi
}

Add_Ftp()
{
    www_uid=`id -u www`
    www_gid=`id -g www`
    cat >/tmp/pass${ftp_account_name}<<EOF
${ftp_account_password}
${ftp_account_password}
EOF
    /usr/local/pureftpd/bin/pure-pw useradd ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -u ${www_uid} -g ${www_gid} -d ${vhostdir} -m < /tmp/pass${ftp_account_name}
    [ $? -eq 0 ] && echo "Created FTP User: ${ftp_account_name} Sucessfully." || echo "FTP User: ${ftp_account_name} already exists!"
    rm -f /tmp/pass${ftp_account_name}
}

List_Ftp()
{
    /usr/local/pureftpd/bin/pure-pw list -f /usr/local/pureftpd/etc/pureftpd.passwd
    [ $? -eq 0 ] && echo "List FTP User Sucessfully." || echo "Read database failed."
}

Edit_Ftp()
{
    List_Ftp
    Enter_Ftp_Name
    Echo_Yellow "Enter password for ftp account ${ftp_account_name}: "
    read ftp_account_password
    if [ "${ftp_account_password}" != "" ]; then
        cat >/tmp/pass${ftp_account_name}<<EOF
${ftp_account_password}
${ftp_account_password}
EOF
        /usr/local/pureftpd/bin/pure-pw passwd ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -m < /tmp/pass${ftp_account_name}
        [ $? -eq 0 ] && echo "FTP User: ${ftp_account_name} change password Sucessfully." || echo "FTP User: ${ftp_account_name} change password failed!"
        rm -f /tmp/pass${ftp_account_name}
    else
        echo "FTP password will not change."
    fi
    Echo_Yellow "Enter directory for ftp account ${ftp_account_name}: "
    read vhostdir
    if [ "${vhostdir}" != "" ]; then
        www_uid=`id -u www`
        www_gid=`id -g www`
        /usr/local/pureftpd/bin/pure-pw usermod ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -u ${www_uid} -g ${www_gid} -d ${vhostdir} -m
        [ $? -eq 0 ] && echo "FTP User: ${ftp_account_name} change diretcory Sucessfully." || echo "FTP User: ${ftp_account_name} change directory failed!"
    else
        echo "Directory will not change."
    fi
}

Del_Ftp()
{
    List_Ftp
    Enter_Ftp_Name
    echo "Your will delete ftp user ${ftp_account_name}"
    echo "Sleep 3s,Press ctrl+c to cancel..."
    Sleep_Sec 3
    /usr/local/pureftpd/bin/pure-pw userdel ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -m
    [ $? -eq 0 ] && echo "FTP User: ${ftp_account_name} deleted Sucessfully." || echo "FTP User: ${ftp_account_name} not exists!"
}

Show_Ftp()
{
    List_Ftp
    Enter_Ftp_Name
    echo "Your ftp account ${ftp_account_name} details:"
    /usr/local/pureftpd/bin/pure-pw show ${ftp_account_name}
    [ $? -eq 0 ] && echo "Ok." || echo "failed."
}

Add_SSL_Info_Menu()
{
    domain=""
    while :;do
        Echo_Yellow "Please enter domain(example: www.lnmp.org): "
        read domain
        if [ "${domain}" != "" ]; then
            echo " Your domain: ${domain}"
            break
        else
            Echo_Red "Domain name can't be empty!"
        fi
    done

    Echo_Yellow "Enter more domain name(example: lnmp.org *.lnmp.org): "
    read moredomain
    if [ "${moredomain}" != "" ]; then
        echo " domain list: ${moredomain}"
    fi

    while :;do
        Echo_Yellow "Please enter the directory for domain $domain: "
        read vhostdir
        if [ "${vhostdir}" == "" ]; then
            Echo_Red "Directory cannot be empty!"
        else
            break
        fi
        echo "Virtual Host Directory: ${vhostdir}"
    done

    Echo_Yellow "Allow Rewrite rule? (y/n) "
    read allow_rewrite
    if [[ "${allow_rewrite}" == "n" || "${allow_rewrite}" == "" ]]; then
        rewrite="none"
    elif [ "${allow_rewrite}" == "y" ]; then
        rewrite="other"
        echo "Please enter the rewrite of programme, "
        echo "wordpress,discuzx,typecho,thinkphp,laravel,codeigniter,yii2 rewrite was exist."
        Echo_Yellow "(Default rewrite: other): "
        read rewrite
        if [ "${rewrite}" == "" ]; then
            rewrite="other"
        fi
    fi
    echo "You choose rewrite: ${rewrite}"

    Echo_Yellow "Allow access log? (y/n) "
    read access_log
    if [[ "${access_log}" == "n" || "${access_log}" == "" ]]; then
        echo "Disable access log."
        al="access_log off;"
    else
        Echo_Yellow "Enter access log filename(Default:${domain}.log): "
        read al_name
        if [ "${al_name}" == "" ]; then
            al_name="${domain}"
        fi
        al="access_log  /home/wwwlogs/${al_name}.log;"
        echo "You access log filename: ${al_name}.log"
    fi

    Echo_Yellow "Enable PHP Pathinfo? (y/n) "
    read enable_pathinfo
    if [[ "${enable_pathinfo}" == "n" || "${enable_pathinfo}" == "" ]]; then
        echo "Disable pathinfo."
    elif [ "${allow_rewrite}" == "y" ]; then
        echo "Enable pathinfo."
        enable_pathinfo="y"
    fi

    Multiple_PHP_Select
}

Add_SSL_Menu()
{
    if [ "${info}" == "n" ]; then
        Add_SSL_Info_Menu
    fi
    echo "1: Use your own SSL Certificate and Key"
    echo "2: Use Let's Encrypt to create SSL Certificate and Key"
    while :;do
        Echo_Yellow "Enter 1 or 2: "
        read ssl_choice
        if [ "${ssl_choice}" == "1" ]; then
            while :;do
                Echo_Yellow "Please enter full path to SSL Certificate file: "
                read ssl_certificate
                if [ "${ssl_certificate}" == "" ]; then
                    Echo_Red "SSL Certificate file cannot be empty!"
                else
                    break
                fi
            done
            while :;do
                Echo_Yellow "Please enter full path to SSL Certificate Key file: "
                read ssl_certificate_key
                if [ "${ssl_certificate_key}" == "" ]; then
                    Echo_Red "SSL Certificate Key file cannot be empty!"
                else
                    break
                fi
            done
            break
        elif [ "${ssl_choice}" == "2" ]; then
            echo "It will be processed automatically."
            break
        else
            Echo_Red "Please Enter 1 or 2!"
        fi
    done
}

Add_Letsencrypt()
{
    if [[ "${vhostdir}" == "" || "${letsdomain}" == "" ]]; then
        Echo_Red "Two parameters are needed!"
        exit 1
    fi
    if [ ! -d "${vhostdir}" ]; then
        Echo_Red "${vhostdir} does not exist or is not a directory!"
        exit
    fi
    if [ -s /usr/local/acme.sh/acme.sh ]; then
        echo "/usr/local/acme.sh/acme.sh [found]"
    else
        cd /tmp
        [[ -f latest.tar.gz ]] && rm -f latest.tar.gz
        wget https://soft.vpser.net/lib/acme.sh/latest.tar.gz --prefer-family=IPv4 --no-check-certificate
        tar zxf latest.tar.gz
        cd acme.sh-*
        ./acme.sh --install --log --home /usr/local/acme.sh --certhome /usr/local/nginx/conf/ssl
        cd ..
        rm -f latest.tar.gz
        rm -rf acme.sh-*
        sed -i 's/cat "\$CERT_PATH"$/#cat "\$CERT_PATH"/g' /usr/local/acme.sh/acme.sh
    fi

    . "/usr/local/acme.sh/acme.sh.env"

    if [ -s /usr/local/nginx/conf/ssl/${domain}/fullchain.cer ]; then
        echo "Removing exist domain certificate..."
        rm -rf /usr/local/nginx/conf/ssl/${domain}
    fi

    echo "Starting create SSL Certificate use Let's Encrypt..."
    /usr/local/acme.sh/acme.sh --issue ${letsdomain} -w ${vhostdir} --reloadcmd "/etc/init.d/nginx reload"
    lets_status=$?
    if [ "${lets_status}" = 0 ]; then
        Echo_Green "Let's Encrypt SSL Certificate create successfully."
    else
        Echo_Red "Let's Encrypt SSL Certificate create failed!"
    fi
}

Create_SSL_Config()
{
    if [ ! -s /usr/local/nginx/conf/ssl/dhparam.pem ]; then
        echo "Create dhparam.pem..."
        mkdir -p /usr/local/nginx/conf/ssl/
        openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    fi

    cat >>"/usr/local/nginx/conf/vhost/${domain}.conf"<<EOF

server
    {
        listen 443 ssl http2;
        #listen [::]:443 ssl http2;
        server_name ${domain} ${moredomain};
        index index.html index.htm index.php default.html default.htm default.php;
        root  ${vhostdir};
        ssl on;
        ssl_certificate ${ssl_certificate};
        ssl_certificate_key ${ssl_certificate_key};
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers "EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5";
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

        include rewrite/${rewrite}.conf;
        #error_page   404   /404.html;

        # Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

        ${include_enable_php}

        location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

        location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

        location ~ /.well-known {
            allow all;
        }

        location ~ /\.
        {
            deny all;
        }

        ${al}
    }
EOF

    echo "Test Nginx configure file......"
    /usr/local/nginx/sbin/nginx -t
    echo "Reload Nginx......"
    /usr/local/nginx/sbin/nginx -s reload
}

Add_SSL()
{
    if [ "${ssl_choice}" == "1" ]; then
        Create_SSL_Config
    elif [ "${ssl_choice}" == "2" ]; then
        letsdomain=""
        if [ "${moredomain}" != "" ]; then
            letsdomain="-d ${domain}"
            for i in ${moredomain};do
                letsdomain=${letsdomain}" -d ${i}"
            done
        else
            letsdomain="-d ${domain}"
        fi
        if [ ! -s "/usr/local/nginx/conf/vhost/${domain}.conf" ]; then
            Add_VHost_Config
        fi
        if [ ! -d "${vhostdir}" ]; then
            mkdir -p "${vhostdir}"
        fi
        Add_Letsencrypt
        ssl_certificate="/usr/local/nginx/conf/ssl/${domain}/fullchain.cer"
        ssl_certificate_key="/usr/local/nginx/conf/ssl/${domain}/${domain}.key"
        if [ "${lets_status}" = 0 ]; then
            Create_SSL_Config
        fi
    fi
}

Create_ProxySSL_Config()
{
    if [ ! -s /usr/local/nginx/conf/ssl/dhparam.pem ]; then
        echo "Create dhparam.pem..."
        mkdir -p /usr/local/nginx/conf/ssl/
        openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    fi

    cat >"/usr/local/nginx/conf/vhost/${domain}.conf"<<EOF
upstream ${upstream} {  
    server ${server};  
} 


