终于建站了！波折重重，赶紧笔记！

1 阿里云购买域名和云服务器ECS，最开始选的共享型small（1G1vCPU），后变更为突发型（2G2vCPU），价格相差10块，后者性能明显好于前者。

2 配置ECS：选择CentOS 8操作系统，CentOS 常用命令见这里。2M固定带宽，选择手工设置密码，服务器选在了国内。

第一次用国内服务器，以前用的都是漂亮国的，国内服务器就涉及到备案，还是挺麻烦的，鉴于已经付了钱，并搭建好了一切环境，不想再折腾，遂决定硬着头皮用下去，也体会一把申请备案的痛感。

3 通过终端连接到后台，首先更新：yum -y update

4 安装服务器：yum -y install nginx

5 查看服务器状态：systemctl status nginx

！如果提示 -bash: systemctl: command not found，是因为CentOS 7.0以后才有systemctl命令，6.x只能用 service nginx status

6 设置开机启动并启动nginx服务器：
[~]# systemctl enable nginx
[~]# systemctl start nginx

7 安装mysql：yum search mysql，选择合适的包，直接yum install mysql是不完整的，需要再把mariadb补充上才能正常使用，见这里。
正确的命令（centos8）：yum -y install mysql-server

8 初始化mysql：
[~]# systemctl status mysqld，查看状态；
[~]# systemctl enable mysqld，开机启动；
[~]# systemctl start mysqld，启动mysql服务；
[~]# sudo mysql_secure_installation，运行mysql_secure_installation脚本，该脚本执行一些与安全性相关的操作并设置MySQL根密码；

9 配置mysql：
[~]# mysql -uroot -p
[mysql]> use mysql;
> update user set host='% where user='root';
> flush privileges;
> exit
[~]# sudo firewall-cmd --add-port=3306/tcp --permanent
[~]# sudo firewall-cmd --reload

! FirewallD服务如果没启动的话要先设置开机并启动firewalld服务

10 修改/etc/my.cnf配置文件，在末尾添加
[mysqld]
skip-name-resolve

11 重启mysql服务：systemctl restart mysqld

12 安装php：yum -y install php*。

13 开机启动php-fpm服务：systemctl enable php-fpm，systemctl start php-fpm

14 修改/etc/nginx/nginx.conf文件：

*For more information on configuration, see:
* Official English Documentation: http://nginx.org/en/docs/
* Official Russian Documentation: http://nginx.org/ru/docs/
user nginx;
worker_processes 2;
worker_cpu_affinity 01 10;
worker_rlimit_nofile 65535;
worker_processes auto;

error_log /var/log/nginx/error.log;
pid /run/nginx.pid;

Load dynamic modules. See /usr/share/nginx/README.dynamic.
include /usr/share/nginx/modules/*.conf;

events {
     worker_connections 65535;
     use epoll;
     multi_accept on;
 }

http {
     log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                       '$status $body_bytes_sent "$http_referer" '
                       '"$http_user_agent" "$http_x_forwarded_for"';
    access_log  /var/log/nginx/access.log  main;
    server_names_hash_bucket_size 128;
    client_header_buffer_size 32k;
    large_client_header_buffers 4 32k;
    client_max_body_size 8m;

    sendfile            on;
    tcp_nopush          on;
    tcp_nodelay         on;
    keepalive_timeout   65;
    types_hash_max_size 2048;

    fastcgi_connect_timeout 180;
    fastcgi_send_timeout 500;
    fastcgi_read_timeout 500;
    fastcgi_buffer_size 64k;
    fastcgi_buffers 4 64k;
    fastcgi_busy_buffers_size 128k;
    fastcgi_temp_file_write_size 128k;
    gzip on;
    gzip_min_length 1k;
    gzip_buffers 4 16k;
    gzip_http_version 1.0;
    gzip_comp_level 2;
    gzip_types text/plain application/x-javascript text/css application/xml;
    gzip_vary on;

include             /etc/nginx/mime.types;
default_type        application/octet-stream;

# Load modular configuration files from the /etc/nginx/conf.d directory.
# See http://nginx.org/en/docs/ngx_core_module.html#include
# for more information.
include /etc/nginx/conf.d/*.conf;

    server {
            listen 80;
            server_name localhost;
            root 你的根目录;

            location / {
                  index index.php index.html;
                  proxy_http_version 1.1;
                  proxy_set_header Upgrade $http_upgrade;
                  proxy_set_header Connection "upgrade";
                  try_files $uri $uri/ /index.php?$query_string;
            }
            location ~ \.php$ {
                            if ( $fastcgi_script_name ~ \..*\/.*php ) {return 403;}
                            fastcgi_pass 127.0.0.1:9000;
                            fastcgi_index index.php;
                            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                            include fastcgi_params;
            }
            #rewrite ^(.*)$  https://$host$1 permanent;
    }

    server
    {
            listen 443 ssl default_server;
            ssl_certificate   Cert/你的ssl证书.pem;
            ssl_certificate_key  Cert/你的ssl证书.key;
            rewrite ^(.*)$  https://www.aliyun.com;
    }

    server {

            listen 443;
            server_name www.你的域名;
            ssl on;
            root 你的根目录;
            index index.html index.htm index.php;
            ssl_certificate   Cert/你的ssl证书.pem;
            ssl_certificate_key  Cert/你的ssl证书.key;
            ssl_session_timeout 5m;
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            ssl_prefer_server_ciphers on;

            location / {
                    root 你的根目录;
                    index index.html index.htm index.php;
                    proxy_http_version 1.1;
                    proxy_set_header Upgrade $http_upgrade;
                    proxy_set_header Connection "upgrade";
                    try_files $uri $uri/ /index.php?$query_string;
            }

            location ~ \.php$ {
                            if ( $fastcgi_script_name ~ \..*\/.*php ) {return 403;}
                            fastcgi_pass 127.0.0.1:9000;
                            fastcgi_index index.php;
                            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
                            include fastcgi_params;
            }

   }
}

15 检查语法：nginx -t，如果没问题重启nginx：systemctl restart nginx

16 访问域名，获得nginx默认页面或者nginx.conf文件中指定的根目录index文件

参考文章：CentOS 8 安装MySQL 8.0
php-fpm启动成功但是9000端口没被用?
centos出现“FirewallD is not running”怎么办
nginx安装错误:No package nginx available