Last week, my colleague asked me to set up a Wordpress server, and I remember how painful to setup it many years ago. It requires MySQL and PHP. Therefore, it may introduce many security leaks. My website at the moment still can receive Wordpress attack.
Today, I discovered a rapid solution to set up a Wordpress server using Docker, and it also solves the problem with Let’s Encrypt.
Let’s check it out.
Before we start, if you haven’t configured your DNS, please go to DNS manager, setup A record for @ and www and point them to the server, then we can start.
Step1: Install Docker and Docker-Compose
If you argue, I could have use Kubernetes?
Well, you can if you like. I did this for my colleague, which doesn’t profit myself much :)
1
2
|
$ apt update && apt upgrade -y
$ apt install docker.io docker-compose
|
Step 2: Store everything in a directory
Step 3: Setup WebProxy
Many thanks to @evertramos, he did everything for setting up the webproxy:
1
2
3
|
$ cd ~/wordpress
$ git clone https://github.com/evertramos/docker-compose-letsencrypt-nginx-proxy-companion.git webproxy
$ mv webproxy/.env.sample webproxy/.env
|
Replace .env with the following content:
1
2
3
4
5
6
7
|
# ~/wordpress/webproxy/.env
NGINX_WEB=nginx-web
DOCKER_GEN=nginx-gen
LETS_ENCRYPT=nginx-letsencrypt
IP=0.0.0.0
NETWORK=webproxy
NGINX_FILES_PATH=./nginx-data
|
Then strat the script:
If you want to configure more options, please check out his repository.
Step 4: Setup Wordpress
Again, thanks to @evertramos, he did everything for setting up the Wordpress:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
# ~/wordpress/docker-compose.yaml
version: '3'
services:
db:
container_name: ${CONTAINER_DB_NAME}
image: mariadb:latest
restart: unless-stopped
volumes:
- ${DB_PATH}:/var/lib/mysql
environment:
MYSQL_ROOT_PASSWORD: ${MYSQL_ROOT_PASSWORD}
MYSQL_DATABASE: ${MYSQL_DATABASE}
MYSQL_USER: ${MYSQL_USER}
MYSQL_PASSWORD: ${MYSQL_PASSWORD}
wordpress:
depends_on:
- db
container_name: ${CONTAINER_WP_NAME}
image: wordpress:latest
restart: unless-stopped
volumes:
- ${WP_CORE}:/var/www/html
- ${WP_CONTENT}:/var/www/html/wp-content
environment:
WORDPRESS_DB_HOST: ${CONTAINER_DB_NAME}:3306
WORDPRESS_DB_NAME: ${MYSQL_DATABASE}
WORDPRESS_DB_USER: ${MYSQL_USER}
WORDPRESS_DB_PASSWORD: ${MYSQL_PASSWORD}
WORDPRESS_TABLE_PREFIX: ${WORDPRESS_TABLE_PREFIX}
VIRTUAL_HOST: ${DOMAINS}
LETSENCRYPT_HOST: ${DOMAINS}
LETSENCRYPT_EMAIL: ${LETSENCRYPT_EMAIL}
networks:
default:
external:
name: ${NETWORK}
|
Also, set up an .env file and change to corresponding configs:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
|
# ~/wordpress/.env
NETWORK=webproxy
CONTAINER_DB_NAME=db
DB_PATH=~/wordpress/db
MYSQL_ROOT_PASSWORD=root_password
MYSQL_DATABASE=database_name
MYSQL_USER=user_name
MYSQL_PASSWORD=user_password
CONTAINER_WP_NAME=wordpress
WP_CORE=~/wordpress/core
WP_CONTENT=~/wordpress/content
WORDPRESS_TABLE_PREFIX=wp_
DOMAINS=domain.com,www.domain.com
LETSENCRYPT_EMAIL=your_email@domain.com
|
Then, we are ready to go:
Step 5: Setup SFTP
Note that in Wordpress, you will need to set up an SFTP server for the plugin and theme installation.
Activate an SFTP server that dedicated for the Wordpress, the first step is to secure the folder you open to the public:
1
|
$ chown -R www-data:www-data content
|
Then you need to enable the SFTP in SSH config, to edit the configuration, you need:
1
|
$ vim /etc/ssh/sshd_config
|
Then put the following information to the config file:
1
2
3
4
5
|
Match group sftp
ChrootDirectory ~/wordpress/content
X11Forwarding no
AllowTcpForwarding no
ForceCommand internal-sftp
|
Then restart the server:
To use SFTP group, you need:
1
2
|
$ addgroup sftp
$ usermod -a -G sftp your_sftp_user
|
Done, and have fun :)
