How To Set Up Multiple WordPress Installations on a Single Ubuntu Server

Reference :

https://www.digitalocean.com/community/tutorials/how-to-set-up-multiple-wordpress-sites-on-a-single-ubuntu-vps

Install LEMP

Install Nginx

sudo apt-get install nginx
sudo apt-get install nginx-extras
curl http://localhost

Install MySQL

sudo apt-get update
sudo apt-get install mysql-server

Install PHP

sudo apt-get update
sudo apt-get install php-fpm php-mysql php-mbstring php-mcrypt php-xml php-gd php-ssh2 php-curl
sudo apt-get install php-cli php-cgi
sudo service php7.0-fpm restart

Setup MySql

Setup MySQL for the first time

sudo /usr/bin/mysql_secure_installation

The prompt will ask you for your current root password.

Enter password for user root:

VALIDATE PASSWORD PLUGIN can be used to test passwords
and improve security. It checks the strength of password
and allows the users to set only those passwords which are
secure enough. Would you like to setup VALIDATE PASSWORD plugin?

Press y|Y for Yes, any other key for No: y

There are three levels of password validation policy:

LOW Length &gt;= 8
MEDIUM Length &gt;= 8, numeric, mixed case, and special characters
STRONG Length &gt;= 8, numeric, mixed case, special characters and dictionary file

Please enter 0 = LOW, 1 = MEDIUM and 2 = STRONG: 2

Estimated strength of the password: 50
Change the password for root ? ((Press y|Y for Yes, any other key for No) : y

New password:
Re-enter new password:

Estimated strength of the password: 100
Do you wish to continue with the password provided?(Press y|Y for Yes, any other key for No) : y

By default, a MySQL installation has an anonymous user,
allowing anyone to log into MySQL without having to have
a user account created for them. This is intended only for
testing, and to make the installation go a bit smoother.
You should remove them before moving into a production
environment.

Remove anonymous users? (Press y|Y for Yes, any other key for No) : y
Success.

Normally, root should only be allowed to connect from
'localhost'. This ensures that someone cannot guess at
the root password from the network.

Disallow root login remotely? (Press y|Y for Yes, any other key for No) : y
Success.

By default, MySQL comes with a database named 'test' that
anyone can access. This is also intended only for testing,
and should be removed before moving into a production
environment.

Remove test database and access to it? (Press y|Y for Yes, any other key for No) : y
- Dropping test database...
Success.

- Removing privileges on test database...
Success.

Reloading the privilege tables will ensure that all changes
made so far will take effect immediately.

Reload privilege tables now? (Press y|Y for Yes, any other key for No) : y
Success.

All done!

Setup WordPress

1. Create Site Databases and Users

For the purposes of this guide, we will be using the following information:

domain1.com
site name : Domain 1
db name : domain1_wp
db user : domain1_user
db pass : password

domain2.com
site name : Domain 2
db name : domain2_wp
db user : domain2_user
db pass : password

a. Log into MySQL using the administrator account you configured during the MySQL installation:

mysql -u root -p

b. Execute the mysql commands :

CREATE DATABASE domain1_wp;
CREATE USER [email protected] IDENTIFIED BY 'password';
// SET PASSWORD FOR [email protected]= PASSWORD("password");
GRANT ALL PRIVILEGES ON domain1_wp.* TO [email protected] IDENTIFIED BY 'password';

CREATE DATABASE domain2_wp;
CREATE USER [email protected] IDENTIFIED BY 'password';
// SET PASSWORD FOR [email protected]= PASSWORD("password");
GRANT ALL PRIVILEGES ON domain2_wp.* TO [email protected] IDENTIFIED BY 'password';

FLUSH PRIVILEGES;
exit

# Drop Database
DROP DATABASE domain1_wp;

# Drop user
DROP USER [email protected]'%';
DROP USER [email protected]'localhost';

# Show users
SELECT user from mysql.user;

# Show grants
SHOW GRANTS FOR 'domain1_user'@'localhost';

2. Download WordPress and decompress the archive

sudo wget http://wordpress.org/latest.tar.gz

or

curl -O https://wordpress.org/latest.tar.gz
tar -xzvf latest.tar.gz

3. Go to extracted wordpress archive and create the configuration from the sample configuration file.

sudo cp wordpress/wp-config-sample.php wordpress/wp-config.php

4. Configuring Site Root Directories

a. Create a new root document

sudo mkdir -p /var/www/html

b. Create the directories for your wordpress site

sudo mkdir /var/www/html/domain1.com
sudo mkdir /var/www/html/domain1.com

c. Copy the extracted wordpress files to your site

sudo rsync -avP wordpress/ /var/www/html/domain1.com/
sudo rsync -avP wordpress/ /var/www/html/domain1.com/

d. Give ownership of the directories to the Apache web user and then add your linux username to the web group:

sudo chown www-data:www-data /var/www/html/domain1.com -R
sudo chown www-data:www-data /var/www/html/domain2.com -R
sudo usermod -a -G www-data