# 下面这段代码才是 HTTP 完整示例配置文件，注意使用时修改里面的默认域名等信息。
server
 
{
        listen 80;
        server_name ${domain} ${moredomain};
  
        location ~ \.*$ {
        #sub_filter wo.liaobu.de wo.liaobu.de;
        #sub_filter_once off;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        #proxy_set_header Referer 118.24.53.90:9898;
        proxy_set_header Host \$http_host;
        proxy_set_header X-Forwarded-Proto \$scheme;

        proxy_pass http://${upstream};
        }

}   
    server
{
        listen 443 ssl http2;
        server_name ${domain} ${moredomain};
        ssl on;
        ssl_certificate ${ssl_certificate};
        ssl_certificate_key ${ssl_certificate_key};
        ssl_session_timeout 5m;  
  
        location ~ \.*$ {
        #sub_filter woliaobude wo.liaobu.de;
        #sub_filter_once off;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        #proxy_set_header Referer 118.24.53.90:9898;
        proxy_set_header Host \$http_host;
        proxy_set_header X-Forwarded-Proto \$scheme;

        proxy_pass http://${upstream};
        }

} 
EOF

    echo "Test Nginx configure file......"
    /usr/local/nginx/sbin/nginx -t
    echo "Reload Nginx......"
    /usr/local/nginx/sbin/nginx -s reload
}

Add_ProxySSL()
{
    if [ "${ssl_choice}" == "1" ]; then
        Create_ProxySSL_Config
    elif [ "${ssl_choice}" == "2" ]; then
        letsdomain=""
        if [ "${moredomain}" != "" ]; then
            letsdomain="-d ${domain}"
            for i in ${moredomain};do
                letsdomain=${letsdomain}" -d ${i}"
            done
        else
            letsdomain="-d ${domain}"
        fi
  
        OverWrite_VHostProxy_Config
  
        if [ ! -d "${vhostdir}" ]; then
            mkdir -p "${vhostdir}"
        fi

        Add_Letsencrypt
        ssl_certificate="/usr/local/nginx/conf/ssl/${domain}/fullchain.cer"
        ssl_certificate_key="/usr/local/nginx/conf/ssl/${domain}/${domain}.key"
        if [ "${lets_status}" = 0 ]; then
            Create_ProxySSL_Config
        fi
    fi
}

Add_Dns_SSL()
{
    provider=$1
    if [ "${provider}" != "" ]; then
        dns_provider="dns_${provider}"
    else
        Echo_Red "The dns manual mode can not renew automatically, you must renew it manually."
    fi
    if [ -s /usr/local/acme.sh/acme.sh ]; then
        echo "/usr/local/acme.sh/acme.sh [found]"
    else
        cd /tmp
        [[ -f latest.tar.gz ]] && rm -f latest.tar.gz
        wget https://soft.vpser.net/lib/acme.sh/latest.tar.gz --prefer-family=IPv4 --no-check-certificate
        tar zxf latest.tar.gz
        cd acme.sh-*
        ./acme.sh --install --log --home /usr/local/acme.sh --certhome /usr/local/nginx/conf/ssl
        cd ..
        rm -f latest.tar.gz
        rm -rf acme.sh-*
        sed -i 's/cat "\$CERT_PATH"$/#cat "\$CERT_PATH"/g' /usr/local/acme.sh/acme.sh
    fi
    if [[ ! -s /usr/local/acme.sh/dnsapi/dns_${provider}.sh && "${provider}" != "" ]]; then
        echo "DNS Provider: ${provider} not found."
        exit 1
    fi
    Add_SSL_Info_Menu

    . "/usr/local/acme.sh/acme.sh.env"

    if [ -s /usr/local/nginx/conf/ssl/${domain}/fullchain.cer ]; then
        echo "Removing exist domain certificate..."
        rm -rf /usr/local/nginx/conf/ssl/${domain}
    fi

    letsdomain=""
    if [ "${moredomain}" != "" ]; then
        letsdomain="-d ${domain}"
        for i in ${moredomain};do
            letsdomain=${letsdomain}" -d ${i}"
        done
    else
        letsdomain="-d ${domain}"
    fi

    echo "Starting create SSL Certificate use Let's Encrypt..."
    if [ "${provider}" != "" ]; then
        /usr/local/acme.sh/acme.sh --issue ${letsdomain} --dns ${dns_provider} --reloadcmd "/etc/init.d/nginx reload"
        lets_status=$?
    else
        /usr/local/acme.sh/acme.sh --issue ${letsdomain} --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
        Echo_Yellow "Please add the above TXT record to the domain in 120 seconds!!!"
        echo
        Sleep_Sec 120
        /usr/local/acme.sh/acme.sh --renew ${letsdomain} --yes-I-know-dns-manual-mode-enough-go-ahead-please
        lets_status=$?
    fi
    if [ "${lets_status}" = 0 ] || [[ "${provider}" = "" && "${lets_status}" = 1 && -s "/usr/local/nginx/conf/ssl/${domain}/fullchain.cer" ]]; then
        if [ ! -d "${vhostdir}" ]; then
            echo "Create Virtul Host directory......"
            mkdir -p ${vhostdir}
            echo "set permissions of Virtual Host directory......"
            chmod -R 755 ${vhostdir}
            chown -R www:www ${vhostdir}
        fi

        if [ ! -s "/usr/local/nginx/conf/vhost/${domain}.conf" ]; then
            Add_VHost_Config
        fi
        ssl_certificate="/usr/local/nginx/conf/ssl/${domain}/fullchain.cer"
        ssl_certificate_key="/usr/local/nginx/conf/ssl/${domain}/${domain}.key"
        Create_SSL_Config
        Echo_Green "Let's Encrypt SSL Certificate create successfully."
    else
        Echo_Red "Let's Encrypt SSL Certificate create failed!"
    fi
}

Color_Text()
{
  echo -e " \e[0;$2m$1\e[0m"
}

Echo_Red()
{
  echo $(Color_Text "$1" "31")
}

Echo_Green()
{
  echo $(Color_Text "$1" "32")
}

Echo_Yellow()
{
  echo -n $(Color_Text "$1" "33")
}

Echo_Blue()
{
  echo $(Color_Text "$1" "34")
}

Sleep_Sec()
{
    seconds=$1
    while [ "${seconds}" -ge "0" ];do
      echo -ne "\r     \r"
      echo -n ${seconds}
      seconds=$(($seconds - 1))
      sleep 1
    done
    echo -ne "\r"
}

Check_DB

case "${arg1}" in
    start)
        lnmp_start
        ;;
    stop)
        lnmp_stop
        ;;
    restart)
        lnmp_stop
        lnmp_start
        ;;
    reload)
        lnmp_reload
        ;;
    kill)
        lnmp_kill
        ;;
    status)
        lnmp_status
        ;;
    nginx)
        /etc/init.d/nginx ${arg2}
        ;;
    mysql)
        /etc/init.d/mysql ${arg2}
        ;;
    mariadb)
        /etc/init.d/mariadb ${arg2}
        ;;
    php-fpm)
        /etc/init.d/php-fpm ${arg2}
        ;;
    pureftpd)
        /etc/init.d/pureftpd ${arg2}
        ;;
    httpd)
        /etc/init.d/httpd ${arg2}
        ;;
    vhost)
        Function_Vhost ${arg2}
        ;;
    database)
        Verify_DB_Password
        Function_Database ${arg2}
        TempMycnf_Clean
        ;;
    ftp)
        Check_Pureftpd
        Function_Ftp ${arg2}
        ;;
    ssl)
        info="n"
        Add_SSL_Menu
        Add_SSL
        ;;
    dnsssl|dns)
        Add_Dns_SSL ${arg2}
        ;;
    nconf)
        vi /usr/local/nginx/conf/vhost/${arg2}.conf
        ;;
    proxy)
        Function_VhostProxy ${arg2}
        ;;
    *)
        echo "Usage: lnmp {start|stop|reload|restart|kill|status}"
        echo "Usage: lnmp {nginx|mysql|mariadb|php-fpm|pureftpd} {start|stop|reload|restart|kill|status}"
        echo "Usage: lnmp vhost {add|list|del}"
        echo "Usage: lnmp database {add|list|edit|del}"
        echo "Usage: lnmp ftp {add|list|edit|del|show}"
        echo "Usage: lnmp ssl add"
        echo "Usage: lnmp {dnsssl|dns} {cx|ali|cf|dp|he|gd|aws}"
        echo "Usage: lnmp nconf domain"
        echo "Usage: lnmp proxy add"
        ;;
esac
exit

参考资料

Module ngx_http_proxy_module (nginx.org)

最后修改：2023 年 06 月 11 日

如果觉得我的文章对你有用，请随意赞赏

LNMP新版一键安装包NGINX反代站点加速教程

Sherlock Zhang • 2022 年 09 月 13 日

<p><em>*</em>*<img src="https://www.microcharon.com/usr/uploads/2022/09/4290497082.webp" alt="Terminus SSH 连接" title="Terminus SSH 连接" style=""></p><h2>为什么要反代站点</h2><p>通过 NGINX 反代可以使源站网络质量加速，可以隐藏源服务器的真实地址，用户可以直接访问反代服务器来获取源服务器的资源，减少源服务器的负载压力。NGINX 反代类似于 NGINX 负载均衡，虽然都能降低源站压力，但配置方法非常不一样，此处不必多说</p><h2>LNMP 一键安装包下载</h2><p><a href="https://www.microcharon.com/go/aHR0cHM6Ly9sbm1wLm9yZy9kb3dubG9hZC5odG1s" target="_blank" >下载 - LNMP一键安装包</a></p><h3>一键安装</h3><p><code>wget http://soft.vpser.net/lnmp/lnmp2.0.tar.gz -cO lnmp2.0.tar.gz &amp;&amp; tar zxf lnmp2.0.tar.gz &amp;&amp; cd lnmp2.0 &amp;&amp; ./install.sh lnmp</code></p><h2>安装配置（一）</h2><h3>仅安装NGINX</h3><p>第一步首先检查系统是否存在 screen 命令，如果提示 <code>screen: command not found</code> 命令不存在可以执行：<code>yum install screen</code> 或 <code>apt-get install screen</code> 安装</p><p>反代站点仅需要安装 NGINX 就可以了，不需要额外的 MySQL 数据库及 PHP 的安装，命令如下：</p><p><code>wget http://soft.vpser.net/lnmp/lnmp2.0.tar.gz -cO lnmp2.0.tar.gz &amp;&amp; tar zxf lnmp2.0.tar.gz &amp;&amp; cd lnmp2.0 &amp;&amp; ./install.sh nginx</code></p><p>如果想稍后单独 NGINX 安装，则在安装包目录（/root/lnmp2.0/）下运行：<code>./install.sh nginx</code> 进行安装</p><h3>添加站点</h3><p>安装成功后，利用 LNMP 一键安装包的指令来添加我们的站点，具体教程参考如下</p><p><a href="https://www.microcharon.com/go/aHR0cHM6Ly93emZvdS5jb20vbG5tcC15amIv" target="_blank" >新版LNMP一键安装包建站教程-一键安装Web环境自动签发SSL证书 - 挖站否-挖掘建站的乐趣 (wzfou.com)</a></p><p>此处我们选择自行添加 TrustAsia 的 SSL 证书</p><p>下载证书，上传至 NGINX 配置文件目录（/usr/local/nginx/conf），放置在新建文件夹处（/usr/local/nginx/conf/cert）</p><pre><code class="lang-bash">cd /usr/local/nginx/conf
mkdir cert</code></pre><p>大概流程如下，实际情况请自行修改</p><pre><code class="lang-bash">root@VM-16-10-debian:~# lnmp vhost add
+-------------------------------------------+
|    Manager for LNMP, Written by Licess    |
+-------------------------------------------+
|              https://lnmp.org             |
+-------------------------------------------+
Please enter domain(example: www.lnmp.org): microcharon.com
 Your domain: microcharon.com
Enter more domain name(example: lnmp.org sub.lnmp.org): www.microcharon.com
 domain list: microcharon.com www.microcharon.com
Please enter the directory for the domain: microcharon.com
Default directory: /home/wwwroot/microcharon.com: 
Virtual Host Directory: /home/wwwroot/microcharon.com
Allow Rewrite rule? (y/n) n
You choose rewrite: none
Enable PHP Pathinfo? (y/n) n
Disable pathinfo.
Allow access log? (y/n) y
Enter access log filename(Default:microcharon.com.log): 
You access log filename: microcharon.com.log
Enable IPv6? (y/n) n
Disabled IPv6 Support in current Virtualhost.
Add SSL Certificate (y/n) y
1: Use your own SSL Certificate and Key
2: Use Let&#039;s Encrypt to create SSL Certificate and Key
3: Use BuyPass to create SSL Certificate and Key
4: Use ZeroSSL to create SSL Certificate and Key
Enter 1, 2, 3 or 4: 1
Please enter full path to SSL Certificate file: /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.crt
Please enter full path to SSL Certificate Key file: /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key
Using 301 to Redirect HTTP to HTTPS? (y/n) n
DO not setting 301 Redirect.

