云服务器Rocky Linux 9.7搭建LNMP环境部署Discuz! X3.5/5.0

systemctl disable firewalld --nowsystemctl status firewalldsystemctl is-enabled firewalld

sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/configgrep "SELINUX=disabled" /etc/selinux/configsetenforce 0     # 不用重启，临时关闭

[nginx-stable]name=nginx stable repobaseurl=https://nginx.org/packages/centos/$releasever/$basearch/gpgcheck=1enabled=1gpgkey=https://nginx.org/keys/nginx_signing.keymodule_hotfixes=true

dnf -y install nginx   # 安装nginx

systemctl start nginxsystemctl enable nginxsystemctl status nginx        # 查看服务状态systemctl is-enabled nginx    # 查看是否设置开机启动

nginx -v

dnf -y install https://dev.mysql.com/get/mysql84-community-release-el9-3.noarch.rpm

dnf repolist enabled | grep "mysql.*-community.*"

dnf repolist all | grep mysql

dnf config-manager --disable mysql-8.4-lts-communitydnf config-manager --disable mysql-tools-8.4-lts-communitydnf config-manager --enable mysql80-communitydnf config-manager --enable mysql-tools-community

dnf -y install mysql-community-server

systemctl start mysqldsystemctl status mysqldsystemctl is-enabled mysqld

P=`awk '/temporary password/ {print $NF}' /var/log/mysqld.log`mysql -uroot -p$Pmysql> alter user 'root'@'localhost' identified by 'Mysql#8043';

mysql> CREATE DATABASE discuzdb CHARACTER SET utf8mb4 COLLATE utf8mb4_0900_ai_ci;

mysql> CREATE USER 'discuzuser'@'localhost' IDENTIFIED BY 'Mysql#8043';mysql> GRANT ALL PRIVILEGES ON discuzdb.* TO 'discuzuser'@'localhost';mysql> flush privileges;mysql> exit;

innodb_buffer_pool_size = 512M  # 默认128M，InnoDB缓冲池大小，4G以上内存建议为系统内存的40~60%innodb_log_file_size = 128M   # 默认48M，重做日志文件大小max_connections = 300         # 默认151，最大连接数

systemctl restart mysqld

[Redis]name=Redisbaseurl=http://packages.redis.io/rpm/rockylinux9enabled=1gpgcheck=1

curl -fsSL https://packages.redis.io/gpg > /tmp/redis.keyrpm --import /tmp/redis.keyyum -y install redis

systemctl start redissystemctl enable redissystemctl status redissystemctl is-enabled redis

dnf list | grep php

dnf -y install php php-fpm php-mysqlnd php-cli php-gd php-xml php-mbstring php-json php-curl php-zip php-intl php-common php-opcache php-bcmath php-pear php-devel php-redis

dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpmdnf -y install https://rpms.remirepo.net/enterprise/remi-release-9.rpm

dnf module list php

dnf -y module reset phpdnf -y module enable php:remi-8.5  # 如果安装8.5执行此命令dnf -y module enable php:remi-7.4  # 如果安装7.4执行此命令

dnf -y install php php-fpm php-mysqlnd php-cli php-gd php-xml php-mbstring php-json php-curl php-zip php-intl php-common php-opcache php-bcmath php-pear php-devel php-redis

rpm -qa | grep php

php -mphp -v  # 查看版本

systemctl start php-fpmsystemctl enable php-fpm

; 运行用户和组改为nginxuser = nginxgroup = nginx; 监听socketlisten = /run/php-fpm/www.socklisten.owner = nginxlisten.group = nginxlisten.mode = 0660

memory_limit = 256Mupload_max_filesize = 50Mpost_max_size = 100Mmax_execution_time = 180max_input_time = 180disable_functions = exec,system,passthru,shell_exec,popen,pclose,proc_open,proc_get_status,proc_terminate,proc_close,pcntl_fork,pcntl_exec,pcntl_wait,pcntl_waitpid,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,dl,assert,create_function,chroot,chgrp,chown,link,symlink,readlink,show_source,highlight_file,parse_ini_file,posix_ctermid,posix_getcwd,posix_getegid,posix_geteuid,posix_getgid,posix_getgrgid,posix_getgrnam,posix_getgroups,posix_getlogin,posix_getpgid,posix_getpgrp,posix_getpid,posix_getppid,posix_getpwuid,posix_setegid,posix_seteuid,posix_setgid,posix_setpgid,posix_setsid,posix_setuid,posix_times,posix_ttyname,posix_uname,posix_kill,posix_mkfifo

systemctl reload php-fpm

cp /etc/nginx/nginx.conf /etc/nginx/nginx.conf.bakmv /etc/nginx/conf.d/default.conf /etc/nginx/conf.d/default.conf.bak

