{"id":41,"date":"2020-09-11T21:49:21","date_gmt":"2020-09-11T12:49:21","guid":{"rendered":"https:\/\/zassoul.com\/?p=41"},"modified":"2020-10-01T16:33:24","modified_gmt":"2020-10-01T07:33:24","slug":"wordpress%e6%a7%8b%e7%af%89","status":"publish","type":"post","link":"https:\/\/wp.zassoul.com\/?p=41","title":{"rendered":"WordPress\u69cb\u7bc9"},"content":{"rendered":"\n

Blogger\u3092\u4f7f\u3063\u3066\u3044\u305f\u3051\u308c\u3069\uff0c\u4f7f\u3044\u52dd\u624b\u304c\u3088\u3044Wiki\u5f62\u5f0f\u3078\u5207\u308a\u66ff\u3048\u305f\u3044\u3068\u601d\u3044\uff0c\u52c9\u5f37\u304c\u3066\u3089Wordpress\u3092\u81ea\u524d\u3067\u7acb\u3066\u3066\u3053\u3061\u3089\u3078\u5f15\u3063\u8d8a\u3057\u3002<\/p>\n\n\n\n

1\u767a\u76ee\u306fWordpress\u69cb\u7bc9\u30e1\u30e2\u3002<\/p>\n\n\n\n

\u69cb\u60f3<\/h1>\n\n\n\n
\"\u30a4\u30e1\u30fc\u30b8\"
\u69cb\u6210\u6982\u8981<\/figcaption><\/figure>\n\n\n\n

\u69cb\u6210\u30a4\u30e1\u30fc\u30b8\u306f\u3053\u306e\u3088\u3046\u306a\u611f\u3058\u3002GCP\u4e0a\u306bCentOS8\u306e\u4eee\u60f3\u30de\u30b7\u30f3\u30921\u3064\u305f\u3066\uff0c\u305d\u306e\u4e0a\u3067\u5b8c\u7d50\u3055\u305b\u308b\u3002DB\u306f\u5206\u3051\u305f\u65b9\u304c\u3088\u3044\u306e\u3060\u308d\u3046\u304c\uff0c\u307e\u305a\u306f\u7121\u4e8b\u306b\u7acb\u3061\u4e0a\u304c\u308b\u3068\u3053\u308d\u307e\u3067\u3002<\/p>\n\n\n\n

\u30c9\u30e1\u30a4\u30f3\u306f\u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8<\/a>\u3067\u53d6\u5f97\u3002.com\u30c9\u30e1\u30a4\u30f3\u3067\u5e74\u95931886\u5186\u3002GCP\u3067\u30b0\u30ed\u30fc\u30d0\u30ebIP\u30a2\u30c9\u30ec\u30b9\u3092\u78ba\u4fdd\u3057\u305f\u5f8c\uff0c\u8a2d\u5b9a\u753b\u9762\u3067DNS\u767b\u9332\u3092\u3059\u308b\u3002<\/p>\n\n\n\n

\u5927\u307e\u304b\u306a\u6d41\u308c<\/h1>\n\n\n\n
  1. DB\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff0c\u8a2d\u5b9a <\/li>
  2. PHP\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff0c\u8a2d\u5b9a<\/li>
  3. HTTPD\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff0c\u8a2d\u5b9a<\/li>
  4. HTTPS\u5316<\/li><\/ol>\n\n\n\n

    \u3044\u3056\u3086\u304b\u3093\u3002<\/p>\n\n\n\n

    \u3068\u305d\u306e\u524d\u306b\uff0c\u69cb\u7bc9\u4e2d\u306f\u81ea\u5b85\u304b\u3089\u306e\u307f\u30a2\u30af\u30bb\u30b9\u53ef\u80fd\u3068\u3059\u308b\u305f\u3081GCP\u306e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3067\u30bd\u30fc\u30b9IP\u30a2\u30c9\u30ec\u30b9\u3092\u9650\u5b9a\u3059\u308b\u3002<\/p>\n\n\n\n

    DB\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff0c\u8a2d\u5b9a<\/h1>\n\n\n\n

