root/usr/local/鐨囩憻/public;indexindex.phpindex.htmlindex.htm;location/{try_files$uri$uri/=404;}location~\.php${includesnippets/fastcgi-php.conf;fastcgi_passunix:/var/run/php/php7.4-fpm.sock;}location~/\.ht{denyall;}

}

###鐩戞帶鍜屾棩蹇�####1.鏃ュ織鐩戞帶涓轰簡鍙婃椂鍙戠幇鍜岃В鍐抽棶棰橈紝鍙�浠ラ厤缃�鏃ュ織鐩戞帶銆傚湪Nginx閰嶇疆鏂囦欢涓�锛屾坊鍔犲�備笅閰嶇疆锛�

nginxaccesslog/var/log/nginx/鐨囩憻access.log;errorlog/var/log/nginx/鐨囩憻error.log;

####2.浣跨敤鐩戞帶宸ュ叿鎺ㄨ崘浣跨敤涓�浜涚洃鎺у伐鍏锋潵瀹炴椂鐩戞帶缃戠珯鎬ц兘鍜屾棩蹇楋紝濡傦細-NewRelic锛氬己澶х殑鐩戞帶宸ュ叿锛岃兘澶熷疄鏃惰拷韪�缃戠珯鎬ц兘銆�-Logstash锛氱敤浜庢棩蹇楁敹闆嗗拰鍒嗘瀽銆�-Prometheus锛氱敤浜庣洃鎺у拰鏀堕泦绯荤粺鎸囨爣銆�

###楂樼骇璋冭瘯####1.鏌ヰ煒佺湅骞朵紭鍖栨暟鎹�搴撴煡璇㈤�氳繃Laravel鐨刞DB::enableQueryLog()`鍙�浠ユ煡鐪嬫瘡娆℃暟鎹�搴撴煡璇�锛屽苟鎵惧埌鎬ц兘鐡堕�堛�傚彲浠ヤ娇鐢ㄤ互涓嬪懡浠わ細

瀹夊叏璁剧疆

缃戠珯鐨勫畨鍏ㄦ�ц嚦鍏抽噸瑕侊紝鐨囩憻鎻愪緵浜嗗�氱�嶅畨鍏ㄨ�剧疆锛屽府鍔╀綘淇濇姢缃戠珯鍏嶅彈鍚勭�嶅▉鑳侊細

闃茬伀澧欒�剧疆锛氶厤缃�缃戠珯闃茬伀澧欙紝闃绘�㈡伓鎰忔祦閲忓拰鏀诲嚮銆係SL璇佷功锛氶厤缃甋SL璇佷功锛岀‘淇濈綉绔欐暟鎹�浼犺緭鐨勫畨鍏ㄣ�傞槻SQL娉ㄥ叆锛氬惎鐢ㄩ槻SQL娉ㄥ叆鎺�猸愭柦锛屼繚鎶ゆ暟鎹�搴撳厤鍙楁敾鍑汇�侷P榛戝悕鍗曪細璁剧疆IP榛戝悕鍗曪紝闃绘�㈠彲鐤慖P璁块棶缃戠珯銆�

鍦ㄥ綋鍓嶄簰鑱旂綉鏃朵唬锛岀綉缁滃钩鍙板�傞洦鍚庢槬馃搶绗嬭埇娑岀幇锛屽叾涓�鐨勮�稿�氬钩鍙颁互鈥滃厤璐硅�傜湅鈥濅负鍗栫偣锛屽惛寮曚簡澶ч噺鐢ㄦ埛鐨勯潚鐫愩�傚苟闈炴墍鏈夎繖浜涘厤璐硅�傜湅鐨勫钩鍙伴兘鏄�鍊煎緱淇¤禆鐨勩�備粖澶╋紝鎴戜滑灏嗙户缁�娣卞叆鎺㈣�ㄧ殗鐟熺綉绔欑殑鐪熷疄闈㈣矊锛屼互鍙婅繖浜涘钩鍙板箍鍛婂脊锟�###浜屻�佸箍鍛婂脊绐楌煋濆�圭敤鎴蜂綋楠岀殑褰卞��

鍦ㄦ帰璁ㄧ殗鐟熺綉绔欑殑鐪熷疄闈㈣矊鍚庯紝鎴戜滑鍐嶆潵鐪嬬湅骞垮憡寮圭獥瀵圭敤鎴蜂綋楠岀殑褰卞搷銆傚箍鍛婂脊绐楀湪鐜颁唬浜掕仈缃戜腑鏄�涓�绉嶅父瑙佺殑馃敟骞垮憡褰㈠紡锛屼絾瀹冪殑杩囧害浣跨敤寰�寰�浼氬�圭敤鎴蜂綋楠岄�犳垚璐熼潰褰卞搷銆�

Certbot浼氳嚜鍔ㄩ厤缃甆ginx浠ヤ娇鐢⊿SL璇佷功銆傜‘淇濆湪Nginx閰嶇疆鏂囦欢涓�鍚�鐢ㄤ簡HTTPS锛�

nginxserver{listen443ssl;servernameyourdomain.com;sslcertificate/etc/letsencrypt/live/yourdomain.com/fullchain.pem;sslcertificatekey/etc/letsencrypt/live/your_domain.com/privkey.pem;

瀹夊叏璁剧疆

Web搴旂敤闃茬伀澧欙紙WAF锛夛細鍦ˋpache涔嬪墠娣诲姞WAF锛岄樆姝㈡伓鎰忔祦閲忓拰鏀诲嚮銆侱DoS闃叉姢锛氫娇鐢–DN鏈嶅姟鍟嗘彁渚涚殑DDoS闃叉姢锛屼繚鎶ゆ湇鍔″櫒鍏嶅彈鍒嗗竷寮忔嫆缁濇湇鍔℃敾鍑汇�傚畾鏈熷�囦唤锛氶厤缃�鑷�鍔ㄥ�囦唤锛岄槻姝㈡暟鎹�涓㈠け銆傚彲浠ヤ娇鐢╮sync鎴栧叾浠栧伐鍏峰畾鏈熷�囦唤MySQL鏁版嵁搴撳拰缃戠珯鏂囦欢銆�

鏍″�癸細璋㈢��(1C0m4pJyqZtPma0S7t9ZFfz4hTykKag)