user  nginx;worker_processes  auto;#worker_rlimit_nofile  65535;error_log  /var/log/nginx/error.log notice;pid        /run/nginx.pid;events {    worker_connections  1024;    use epoll;    multi_accept on;}http {    include       /etc/nginx/mime.types;    default_type  application/octet-stream;    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '                      '$status$body_bytes_sent "$http_referer" '                      '"$http_user_agent" "$http_x_forwarded_for"';    access_log  /var/log/nginx/access.log  main;    sendfile           on;    #tcp_nopush         on;    #tcp_nodelay        on;    keepalive_timeout  65;    #keepalive_requests 1000;    client_max_body_size 50M;    server_tokens      off;    gzip  on;    gzip_vary on;                 # 发送Vary: Accept-Encoding头    gzip_min_length 1k;           # 仅压缩大于1k的文件    gzip_buffers 4 16k;           # 压缩缓冲区大小(32 4k/16 8k)，并发连接数*(number*size)    gzip_http_version 1.1;        # 支持的HTTP版本    gzip_comp_level 6;            # 压缩级别（1-9，越高压缩率越高，消耗CPU越多）    gzip_disable "MSIE [1-6]\.";  # 表示ie6及以下不启用gzip    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml application/x-javascript text/mathml application/xhtml+xml application/atom+xml; # 需压缩的文件类型    include /etc/nginx/conf.d/*.conf;}

server {    listen       80;    listen       [::]:80;    server_name  _;  # 允许所有IP访问，修改为域名或IP    root         /usr/share/nginx/html;    index        index.php index.html index.htm;    # 日志配置    access_log /var/log/nginx/discuz-access.log;    error_log /var/log/nginx/discuz-error.log;    # php 处理    location ~ \.php$ {        fastcgi_pass  unix:/run/php-fpm/www.sock;        fastcgi_index index.php;        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;        include       fastcgi_params;        # 优化参数        #fastcgi_connect_timeout 300;        #fastcgi_send_timeout 300;        #fastcgi_read_timeout 300;        #fastcgi_buffer_size 64k;        #fastcgi_buffers 4 64k;        #fastcgi_busy_buffers_size 128k;        #fastcgi_temp_file_write_size 256k;    }    # 禁止访问隐藏文件 (如 .htaccess)    location ~ /\.ht {        deny all;    }    # 禁止目录遍历    location ~ \.\./ {        deny all;        return 403;    }    # Discuz!伪静态规则    location / {        try_files $uri $uri/ /index.php?$args;        # Rewrite 规则        rewrite ^([^\.]*)/topic-(.+)\.html$ $1/portal.php?mod=topic&topic=$2 last;        rewrite ^([^\.]*)/article-([0-9]+)-([0-9]+)\.html$ $1/portal.php?mod=view&aid=$2&page=$3 last;        rewrite ^([^\.]*)/forum-(\w+)-([0-9]+)\.html$ $1/forum.php?mod=forumdisplay&fid=$2&page=$3 last;        rewrite ^([^\.]*)/thread-([0-9]+)-([0-9]+)-([0-9]+)\.html$       $1/forum.php?mod=viewthread&tid=$2&extra=page%3D$4&page=$3 last;        rewrite ^([^\.]*)/group-([0-9]+)-([0-9]+)\.html$ $1/forum.php?mod=group&fid=$2&page=$3 last;        rewrite ^([^\.]*)/space-(username|uid)-(.+)\.html$ $1/home.php?mod=space&$2=$3 last;        rewrite ^([^\.]*)/blog-([0-9]+)-([0-9]+)\.html$ $1/home.php?mod=space&uid=$2&do=blog&id=$3 last;        rewrite ^([^\.]*)/archiver/(fid|tid)-([0-9]+)\.html$ $1/archiver/index.php?action=$2&value=$3 last;        if (!-e $request_filename) {	return 404;        }    }    # 静态文件缓存    location ~* \.(jpg|jpeg|png|bmp|gif|ico|webp|avif|css|js|woff|woff2|ttf|otf|eot|svg|swf|flv|mp4|mov|mp3)$ {        expires 30d;        add_header Cache-Control "public, max-age=2592000, immutable";    }    # 安全头    add_header X-Frame-Options "SAMEORIGIN" always;    add_header X-Content-Type-Options "nosniff" always;    add_header X-XSS-Protection "1; mode=block" always;}# 拒绝所有其它域名和IP访问server {    listen       80 default_server;    listen       [::]:80 default_server;    server_name  _;  # 匹配所有未指定的域名    return       403;  # 返回禁止访问状态码    # return     301 http://www.ideation.com.cn$request_uri;  # 或者重定向到域名}

nginx -t

systemctl restart nginx

echo "<?php phpinfo(); ?>" > /usr/share/nginx/html/info.php

cd /usr/share/nginx/html/

rm -rf *或者mkdir oldmv !(old) old

unzip Discuz_X5.0_20260410.zip

mv upload/* ./

chown -R nginx:nginx /usr/share/nginx/html

ll /var/lib/phpdrwxrwx---. 2 root apache   6 11月 18 14:24 opcachedrwxr-xr-x. 2 root root   146  4月 23 12:30 peclxmldrwxrwx---. 2 root apache   6 11月 18 14:24 sessiondrwxrwx---. 2 root apache   6 11月 18 14:24 wsdlcache将apache改为nginxchown -R root:nginx /var/lib/php/sessionchown -R root:nginx /var/lib/php/opcachechown -R root:nginx /var/lib/php/wsdlcache

dnf -y install epel-releasednf -y install phpmyadminln -s /usr/share/phpMyAdmin /usr/share/nginx/html/phpmyadmin

$_config['memory']['redis']['server'] = '127.0.0.1';$_config['memory']['redis']['port'] = 6379;