    \u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8<\/a>\u3092\u53c2\u8003\u3002<\/p>\n\n\n\n

    $ sudo dnf install mariadb-server.x86_64<\/pre><\/div>\n\n\n\n
    <\/div><\/div>\n\n\n\n
    DB\u30bb\u30ad\u30e5\u30a2\u5316<\/p>\n\n\n\n
    $ sudo mysql_secure_installation\n\nNOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB\n      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!\n\nIn order to log into MariaDB to secure it, we'll need the current\npassword for the root user.  If you've just installed MariaDB, and\nyou haven't set the root password yet, the password will be blank,\nso you should just press enter here.\n\nEnter current password for root (enter for none):\nOK, successfully used password, moving on...\n\nSetting the root password ensures that nobody can log into the MariaDB\nroot user without the proper authorisation.\n\nSet root password? [Y\/n] y\nNew password:\nRe-enter new password:\nPassword updated successfully!\nReloading privilege tables..\n ... Success!\n\nBy default, a MariaDB installation has an anonymous user, allowing anyone\nto log into MariaDB without having to have a user account created for\nthem.  This is intended only for testing, and to make the installation\ngo a bit smoother.  You should remove them before moving into a\nproduction environment.\n\nRemove anonymous users? [Y\/n] y\n ... Success!\n\nNormally, root should only be allowed to connect from 'localhost'.  This\nensures that someone cannot guess at the root password from the network.\n\nDisallow root login remotely? [Y\/n] y\n ... Success!\n\nBy default, MariaDB comes with a database named 'test' that anyone can\naccess.  This is also intended only for testing, and should be removed\nbefore moving into a production environment.\n\nRemove test database and access to it? [Y\/n] y\n - Dropping test database...\n ... Success!\n - Removing privileges on test database...\n ... Success!\n\nReloading the privilege tables will ensure that all changes made so far\nwill take effect immediately.\n\nReload privilege tables now? [Y\/n] y\n ... Success!\n\nCleaning up...\n\nAll done!  If you've completed all of the above steps, your MariaDB\ninstallation should now be secure.\n\nThanks for using MariaDB!<\/pre><\/div>\n\n\n\n
    <\/div><\/div>\n\n\n\n
    wordpress\u7528DB\u8a2d\u5b9a\u3002<\/p>\n\n\n\n
    MariaDB [(none)]> CREATE DATABASE wordpress;\nQuery OK, 1 row affected (0.004 sec)\n\n\nMariaDB [(none)]>\n\n\nMariaDB [(none)]> GRANT ALL PRIVILEGES ON wordpress.* TO "DB\u30a2\u30c9\u30df\u30f3\u540d"@"localhost" IDENTIFIED BY "\u30d1\u30b9\u30ef\u30fc\u30c9";\nQuery OK, 0 rows affected (0.004 sec)\n\n\nMariaDB [(none)]> FLUSH PRIVILEGES;\nQuery OK, 0 rows affected (0.002 sec)<\/pre><\/div>\n\n\n\n
    \u30ed\u30b0\u306b\u8a8d\u8a3c\u30a8\u30e9\u30fc\u304c\u51fa\u305f\u3002\u30b1\u30eb\u30d9\u30ed\u30b9\u8a8d\u8a3c\u306a\u3069\u306f\u4f7f\u308f\u306a\u3044\u306e\u3067\u7121\u52b9\u5316\u3067\u5bfe\u51e6\u3059\u308b\u3002<\/p>\n\n\n\n
    [ERROR] mysqld: Server GSSAPI error (major 851968, minor 2529639093) : gss_acquire_cred failed -Unspecified GSS failure. Minor code may provide more information. Keytab FILE:\/etc\/krb5.keytab is nonexistent or empty.<\/td><\/tr><\/tbody><\/table>
