怎么在CentOS7中使用Nginx和PHP7

upstream php-handler {
  server 127.0.0.1:9000;
  #server unix:/var/run/php5-fpm.sock;
}
server {
  listen 80;
  server_name cloud.nextcloud.co;
  # enforce https
  return 301 https://$server_name$request_uri;
}
server {
  listen 443 ssl;
  server_name cloud.nextcloud.co;
  ssl_certificate /etc/nginx/cert/nextcloud.crt;
  ssl_certificate_key /etc/nginx/cert/nextcloud.key;
  # add headers to serve security related headers
  # before enabling strict-transport-security headers please read into this
  # topic first.
  add_header strict-transport-security "max-age=15768000;
  includesubdomains; preload;";
  add_header x-content-type-options nosniff;
  add_header x-frame-options "sameorigin";
  add_header x-xss-protection "1; mode=block";
  add_header x-robots-tag none;
  add_header x-download-options noopen;
  add_header x-permitted-cross-domain-policies none;
  # path to the root of your installation
  root /usr/share/nginx/html/nextcloud/;
  location = /robots.txt {
    allow all;
    log_not_found off;
    access_log off;
  }
  # the following 2 rules are only needed for the user_webfinger app.
  # uncomment it if you're planning to use this app.
  #rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
  #rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json
  # last;
  location = /.well-known/carddav {
   return 301 $scheme://$host/remote.php/dav;
  }
  location = /.well-known/caldav {
   return 301 $scheme://$host/remote.php/dav;
  }
  # set max upload size
  client_max_body_size 512m;
  fastcgi_buffers 64 4k;
  # disable gzip to avoid the removal of the etag header
  gzip off;
  # uncomment if your server is build with the ngx_pagespeed module
  # this module is currently not supported.
  #pagespeed off;
  error_page 403 /core/templates/403.php;
  error_page 404 /core/templates/404.php;
  location / {
    rewrite ^ /index.php$uri;
  }
  location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
    deny all;
  }
  location ~ ^/(?:.|autotest|occ|issue|indie|db_|console) {
    deny all;
  }
  location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+|core/templates/40[34]).php(?:$|/) {
    include fastcgi_params;
    fastcgi_split_path_info ^(.+.php)(/.*)$;
    fastcgi_param script_filename $document_root$fastcgi_script_name;
    fastcgi_param path_info $fastcgi_path_info;
    fastcgi_param https on;
    #avoid sending the security headers twice
    fastcgi_param modheadersavailable true;
    fastcgi_param front_controller_active true;
    fastcgi_pass php-handler;
    fastcgi_intercept_errors on;
    fastcgi_request_buffering off;
  }
  location ~ ^/(?:updater|ocs-provider)(?:$|/) {
    try_files $uri/ =404;
    index index.php;
  }
  # adding the cache control header for js and css files
  # make sure it is below the php block
  location ~* .(?:css|js)$ {
    try_files $uri /index.php$uri$is_args$args;
    add_header cache-control "public, max-age=7200";
    # add headers to serve security related headers (it is intended to
    # have those duplicated to the ones above)
    # before enabling strict-transport-security headers please read into
    # this topic first.
    add_header strict-transport-security "max-age=15768000;
    includesubdomains; preload;";
    add_header x-content-type-options nosniff;
    add_header x-frame-options "sameorigin";
    add_header x-xss-protection "1; mode=block";
    add_header x-robots-tag none;
    add_header x-download-options noopen;
    add_header x-permitted-cross-domain-policies none;
    # optional: don't log access to assets
    access_log off;
  }
  location ~* .(?:svg|gif|png|html|ttf|woff|ico|jpg|jpeg)$ {
    try_files $uri /index.php$uri$is_args$args;
    # optional: don't log access to other assets
    access_log off;
  }
}

保存文件并退出 vim。

下载测试以下该 nginx 配置文件是否有错误，没有的话就可以重启服务了。

nginx -t
systemctl restart nginx

semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/nextcloud/data(/.*)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/nextcloud/config(/.*)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/nextcloud/apps(/.*)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/nextcloud/assets(/.*)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/nextcloud/.htaccess'
semanage fcontext -a -t httpd_sys_rw_content_t '/usr/share/nginx/html/nextcloud/.user.ini'
restorecon -rv '/usr/share/nginx/html/nextcloud/'

systemctl start firewalld
systemctl enable firewalld

firewall-cmd --permanent --add-service=http
firewall-cmd --permanent --add-service=https
firewall-cmd --reload