Press any key to start create virtul host...</code></pre><h3>为站点的vhost配置反代</h3><p>这是本站点的反代配置，仅供参考，实际情况请自行修改，vhost 配置文件在  <code>/usr/local/nginx/conf/vhost/</code> 目录</p><p>需执行反代的 location 路径写入 server 段</p><pre><code class="lang-nginx">#下面示例中所需的变量

$host: 请求主机头字段，否则为服务器名称
$remote_addr: 客户端的IP地址
$request_uri: 包含请求参数的原始URI，不包含主机名，如：&quot;/foo/bar.php?arg=baz&quot;
$proxy_add_x_forwarded_for: 代表附加$remote_addr变量的客户端请求头X-Forwarded-For</code></pre><h4>反代服务器NGINX配置参考</h4><pre><code class="lang-nginx">server
    {
        listen 80;
        listen [::]:80;
        server_name microcharon.com www.microcharon.com;
        index index.html index.htm index.php default.html default.htm default.php;
        root  /home/wwwroot/microcharon.com;

if ($host ~ &#039;^microcharon.com&#039;){
            return 301 https://www.microcharon.com$request_uri;
        }

access_log  /home/wwwlogs/microcharon.com.log;
    }

server
    {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name microcharon.com www.microcharon.com;
        index index.html index.htm index.php default.html default.htm default.php;
        root  /home/wwwroot/microcharon.com;

ssl_certificate /usr/local/nginx/confssl/microcharon.com/microcharon.com.crt;
        ssl_certificate_key /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers &quot;TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5&quot;;
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

if ($host ~ &#039;^microcharon.com&#039;){
            return 301 https://www.microcharon.com$request_uri;
        }

#PROXY-START/
        location ^~ /
        {
            proxy_pass https://www.microcharon.com;
            proxy_redirect off;
            proxy_set_header X-Real-IP $remote_addr;
            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
            proxy_ssl_name www.microcharon.com;
            proxy_ssl_server_name on;
        }
        #PROXY-END/

access_log  /home/wwwlogs/microcharon.com.log;
    }
</code></pre><h4>源站服务器NGINX配置参考</h4><pre><code class="lang-nginx">server
    {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name microcharon.com;
        ssl_certificate /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com_bundle.crt;
        ssl_certificate_key /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers &quot;TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5&quot;;
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;
        return 301 https://www.microcharon.com$request_uri;
    }

server
    {
        listen 80;
        listen [::]:80;
        server_name microcharon.com www.microcharon.com;
        index index.php index.html index.htm default.php default.html default.htm;
        root  /home/wwwroot/microcharon.com;
        return 301 https://www.microcharon.com$request_uri;

#include rewrite/typecho.conf;
        #error_page   404   /404.html;

# Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

include enable-php-pathinfo.conf;

location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

location ~ /.well-known {
            allow all;
        }

location ~ /\.
        {
            deny all;
        }

access_log  /home/wwwlogs/microcharon.com.log;
    }

server
    {
        listen 443 ssl http2;
        listen [::]:443 ssl http2;
        server_name www.microcharon.com;
        index index.php index.html index.htm default.php default.html default.htm;
        root  /home/wwwroot/microcharon.com;

ssl_certificate /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com_bundle.crt;
        ssl_certificate_key /usr/local/nginx/conf/ssl/microcharon.com/microcharon.com.key;
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;
        ssl_prefer_server_ciphers on;
        ssl_ciphers &quot;TLS13-AES-256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES-128-GCM-SHA256:TLS13-AES-128-CCM-8-SHA256:TLS13-AES-128-CCM-SHA256:EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5&quot;;
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

include rewrite/typecho.conf;
        #error_page   404   /404.html;

# Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

include enable-php-pathinfo.conf;

include rewrite/typecho.conf;
        #error_page   404   /404.html;

# Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

include enable-php-pathinfo.conf;

location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

location ~ /.well-known {
            allow all;
        }

location ~ /\.
        {
            deny all;
        }

access_log  /home/wwwlogs/microcharon.com.log;
    }
</code></pre><p>下面反代 SSL 选加，如果反代服务器上的站点和源站证书不一致时可用</p><pre><code class="lang-nginx">prox_ssl_name $host;
proxy_ssl_server_name on</code></pre><p>然后检查 NGINX 语法是否错误，重载/重启 NGINX 配置，可以使用 lnmp 一键包的命令，如下所示</p><pre><code class="lang-bash">lnmp nginx configtest #或者 nginx -t
lnmp nginx reload #或者 nginx reload
lnmp nginx restart #或者service nginx restart
</code></pre><h3>修改主机Host</h3><p>在 etc 目录中可以找到主机的 host 文件，在 localhost 后面加上你的源服务器的 IP 地址，如下所示（1.1.1.1）仅为示例</p><pre><code class="lang-bash">vi /etc/hosts
1.1.1.1 microcharon.com
1.1.1.1 www.microcharon.com</code></pre><pre><code class="lang-host">127.0.0.1 vm9588.ac.com localhost
::1 127.0.0.1 vm9588.ac.com localhost

1.1.1.1 microcharon.com
1.1.1.1 www.microcharon.com</code></pre><h3>DNS域名解析</h3><p>以 DNSPod 为例，因为根域名与 www 域名均被反代，因此需要我们再添加两条 A 记录，线路类型视情况而变，记录值填写我们的反代服务器地址，如下所示</p><p><img src="https://www.microcharon.com/usr/uploads/2022/09/1760823488.webp" alt="DNSPod 增添A记录" title="DNSPod 增添A记录" style=""></p><h2>安装配置（二）</h2><p>根据其他大神的修改版，现在可以添加一键添加 NGINX 反代配置。复制以下代码，覆盖掉 /usr/bin/ 目录下的 lnmp 文件，或者是 /usr/sbin 下的 lnmp 文件，然后修改文件权限</p><p><a href="https://www.microcharon.com/go/aHR0cHM6Ly9jbG91ZC50ZW5jZW50LmNvbS9kZXZlbG9wZXIvYXJ0aWNsZS8xODM1MDM0" target="_blank" >给lnmp添加一键反代功能 - 腾讯云开发者社区-腾讯云 (tencent.com)</a></p><p>输入命令 <code>lnmp proxy add</code> ，然后跟命令 <code>lnmp vhost add</code> 一样添加站点即可</p><p>添加完后检查语法问题，重启 NGINX ，记得修改主机 Host 以及 DNS 域名配置<div class="panel panel-default collapse-panel box-shadow-wrap-lg"><div class="panel-heading panel-collapse" data-toggle="collapse" data-target="#collapse-3ab9b3253f390fe04b43339c177e1ebd62" aria-expanded="true"><div class="accordion-toggle"><span style="">Proxy 一键配置</span>
<i class="pull-right fontello icon-fw fontello-angle-right"></i>
</div>
</div>
<div class="panel-body collapse-panel-body">
<div id="collapse-3ab9b3253f390fe04b43339c177e1ebd62" class="collapse collapse-content"><p></p></p><pre><code class="lang-bash">#!/bin/bash
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin:~/bin
export PATH

# Check if user is root
if [ $(id -u) != &quot;0&quot; ]; then
    echo &quot;Error: You must be root to run this script!&quot;
    exit 1
fi

echo &quot;+-------------------------------------------+&quot;
echo &quot;|    Manager for LNMP, Written by Licess    |&quot;
echo &quot;+-------------------------------------------+&quot;
echo &quot;|              https://lnmp.org             |&quot;
echo &quot;+-------------------------------------------+&quot;

PHPFPMPIDFILE=/usr/local/php/var/run/php-fpm.pid

arg1=$1
arg2=$2

lnmp_start()
{
    echo &quot;Starting LNMP...&quot;
    /etc/init.d/nginx start
    /etc/init.d/mysql start
    /etc/init.d/php-fpm start
    for mphpfpm in /etc/init.d/php-fpm[5,7].[0-9]
    do
        if [ -f ${mphpfpm} ]; then
            ${mphpfpm} start
        fi
    done
}

lnmp_stop()
{
    echo &quot;Stoping LNMP...&quot;
    /etc/init.d/nginx stop
    /etc/init.d/mysql stop
    /etc/init.d/php-fpm stop
    for mphpfpm in /etc/init.d/php-fpm[5,7].[0-9]
    do
        if [ -f ${mphpfpm} ]; then
            ${mphpfpm} stop
        fi
    done
}

lnmp_reload()
{
    echo &quot;Reload LNMP...&quot;
    /etc/init.d/nginx reload
    /etc/init.d/mysql reload
    /etc/init.d/php-fpm reload
    for mphpfpm in /etc/init.d/php-fpm[5,7].[0-9]
    do
        if [ -f ${mphpfpm} ]; then
            ${mphpfpm} reload
        fi
    done
}

lnmp_kill()
{
    echo &quot;Kill nginx,php-fpm,mysql process...&quot;
    killall nginx
    killall mysqld
    killall php-fpm
    killall php-cgi
    echo &quot;done.&quot;
}

lnmp_status()
{
    /etc/init.d/nginx status
    if [ -f $PHPFPMPIDFILE ]; then
        echo &quot;php-fpm is runing!&quot;
    else
        echo &quot;php-fpm is stop!&quot;
    fi
    /etc/init.d/mysql status
}

Function_Vhost()
{
    case &quot;$1&quot; in
        [aA][dD][dD])
            Add_VHost
            ;;
        [lL][iI][sS][tT])
            List_VHost
            ;;
        [dD][eE][lL])
            Del_VHost
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        *)
            echo &quot;Usage: lnmp vhost {add|list|del}&quot;
            exit 1
            ;;
    esac
}

Function_VhostProxy()
{
    case &quot;$1&quot; in
        [aA][dD][dD])
            Add_VHostProxy
            ;;
        *)
            echo &quot;Usage: lnmp proxy add&quot;
            exit 1
            ;;
    esac
}

Function_NginxConf()
{
    case &quot;$1&quot; in
        [aA][dD][dD])
            Add_VHost
            ;;
        [lL][iI][sS][tT])
            List_VHost
            ;;
        [dD][eE][lL])
            Del_VHost
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        *)
            echo &quot;Usage: lnmp vhost {add|list|del}&quot;
            exit 1
            ;;
    esac
}

