docker-nginx-phpfpm-mysql-modsecurity-phpmyadmin

How to Setup Nginx Phpfpm Mysql Modsecurity Phpmyadmin on docker

Step1: Install the necessary Ubuntu packages with the below command:

 apt update && apt install unzip docker.io docker-compose zip git

Step2: Clone the default code

Git clone https://github.com/jassi-devops/docker-nginx-phpfpm-mysql-modsecurity-phpmyadmin.git

Step3: Go to the nginx-conf directory and change the domain according to your env

cd docker-nginx-phpfpm-mysql-modsecurity-phpmyadmin/webserver/nginx-conf
sed -i 's/wordpress.com/your_wordpress_domain/g' *
sed -i 's/joomla.com/your_joomla_domain/g' *
sed -i 's/drupal.com/your_drupal_domain/g' *
sed -i 's/phpmyadmin.com/your_phpmyadmin_domain/g' *
cd  ../../

Buld the image and start the container with docker-compose

docker-compose build && docker-compose up –d

Step4: create database, user and assign the necessary permission

For creating the DB detail either we can take the ssh and run the mysql commands or login to the docker db container and execute the command

ssh -p 23 root@server_ip

or

docker exec –it db bash

Enter into the MySQL with below command, it will ask for the password so you have to enter the password which is mentioned in the docker-nginx-phpfpm-mysql-modsecurity-phpmyadmin/docker-compose.yml file where you have to check the Mysql service block

mysql -u root -p

once you entered into MySQL, run the below command to create the DB, User, and necessary permissions

For Joomla:

CREATE DATABASE joomla;
CREATE USER 'jm_user'@'%' IDENTIFIED WITH mysql_native_password BY 'YLUPeVNtpdPGEII0';
GRANT ALL PRIVILEGES ON joomla.* TO 'jm_user'@'%';
FLUSH PRIVILEGES;

For wordpress

Database detail is mentioned in the mysql service that you can find in the docker-nginx-phpfpm-mysql-modsecurity-phpmyadmin/docker-compose.yml file

For Drupal:

CREATE DATABASE joomla;
CREATE USER 'jm_user'@'%' IDENTIFIED WITH mysql_native_password BY 'YLUPeVNtpdPGEII0';
GRANT ALL PRIVILEGES ON joomla.* TO 'jm_user'@'%';
FLUSH PRIVILEGES;

Now run exit, to out from the Mysql

Exit

Now again run exit to out from the DB container

exit

Step5: Add the WordPress DB detail in the wp-config.php

Goto WordPress wordpress/wordpress/wp-config.php directory and edits the file with vim or nano and change the WordPress DB detail as you created in the step 4.

define( 'DB_NAME', 'your_db_name' ); /** Database username / define( 'DB_USER', 'your_db_user' ); /* Database password */ define( 'DB_PASSWORD', 'your_db_password' );

Step6: Obtaining SSL Certificates and Credentials

Open the docker-compose file docker-compose.yml and change the command in the certbot service as shown below. Be sure to replace the webroot path, email address, and domain names listed here with your information:

  certbot:
    depends_on:
      - webserver
    build: './certbot'
    container_name: certbot
    volumes:
      - certbot-etc:/etc/letsencrypt
      - ./wordpress/wordpress:/var/www/wordpress
      - ./drupal/drupal:/var/www/drupal
      - ./joomla/joomla:/var/www/joomla
      - ./phpmyadmin/phpmyadmin:/var/www/phpmyadmin
    command: certonly --webroot --webroot-path=/var/www/wordpress --email sammy@your_domain --agree-tos --no-eff-email --staging -d your_domain

Save and exit the file.

Run the below command to create a staging SSL for the WordPress domain

docker-compose up --force-recreate --no-deps certbot

You can now check that your certificates have been mounted to the webserver container with docker-compose exec:

docker-compose exec webserver ls -la /etc/letsencrypt/live

Once your certificate requests succeed, the following is the output:

Output
total 16
drwx------    3 root     root          4096 May 10 15:45 .
drwxr-xr-x    9 root     root          4096 May 10 15:45 ..
-rw-r--r--    1 root     root           740 May 10 15:45 README
drwxr-xr-x    2 root     root          4096 May 10 15:45 your_domain

Now that you know your request will be successful, you can edit the certbot service definition to remove the --staging flag. Open docker-compose.yml:

vim docker-compose.yml

Find the section of the file with the certbot service definition, and replace the --staging flag in the command option with the --force-renewal flag, which will tell Certbot that you want to request a new certificate with the same domains as an existing certificate. The following is the certbot service definition with the updated flag:

  certbot:
    depends_on:
      - webserver
    build: './certbot'
    container_name: certbot
    volumes:
      - certbot-etc:/etc/letsencrypt
      - ./wordpress/wordpress:/var/www/wordpress
      - ./drupal/drupal:/var/www/drupal
      - ./joomla/joomla:/var/www/joomla
      - ./phpmyadmin/phpmyadmin:/var/www/phpmyadmin
    command: certonly --webroot --webroot-path=/var/www/wordpress --email sammy@**your_domain** --agree-tos --no-eff-email **--force-renewal** -d **your_domain**

docker-compose up --force-recreate --no-deps certbot