5. WordPress Configuration
a. Update the wordpress config file

sudo nano /var/www/html/domain1.com/wp-config.php

Find the section that contains the fields below and substitute the database, username, and password for your site:

// ** MySQL settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
define('DB_NAME', 'domain1_wp');

/** MySQL database username */
define('DB_USER', 'domain1_user');

/** MySQL database password */
define('DB_PASSWORD', 'password');

// same goes for the 2nd site

// ** MySQL settings - You can get this info from your web host ** //
/** The name of the database for WordPress */
define('DB_NAME', 'domain2_wp');

/** MySQL database username */
define('DB_USER', 'domain2_user');

/** MySQL database password */
define('DB_PASSWORD', 'password');

/** Updates from WordPress Admin Panel */
define('FS_METHOD','direct');

define('AUTH_KEY', 'YOUR_KEY_HERE');
define('SECURE_AUTH_KEY', 'YOUR_KEY_HERE');
define('LOGGED_IN_KEY', 'YOUR_KEY_HERE');
define('NONCE_KEY', 'YOUR_KEY_HERE');
define('AUTH_SALT', 'YOUR_KEY_HERE');
define('SECURE_AUTH_SALT', 'YOUR_KEY_HERE');
define('LOGGED_IN_SALT', 'YOUR_KEY_HERE');
define('NONCE_SALT', 'YOUR_KEY_HERE');

6. WordPress needs an extra PHP module installed in order to function correctly.

sudo apt-get update
sudo apt-get install php5-gd libssh2-php

or

# php-7
$ sudo apt-get install php-gd php-ssh2

Setup Nginx (Modify Nginx Server Blocks)

References :
* https://www.digitalocean.com/community/tutorials/how-to-install-wordpress-with-nginx-on-ubuntu-14-04
* https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-server-blocks-virtual-hosts-on-ubuntu-14-04-lts
* https://www.digitalocean.com/community/tutorials/how-to-configure-single-and-multiple-wordpress-site-settings-with-nginx

Create the NGINX .conf files

1. Create a directory for global configurations under /etc/nginx/global.

* common.conf: Configurations applicable to all sites.
* wordpress.conf: Configurations applicable to all WordPress sites.
* multisite.conf: Special configurations for WordPress multisite with sub-directories.

sudo mkdir /etc/nginx/global

2. Create the common.conf file

sudo nano /etc/nginx/global/common.conf

## Copy the following configurations

# Global configuration file.
# ESSENTIAL : Configure Nginx Listening Port
listen 80;

# ESSENTIAL : Default file to serve. If the first file isn't found,
index index.php index.html index.htm;

# ESSENTIAL : no favicon logs
location = /favicon.ico {
log_not_found off;
access_log off;
}

# ESSENTIAL : robots.txt
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}

# ESSENTIAL : Configure 404 Pages
error_page 401 403 404 /404.html;

# ESSENTIAL : Configure 50x Pages
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/nginx/html;
}

# SECURITY : Deny all attempts to access hidden files .abcde
location ~ /\. {
deny all;
}

# PERFORMANCE : Set expires headers for static files and turn off logging.
location ~* ^.+\.(js|css|swf|xml|txt|ogg|ogv|svg|svgz|eot|otf|woff|mp4|ttf|rss|atom|jpg|jpeg|gif|png|ico|zip|tgz|gz|rar|bz2|doc|xls|exe|ppt|tar|mid|midi|wav|bmp|rtf)$ {
access_log off; log_not_found off; expires 30d;
}

## Save and exit - Ctrl-O, Ctrl-X

3. Create the wordpress.conf file

sudo nano /etc/nginx/global/wordpress.conf

## Copy the following configurations

# WORDPRESS : Rewrite rules, sends everything through index.php and keeps the appended query string intact
location / {
try_files $uri $uri/ /index.php?q=$uri&amp;$args;
}

# SECURITY : Deny all attempts to access PHP Files in the uploads directory
location ~* /(?:uploads|files)/.*\.php$ {
deny all;
}

# Prevent XML-RPC Attacks : Deny all attempts to access the xmlrpc.php
location = /xmlrpc.php {
deny all;
}

# REQUIREMENTS : Enable PHP Support
location ~ \.php$ {
# SECURITY : Zero day Exploit Protection

# for php5
try_files $uri =404;
# ENABLE : Enable PHP, listen fpm sock
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php5-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;

