Skip to content

Instantly share code, notes, and snippets.

@codex5

codex5/Nginx - Varnish - SSL Magento 2

Last active December 4, 2020 09:26
Show Gist options
  • Save codex5/7f9545c96bbe989d63f22aeb154c0b45 to your computer and use it in GitHub Desktop.
Save codex5/7f9545c96bbe989d63f22aeb154c0b45 to your computer and use it in GitHub Desktop.
Download ZIP

Revisions

  1. codex5 revised this gist Dec 4, 2020. 1 changed file with 5 additions and 2 deletions.
    7 changes: 5 additions & 2 deletions Nginx - Varnish - SSL Magento 2
    View file
    Original file line number Diff line number Diff line change
    @@ -42,7 +42,7 @@ location ~ (index|get|static|report|404|503)\.php$ {

    Modified

    location ~ (index|get|static|report|404|503)\.php$ {
    location ~ (index|get|static|report|404|503|health_check)\.php$ {
    try_files $uri =404;
    fastcgi_pass unix:/var/run/$FPM_USER.sock;

    @@ -85,4 +85,7 @@ server {
    listen 80;
    server_name {DOMAINS};
    return 301 https://$host$request_uri;
    }
    }

    503 fetch failed issue:
    - Change /pub/health_check.php to /health_check.php
  2. codex5 created this gist Oct 10, 2019.
    88 changes: 88 additions & 0 deletions Nginx - Varnish - SSL Magento 2
    View file
    Original file line number Diff line number Diff line change
    @@ -0,0 +1,88 @@
    Varnish: 6081
    Nginx: 8080, 443, 80


    Varnish Backend
    server {
    server_name {SERVERNAMES};
    listen 8080;
    set $MAGE_ROOT /home/{USER}/public_html/magento;
    set $MAGE_MODE production;
    set $MAGE_RUN_TYPE null;
    set $MAGE_RUN_CODE null;
    set $HTTPS_FORWARD on;
    set $FPM_USER {USER};
    # access and error logging for this vhost by using the logwatch logformat
    access_log /home/{USER}/log/nginx/access.log logwatch;
    error_log /home/{USER}/log/nginx/error.log error;
    location ~ \.php$ {
    fastcgi_pass unix:/var/run/{USER}.sock;
    include include.d/fastcgi_magento2.conf;
    }
    include include.d/magento2.conf;
    }

    Update Magento sample configuration file

    # PHP entry point for main application
    location ~ (index|get|static|report|404|503)\.php$ {
    try_files $uri =404;
    fastcgi_pass fastcgi_backend;
    fastcgi_buffers 1024 4k;

    fastcgi_param PHP_FLAG "session.auto_start=off \n suhosin.session.cryptua=off";
    fastcgi_param PHP_VALUE "memory_limit=768M \n max_execution_time=18000";
    fastcgi_read_timeout 600s;
    fastcgi_connect_timeout 600s;

    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include fastcgi_params;
    }

    Modified

    location ~ (index|get|static|report|404|503)\.php$ {
    try_files $uri =404;
    fastcgi_pass unix:/var/run/$FPM_USER.sock;

    fastcgi_param PHP_FLAG "session.auto_start=off \n suhosin.session.cryptua=off";
    fastcgi_param PHP_VALUE "memory_limit=768M \n max_execution_time=18000";
    fastcgi_read_timeout 600s;
    fastcgi_connect_timeout 600s;
    fastcgi_param MAGE_MODE $MAGE_MODE;
    fastcgi_param MAGE_RUN_TYPE $MAGE_RUN_TYPE;
    fastcgi_param MAGE_RUN_CODE $MAGE_RUN_CODE;
    fastcgi_param HTTPS $HTTPS_FORWARD;

    fastcgi_index index.php;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
    include fastcgi_params;
    }


    HTTPS termination & Varnish proxy
    server {
    listen 443 ssl;
    server_name {DOMAINS};
    ssl on;
    ssl_certificate /etc/letsencrypt/live/{DOMAIN}/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/{DOMAIN}/privkey.pem;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers 'AES128+EECDH:AES128+EDH:!aNULL';
    keepalive_timeout 300s;
    location / {
    proxy_pass http://127.0.0.1:6081;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto https;
    proxy_set_header X-Forwarded-Port 443;
    proxy_set_header Host $host;
    }
    }

    server {
    listen 80;
    server_name {DOMAINS};
    return 301 https://$host$request_uri;
    }