    \/var\/log\/mariadb\/mariadb.log \u306e\u5185\u5bb9<\/figcaption><\/figure>\n\n\n\n
    $ sudo mv \/etc\/my.cnf.d\/auth_gssapi.cnf \/etc\/my.cnf.d\/auth_gssapi.cnf.org<\/pre><\/div>\n\n\n\n
    \u8d77\u52d5\u8a2d\u5b9a\u3002<\/p>\n\n\n\n
    $ systemctl enable mariadb\n$ systemctl start mariadb<\/pre><\/div>\n\n\n\n
    PHP\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff0c\u8a2d\u5b9a<\/h1>\n\n\n\n
    $ sudo dnf install php php-mysqlnd php-mbstring.x86_64 php-json php-gd php-xml php-zip php-dom<\/pre><\/div>\n\n\n\n
    php-gd\u304c\u306a\u3044\u3068wordpress\u4e0a\u3067\u753b\u50cf\u306e\u7de8\u96c6\u304c\u3067\u304d\u306a\u3044<\/p>\n\n\n\n
    \u63a8\u5968<\/p>\n\n\n\n
    \u53c2\u8003) https:\/\/qiita.com\/kogache\/items\/00dc37774dfe20f03a72<\/a><\/p>\n\n\n\n
    \/etc\/php-fpm.d\/www.conf \u7de8\u96c6\u3002httpd\u3068\u3057\u3066nginx\u3092\u4f7f\u3046\u306e\u3067\u30e6\u30fc\u30b6\u3068\u30b0\u30eb\u30fc\u30d7\u3092\u4fee\u6b63\u3059\u308b\u3002<\/p>\n\n\n\n
    ; Unix user\/group of processes\n; Note: The user is mandatory. If the group is not set, the default user's group\n;       will be used.\n; RPM: apache user chosen to provide access to the same directories as httpd\n;user = apache\nuser = nginx\n; RPM: Keep a group allowed to write in log dir.\n;group = apache\ngroup = nginx<\/pre><\/div>\n\n\n\n
    nginx\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\uff0c\u8a2d\u5b9a<\/h1>\n\n\n\n
    $ sudo dnf install nginx<\/pre><\/div>\n\n\n\n
    wordpress\u8a2d\u5b9a<\/h2>\n\n\n\n
    wordpress\u3082\u3042\u308f\u305b\u3066\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3092\u3059\u308b\u3002\u4eca\u56de\u306f \/usr\/share\/nginx \u306e\u4e0b\u306b WP \u3068\u3044\u3046\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u4f5c\u6210\u3057\u3066\uff0c\u305d\u3053\u3078wordpress\u3092\u914d\u7f6e\u3059\u308b\u3002<\/p>\n\n\n\n
    $ wget https:\/\/ja.wordpress.org\/latest-ja.tar.gz\n$ tar xvfz latest-ja.tar.gz .\/\n$ sudo chown -R nginx:nginx \/usr\/share\/nginx\/WP\n$ sudo mv wordpress\/* \/srv\/www\/wordpress\/<\/pre><\/div>\n\n\n\n
    nginx\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u5909\u66f4\u3002 \/etc\/nginx\/conf.d\/wp.conf \u3068\u3057\u3066\u7de8\u96c6\u3002TLS1.2 \u30681.3\u306b\u9650\u5b9a\u3059\u308b\u3002\u3053\u3061\u3089<\/a>\u3092\u53c2\u8003\u3002<\/p>\n\n\n\n
    # HTTPS\u3078\u30ea\u30c0\u30a4\u30ec\u30af\u30c8\nserver {\n        listen 80;\n        server_name zassoul.com;\n        return 301 https:\/\/$host$request_uri;\n}\nserver {\n        listen 443 ssl;\n        server_name zassoul.com;\n        root \/usr\/share\/nginx\/WP;\n        index index.php;\n        charset utf-8;\n\n        ssl_certificate \/etc\/letsencrypt\/live\/zassoul.com\/fullchain.pem;\n        ssl_certificate_key \/etc\/letsencrypt\/live\/zassoul.com\/privkey.pem;\n        ssl_protocols TLSv1.2 TLSv1.3;\n        ssl_prefer_server_ciphers on;\n\n        location = \/favicon.ico {\n                log_not_found off;\n                access_log off;\n        }\n\n        location \/ {\n                try_files $uri $uri\/ \/index.php?$args;\n        }\n\n        # Deny to wp-config.php\n        location ~* \/wp-config.php {\n                deny all;\n        }\n\n        #php-fpm\n        location ~ \\.php$ {\n                try_files $uri = 404;\n                fastcgi_split_path_info ^(.+\\.php)(\/.+)$;\n                include fastcgi_params;\n                fastcgi_index index.php;\n                fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;\n                fastcgi_pass php-fpm;\n        }\n\n        location ~* \\.(js|css|png|jpg|jpgeg|gif|ico)$ {\n               expires max;\n               log_not_found off;\n        }\n}<\/pre><\/div>\n\n\n\n
