کانفیگ nginx برای PHP-FPM (لاراول و وردپرس)

sudo apt update
sudo apt install -y php8.3-fpm php8.3-mysql php8.3-mbstring php8.3-xml php8.3-curl php8.3-zip php8.3-gd php8.3-intl
systemctl status php8.3-fpm --no-pager
ls /run/php/

server {
    listen 80;
    listen [::]:80;
    server_name example.com;

    root /var/www/laravel/public;
    index index.php;

    charset utf-8;
    client_max_body_size 20m;

    location / {
        try_files $uri $uri/ /index.php?$query_string;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
        fastcgi_read_timeout 60s;
    }

    # فایل‌های مخفی (به‌جز .well-known برای certbot)
    location ~ /\.(?!well-known).* {
        deny all;
    }

    location = /favicon.ico { access_log off; log_not_found off; }
    location = /robots.txt  { access_log off; log_not_found off; }
}

server {
    listen 80;
    server_name example.com www.example.com;

    root /var/www/wordpress;
    index index.php;
    client_max_body_size 64m;

    location / {
        try_files $uri $uri/ /index.php?$args;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/run/php/php8.3-fpm.sock;
    }

    # امنیت: اجرای PHP داخل uploads ممنوع
    location ~* /wp-content/uploads/.*\.php$ {
        deny all;
    }

    location ~ /\.(?!well-known).* { deny all; }

    location ~* \.(?:css|js|jpg|jpeg|png|gif|webp|svg|ico|woff2?)$ {
        expires 30d;
        access_log off;
    }
}

sudo chown -R www-data:www-data /var/www/laravel/storage /var/www/laravel/bootstrap/cache
sudo find /var/www/laravel -type f -exec chmod 644 {} \;
sudo find /var/www/laravel -type d -exec chmod 755 {} \;

sudo nano /etc/php/8.3/fpm/php.ini

upload_max_filesize = 64M
post_max_size = 64M
memory_limit = 256M
max_execution_time = 60

sudo nginx -t && sudo systemctl reload nginx
sudo systemctl restart php8.3-fpm

sudo tail -n 30 /var/log/nginx/error.log
sudo tail -n 30 /var/log/php8.3-fpm.log
ls -l /run/php/php8.3-fpm.sock