Function_Database()
{
    case &quot;$1&quot; in
        [aA][dD][dD])
            Add_Database_Menu
            Add_Database
            ;;
        [lL][iI][sS][tT])
            List_Database
            ;;
        [dD][eE][lL])
            Del_Database
            ;;
        [eE][dD][iI][tT])
            Edit_Database
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        *)
            echo &quot;Usage: lnmp database {add|list|del}&quot;
            exit 1
            ;;
    esac
}

Function_Ftp()
{
    case &quot;$1&quot; in
        [aA][dD][dD])
            Add_Ftp_Menu
            Add_Ftp
            ;;
        [lL][iI][sS][tT])
            List_Ftp
            ;;
        [dD][eE][lL])
            Del_Ftp
            ;;
        [eE][dD][iI][tT])
            Edit_Ftp
            ;;
        [eE][xX][iI][tT])
            exit 1
            ;;
        [sS][hH][oO][wW])
            Show_Ftp
            ;;
        *)
            echo &quot;Usage: lnmp ftp {add|list|del}&quot;
            exit 1
            ;;
    esac
}

Add_VHost_Config()
{
    if [ ! -f /usr/local/nginx/conf/rewrite/${rewrite}.conf ]; then
        echo &quot;Create Virtul Host Rewrite file......&quot;
        touch /usr/local/nginx/conf/rewrite/${rewrite}.conf
        echo &quot;Create rewirte file successful,You can add rewrite rule into /usr/local/nginx/conf/rewrite/${rewrite}.conf.&quot;
    else
        echo &quot;You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/${rewrite}.conf&quot;
    fi

cat &gt;&quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot;&lt;&lt;EOF
server
    {
        listen 80;
        #listen [::]:80;
        server_name ${domain} ${moredomain};
        index index.html index.htm index.php default.html default.htm default.php;
        root  ${vhostdir};

include rewrite/${rewrite}.conf;
        #error_page   404   /404.html;

# Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

${include_enable_php}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

location ~ /.well-known {
            allow all;
        }

location ~ /\.
        {
            deny all;
        }

${al}
    }
EOF

echo &quot;Test Nginx configure file......&quot;
    /usr/local/nginx/sbin/nginx -t
    echo &quot;Reload Nginx......&quot;
    /usr/local/nginx/sbin/nginx -s reload
}

Add_VHostProxy_Config()
{
    if [ ! -f /usr/local/nginx/conf/rewrite/${rewrite}.conf ]; then
        echo &quot;Create Virtul Host Rewrite file......&quot;
        touch /usr/local/nginx/conf/rewrite/${rewrite}.conf
        echo &quot;Create rewirte file successful,You can add rewrite rule into /usr/local/nginx/conf/rewrite/${rewrite}.conf.&quot;
    else
        echo &quot;You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/${rewrite}.conf&quot;
    fi

cat &gt;&quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot;&lt;&lt;EOF
upstream ${upstream} {  
    server ${server};  
}

# 下面这段代码才是 HTTP 完整示例配置文件，注意使用时修改里面的默认域名等信息。
server
 
{
        listen 80;
        server_name ${domain} ${moredomain};
  
        location ~ \.*$ {
        #sub_filter wo.liaobu.de wo.liaobu.de;
        #sub_filter_once off;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        #proxy_set_header Referer 118.24.53.90:9898;
        proxy_set_header Host \$http_host;
        proxy_set_header X-Forwarded-Proto \$scheme;

proxy_pass http://${upstream};
        }

}   
EOF

echo &quot;Test Nginx configure file......&quot;
    /usr/local/nginx/sbin/nginx -t
    echo &quot;Reload Nginx......&quot;
    /usr/local/nginx/sbin/nginx -s reload
}

OverWrite_VHostProxy_Config()
{
    if [ ! -f /usr/local/nginx/conf/rewrite/${rewrite}.conf ]; then
        echo &quot;Create Virtul Host Rewrite file......&quot;
        touch /usr/local/nginx/conf/rewrite/${rewrite}.conf
        echo &quot;Create rewirte file successful,You can add rewrite rule into /usr/local/nginx/conf/rewrite/${rewrite}.conf.&quot;
    else
        echo &quot;You select the exist rewrite rule:/usr/local/nginx/conf/rewrite/${rewrite}.conf&quot;
    fi

include rewrite/${rewrite}.conf;
        #error_page   404   /404.html;

# Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

${include_enable_php}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

location ~ /.well-known {
            allow all;
        }

location ~ /\.
        {
            deny all;
        }

${al}
    }
EOF

echo &quot;Test Nginx configure file......&quot;
    /usr/local/nginx/sbin/nginx -t
    echo &quot;Reload Nginx......&quot;
    /usr/local/nginx/sbin/nginx -s reload
}

Multiple_PHP_Select()
{
    if [[ ! -s /usr/local/php5.2/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php5.2.conf ]] &amp;&amp; [[ ! -s /usr/local/php5.3/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php5.3.conf ]] &amp;&amp; [[ ! -s /usr/local/php5.4/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php5.4.conf ]] &amp;&amp; [[ ! -s /usr/local/php5.5/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php5.5.conf ]] &amp;&amp; [[ ! -s /usr/local/php5.6/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php5.6.conf ]] &amp;&amp; [[ ! -s /usr/local/php7.0/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php7.0.conf ]] &amp;&amp; [[ ! -s /usr/local/php7.1/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php7.1.conf ]] &amp;&amp; [[ ! -s /usr/local/php7.2/sbin/php-fpm &amp;&amp; ! -s /usr/local/nginx/conf/enable-php7.2.conf ]]; then
        if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
            include_enable_php=&quot;include enable-php-pathinfo.conf;&quot;
        else
            include_enable_php=&quot;include enable-php.conf;&quot;
        fi
    else
        echo &quot;Multiple PHP version found, Please select the PHP version.&quot;
        Cur_PHP_Version=&quot;`/usr/local/php/bin/php-config --version`&quot;
        Echo_Green &quot;1: Default Main PHP ${Cur_PHP_Version}&quot;
        if [[ -s /usr/local/php5.2/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php5.2.conf &amp;&amp; -s /etc/init.d/php-fpm5.2 ]]; then
            Echo_Green &quot;2: PHP 5.2 [found]&quot;
        fi
        if [[ -s /usr/local/php5.3/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php5.3.conf &amp;&amp; -s /etc/init.d/php-fpm5.3 ]]; then
            Echo_Green &quot;3: PHP 5.3 [found]&quot;
        fi
        if [[ -s /usr/local/php5.4/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php5.4.conf &amp;&amp; -s /etc/init.d/php-fpm5.4 ]]; then
            Echo_Green &quot;4: PHP 5.4 [found]&quot;
        fi
        if [[ -s /usr/local/php5.5/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php5.5.conf &amp;&amp; -s /etc/init.d/php-fpm5.5 ]]; then
            Echo_Green &quot;5: PHP 5.5 [found]&quot;
        fi
        if [[ -s /usr/local/php5.6/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php5.6.conf &amp;&amp; -s /etc/init.d/php-fpm5.6 ]]; then
            Echo_Green &quot;6: PHP 5.6 [found]&quot;
        fi
        if [[ -s /usr/local/php7.0/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php7.0.conf &amp;&amp; -s /etc/init.d/php-fpm7.0 ]]; then
            Echo_Green &quot;7: PHP 7.0 [found]&quot;
        fi
        if [[ -s /usr/local/php7.1/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php7.1.conf &amp;&amp; -s /etc/init.d/php-fpm7.1 ]]; then
            Echo_Green &quot;8: PHP 7.1 [found]&quot;
        fi
        if [[ -s /usr/local/php7.2/sbin/php-fpm &amp;&amp; -s /usr/local/nginx/conf/enable-php7.2.conf &amp;&amp; -s /etc/init.d/php-fpm7.2 ]]; then
            Echo_Green &quot;9: PHP 7.2 [found]&quot;
        fi
        Echo_Yellow &quot;Enter your choice (1, 2, 3, 4, 5, 6 ,7, 8 or 9): &quot;
        read php_select
        case &quot;${php_select}&quot; in
            1)
                echo &quot;Current selection: PHP ${Cur_PHP_Version}&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php-pathinfo.conf;&quot;
                else
                    include_enable_php=&quot;include enable-php.conf;&quot;
                fi
                ;;
            2)
                echo &quot;Current selection: PHP `/usr/local/php5.2/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php5.2-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php5.2-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.2-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi5.2.sock/g&#039; /usr/local/nginx/conf/enable-php5.2-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php5.2.conf;&quot;
                fi
                ;;
            3)
                echo &quot;Current selection: PHP `/usr/local/php5.3/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php5.3-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php5.3-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.3-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi5.3.sock/g&#039; /usr/local/nginx/conf/enable-php5.3-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php5.3.conf;&quot;
                fi
                ;;
            4)
                echo &quot;Current selection: PHP `/usr/local/php5.4/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php5.4-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php5.4-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.4-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi5.4.sock/g&#039; /usr/local/nginx/conf/enable-php5.4-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php5.4.conf;&quot;
                fi
                ;;
            5)
                echo &quot;Current selection: PHP `/usr/local/php5.5/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php5.5-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php5.5-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.5-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi5.5.sock/g&#039; /usr/local/nginx/conf/enable-php5.5-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php5.5.conf;&quot;
                fi
                ;;
            6)
                echo &quot;Current selection: PHP `/usr/local/php5.6/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php5.6-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php5.6-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php5.6-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi5.6.sock/g&#039; /usr/local/nginx/conf/enable-php5.6-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php5.6.conf;&quot;
                fi
                ;;
            7)
                echo &quot;Current selection:: PHP `/usr/local/php7.0/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php7.0-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php7.0-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php7.0-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi7.0.sock/g&#039; /usr/local/nginx/conf/enable-php7.0-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php7.0.conf;&quot;
                fi
                ;;
            8)
                echo &quot;Current selection:: PHP `/usr/local/php7.1/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php7.1-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php7.1-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php7.1-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi7.1.sock/g&#039; /usr/local/nginx/conf/enable-php7.1-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php7.1.conf;&quot;
                fi
                ;;
            9)
                echo &quot;Current selection:: PHP `/usr/local/php7.2/bin/php-config --version`&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php7.2-pathinfo.conf;&quot;
                    if [ ! -s /usr/local/nginx/conf/enable-php7.2-pathinfo.conf ]; then
                        \cp /usr/local/nginx/conf/enable-php-pathinfo.conf /usr/local/nginx/conf/enable-php7.2-pathinfo.conf
                        sed -i &#039;s/php-cgi.sock/php-cgi7.2.sock/g&#039; /usr/local/nginx/conf/enable-php7.2-pathinfo.conf
                    fi
                else
                    include_enable_php=&quot;include enable-php7.2.conf;&quot;
                fi
                ;;
            *)
                echo &quot;Default,Current selection: PHP ${Cur_PHP_Version}&quot;
                php_select=&quot;1&quot;
                if [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
                    include_enable_php=&quot;include enable-php-pathinfo.conf;&quot;
                else
                    include_enable_php=&quot;include enable-php.conf;&quot;
                fi
                ;;
        esac
    fi
}