# for php-7
include snippets/fastcgi-php.conf;

# With php7.0-cgi alone:
# fastcgi_pass 127.0.0.1:9000;
# With php7.0-fpm:
fastcgi_pass unix:/run/php/php7.0-fpm.sock;
}

# PLUGINS : Enable Rewrite Rules for Yoast SEO SiteMap
rewrite ^/sitemap_index\.xml$ /index.php?sitemap=1 last;
rewrite ^/([^/]+?)-sitemap([0-9]+)?\.xml$ /index.php?sitemap=$1&amp;sitemap_n=$2 last;

## Save and exit - Ctrl-O, Ctrl-X

4. Create the server block files for your wordpress site

sudo nano /etc/nginx/sites-available/domain1.conf

## Copy the following
## Same goes for your other wordpress site
## root = this is the root folder of your wordpress installation
## server_name = this is the domain name of your site
## Depending on your DNS provider route your wordpress sites accordingly

server {
#listen 80;

root /var/www/html/domain1.com;
index index.php index.html index.htm;

server_name domain1.com;

include global/common.conf;
include global/wordpress.conf;
}

## Save and exit - Ctrl-O, Ctrl-X

5. Update the /etc/nginx/nginx.conf

# Add the following to http (add at the end)
http : {
client_max_body_size 32M;
}

6. Enable the wordpress site

sudo ln -s /etc/nginx/sites-available/domain1.conf /etc/nginx/sites-enabled/
sudo ln -s /etc/nginx/sites-available/domain2.conf /etc/nginx/sites-enabled/

# (Optional) Disable the default nginx server block
sudo rm /etc/nginx/sites-enabled/default

7. To check your Nginx configuration

# You can use this command to troubleshoot your configuration if there is something wrong.

$ sudo nginx -t

8. Restart the web server and PHP processor.

sudo service nginx restart
sudo service php5-fpm restart

# php-7
sudo service nginx php7.0-fpm restart

Secure NGINX

1. Update /etc/nginx/nginx.conf and apply the SSL Ciphers

http {
...

# -----------------------
# Max Body Size
# -----------------------
client_max_body_size 20M;

# -----------------------
# SSL Protocol | Ciphers
# -----------------------
ssl_protocols TLSv1.1 TLSv1.2; # Dropping SSLv3, ref: POODLE
ssl_prefer_server_ciphers on;
ssl_ciphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!3DES';

...
}

2. Update your wordpress server block

sudo nano /etc/nginx/sites-available/domain2.conf

server {
listen 80 default_server;
listen [::]:80 default_server ipv6only=on;

server_name _;

root /var/www/domain2.com;
index index.php index.html index.htm;

# ----------------
# SSL
# ----------------
listen 443 ssl;
ssl_certificate /etc/ssl/ssl_certificate;
ssl_certificate_key /etc/ssl/private_key;

# ----------------
# Redirect to HTTPS
# ----------------
if ($scheme = 'http') {
return 301 https://$host$request_uri;
}

# ----------------
# HSTS
# ----------------
add_header Strict-Transport-Security 'max-age=31536000';

# ----------------
# Enable SiteMap
# ----------------
#Yoast SEO Sitemaps
location ~ ([^/]*)sitemap(.*).x(m|s)l$ {
rewrite ^/sitemap.xml$ /sitemap_index.xml permanent;
rewrite ^/([a-z]+)?-?sitemap.xsl$ /index.php?xsl=$1 last;
rewrite ^/sitemap_index.xml$ /index.php?sitemap=1 last;
rewrite ^/([^/]+?)-sitemap([0-9]+)?.xml$ /index.php?sitemap=$1&amp;sitemap_n=$2 last;
rewrite ^/news-sitemap.xml$ /index.php?sitemap=wpseo_news last;
rewrite ^/locations.kml$ /index.php?sitemap=wpseo_local_kml last;
rewrite ^/geo-sitemap.xml$ /index.php?sitemap=wpseo_local last;
rewrite ^/video-sitemap.xsl$ /index.php?xsl=video last;
}

include conf.prod/common.conf;
include conf.prod/wordpress.conf;
}

Update WordPress – PHP Config

To increase the file upload limit for WordPress.

