WordPress 个人博客搭建，网站制作技术分享

[PHP]
; 禁止 PHP 向浏览器输出错误信息，错误信息将记录到日志文件中
display_errors = Off
; 错误报告级别，仅报告生产环境需要关注的错误
error_reporting = E_ALL & ~E_DEPRECATED & ~E_STRICT & ~E_NOTICE
; 定义错误日志文件的路径
error_log = /var/log/php/error.log
; 最大执行时间，防止脚本长时间运行占用资源
max_execution_time = 30
; 最大输入时间，限制接收用户输入的时间
max_input_time = 60
; 最大允许的 POST 数据大小
post_max_size = 8M
; 上传文件的最大大小
upload_max_filesize = 2M
; PHP 脚本允许使用的最大内存
memory_limit = 128M
; 最大输入变量数，防止恶意用户发送大量变量导致服务器资源耗尽
max_input_vars = 1000
; 设置默认时区，确保日期和时间函数使用正确的时间
date.timezone = Asia/Shanghai
; 禁用可能存在安全风险的函数
disable_functions = exec,passthru,shell_exec,system,proc_open,popen,curl_multi_exec,parse_ini_file,show_source
; 禁止通过 URL 打开文件，防止远程文件包含漏洞
allow_url_fopen = Off
allow_url_include = Off
; 开启魔术引号（虽然已弃用，但某些旧代码可能依赖）
magic_quotes_gpc = Off
; 开启跨站脚本攻击保护
session.cookie_httponly = On
session.cookie_secure = On

[opcache]
; 启用 OPcache
opcache.enable = 1
; 在 CLI 模式下也启用 OPcache
opcache.enable_cli = 1
; OPcache 内存大小
opcache.memory_consumption = 128
; 存储字符串的内存大小
opcache.interned_strings_buffer = 8
; 最多缓存的文件数量
opcache.max_accelerated_files = 4000
; 检查脚本更新的时间间隔（秒）
opcache.revalidate_freq = 60
; 禁止从共享内存加载脚本
opcache.fast_shutdown = 1

[mysqli]
; 最大连接尝试次数
mysqli.max_persistent = -1
; 最大持久连接数
mysqli.allow_persistent = On
; 连接超时时间
mysqli.connect_timeout = 60
; 查询结果的缓冲区类型
mysqli.default_result_mode = MYSQLI_STORE_RESULT

; 临时上传文件的目录
upload_tmp_dir = /var/www/html/tmp

[www]

; 监听地址和端口（容器中已经配置）
; listen = 127.0.0.1:9000

; 启动时使用的用户和组
user = www-data
group = www-data

; 进程管理方式
pm = static
pm.max_children = 10
; pm.start_servers = 5
; pm.min_spare_servers = 3
; pm.max_spare_servers = 10

; 慢日志配置
slowlog = /var/log/php-fpm/www-slow.log
request_slowlog_timeout = 3s

; 错误日志配置（注意容器中已经全局配置）
; error_log = /var/log/php-fpm/www-error.log

; 允许的最大请求数
pm.max_requests = 500

; 环境变量配置
env[HOSTNAME] = $HOSTNAME
env[PATH] = /usr/local/bin:/usr/bin:/bin
env[TMP] = /tmp
env[TMPDIR] = /tmp
env[TEMP] = /tmp

# 第一阶段：构建阶段
FROM swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/library/php:8.3.8-fpm-alpine AS builder

# --build-arg app_env=product 指定默认环境变量
ARG app_env=develop
ARG project_name=blog-wordpress
ARG project_config=config-all

ENV APP_ENV=${app_env}

# 设置工作目录
WORKDIR /var/www/

# 使用国内镜像源
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu.cn/g' /etc/apk/repositories

# 安装 gd 库所需的依赖项以及编译工具
RUN apk add --no-cache \
    freetype-dev \
    libjpeg-turbo-dev \
    libpng-dev \
    icu-dev \
    libzip-dev \
    autoconf \
    g++ \
    make \
    imagemagick \
    imagemagick-dev

# 启用 mysqli 和 gd 扩展
RUN docker-php-ext-configure gd --with-freetype --with-jpeg \
    && docker-php-ext-install mysqli gd exif zip intl

# 手动编译 imagick
RUN wget https://pecl.php.net/get/imagick-3.7.0.tgz \
    && tar -zxvf imagick-3.7.0.tgz \
    && cd imagick-3.7.0 \
    && phpize \
    && ./configure \
    && make && make install

