用OpenBSD的httpd在OpenBSD 6.5上运行WordPress

su -
echo "permit nopass keepenv :wheel" > /etc/doas.conf

doas su
echo "https://cdn.OpenBSD.org/pub/OpenBSD" > /etc/installurl
exit

doas pkg_add -r mariadb-client mariadb-server php php-curl php-mysqli pecl73-mcrypt pecl73-imagick
doas su -
cp /etc/php-7.3.sample/* /etc/php-7.3/.

prefork 5
types { include "/usr/share/misc/mime.types" }
server "default" {
 listen on egress port 80
 root "/htdocs"
 directory index "index.html"
 location "/.well-known/acme-challenge/*" {
 request strip 2
 root "/acme"
 }
}

authority letsencrypt {
 api url "https://acme-v01.api.letsencrypt.org/directory"
 account key "/etc/acme/letsencrypt-privkey.pem"
}
authority letsencrypt-staging {
 api url "https://acme-staging.api.letsencrypt.org/directory"
 account key "/etc/acme/letsencrypt-staging-privkey.pem"
}
domain example.com {
 alternative names { www.example.com }
 domain key "/etc/ssl/private/example.com.key"
 domain full chain certificate "/etc/ssl/example.com.fullchain.pem"
 sign with letsencrypt
}

doas rcctl enable httpd php73_fpm
doas rcctl start httpd
doas acme-client -ADFv example.com
doas rcctl stop httpd

server "example.com" {
listen on egress port 80
 alias "www.example.com"
 block return 302 "https://$SERVER_NAME$REQUEST_URI"
}
server "example.com" {
 listen on egress tls port 443
 alias "www.example.com"
 root "/htdocs/example.com
 directory index "index.php"
 location "/posts/*" {
 fastcgi {
 param SCRIPT_FILENAME "/htdocs/example.com/index.php"
 socket "/run/php-fpm.sock"
 }
 }
 location "/wp-json/*" {
 fastcgi {
 param SCRIPT_FILENAME "/htdocs/example.com/index.php"
 socket "/run/php-fpm.sock"
 }
 }
 location "/wp-login.php*" {
 authenticate "WordPress" with "/htdocs/htpasswd"
 fastcgi socket "/run/php-fpm.sock"
 }
 #Uncomment the following lines to disable xmlrpc. You increase security 
 #at the expense of being able to use to use 
 #the Android and iPhone WordPress App.
  #location "xmlrpc.php*" {
 # block return 404
 #} 
 location "*.php*" {
 fastcgi socket "/run/php-fpm.sock"
 }
 tls {
 certificate "/etc/ssl/example.com.fullchain.pem"
 key "/etc/ssl/private/example.com.key"
 }
}

doas su
cd /var/www/htdocs
htpasswd htpasswd wp_user
chown www:www htpasswd
chmod 0640 htpasswd

mysqld:\
 :openfiles-cur=1024:\
 :openfiles-max=2048:\
 :tc=daemon:

 doas mysql_install_db
 doas rcctl enable mysqld
 doas rcctl start mysqld
 doas mysql_secure_installation

mysql -u root -p
CREATE DATABASE wordpress;
GRANT ALL PRIVILEGES ON wordpress.* TO 'wp_user'@'localhost' IDENTIFIED BY '<password>';
FLUSH PRIVILEGES;
EXIT

cd /tmp
wget https://wordpress.org/latest.tar.gz
tar xvfz latest.tar.gz
doas mv wordpress /var/www/htdocs/example.com
chown -R www:www /var/www/htdocs/example.com

doas mkdir /var/www/etc
doas cp /etc/hosts /var/www/etc/.
doas cp /etc/resolv.conf /var/www/etc/.

doas rcctl start httpd php73_fpm