    wp-config.php \u3092\u7de8\u96c6\u3059\u308b\u3002\uff08\u30aa\u30d5\u30a3\u30b7\u30e3\u30eb\u30b5\u30a4\u30c8<\/a>\u3092\u53c2\u8003\uff09<\/p>\n\n\n\n
    \/\/ ** MySQL \u8a2d\u5b9a - \u3053\u306e\u60c5\u5831\u306f\u30db\u30b9\u30c6\u30a3\u30f3\u30b0\u5148\u304b\u3089\u5165\u624b\u3057\u3066\u304f\u3060\u3055\u3044\u3002 ** \/\/\n\/** WordPress \u306e\u305f\u3081\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u540d *\/\ndefine( 'DB_NAME', 'wordpress' );\n\n\/** MySQL \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30e6\u30fc\u30b6\u30fc\u540d *\/\ndefine( 'DB_USER', '\u4e0a\u3067\u8a2d\u5b9a\u3057\u305f\u30e6\u30fc\u30b6\u540d' );\n\n\/** MySQL \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30d1\u30b9\u30ef\u30fc\u30c9 *\/\ndefine( 'DB_PASSWORD', '\u4e0a\u3067\u8a2d\u5b9a\u3057\u305f\u30d1\u30b9\u30ef\u30fc\u30c9' );\n\n\/** MySQL \u306e\u30db\u30b9\u30c8\u540d *\/\ndefine( 'DB_HOST', 'localhost' );\n\n\/** \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u30c6\u30fc\u30d6\u30eb\u3092\u4f5c\u6210\u3059\u308b\u969b\u306e\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u6587\u5b57\u30bb\u30c3\u30c8 *\/\ndefine( 'DB_CHARSET', 'utf8mb4' );\n\n\/** \u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u7167\u5408\u9806\u5e8f (\u307b\u3068\u3093\u3069\u306e\u5834\u5408\u5909\u66f4\u3059\u308b\u5fc5\u8981\u306f\u3042\u308a\u307e\u305b\u3093) *\/\ndefine( 'DB_COLLATE', '' );\n\n\/**#@+\n * \u8a8d\u8a3c\u7528\u30e6\u30cb\u30fc\u30af\u30ad\u30fc\n *\/\ndefine( 'AUTH_KEY',         '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\ndefine( 'SECURE_AUTH_KEY',  '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\ndefine( 'LOGGED_IN_KEY',    '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\ndefine( 'NONCE_KEY',        '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\ndefine( 'AUTH_SALT',        '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\ndefine( 'SECURE_AUTH_SALT', '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\ndefine( 'LOGGED_IN_SALT',   '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\ndefine( 'NONCE_SALT',       '\u30b8\u30a7\u30cd\u30ec\u30fc\u30c8\u3057\u305f\u30ad\u30fc' );\n\n\/**#@-*\/<\/pre><\/div>\n\n\n\n
    <\/p>\n\n\n\n
    HTTPS\u5316<\/h2>\n\n\n\n
    \u5e38\u6642HTTPS\u3082\u3059\u308b\u306e\u3067Let’s Encrypt\u3067SSL\u8a3c\u660e\u66f8\u3092\u767a\u884c\u3059\u308b\u3002\u30b5\u30a4\u30c8\u8a8d\u8a3c\u306e\u305f\u308180\u756a\u30dd\u30fc\u30c8\u3067\u30a2\u30af\u30bb\u30b9\u3057\u3066\u304f\u308b\u5fc5\u8981\u304c\u3042\u308b\u3068\u3044\u3046\u3053\u3068\u3067\uff0c\u4e00\u6642\u7684\u306b80\u756a\u30dd\u30fc\u30c8\u5168\u89e3\u653e\u3092\u3059\u308b\u3002<\/p>\n\n\n\n
    \u3053\u3061\u3089<\/a>\u3092\u53c2\u8003\u306bLet’s Encrypt\u3067\u8a3c\u660e\u66f8\u767a\u884c\u3092\u5b9f\u65bd\u3002<\/p>\n\n\n\n
