Moved vhost farm to Ubuntu 18.04 on Linode and hit some snags after deciding to move to php-fpm instead of mod-php.<\/p>\n\n\n\n
Adding this to apache.conf instead of to each vhost config seems to work fine:<\/p>\n\n\n\n
Add<\/p>\n\n\n\n around the FilesMatch line to keep non php from being sent to unix sockets and ending up as lines in the Apache error log.<\/p>\n\n\n\n This also seems to work fine in apache.conf to enable http2 for all vhosts:<\/p>\n\n\n\n Need to edit children in \/etc\/php\/7.2\/fpm\/pool.d\/www.conf as the default is set to 5. 35 seemed better.<\/p>\n\n\n\n Then Newer kernel prevented php-fpm from launching automatically on reboot, so rolled back to 4.15.18-x86 and this seems to fix php-fpm not launching on a reboot.<\/p>\n\n\n\n This was helpful in getting to the bottom of the reboot issue: https:\/\/www.linode.com\/community\/questions\/17135\/php72-fpmservice-failing-after-reboot-nginx-error-502<\/a><\/p>\n\n\n\n Get rid of red padlock on email sent from server:<\/p>\n\n\n\n smtp_tls_security_level = may LetsEncrypt\/Certbot Fun<\/p>\n\n\n\n sudo .\/letsencrypt-auto –apache -d example.com<\/span> -d www.example.com<\/span><\/p>\n\n\n\n Remove cert:<\/p>\n\n\n\n Moved vhost farm to Ubuntu 18.04 on Linode and hit some snags after deciding to move to php-fpm instead of mod-php. Adding this to apache.conf instead of to each vhost config seems to work fine: <FilesMatch “\\.php$”>SetHandler “proxy:unix:\/var\/run\/php\/php7.2-fpm.sock|fcgi:\/\/localhost\/” <\/FilesMatch> Add <If “-f %{SCRIPT_FILENAME}”><\/If> around the FilesMatch line to keep non php from being sent to unix … Read more<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[236],"tags":[],"class_list":["post-3154","post","type-post","status-publish","format-standard","hentry","category-technology"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/posts\/3154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/comments?post=3154"}],"version-history":[{"count":9,"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/posts\/3154\/revisions"}],"predecessor-version":[{"id":4057,"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/posts\/3154\/revisions\/4057"}],"wp:attachment":[{"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/media?parent=3154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/categories?post=3154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.moorezilla.com\/blog\/wp-json\/wp\/v2\/tags?post=3154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}<FilesMatch \"\\.php$\">SetHandler \"proxy:unix:\/var\/run\/php\/php7.2-fpm.sock|fcgi:\/\/localhost\/\" <\/FilesMatch>
\n<\/code><\/p>\n\n\n\n<If \"-f %{SCRIPT_FILENAME}\"><\/If><\/code><\/p>\n\n\n\nProtocols h2 http\/1.1<\/code><\/p>\n\n\n\na2enmod proxy_fcgi && a2dismod php7.2<\/code> gets you most of the way there.<\/p>\n\n\n\nservice php7.2-fpm reload<\/code> never hurts, but shouldn’t be necessary on reboot.<\/p>\n\n\n\n
smtp_tls_loglevel = 1
smtp_tls_CAfile = \/etc\/ssl\/certs\/ca-certificates.crt<\/p>\n\n\n\ncertbot<\/span> revoke<\/span> --<\/span>cert<\/span>-<\/span>path<\/span> \/<\/span>etc<\/span>\/<\/span>letsencrypt<\/span>\/<\/span>live<\/span>\/<\/span>CERTNAME<\/span>\/<\/span>cert<\/span>.<\/span>pem<\/span><\/pre>\n","protected":false},"excerpt":{"rendered":"