hiendnguyen

vi /etc/systemd/system/uwsgi.service
# Put below as its content
[Unit]
Description=uWSGI Emperor service
[Service]
ExecStartPre=/usr/bin/bash -c 'mkdir -p /run/uwsgi; chown uwsgi:nginx /run/uwsgi'
ExecStart=/var/www/p3venv/bin/uwsgi --emperor /etc/uwsgi/vassals
Restart=always
KillSignal=SIGQUIT
Type=notify

hiendnguyen

# Create 'uwsgi' user: unprivileged user
useradd -s /bin/false -r uwsgi

# Emperor mode
## create a directory for the vassals
- mkdir -p /etc/uwsgi/vassals
## Configuring uWSGI to run with a .ini file
vi /var/www/cioenglish/cioenglish_uwsgi.ini

### Put below content in cioenglish_uwsgi.ini

hiendnguyen

vi /etc/nginx/conf.d/cioenglish.conf
# Put below content in it.

# the upstream component NGINX needs to connect to
upstream django {
	server unix:/run/uwsgi/cioenglish.sock;
}

# configuration of the server
server {

hiendnguyen

<?php

/* wooc_reCAPTCHA */
// Add reCAPTCHA to WooCommerce Signup Form
function wooc_reCAPTCHA(){
	?>

	<script src='https://www.google.com/recaptcha/api.js' defer'></script>
	<label>ARE YOU HUMAN?</label>
	<div class="g-recaptcha" data-sitekey="[reCAPTCHA Site Key]"></div>

hiendnguyen

# Install Nginx
sudo yum install epel-release
sudo yum install nginx
sudo systemctl start nginx
sudo systemctl enable nginx

# Install MySQL (MariaDB)
sudo yum install mariadb-server mariadb
sudo systemctl start mariadb
sudo systemctl enable mariadb

hiendnguyen

# In this case, I use 2G swapfile or virtual RAM
sudo dd if=/dev/zero of=/swapfile count=1024 bs=1MiB
sudo chmod 600 /swapfile
sudo mkswap /swapfile
sudo swapon /swapfile
sudo sh -c 'echo "/swapfile none swap sw 0 0" >> /etc/fstab'

hiendnguyen

# List available options
timedatectl list-timezones

# Set appropriate timezone
sudo timedatectl set-timezone America/Los_Angeles
sudo timedatectl
sudo yum install ntp -y
sudo systemctl start ntpd
sudo systemctl enable ntpd

hiendnguyen

sudo systemctl start firewalld
sudo firewall-cmd --permanent --add-service=ssh
sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https
sudo firewall-cmd --reload
sudo systemctl enable firewalld

#To see any additional services that you can enable by name, type:
sudo firewall-cmd --get-services

hiendnguyen

# Keep your OS up to date
yum update -y

# Install basic CentOS packages
yum install wget curl unzip gcc-c++ pcre-devel zlib-devel

# Never use ROOT user, just create another user with ROOT privileges
adduser www-user
passwd www-user
gpasswd -a www-user wheel

hiendnguyen

<?php
// outputs the username that owns the running php/httpd process
// (on a system with the "whoami" executable in the path)
echo exec('whoami');
?>