WINDOWS VPS / VDS VIRTUAL SERVER

This template allows you to easily get a stable build of Drupal + Nginx + MySQL + PHP.

In addition to the installed software, the following settings have been made on the image:

Firewall enabled and only allowed SSH (port 22, LIMITED), HTTP (port 80), HTTPS (443).

Immediately after creating the VDS at the first login via SSH, run the commands to complete the MySQL server setup:

mysql_secure_installation

Include a password validator:

Would you like to setup VALIDATE PASSWORD component? : y

Set the MySQL root password:

New password:

Re-enter new password:

Remove anonymous users:

Remove anonymous users? (Press y|Y for Yes, any other key for No) : y

Do not allow root to connect remotely:

Disallow root login remotely? (Press y|Y for Yes, any other key for No) : y

Delete the test database:

Remove test database and access to it? (Press y|Y for Yes, any other key for No) : y

Reload privilege tables:

Reload privilege tables now? (Press y|Y for Yes, any other key for No) : y

After creating the virtual server, to complete the installation, go to http: // vps_ip_address / At this address you should see the Drupal page.

Select the language to use. Click Save and Continue.

Select an installation profile (the demo is used solely for familiarization with the system). Click "Save and continue"

On the next page, give the database a name, for example drupal.

Specify the root database username and password assigned to it when starting mysql_secure_installation.

Click Save and Continue.

Wait for the installation to complete and the translations are updated (this may take a few minutes).

Specify the site name, set the site email, username, password and email of the Drupal administrator account.

Specify your country and timezone in regional settings. Click Save and Continue.

After that, you can go to the control panel with the created username and password of the Drupal administrator.

To configure HTTPS, VDS must have a valid DNS name, specify in /etc/nginx/nginx.conf in the server section the server name (for example):

server_name  domainname.ru;

Restart nginx:

service nginx restart

Run certbot:

sudo /usr/local/bin/certbot-auto --nginx

Enter your e-mail, agree to the terms of service (A), Subscribe to the newsletter (optional) (N), select the domain names for which you need to issue a certificate (Enter for all ).

If everything went well, we will see a message about the successful issuance of certificates and server configuration:

Congratulations! You have successfully enabled ...

After this connection, port 80 will be redirected to 443 (https).

Add to / etc / crontab to automatically renew certificates:

# Cert Renewal

        30 2 * * * root /usr/local/bin/certbot-auto renew --post-hook "nginx -s reload"

Uncomment or add a setting with patterns of actual site names, for example:

$settings['trusted_host_patterns'] = [ '^www\.mydomain\.ru$', ];