# 卸载编译工具以减小镜像体积
RUN apk del --no-cache \
    autoconf \
    g++ \
    make

# 复制上下文文件到工作目录
COPY ./${project_config} ./${project_config}

# 覆盖配置文件 php.ini www.conf
RUN cp -f ${project_config}/${project_name}/php-fpm/config/*.conf /usr/local/etc/php-fpm.d/ \
    && cp -f ${project_config}/${project_name}/php-fpm/config/php.ini /usr/local/etc/php/ \
    && cp ${project_config}/${project_name}/php-fpm/start.sh ./ \
    && chmod +x start.sh \
    && rm -rf ${project_config}

# 第二阶段：运行阶段
FROM swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/library/php:8.3.8-fpm-alpine

# --build-arg app_env=product 指定默认环境变量
ARG app_env=develop
ARG project_name=blog-wordpress
ARG project_config=config-all

ENV APP_ENV=${app_env}

# 设置工作目录
WORKDIR /var/www/

# 使用国内镜像源
RUN sed -i 's/dl-cdn.alpinelinux.org/mirrors.ustc.edu.cn/g' /etc/apk/repositories

# 安装运行时所需的依赖
RUN apk add --no-cache \
    freetype \
    libjpeg-turbo \
    libpng \
    icu \
    libzip \
    imagemagick

# 从构建阶段复制编译好的扩展和配置文件
COPY --from=builder /usr/local/lib/php/extensions /usr/local/lib/php/extensions
COPY --from=builder /usr/local/etc/php-fpm.d/ /usr/local/etc/php-fpm.d/
COPY --from=builder /usr/local/etc/php/ /usr/local/etc/php/
COPY --from=builder /var/www/start.sh /var/www/start.sh

# 启用扩展
RUN docker-php-ext-enable mysqli gd exif zip intl imagick

# 暴露 fast-cgi 端口
EXPOSE 9000

server {
    listen 80;
    server_name www.liujie.xin;
    return 301 https://$host$request_uri;
}
server {
    listen 443 ssl;

    #填写证书绑定的域名
    server_name www.liujie.xin;

    # 填写证书文件绝对路径
    ssl_certificate cert/www.liujie.xin.pem;
    # 填写证书私钥文件绝对路径
    ssl_certificate_key cert/www.liujie.xin.key;

    ssl_session_cache shared:SSL:1m;
    ssl_session_timeout 5m;

    # 自定义设置使用的TLS协议的类型以及加密套件（以下为配置示例，请您自行评估是否需要配置）
    # TLS协议版本越高，HTTPS通信的安全性越高，但是相较于低版本TLS协议，高版本TLS协议对浏览器的兼容性较差。
    ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE:ECDH:AES:HIGH:!NULL:!aNULL:!MD5:!ADH:!RC4;
    ssl_protocols TLSv1.1 TLSv1.2 TLSv1.3;

    # 表示优先使用服务端加密套件。默认开启
    ssl_prefer_server_ciphers on;

    root /var/www/blog-wordpress;
    index index.php index.html index.htm;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        fastcgi_pass php_backend;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }

    error_page 500 502 503 504 /50x.html;
    location = /50x.html {
        root /usr/share/nginx/html;
    }
}

# upstreams.conf
upstream php_backend {
    server php-fpm:9000;
}

FROM swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/nginx:1.26.1-alpine

# 设置工作目录
WORKDIR /var/www/

# 复制上下文文件到工作目录
COPY ./config ./config
COPY ./start.sh ./start.sh

RUN chmod +x start.sh

# 覆盖配置文件，清理多余配置.
RUN cp -f config/*.conf /etc/nginx/conf.d/ \
    && cp -rf config/cert /etc/nginx/cert \
    && rm -rf config

# 暴露 fast-cgi 端口
EXPOSE 80

#!/bin/sh
exec /docker-entrypoint.sh nginx -g "daemon off;"

[mysqld]
skip-host-cache
skip-name-resolve
user=mysql
pid-file=/var/run/mysqld/mysqld.pid
socket=/var/run/mysqld/mysqld.sock
port=3306
basedir=/usr
datadir=/var/lib/mysql
tmpdir=/tmp
lc-messages-dir=/usr/share/mysql-8.0
explicit_defaults_for_timestamp
character-set-server=utf8mb4
collation-server=utf8mb4_general_ci
max_allowed_packet=16M
sql_mode = "ONLY_FULL_GROUP_BY,ERROR_FOR_DIVISION_BY_ZERO,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION"
[client]
default-character-set=utf8mb4
socket=/var/run/mysqld/mysqld.sock
[mysql]
default-character-set=utf8mb4