Add_VHost()
{
    domain=&quot;&quot;
    while :;do
        Echo_Yellow &quot;Please enter domain(example: www.lnmp.org): &quot;
        read domain
        if [ &quot;${domain}&quot; != &quot;&quot; ]; then
            if [ -f &quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot; ]; then
                Echo_Red &quot; ${domain} is exist,please check!&quot;
                exit 1
            else
                echo &quot; Your domain: ${domain}&quot;
            fi
            break
        else
            Echo_Red &quot;Domain name can&#039;t be empty!&quot;
        fi
    done

vhostdir=&quot;/home/wwwroot/${domain}&quot;
    echo &quot;Please enter the directory for the domain: $domain&quot;
    Echo_Yellow &quot;Default directory: /home/wwwroot/${domain}: &quot;
    read vhostdir
    if [ &quot;${vhostdir}&quot; == &quot;&quot; ]; then
        vhostdir=&quot;/home/wwwroot/${domain}&quot;
    fi
    echo &quot;Virtual Host Directory: ${vhostdir}&quot;

Echo_Yellow &quot;Allow Rewrite rule? (y/n) &quot;
    read allow_rewrite
    if [[ &quot;${allow_rewrite}&quot; == &quot;n&quot; || &quot;${allow_rewrite}&quot; == &quot;&quot; ]]; then
        rewrite=&quot;none&quot;
    elif [ &quot;${allow_rewrite}&quot; == &quot;y&quot; ]; then
        rewrite=&quot;other&quot;
        echo &quot;Please enter the rewrite of programme, &quot;
        echo &quot;wordpress,discuzx,typecho,thinkphp,laravel,codeigniter,yii2 rewrite was exist.&quot;
        Echo_Yellow &quot;(Default rewrite: other): &quot;
        read rewrite
        if [ &quot;${rewrite}&quot; == &quot;&quot; ]; then
            rewrite=&quot;other&quot;
        fi
    fi
    echo &quot;You choose rewrite: ${rewrite}&quot;

Echo_Yellow &quot;Enable PHP Pathinfo? (y/n) &quot;
    read enable_pathinfo
    if [[ &quot;${enable_pathinfo}&quot; == &quot;n&quot; || &quot;${enable_pathinfo}&quot; == &quot;&quot; ]]; then
        echo &quot;Disable pathinfo.&quot;
        enable_pathinfo=&quot;n&quot;
    elif [ &quot;${enable_pathinfo}&quot; == &quot;y&quot; ]; then
        echo &quot;Enable pathinfo.&quot;
        enable_pathinfo=&quot;y&quot;
    fi

Echo_Yellow &quot;Allow access log? (y/n) &quot;
    read access_log
    if [[ &quot;${access_log}&quot; == &quot;n&quot; || &quot;${access_log}&quot; == &quot;&quot; ]]; then
        echo &quot;Disable access log.&quot;
        al=&quot;access_log off;&quot;
    else
        Echo_Yellow &quot;Enter access log filename(Default:${domain}.log): &quot;
        read al_name
        if [ &quot;${al_name}&quot; == &quot;&quot; ]; then
            al_name=&quot;${domain}&quot;
        fi
        al=&quot;access_log  /home/wwwlogs/${al_name}.log;&quot;
        echo &quot;You access log filename: ${al_name}.log&quot;
    fi

Multiple_PHP_Select

if [[ -s /usr/local/mysql/bin/mysql || -s /usr/local/mariadb/bin/mysql ]]; then
        Echo_Yellow &quot;Create database and MySQL user with same name (y/n) &quot;
        read create_database

if [ &quot;${create_database}&quot; == &quot;y&quot; ]; then
            Verify_DB_Password
            Add_Database_Menu
        fi
    fi

if [ -s /usr/local/pureftpd/sbin/pure-ftpd ]; then
        Echo_Yellow &quot;Create ftp account (y/n) &quot;
        read create_ftp

if [ &quot;${create_ftp}&quot; == &quot;y&quot; ]; then
            Add_Ftp_Menu
        fi
    fi

Echo_Yellow &quot;Add SSL Certificate (y/n) &quot;
    read create_ssl
    if [ &quot;${create_ssl}&quot; == &quot;y&quot; ]; then
        Add_SSL_Menu
    fi

echo &quot;&quot;
    echo &quot;Press any key to start create virtul host...&quot;
    OLDCONFIG=`stty -g`
    stty -icanon -echo min 1 time 0
    dd count=1 2&gt;/dev/null
    stty ${OLDCONFIG}

echo &quot;Create Virtul Host directory......&quot;
    mkdir -p ${vhostdir}
    if [ &quot;${access_log}&quot; == &quot;y&quot; ]; then
        touch /home/wwwlogs/${al_name}.log
    fi
    echo &quot;set permissions of Virtual Host directory......&quot;
    chmod -R 755 ${vhostdir}
    chown -R www:www ${vhostdir}

Add_VHost_Config

cat &gt;${vhostdir}/.user.ini&lt;&lt;EOF
open_basedir=${vhostdir}:/tmp/:/proc/
EOF
    chmod 644 ${vhostdir}/.user.ini
    chattr +i ${vhostdir}/.user.ini

/etc/init.d/php-fpm restart

if [ &quot;${create_database}&quot; == &quot;y&quot; ]; then
        Add_Database
    fi

if [ &quot;${create_ftp}&quot; == &quot;y&quot; ]; then
        Add_Ftp
    fi

if [ &quot;${create_ssl}&quot; == &quot;y&quot; ]; then
        Add_SSL
    fi

Echo_Green &quot;================================================&quot;
    echo &quot;Virtualhost infomation:&quot;
    echo &quot;Your domain: ${domain}&quot;
    echo &quot;Home Directory: ${vhostdir}&quot;
    echo &quot;Rewrite: ${rewrite}&quot;
    if [ &quot;${access_log}&quot; == &quot;n&quot; ]; then
        echo &quot;Enable log: no&quot;
    else
        echo &quot;Enable log: yes&quot;
    fi
    if [ &quot;${create_database}&quot; == &quot;y&quot; ]; then
        echo &quot;Database username: ${database_name}&quot;
        echo &quot;Database userpassword: ${mysql_password}&quot;
        echo &quot;Database Name: ${database_name}&quot;
    else
        echo &quot;Create database: no&quot;
    fi
    if [ &quot;${create_ftp}&quot; == &quot;y&quot; ]; then
        echo &quot;FTP account name: ${ftp_account_name}&quot;
        echo &quot;FTP account password: ${ftp_account_password}&quot;
    else
        echo &quot;Create ftp account: no&quot;
    fi
    if [ &quot;${create_ssl}&quot; == &quot;y&quot; ]; then
        echo &quot;Enable SSL: yes&quot;
        if [ &quot;${ssl_choice}&quot; == &quot;1&quot; ]; then
            echo &quot;  =&gt;Certificate file&quot;
        elif [ &quot;${ssl_choice}&quot; == &quot;2&quot; ]; then
            echo &quot;  =&gt;Let&#039;s Encrypt&quot;
        fi
    fi
    Echo_Green &quot;================================================&quot;
}

Add_VHostProxy()
{
    domain=&quot;&quot;
    while :;do
        Echo_Yellow &quot;Please enter domain(example: www.lnmp.org): &quot;
        read domain
        if [ &quot;${domain}&quot; != &quot;&quot; ]; then
            if [ -f &quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot; ]; then
                Echo_Red &quot; ${domain} is exist,please check!&quot;
                exit 1
            else
                echo &quot; Your domain: ${domain}&quot;
            fi
            break
        else
            Echo_Red &quot;Domain name can&#039;t be empty!&quot;
        fi
    done

Echo_Yellow &quot;Enter more domain name(example: lnmp.org *.lnmp.org): &quot;
    read moredomain
    if [ &quot;${moredomain}&quot; != &quot;&quot; ]; then
        echo &quot; domain list: ${moredomain}&quot;
    fi
  
    vhostdir=&quot;/home/wwwroot/${domain}&quot;
    echo &quot;Please enter the directory for the domain: $domain&quot;
    Echo_Yellow &quot;Default directory: /home/wwwroot/${domain}: &quot;
    read vhostdir
    if [ &quot;${vhostdir}&quot; == &quot;&quot; ]; then
        vhostdir=&quot;/home/wwwroot/${domain}&quot;
    fi
    echo &quot;Virtual Host Directory: ${vhostdir}&quot;
  
    Echo_Yellow &quot;Enter upstream(example: liaobu.de is liaobude): &quot;
    read upstream
    if [ &quot;${upstream}&quot; != &quot;&quot; ]; then
        echo &quot; upstream is: ${upstream}&quot;
    else
        Echo_Red &quot;upstream can&#039;t be empty!&quot;
    fi
  
    Echo_Yellow &quot;Enter the source station address(example: 1.1.1.1:8080): &quot;
    read server
    if [ &quot;${server}&quot; != &quot;&quot; ]; then
        echo &quot; server is: ${server}&quot;
    else
        Echo_Red &quot;server can&#039;t be empty!&quot;
    fi
  
    Echo_Yellow &quot;Allow access log? (y/n) &quot;
    read access_log
    if [[ &quot;${access_log}&quot; == &quot;n&quot; || &quot;${access_log}&quot; == &quot;&quot; ]]; then
        echo &quot;Disable access log.&quot;
        al=&quot;access_log off;&quot;
    else
        Echo_Yellow &quot;Enter access log filename(Default:${domain}.log): &quot;
        read al_name
        if [ &quot;${al_name}&quot; == &quot;&quot; ]; then
            al_name=&quot;${domain}&quot;
        fi
        al=&quot;access_log  /home/wwwlogs/${al_name}.log;&quot;
        echo &quot;You access log filename: ${al_name}.log&quot;
    fi

Multiple_PHP_Select
  
    Echo_Yellow &quot;Add SSL Certificate (y/n) &quot;
    read create_ssl
    if [ &quot;${create_ssl}&quot; == &quot;y&quot; ]; then
        Add_SSL_Menu
    fi

echo &quot;&quot;
    echo &quot;Press any key to start create virtul host...&quot;
    OLDCONFIG=`stty -g`
    stty -icanon -echo min 1 time 0
    dd count=1 2&gt;/dev/null
    stty ${OLDCONFIG}

Add_VHostProxy_Config

cat &gt;${vhostdir}/.user.ini&lt;&lt;EOF
open_basedir=${vhostdir}:/tmp/:/proc/
EOF
    chmod 644 ${vhostdir}/.user.ini
    chattr +i ${vhostdir}/.user.ini

/etc/init.d/php-fpm restart

if [ &quot;${create_ssl}&quot; == &quot;y&quot; ]; then
        Add_ProxySSL
    fi

Echo_Green &quot;================================================&quot;
    echo &quot;Virtualhost infomation:&quot;
    echo &quot;Your domain: ${domain}&quot;
    if [ &quot;${access_log}&quot; == &quot;n&quot; ]; then
        echo &quot;Enable log: no&quot;
    else
        echo &quot;Enable log: yes&quot;
    fi

if [ &quot;${create_ssl}&quot; == &quot;y&quot; ]; then
        echo &quot;Enable SSL: yes&quot;
        if [ &quot;${ssl_choice}&quot; == &quot;1&quot; ]; then
            echo &quot;  =&gt;Certificate file&quot;
        elif [ &quot;${ssl_choice}&quot; == &quot;2&quot; ]; then
            echo &quot;  =&gt;Let&#039;s Encrypt&quot;
        fi
    fi
    Echo_Green &quot;================================================&quot;
}

List_VHost()
{
    echo &quot;Nginx Virtualhost list:&quot;
    ls /usr/local/nginx/conf/vhost/ | grep &quot;.conf$&quot; | sed &#039;s/.conf//g&#039;
}