    Certbot\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3002<\/p>\n\n\n\n
    $ sudo dnf install epel-release\n$ sudo dnf install certbot<\/pre><\/div>\n\n\n\n
    \u304a\u8a66\u3057dry-run\u3002<\/p>\n\n\n\n
    $ sudo certbot certonly --dry-run --standalone -w \/srv\/www\/wordpress\/ -d zassoul.com -m "Email-Address"<\/pre><\/div>\n\n\n\n
    \u672c\u756a\u5b9f\u884c\u3002<\/p>\n\n\n\n
    $ sudo certbot certonly  --standalone -d zassoul.com -m "Email-Address" --agree-tos\nSaving debug log to \/var\/log\/letsencrypt\/letsencrypt.log\nPlugins selected: Authenticator webroot, Installer None\nObtaining a new certificate\nPerforming the following challenges:\nhttp-01 challenge for zassoul.com\nUsing the webroot path \/usr\/share\/nginx\/WP for all unmatched domains.\nWaiting for verification...\nCleaning up challenges\nSubscribe to the EFF mailing list (email: "Email-Address").\n\n\nIMPORTANT NOTES:\n - Congratulations! Your certificate and chain have been saved at:\n   \/etc\/letsencrypt\/live\/zassoul.com\/fullchain.pem\n   Your key file has been saved at:\n   \/etc\/letsencrypt\/live\/zassoul.com\/privkey.pem\n   Your cert will expire on 2020-12-07. To obtain a new or tweaked\n   version of this certificate in the future, simply run certbot\n   again. To non-interactively renew *all* of your certificates, run\n   "certbot renew"\n - If you like Certbot, please consider supporting our work by:\n\n\n   Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate\n   Donating to EFF:                    https:\/\/eff.org\/donate-le<\/pre><\/div>\n\n\n\n
    \u3053\u3053\u306780\u756a\u3092\u9589\u3058\u308b\u3002nginx\u8d77\u52d5\u8a2d\u5b9a\u3002<\/p>\n\n\n\n
    $ sudo systemctl enable nginx\n$ sudo systemctl start nginx<\/pre><\/div>\n\n\n\n
    \u5b8c\u4e86\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
    Blogger\u3092\u4f7f\u3063\u3066\u3044\u305f\u3051\u308c\u3069\uff0c\u4f7f\u3044\u52dd\u624b\u304c\u3088\u3044Wiki\u5f62\u5f0f\u3078\u5207\u308a\u66ff\u3048\u305f\u3044\u3068\u601d\u3044\uff0c\u52c9\u5f37\u304c\u3066\u3089Wordpress\u3092\u81ea\u524d\u3067\u7acb\u3066\u3066\u3053\u3061\u3089\u3078\u5f15\u3063\u8d8a\u3057\u3002 1\u767a\u76ee\u306fWordpress\u69cb\u7bc9\u30e1\u30e2\u3002 \u69cb\u60f3 \u69cb\u6210\u30a4\u30e1\u30fc\u30b8\u306f\u3053\u306e\u3088\u3046\u306a\u611f\u3058\u3002G\u2026 \u7d9a\u304d\u3092\u8aad\u3080 »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[9,6,10,8],"tags":[],"class_list":["post-41","post","type-post","status-publish","format-standard","hentry","category-gcp","category-it","category-wordpress","category-8"],"_links":{"self":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/posts\/41","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=41"}],"version-history":[{"count":43,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/posts\/41\/revisions"}],"predecessor-version":[{"id":304,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=\/wp\/v2\/posts\/41\/revisions\/304"}],"wp:attachment":[{"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=41"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=41"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wp.zassoul.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=41"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}