FROM swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/mysql:8.0.39

# 设置工作目录
WORKDIR /var/www/

# 复制上下文文件到工作目录
COPY ./config ./config
COPY ./start.sh ./start.sh

RUN chmod +x start.sh

# 覆盖配置文件，清理多余配置.
RUN cp config/mysql.cnf -f /etc/mysql/conf.d/mysql.cnf \
    && rm -rf config

# 暴露 fast-cgi 端口
EXPOSE 3306

#!/bin/bash
exec /usr/local/bin/docker-entrypoint.sh mysqld

<?php
/**
 * The base configuration for WordPress
 *
 * The wp-config.php creation script uses this file during the installation.
 * You don't have to use the website, you can copy this file to "wp-config.php"
 * and fill in the values.
 *
 * This file contains the following configurations:
 *
 * * Database settings
 * * Secret keys
 * * Database table prefix
 * * ABSPATH
 *
 * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/
 *
 * @package WordPress
 */

// ** Database settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
define( 'DB_NAME', 'blog-wordpress' );

/** Database username */
define( 'DB_USER', '根据需要配置' );

/** Database password */
define( 'DB_PASSWORD', '自定义的密码' );

/** Database hostname */
define( 'DB_HOST', 'mysql:3306' );

/** Database charset to use in creating database tables. */
define( 'DB_CHARSET', 'utf8mb4' );

/** The database collate type. Don't change this if in doubt. */
define( 'DB_COLLATE', '' );

/**#@+
 * Authentication unique keys and salts.
 *
 * Change these to different unique phrases! You can generate these using
 * the {@link https://api.wordpress.org/secret-key/1.1/salt/ WordPress.org secret-key service}.
 *
 * You can change these at any point in time to invalidate all existing cookies.
 * This will force all users to have to log in again.
 *
 * @since 2.6.0
 */
define( 'AUTH_KEY',         '!)ewag#~z~SoP?K`2.6ed0hqo Eajcqq{5!&nm<lFI~=P##+5b9plBW0D4v-8SiC' );
define( 'SECURE_AUTH_KEY',  'b`8%G:8hv*y`$goQ4gwnWf}xR^FjdbG`{bFN{iu&BFa1mjv*ydpq]PNKp-{5[zMY' );
define( 'LOGGED_IN_KEY',    '+82 oV6{JXI0wZWM7wMVbZi;QTq%jz?v^mYbC$:a+H35w_i7V4k}svJd-sZ~#(%D' );
define( 'NONCE_KEY',        'Un#(BQ:,&QDXe+(@iD!.z,L;70bf[J%$HT@9,7Sg!;A)odR2V8[q$;Bg(%.hq&]~' );
define( 'AUTH_SALT',        '(y1tx0Y[&,UH~0j)S]wvwiy77|3t`mW]c^|=wSjPh>oTAZVEKH!&PMmYM fSXl[8' );
define( 'SECURE_AUTH_SALT', '_ticG$7@)X>;m@&MW[`qEt*2Z8rw3@l-8@PT^b rP{~9h>yuxi@UN +Ze+p%O~Nl' );
define( 'LOGGED_IN_SALT',   'U5?nWT9;!WX=Y[B5Ck_vmroVMWJ*hdW1IOKj;F$FS%x@nB/N ;`qCkSMM%->zTWS' );
define( 'NONCE_SALT',       '&#*`~[Edn.FV<HK27m}Cnx{@-7@AdtL#lJN1+t;&O}i]8/%`4cs.pgfrC1,/1c,y' );

/**#@-*/

/**
 * WordPress database table prefix.
 *
 * You can have multiple installations in one database if you give each
 * a unique prefix. Only numbers, letters, and underscores please!
 *
 * At the installation time, database tables are created with the specified prefix.
 * Changing this value after WordPress is installed will make your site think
 * it has not been installed.
 *
 * @link https://developer.wordpress.org/advanced-administration/wordpress/wp-config/#table-prefix
 */
$table_prefix = 'wp_';

/**
 * For developers: WordPress debugging mode.
 *
 * Change this to true to enable the display of notices during development.
 * It is strongly recommended that plugin and theme developers use WP_DEBUG
 * in their development environments.
 *
 * For information on other constants that can be used for debugging,
 * visit the documentation.
 *
 * @link https://developer.wordpress.org/advanced-administration/debug/debug-wordpress/
 */
define( 'WP_DEBUG', false );

/* Add any custom values between this line and the "stop editing" line. */



/* That's all, stop editing! Happy publishing. */

/** Absolute path to the WordPress directory. */
if ( ! defined( 'ABSPATH' ) ) {
	define( 'ABSPATH', __DIR__ . '/' );
}

/** Sets up WordPress vars and included files. */
require_once ABSPATH . 'wp-settings.php';

# 构建项目中的容器镜像
docker compose build [名字是 docker-compose.yaml 中的 service 名称，如 nginx]
# 启动新镜像，没有问题的话，新镜像会运行新容器替代原容器
docker compose up -d [刚才构建的服务名称，例如 nginx]
# 进入镜像进行一些调试，或者查看
docker compose exec -it [nginx 等 service 名称] sh