* Update the php.ini file
sudo nano /etc/php5/fpm/php.ini

# Php 7
sudo nano /etc/php/7.0/fpm/php.ini

Set the following configurations :

upload_max_filesize = 32M
post_max_size = 16M
memory_limit = 128M
file_uploads = On
max_execution_time = 60

Backup WordPress

references : https://codex.wordpress.org/Backing_Up_Your_WordPress_Files

Backup MySql Databases
1. Execute the command

sudo mysqldump -u root -p --all-databases &gt; all_databases.sql

# Enter your mysql root password

Backup WordPress files
* By default, you can backup the whole wordpress installation.
If you want to backup only your own user-generated content, such as edited themes, new plugins, and uploaded files
Backup the /wp-content and the wp-config.php

$ sudo cp -R /var/www/html/domain1.com/wp-content /home/ubuntu/wordpress/backup/backup_20160630
$ sudo cp /var/www/html/domain1.com/wp-config.php /home/ubuntu/wordpress/backup/backup_20160630

Restoring WordPress

Restore the MySql Databases
1. Execute the command

sudo mysql -u root -p &lt; all_databases.sql

# Single Database
sudo mysql -u root -p wp-fourd &lt; db_backup.dump

2. Include again the privileges for the Users of every database

a. Log into MySQL using the administrator account you configured during the MySQL installation:

$ mysql -u root -p

b. Execute the mysql commands :

FLUSH PRIVILEGES;
exit

3. Copy the wordpress backup files.
* If you backup the whole wordpress site. Just setup your nginx server blocks.
* If you backup just the /wp-content and the wp-config.php, Download again the latest WordPress (see Setup WordPress at the top) and copy the wp-content to the wordpress

WP Content
domain1.com/wp-content
domain2.com/wp-content

sudo rsync -avP domain1.com/ /var/www/domain1.com/
sudo rsync -avP domain2.com/ /var/www/domain2.com/

Other Needed Libraries

sudo apt-get install php5-curl

# See installed packages
dpkg --list

# See running services
service --status-all

------------
PHP-5.6
------------
sudo add-apt-repository ppa:ondrej/php
sudo apt-get update
sudo apt-get install php5.6-fpm php5.6-mbstring php5.6-mcrypt php5.6-mysql php5.6-xml php5.6-gd php5.6-ssh2 php5.6-curl
sudo service nginx php5.6-fpm restart

sudo nano /etc/nginx/conf.prod/wordpress.conf
# REQUIREMENTS : Enable PHP Support
location ~ \.php$ {
# SECURITY : Zero day Exploit Protection

# for php5
try_files $uri =404;
# ENABLE : Enable PHP, listen fpm sock
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php/php5.6-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
}

------------
PHP-7.1
------------
sudo add-apt-repository ppa:nginx/stable

sudo add-apt-repository ppa:ondrej/php
sudo apt-get update
sudo apt-get install php-fpm php-mbstring php-mcrypt php-mysql php-xml php-gd php-ssh2 php-curl
sudo apt-get install php-cli php-cgi
sudo service nginx php7.1-fpm restart

sudo nano /etc/nginx/conf.prod/wordpress.conf
# REQUIREMENTS : Enable PHP Support
location ~ \.php$ {
# SECURITY : Zero day Exploit Protection

try_files $uri =404;
# ENABLE : Enable PHP, listen fpm sock
fastcgi_split_path_info ^(.+\.php)(/.+)$;
fastcgi_pass unix:/var/run/php/php7.1-fpm.sock;
fastcgi_index index.php;
include fastcgi_params;
}

Javasparks Aster

Setup WordPress (LEMP Stack)

How To Set Up Multiple WordPress Installations on a Single Ubuntu Server

Install LEMP

Install Nginx

Install MySQL

Install PHP

Setup MySql

Setup MySQL for the first time

Setup WordPress

Setup Nginx (Modify Nginx Server Blocks)

Create the NGINX .conf files

Secure NGINX

Update WordPress – PHP Config

Backup WordPress

Restoring WordPress

Other Needed Libraries

Previous Configure SSL in Nginx

This is the most recent story.

ARA

Setting up Let’s Encrypt – SSL for Domains

Ubuntu – For Developer, By Developer

MENU

More Stories

Hello world!

How To Set Up Multiple WordPress Installations on a Single Ubuntu Server

Install LEMP

Install Nginx

Install MySQL

Install PHP

Setup MySql

Setup MySQL for the first time

Setup WordPress

Setup Nginx (Modify Nginx Server Blocks)

Create the NGINX .conf files

Secure NGINX

Update WordPress – PHP Config

Backup WordPress

Restoring WordPress

Other Needed Libraries

Previous Configure SSL in Nginx

This is the most recent story.

ARA

Related Posts

Cloud Foundry – Hosting a Static Web App

Setting up Let’s Encrypt – SSL for Domains

Ubuntu – For Developer, By Developer

MENU

More Stories

Hello world!