Del_VHost()
{
    echo &quot;=======================================&quot;
    echo &quot;Current Virtualhost:&quot;
    List_VHost
    echo &quot;=======================================&quot;
    domain=&quot;&quot;
    while :;do
        Echo_Yellow &quot;Please enter domain you want to delete: &quot;
        read domain
        if [ &quot;${domain}&quot; == &quot;&quot; ]; then
            Echo_Red &quot;Domain name can&#039;t be empty.&quot;
        else
            break
        fi
    done
    if [ ! -f &quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot; ]; then
        echo &quot;==========================================&quot;
        echo &quot;Domain: ${domain} was not exist!&quot;
        echo &quot;==========================================&quot;
        exit 1
    else
        if [ -f &quot;${vhostdir}/.user.ini&quot; ]; then
            chattr -i &quot;${vhostdir}/.user.ini&quot;
            rm -f &quot;${vhostdir}/.user.ini&quot;
        fi
        rm -f /usr/local/nginx/conf/vhost/${domain}.conf
        echo &quot;========================================================&quot;
        echo &quot;Domain: ${domain} has been deleted.&quot;
        echo &quot;Website files will not be deleted for security reasons.&quot;
        echo &quot;You need to manually delete the website files.&quot;
        echo &quot;========================================================&quot;
    fi
}

Check_DB()
{
    if [[ -s /usr/local/mariadb/bin/mysql &amp;&amp; -s /usr/local/mariadb/bin/mysqld_safe &amp;&amp; -s /etc/my.cnf ]]; then
        MySQL_Bin=&quot;/usr/local/mariadb/bin/mysql&quot;
        MySQL_Ver=`/usr/local/mariadb/bin/mysql_config --version`
    elif [[ -s /usr/local/mysql/bin/mysql &amp;&amp; -s /usr/local/mysql/bin/mysqld_safe &amp;&amp; -s /etc/my.cnf ]]; then
        MySQL_Bin=&quot;/usr/local/mysql/bin/mysql&quot;
        MySQL_Ver=`/usr/local/mysql/bin/mysql_config --version`
    else
        MySQL_Bin=&quot;None&quot;
    fi
}

Make_TempMycnf()
{
    cat &gt;~/.my.cnf&lt;&lt;EOF
[client]
user=root
password=&#039;$1&#039;
EOF
    chmod 600 ~/.my.cnf
}

Verify_DB_Password()
{
    Check_DB
    status=1
    while [ $status -eq 1 ]; do
        Echo_Yellow &quot;Enter current root password of Database (Password will not shown): &quot;
        read -s DB_Root_Password
        echo
        Make_TempMycnf &quot;${DB_Root_Password}&quot;
        Do_Query &quot;&quot;
        status=$?
    done
    echo &quot;OK, MySQL root password correct.&quot;
}

Do_Query()
{
    echo &quot;$1&quot; &gt;/tmp/.mysql.tmp
    chmod 600 /tmp/.mysql.tmp
    Check_DB
    ${MySQL_Bin} --defaults-file=~/.my.cnf &lt;/tmp/.mysql.tmp
    return $?
}

TempMycnf_Clean()
{
    if [ -s ~/.my.cnf ]; then
        rm -f ~/.my.cnf
    fi
    if [ -s /tmp/.mysql.tmp ]; then
        rm -f /tmp/.mysql.tmp
    fi
}

Enter_Database_Name()
{
    while :;do
        Echo_Yellow &quot;Enter database name: &quot;
        read database_name
        if [ &quot;${database_name}&quot; == &quot;&quot; ]; then
            Echo_Red &quot;Database Name can&#039;t be empty!&quot;
        else
            break
        fi
    done
}

Add_Database_Menu()
{
    Enter_Database_Name
    echo &quot;Your will create a database and MySQL user with same name: ${database_name}&quot;
    Echo_Yellow &quot;Please enter password for mysql user ${database_name}: &quot;
    read mysql_password
    echo &quot;Your password: ${mysql_password} &quot;
}

Add_Database()
{
    if echo &quot;${MySQL_Ver}&quot; | grep -Eqi &#039;^8.0.&#039;;then
        cat &gt;/tmp/.add_mysql.sql&lt;&lt;EOF
CREATE USER &#039;${database_name}&#039;@&#039;localhost&#039; IDENTIFIED BY &#039;${mysql_password}&#039;;
CREATE USER &#039;${database_name}&#039;@&#039;127.0.0.1&#039; IDENTIFIED BY &#039;${mysql_password}&#039;;
GRANT USAGE ON *.* TO &#039;${database_name}&#039;@&#039;localhost&#039;;
GRANT USAGE ON *.* TO &#039;${database_name}&#039;@&#039;127.0.0.1&#039;;
CREATE DATABASE IF NOT EXISTS \`${database_name}\`;
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO &#039;${database_name}&#039;@&#039;localhost&#039;;
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO &#039;${database_name}&#039;@&#039;127.0.0.1&#039;;
FLUSH PRIVILEGES;
EOF

else
        cat &gt;/tmp/.add_mysql.sql&lt;&lt;EOF
CREATE USER &#039;${database_name}&#039;@&#039;localhost&#039; IDENTIFIED BY &#039;${mysql_password}&#039;;
CREATE USER &#039;${database_name}&#039;@&#039;127.0.0.1&#039; IDENTIFIED BY &#039;${mysql_password}&#039;;
GRANT USAGE ON *.* TO &#039;${database_name}&#039;@&#039;localhost&#039; IDENTIFIED BY &#039;${mysql_password}&#039;;
GRANT USAGE ON *.* TO &#039;${database_name}&#039;@&#039;127.0.0.1&#039; IDENTIFIED BY &#039;${mysql_password}&#039;;
CREATE DATABASE IF NOT EXISTS \`${database_name}\`;
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO &#039;${database_name}&#039;@&#039;localhost&#039;;
GRANT ALL PRIVILEGES ON \`${database_name}\`.* TO &#039;${database_name}&#039;@&#039;127.0.0.1&#039;;
FLUSH PRIVILEGES;
EOF

fi
    ${MySQL_Bin} --defaults-file=~/.my.cnf &lt; /tmp/.add_mysql.sql
    [ $? -eq 0 ] &amp;&amp; echo &quot;Add database Sucessfully.&quot; || echo &quot;Add database failed!&quot;
    rm -f /tmp/.add_mysql.sql
}

List_Database()
{
    ${MySQL_Bin} --defaults-file=~/.my.cnf -e &quot;SHOW DATABASES;&quot;
    [ $? -eq 0 ] &amp;&amp; echo &quot;List all databases Sucessfully.&quot; || echo &quot;List all databases failed!&quot;
}

Edit_Database()
{
    while :;do
        Echo_Yellow &quot;Enter database username: &quot;
        read database_username
        if [ &quot;${database_username}&quot; == &quot;&quot; ]; then
            Echo_Red &quot;Database Username can&#039;t be empty!&quot;
        else
            break
        fi
    done
    while :;do
        Echo_Yellow &quot;Enter NEW Password: &quot;
        read database_username_passwd
        if [ &quot;${database_username_passwd}&quot; == &quot;&quot; ]; then
            Echo_Red &quot;Database Password can&#039;t be empty!&quot;
        else
            break
        fi
    done

if echo &quot;${MySQL_Ver}&quot; | grep -Eqi &#039;^5.7.&#039;;then
        Do_Query &quot;UPDATE mysql.user SET authentication_string=PASSWORD(&#039;${database_username_passwd}&#039;) WHERE User=&#039;${database_username}&#039; AND Host IN (&#039;localhost&#039;, &#039;127.0.0.1&#039;, &#039;::1&#039;);&quot;
    elif echo &quot;${MySQL_Ver}&quot; | grep -Eqi &#039;^8.0.&#039;;then
        Do_Query &quot;SET PASSWORD FOR &#039;${database_username}&#039;@&#039;127.0.0.1&#039; = &#039;${database_username_passwd}&#039;;&quot;
        Do_Query &quot;SET PASSWORD FOR &#039;${database_username}&#039;@&#039;localhost&#039; = &#039;${database_username_passwd}&#039;;&quot;
    else
        Do_Query &quot;UPDATE mysql.user SET Password=PASSWORD(&#039;${database_username_passwd}&#039;) WHERE User=&#039;${database_username}&#039; AND Host IN (&#039;localhost&#039;, &#039;127.0.0.1&#039;, &#039;::1&#039;);&quot;
    fi
    [ $? -eq 0 ] &amp;&amp; echo &quot;Edit user password Sucessfully.&quot; || echo &quot;Edit user password databases failed!&quot;
    Do_Query &quot;FLUSH PRIVILEGES;&quot;
}

Del_Database()
{
    List_Database
    Enter_Database_Name
    if [[ &quot;${database_name}&quot; == &quot;information_schema&quot; || &quot;${database_name}&quot; == &quot;mysql&quot; || &quot;${database_name}&quot; == &quot;performance_schema&quot; ]]; then
        echo &quot;MySQL System Database can&#039;t be delete!&quot;
        exit 1
    fi
    echo &quot;Your will delete database and MySQL user with same name: ${database_name}&quot;
    echo &quot;Sleep 10s, Press ctrl+c to cancel...&quot;
    Sleep_Sec 10
    cat &gt;/tmp/.del.mysql.sql&lt;&lt;EOF
DROP USER &#039;${database_name}&#039;@&#039;127.0.0.1&#039;;
DROP USER &#039;${database_name}&#039;@&#039;localhost&#039;;
DROP DATABASE \`${database_name}\`;
FLUSH PRIVILEGES;
EOF
    ${MySQL_Bin} --defaults-file=~/.my.cnf &lt; /tmp/.del.mysql.sql
    [ $? -eq 0 ] &amp;&amp; echo &quot;Delete database: ${database_name} Sucessfully.&quot; || echo &quot;Delete database: ${database_name} failed!&quot;
    rm -f /tmp/.del.mysql.sql
}

Enter_Ftp_Name()
{
    while :;do
        Echo_Yellow &quot;Enter ftp account name: &quot;
        read ftp_account_name
        if [ &quot;${ftp_account_name}&quot; == &quot;&quot; ]; then
            Echo_Red &quot;FTP account name can&#039;t be empty!&quot;
        else
            break
        fi
    done
}

Add_Ftp_Menu()
{
    Enter_Ftp_Name
    while :;do
        Echo_Yellow &quot;Enter password for ftp account ${ftp_account_name}: &quot;
        read ftp_account_password
        if [ &quot;${ftp_account_password}&quot; == &quot;&quot; ]; then
            Echo_Red &quot;FTP password can&#039;t be empty!&quot;
        else
            break
        fi
    done
    if [ &quot;${vhostdir}&quot; == &quot;&quot; ]; then
        while :;do
            Echo_Yellow &quot;Enter directory for ftp account ${ftp_account_name}: &quot;
            read vhostdir
            if [ &quot;${vhostdir}&quot; == &quot;&quot; ]; then
                Echo_Red &quot;Directory can&#039;t be empty!&quot;
            else
                break
            fi
        done
    fi
}

Check_Pureftpd()
{
    if [ ! -f /usr/local/pureftpd/sbin/pure-ftpd ]; then
        Echo_Red &quot;Pureftpd was not installed!&quot;
        exit 1
    fi
}

Add_Ftp()
{
    www_uid=`id -u www`
    www_gid=`id -g www`
    cat &gt;/tmp/pass${ftp_account_name}&lt;&lt;EOF
${ftp_account_password}
${ftp_account_password}
EOF
    /usr/local/pureftpd/bin/pure-pw useradd ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -u ${www_uid} -g ${www_gid} -d ${vhostdir} -m &lt; /tmp/pass${ftp_account_name}
    [ $? -eq 0 ] &amp;&amp; echo &quot;Created FTP User: ${ftp_account_name} Sucessfully.&quot; || echo &quot;FTP User: ${ftp_account_name} already exists!&quot;
    rm -f /tmp/pass${ftp_account_name}
}

List_Ftp()
{
    /usr/local/pureftpd/bin/pure-pw list -f /usr/local/pureftpd/etc/pureftpd.passwd
    [ $? -eq 0 ] &amp;&amp; echo &quot;List FTP User Sucessfully.&quot; || echo &quot;Read database failed.&quot;
}

Edit_Ftp()
{
    List_Ftp
    Enter_Ftp_Name
    Echo_Yellow &quot;Enter password for ftp account ${ftp_account_name}: &quot;
    read ftp_account_password
    if [ &quot;${ftp_account_password}&quot; != &quot;&quot; ]; then
        cat &gt;/tmp/pass${ftp_account_name}&lt;&lt;EOF
${ftp_account_password}
${ftp_account_password}
EOF
        /usr/local/pureftpd/bin/pure-pw passwd ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -m &lt; /tmp/pass${ftp_account_name}
        [ $? -eq 0 ] &amp;&amp; echo &quot;FTP User: ${ftp_account_name} change password Sucessfully.&quot; || echo &quot;FTP User: ${ftp_account_name} change password failed!&quot;
        rm -f /tmp/pass${ftp_account_name}
    else
        echo &quot;FTP password will not change.&quot;
    fi
    Echo_Yellow &quot;Enter directory for ftp account ${ftp_account_name}: &quot;
    read vhostdir
    if [ &quot;${vhostdir}&quot; != &quot;&quot; ]; then
        www_uid=`id -u www`
        www_gid=`id -g www`
        /usr/local/pureftpd/bin/pure-pw usermod ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -u ${www_uid} -g ${www_gid} -d ${vhostdir} -m
        [ $? -eq 0 ] &amp;&amp; echo &quot;FTP User: ${ftp_account_name} change diretcory Sucessfully.&quot; || echo &quot;FTP User: ${ftp_account_name} change directory failed!&quot;
    else
        echo &quot;Directory will not change.&quot;
    fi
}

Del_Ftp()
{
    List_Ftp
    Enter_Ftp_Name
    echo &quot;Your will delete ftp user ${ftp_account_name}&quot;
    echo &quot;Sleep 3s,Press ctrl+c to cancel...&quot;
    Sleep_Sec 3
    /usr/local/pureftpd/bin/pure-pw userdel ${ftp_account_name} -f /usr/local/pureftpd/etc/pureftpd.passwd -m
    [ $? -eq 0 ] &amp;&amp; echo &quot;FTP User: ${ftp_account_name} deleted Sucessfully.&quot; || echo &quot;FTP User: ${ftp_account_name} not exists!&quot;
}

Show_Ftp()
{
    List_Ftp
    Enter_Ftp_Name
    echo &quot;Your ftp account ${ftp_account_name} details:&quot;
    /usr/local/pureftpd/bin/pure-pw show ${ftp_account_name}
    [ $? -eq 0 ] &amp;&amp; echo &quot;Ok.&quot; || echo &quot;failed.&quot;
}

Add_SSL_Info_Menu()
{
    domain=&quot;&quot;
    while :;do
        Echo_Yellow &quot;Please enter domain(example: www.lnmp.org): &quot;
        read domain
        if [ &quot;${domain}&quot; != &quot;&quot; ]; then
            echo &quot; Your domain: ${domain}&quot;
            break
        else
            Echo_Red &quot;Domain name can&#039;t be empty!&quot;
        fi
    done

while :;do
        Echo_Yellow &quot;Please enter the directory for domain $domain: &quot;
        read vhostdir
        if [ &quot;${vhostdir}&quot; == &quot;&quot; ]; then
            Echo_Red &quot;Directory cannot be empty!&quot;
        else
            break
        fi
        echo &quot;Virtual Host Directory: ${vhostdir}&quot;
    done

Echo_Yellow &quot;Enable PHP Pathinfo? (y/n) &quot;
    read enable_pathinfo
    if [[ &quot;${enable_pathinfo}&quot; == &quot;n&quot; || &quot;${enable_pathinfo}&quot; == &quot;&quot; ]]; then
        echo &quot;Disable pathinfo.&quot;
    elif [ &quot;${allow_rewrite}&quot; == &quot;y&quot; ]; then
        echo &quot;Enable pathinfo.&quot;
        enable_pathinfo=&quot;y&quot;
    fi

Multiple_PHP_Select
}

Add_SSL_Menu()
{
    if [ &quot;${info}&quot; == &quot;n&quot; ]; then
        Add_SSL_Info_Menu
    fi
    echo &quot;1: Use your own SSL Certificate and Key&quot;
    echo &quot;2: Use Let&#039;s Encrypt to create SSL Certificate and Key&quot;
    while :;do
        Echo_Yellow &quot;Enter 1 or 2: &quot;
        read ssl_choice
        if [ &quot;${ssl_choice}&quot; == &quot;1&quot; ]; then
            while :;do
                Echo_Yellow &quot;Please enter full path to SSL Certificate file: &quot;
                read ssl_certificate
                if [ &quot;${ssl_certificate}&quot; == &quot;&quot; ]; then
                    Echo_Red &quot;SSL Certificate file cannot be empty!&quot;
                else
                    break
                fi
            done
            while :;do
                Echo_Yellow &quot;Please enter full path to SSL Certificate Key file: &quot;
                read ssl_certificate_key
                if [ &quot;${ssl_certificate_key}&quot; == &quot;&quot; ]; then
                    Echo_Red &quot;SSL Certificate Key file cannot be empty!&quot;
                else
                    break
                fi
            done
            break
        elif [ &quot;${ssl_choice}&quot; == &quot;2&quot; ]; then
            echo &quot;It will be processed automatically.&quot;
            break
        else
            Echo_Red &quot;Please Enter 1 or 2!&quot;
        fi
    done
}

Add_Letsencrypt()
{
    if [[ &quot;${vhostdir}&quot; == &quot;&quot; || &quot;${letsdomain}&quot; == &quot;&quot; ]]; then
        Echo_Red &quot;Two parameters are needed!&quot;
        exit 1
    fi
    if [ ! -d &quot;${vhostdir}&quot; ]; then
        Echo_Red &quot;${vhostdir} does not exist or is not a directory!&quot;
        exit
    fi
    if [ -s /usr/local/acme.sh/acme.sh ]; then
        echo &quot;/usr/local/acme.sh/acme.sh [found]&quot;
    else
        cd /tmp
        [[ -f latest.tar.gz ]] &amp;&amp; rm -f latest.tar.gz
        wget https://soft.vpser.net/lib/acme.sh/latest.tar.gz --prefer-family=IPv4 --no-check-certificate
        tar zxf latest.tar.gz
        cd acme.sh-*
        ./acme.sh --install --log --home /usr/local/acme.sh --certhome /usr/local/nginx/conf/ssl
        cd ..
        rm -f latest.tar.gz
        rm -rf acme.sh-*
        sed -i &#039;s/cat &quot;\$CERT_PATH&quot;$/#cat &quot;\$CERT_PATH&quot;/g&#039; /usr/local/acme.sh/acme.sh
    fi

. &quot;/usr/local/acme.sh/acme.sh.env&quot;

if [ -s /usr/local/nginx/conf/ssl/${domain}/fullchain.cer ]; then
        echo &quot;Removing exist domain certificate...&quot;
        rm -rf /usr/local/nginx/conf/ssl/${domain}
    fi

echo &quot;Starting create SSL Certificate use Let&#039;s Encrypt...&quot;
    /usr/local/acme.sh/acme.sh --issue ${letsdomain} -w ${vhostdir} --reloadcmd &quot;/etc/init.d/nginx reload&quot;
    lets_status=$?
    if [ &quot;${lets_status}&quot; = 0 ]; then
        Echo_Green &quot;Let&#039;s Encrypt SSL Certificate create successfully.&quot;
    else
        Echo_Red &quot;Let&#039;s Encrypt SSL Certificate create failed!&quot;
    fi
}

Create_SSL_Config()
{
    if [ ! -s /usr/local/nginx/conf/ssl/dhparam.pem ]; then
        echo &quot;Create dhparam.pem...&quot;
        mkdir -p /usr/local/nginx/conf/ssl/
        openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    fi

cat &gt;&gt;&quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot;&lt;&lt;EOF

server
    {
        listen 443 ssl http2;
        #listen [::]:443 ssl http2;
        server_name ${domain} ${moredomain};
        index index.html index.htm index.php default.html default.htm default.php;
        root  ${vhostdir};
        ssl on;
        ssl_certificate ${ssl_certificate};
        ssl_certificate_key ${ssl_certificate_key};
        ssl_session_timeout 5m;
        ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
        ssl_prefer_server_ciphers on;
        ssl_ciphers &quot;EECDH+CHACHA20:EECDH+CHACHA20-draft:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5&quot;;
        ssl_session_cache builtin:1000 shared:SSL:10m;
        # openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
        ssl_dhparam /usr/local/nginx/conf/ssl/dhparam.pem;

include rewrite/${rewrite}.conf;
        #error_page   404   /404.html;

# Deny access to PHP files in specific directory
        #location ~ /(wp-content|uploads|wp-includes|images)/.*\.php$ { deny all; }

${include_enable_php}

location ~ .*\.(gif|jpg|jpeg|png|bmp|swf)$
        {
            expires      30d;
        }

location ~ .*\.(js|css)?$
        {
            expires      12h;
        }

location ~ /.well-known {
            allow all;
        }

location ~ /\.
        {
            deny all;
        }

${al}
    }
EOF

echo &quot;Test Nginx configure file......&quot;
    /usr/local/nginx/sbin/nginx -t
    echo &quot;Reload Nginx......&quot;
    /usr/local/nginx/sbin/nginx -s reload
}

Add_SSL()
{
    if [ &quot;${ssl_choice}&quot; == &quot;1&quot; ]; then
        Create_SSL_Config
    elif [ &quot;${ssl_choice}&quot; == &quot;2&quot; ]; then
        letsdomain=&quot;&quot;
        if [ &quot;${moredomain}&quot; != &quot;&quot; ]; then
            letsdomain=&quot;-d ${domain}&quot;
            for i in ${moredomain};do
                letsdomain=${letsdomain}&quot; -d ${i}&quot;
            done
        else
            letsdomain=&quot;-d ${domain}&quot;
        fi
        if [ ! -s &quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot; ]; then
            Add_VHost_Config
        fi
        if [ ! -d &quot;${vhostdir}&quot; ]; then
            mkdir -p &quot;${vhostdir}&quot;
        fi
        Add_Letsencrypt
        ssl_certificate=&quot;/usr/local/nginx/conf/ssl/${domain}/fullchain.cer&quot;
        ssl_certificate_key=&quot;/usr/local/nginx/conf/ssl/${domain}/${domain}.key&quot;
        if [ &quot;${lets_status}&quot; = 0 ]; then
            Create_SSL_Config
        fi
    fi
}

Create_ProxySSL_Config()
{
    if [ ! -s /usr/local/nginx/conf/ssl/dhparam.pem ]; then
        echo &quot;Create dhparam.pem...&quot;
        mkdir -p /usr/local/nginx/conf/ssl/
        openssl dhparam -out /usr/local/nginx/conf/ssl/dhparam.pem 2048
    fi

cat &gt;&quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot;&lt;&lt;EOF
upstream ${upstream} {  
    server ${server};  
}

proxy_pass http://${upstream};
        }

}   
    server
{
        listen 443 ssl http2;
        server_name ${domain} ${moredomain};
        ssl on;
        ssl_certificate ${ssl_certificate};
        ssl_certificate_key ${ssl_certificate_key};
        ssl_session_timeout 5m;  
  
        location ~ \.*$ {
        #sub_filter woliaobude wo.liaobu.de;
        #sub_filter_once off;
        proxy_set_header X-Real-IP \$remote_addr;
        proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
        #proxy_set_header Referer 118.24.53.90:9898;
        proxy_set_header Host \$http_host;
        proxy_set_header X-Forwarded-Proto \$scheme;

proxy_pass http://${upstream};
        }

} 
EOF

echo &quot;Test Nginx configure file......&quot;
    /usr/local/nginx/sbin/nginx -t
    echo &quot;Reload Nginx......&quot;
    /usr/local/nginx/sbin/nginx -s reload
}

Add_ProxySSL()
{
    if [ &quot;${ssl_choice}&quot; == &quot;1&quot; ]; then
        Create_ProxySSL_Config
    elif [ &quot;${ssl_choice}&quot; == &quot;2&quot; ]; then
        letsdomain=&quot;&quot;
        if [ &quot;${moredomain}&quot; != &quot;&quot; ]; then
            letsdomain=&quot;-d ${domain}&quot;
            for i in ${moredomain};do
                letsdomain=${letsdomain}&quot; -d ${i}&quot;
            done
        else
            letsdomain=&quot;-d ${domain}&quot;
        fi
  
        OverWrite_VHostProxy_Config
  
        if [ ! -d &quot;${vhostdir}&quot; ]; then
            mkdir -p &quot;${vhostdir}&quot;
        fi

Add_Letsencrypt
        ssl_certificate=&quot;/usr/local/nginx/conf/ssl/${domain}/fullchain.cer&quot;
        ssl_certificate_key=&quot;/usr/local/nginx/conf/ssl/${domain}/${domain}.key&quot;
        if [ &quot;${lets_status}&quot; = 0 ]; then
            Create_ProxySSL_Config
        fi
    fi
}

Add_Dns_SSL()
{
    provider=$1
    if [ &quot;${provider}&quot; != &quot;&quot; ]; then
        dns_provider=&quot;dns_${provider}&quot;
    else
        Echo_Red &quot;The dns manual mode can not renew automatically, you must renew it manually.&quot;
    fi
    if [ -s /usr/local/acme.sh/acme.sh ]; then
        echo &quot;/usr/local/acme.sh/acme.sh [found]&quot;
    else
        cd /tmp
        [[ -f latest.tar.gz ]] &amp;&amp; rm -f latest.tar.gz
        wget https://soft.vpser.net/lib/acme.sh/latest.tar.gz --prefer-family=IPv4 --no-check-certificate
        tar zxf latest.tar.gz
        cd acme.sh-*
        ./acme.sh --install --log --home /usr/local/acme.sh --certhome /usr/local/nginx/conf/ssl
        cd ..
        rm -f latest.tar.gz
        rm -rf acme.sh-*
        sed -i &#039;s/cat &quot;\$CERT_PATH&quot;$/#cat &quot;\$CERT_PATH&quot;/g&#039; /usr/local/acme.sh/acme.sh
    fi
    if [[ ! -s /usr/local/acme.sh/dnsapi/dns_${provider}.sh &amp;&amp; &quot;${provider}&quot; != &quot;&quot; ]]; then
        echo &quot;DNS Provider: ${provider} not found.&quot;
        exit 1
    fi
    Add_SSL_Info_Menu

. &quot;/usr/local/acme.sh/acme.sh.env&quot;

if [ -s /usr/local/nginx/conf/ssl/${domain}/fullchain.cer ]; then
        echo &quot;Removing exist domain certificate...&quot;
        rm -rf /usr/local/nginx/conf/ssl/${domain}
    fi

letsdomain=&quot;&quot;
    if [ &quot;${moredomain}&quot; != &quot;&quot; ]; then
        letsdomain=&quot;-d ${domain}&quot;
        for i in ${moredomain};do
            letsdomain=${letsdomain}&quot; -d ${i}&quot;
        done
    else
        letsdomain=&quot;-d ${domain}&quot;
    fi

echo &quot;Starting create SSL Certificate use Let&#039;s Encrypt...&quot;
    if [ &quot;${provider}&quot; != &quot;&quot; ]; then
        /usr/local/acme.sh/acme.sh --issue ${letsdomain} --dns ${dns_provider} --reloadcmd &quot;/etc/init.d/nginx reload&quot;
        lets_status=$?
    else
        /usr/local/acme.sh/acme.sh --issue ${letsdomain} --dns --yes-I-know-dns-manual-mode-enough-go-ahead-please
        Echo_Yellow &quot;Please add the above TXT record to the domain in 120 seconds!!!&quot;
        echo
        Sleep_Sec 120
        /usr/local/acme.sh/acme.sh --renew ${letsdomain} --yes-I-know-dns-manual-mode-enough-go-ahead-please
        lets_status=$?
    fi
    if [ &quot;${lets_status}&quot; = 0 ] || [[ &quot;${provider}&quot; = &quot;&quot; &amp;&amp; &quot;${lets_status}&quot; = 1 &amp;&amp; -s &quot;/usr/local/nginx/conf/ssl/${domain}/fullchain.cer&quot; ]]; then
        if [ ! -d &quot;${vhostdir}&quot; ]; then
            echo &quot;Create Virtul Host directory......&quot;
            mkdir -p ${vhostdir}
            echo &quot;set permissions of Virtual Host directory......&quot;
            chmod -R 755 ${vhostdir}
            chown -R www:www ${vhostdir}
        fi

if [ ! -s &quot;/usr/local/nginx/conf/vhost/${domain}.conf&quot; ]; then
            Add_VHost_Config
        fi
        ssl_certificate=&quot;/usr/local/nginx/conf/ssl/${domain}/fullchain.cer&quot;
        ssl_certificate_key=&quot;/usr/local/nginx/conf/ssl/${domain}/${domain}.key&quot;
        Create_SSL_Config
        Echo_Green &quot;Let&#039;s Encrypt SSL Certificate create successfully.&quot;
    else
        Echo_Red &quot;Let&#039;s Encrypt SSL Certificate create failed!&quot;
    fi
}

Color_Text()
{
  echo -e &quot; \e[0;$2m$1\e[0m&quot;
}

Echo_Red()
{
  echo $(Color_Text &quot;$1&quot; &quot;31&quot;)
}

Echo_Green()
{
  echo $(Color_Text &quot;$1&quot; &quot;32&quot;)
}

Echo_Yellow()
{
  echo -n $(Color_Text &quot;$1&quot; &quot;33&quot;)
}

Echo_Blue()
{
  echo $(Color_Text &quot;$1&quot; &quot;34&quot;)
}

Sleep_Sec()
{
    seconds=$1
    while [ &quot;${seconds}&quot; -ge &quot;0&quot; ];do
      echo -ne &quot;\r     \r&quot;
      echo -n ${seconds}
      seconds=$(($seconds - 1))
      sleep 1
    done
    echo -ne &quot;\r&quot;
}

Check_DB

case &quot;${arg1}&quot; in
    start)
        lnmp_start
        ;;
    stop)
        lnmp_stop
        ;;
    restart)
        lnmp_stop
        lnmp_start
        ;;
    reload)
        lnmp_reload
        ;;
    kill)
        lnmp_kill
        ;;
    status)
        lnmp_status
        ;;
    nginx)
        /etc/init.d/nginx ${arg2}
        ;;
    mysql)
        /etc/init.d/mysql ${arg2}
        ;;
    mariadb)
        /etc/init.d/mariadb ${arg2}
        ;;
    php-fpm)
        /etc/init.d/php-fpm ${arg2}
        ;;
    pureftpd)
        /etc/init.d/pureftpd ${arg2}
        ;;
    httpd)
        /etc/init.d/httpd ${arg2}
        ;;
    vhost)
        Function_Vhost ${arg2}
        ;;
    database)
        Verify_DB_Password
        Function_Database ${arg2}
        TempMycnf_Clean
        ;;
    ftp)
        Check_Pureftpd
        Function_Ftp ${arg2}
        ;;
    ssl)
        info=&quot;n&quot;
        Add_SSL_Menu
        Add_SSL
        ;;
    dnsssl|dns)
        Add_Dns_SSL ${arg2}
        ;;
    nconf)
        vi /usr/local/nginx/conf/vhost/${arg2}.conf
        ;;
    proxy)
        Function_VhostProxy ${arg2}
        ;;
    *)
        echo &quot;Usage: lnmp {start|stop|reload|restart|kill|status}&quot;
        echo &quot;Usage: lnmp {nginx|mysql|mariadb|php-fpm|pureftpd} {start|stop|reload|restart|kill|status}&quot;
        echo &quot;Usage: lnmp vhost {add|list|del}&quot;
        echo &quot;Usage: lnmp database {add|list|edit|del}&quot;
        echo &quot;Usage: lnmp ftp {add|list|edit|del|show}&quot;
        echo &quot;Usage: lnmp ssl add&quot;
        echo &quot;Usage: lnmp {dnsssl|dns} {cx|ali|cf|dp|he|gd|aws}&quot;
        echo &quot;Usage: lnmp nconf domain&quot;
        echo &quot;Usage: lnmp proxy add&quot;
        ;;
esac
exit</code></pre><p><p></p></div></div></div></p><h2>参考资料</h2><p><a href="https://www.microcharon.com/go/aHR0cHM6Ly9uZ2lueC5vcmcvZW4vZG9jcy9odHRwL25neF9odHRwX3Byb3h5X21vZHVsZS5odG1s" target="_blank" >Module ngx_http_proxy_module (nginx.org)</a></p>

LNMP新版一键安装包NGINX反代站点加速教程

为什么要反代站点

LNMP 一键安装包下载

一键安装

安装配置（一）

仅安装NGINX

添加站点

为站点的vhost配置反代

反代服务器NGINX配置参考

源站服务器NGINX配置参考

修改主机Host

DNS域名解析

安装配置（二）

参考资料

甲骨文云Oracle Cloud白嫖免费VPS主机2023避坑指南

不定期更新 JetBrains系列2023年7月激活Licence教程

Club SIM HK 实体卡低至年费6HKD保号使用心得

Google Colab 一键搭建 NovelAILeaks NovelAI 4chan 魔改版指导

在Replit上搭建你的简易站点监控工具——Uptime-Kuma

浅论对使用Typecho系统站点的性能优化

咩咩启示录 Cult of the Lamb: Cultist Edition DLC v1.3.3.334 20240119 + NS v1.3.5 多语言

LNMP一键安装包搭建Typecho站点教程及相关问题指北

什么是Microsoft Clarity以及如何用其改善SEO

甲骨文云Oracle Cloud对象存储使用及用Alist和Rclone挂载

LNMP新版一键安装包NGINX反代站点加速教程