LOMP Server su Raspberry

[Raspberry Pi Hardware]
    │
    ├── [Linux OS Layer]
    │     └── Sistema Operativo Raspbian 64bit
    │
    ├── [Web Server]
    │     └── OpenLiteSpeed
    │           ├── Modulo PHP
    │           └── Configurazioni Virtualhost
    │
    ├── [Database]
    │     └── MariaDB
    │           ├── Database WordPress
    │           └── Utenze Dedicate
    │
    └── [Applicativo]
          └── WordPress
                ├── Frontend
                └── Backend Gestionale

# Aggiornamento sistema
sudo apt update -y && sudo apt upgrade -y

# Aggiungi manualmente il repository di OpenLiteSpeed:
sudo wget -O - https://repo.litespeed.sh | sudo bash

# Aggiorna i pacchetti disponibili:
sudo apt-get update

# Verifica i pacchetti disponibili di php per ls:
apt-cache search lsphp

# ultima versione disponibile è lsphp82, quindi installo quella 
sudo apt-get install lsphp82 lsphp82-common lsphp82-mysql lsphp82-curl lsphp82-intl -y

#installiamo anche php-imagick per una migliore gestione delle immagini
sudo apt-get install php-imagick -y

# installiamo tutte le dipendenze dei pacchetti
sudo apt install wget curl software-properties-common -y

# Installiamo ultima versione di Openlitespeed per aarch64
wget https://github.com/litespeedtech/openlitespeed/releases/download/v1.8.2.1/openlitespeed-1.8.2-aarch64-linux.tgz
tar -zxvf openlitespeed-*.tgz
cd openlitespeed
sudo ./install.sh

# Creare il file di configurazione per la creazione del servizio
sudo nano /etc/systemd/system/lsws.service
# con il seguente contenuto

[Unit]
Description=Openlitespeed web server
After=network.target remote-fs.target nss-lookup.target

[Service]
Type=simple
PIDFile=/tmp/lshttpd/lshttpd.pid
KillMode=mixed
PrivateTmp=false
User=root
Group=root
ExecStart=/usr/local/lsws/bin/lswsctrl start
ExecReload=/usr/local/lsws/bin/lswsctrl reload
ExecStop=/usr/local/lsws/bin/lswsctrl stop

[Install]
WantedBy=multi-user.target

# Creiamo un altro file di configurazione
sudo nano /usr/local/lsws/conf/httpd_configNEW.conf

#
# PLAIN TEXT CONFIGURATION FILE
#
# If not set, will use host name as serverName
serverName                
user                      www-data
group                     www-data
priority                  0
inMemBufSize              60M
swappingDir               /tmp/lshttpd/swap
autoFix503                1
gracefulRestartTimeout    300
mime                      conf/mime.properties
showVersionNumber         0
adminEmails               root@localhost

errorlog logs/error.log {
  logLevel                DEBUG
  debugLevel              0
  rollingSize             10M
  enableStderrLog         1
}

accesslog logs/access.log {
  rollingSize             10M
  keepDays                30
  compressArchive         0
}
indexFiles                index.html, index.php

expires  {
  enableExpires           1
  expiresByType           image/*=A604800,text/css=A604800,application/x-javascript=A604800,application/javascript=A604800,font/*=A604800,application/x-font-ttf=A604800
}

tuning  {
  maxConnections          10000
  maxSSLConnections       10000
  connTimeout             300
  maxKeepAliveReq         10000
  keepAliveTimeout        5
  sndBufSize              0
  rcvBufSize              0
  maxReqURLLen            32768
  maxReqHeaderSize        65536
  maxReqBodySize          2047M
  maxDynRespHeaderSize    32768
  maxDynRespSize          2047M
  maxCachedFileSize       4096
  totalInMemCacheSize     20M
  maxMMapFileSize         256K
  totalMMapCacheSize      40M
  useSendfile             1
  fileETag                28
  enableGzipCompress      1
  compressibleTypes       default
  enableDynGzipCompress   1
  gzipCompressLevel       6
  gzipAutoUpdateStatic    1
  gzipStaticCompressLevel 6
  brStaticCompressLevel   6
  gzipMaxFileSize         10M
  gzipMinFileSize         300

  quicEnable              1
  quicShmDir              /dev/shm
}

fileAccessControl  {
  followSymbolLink        1
  checkSymbolLink         0
  requiredPermissionMask  000
  restrictedPermissionMask 000
}

perClientConnLimit  {
  staticReqPerSec         0
  dynReqPerSec            0
  outBandwidth            0
  inBandwidth             0
  softLimit               10000
  hardLimit               10000
  gracePeriod             15
  banPeriod               300
}

CGIRLimit  {
  maxCGIInstances         20
  minUID                  11
  minGID                  10
  priority                0
  CPUSoftLimit            10
  CPUHardLimit            50
  memSoftLimit            2047M
  memHardLimit            2047M
  procSoftLimit           400
  procHardLimit           450
}

accessDenyDir  {
  dir                     /
  dir                     /etc/*
  dir                     /dev/*
  dir                     conf/*
  dir                     admin/conf/*
}

accessControl  {
  allow                   ALL
}

extprocessor lsphp82 {
  type                    lsapi
  address                 uds://tmp/lshttpd/lsphp.sock
  maxConns                35
  initTimeout             60
  retryTimeout            0
  respBuffer              0
  autoStart               2
  path                    /usr/local/lsws/lsphp82/bin/lsphp
}

scripthandler  {
  add                     lsapi:lsphp82 php
}

railsDefaults  {
  maxConns                1
  env                     LSAPI_MAX_IDLE=60
  initTimeout             60
  retryTimeout            0
  pcKeepAliveTimeout      60
  respBuffer              0
  backlog                 50
  runOnStartUp            3
  extMaxIdleTime          300
  priority                3
  memSoftLimit            0
  memHardLimit            0
  procSoftLimit           500
  procHardLimit           600
}

wsgiDefaults  {
  maxConns                5
  env                     LSAPI_MAX_IDLE=60
  initTimeout             60
  retryTimeout            0
  pcKeepAliveTimeout      60
  respBuffer              0
  backlog                 50
  runOnStartUp            3
  extMaxIdleTime          300
  priority                3
  memSoftLimit            0
  memHardLimit            0
  procSoftLimit           500
  procHardLimit           600
}

nodeDefaults  {
  maxConns                5
  env                     LSAPI_MAX_IDLE=60
  initTimeout             60
  retryTimeout            0
  pcKeepAliveTimeout      60
  respBuffer              0
  backlog                 50
  runOnStartUp            3
  extMaxIdleTime          300
  priority                3
  memSoftLimit            0
  memHardLimit            0
  procSoftLimit           500
  procHardLimit           600
}

module cache {
  internal                1

checkPrivateCache   1
checkPublicCache    1
maxCacheObjSize     10000000
maxStaleAge         200
qsCache             1
reqCookieCache      1
respCookieCache     1
ignoreReqCacheCtrl  1
ignoreRespCacheCtrl 0

enableCache         0
expireInSeconds     3600
enablePrivateCache  0
privateExpireInSeconds 3600
  ls_enabled              1
}

virtualhost Example {
  vhRoot                  Example/
  configFile              conf/vhosts/Example/vhconf.conf
  allowSymbolLink         1
  enableScript            1
  restrained              1
  setUIDMode              0
}

virtualhost MyWordPress {
  vhRoot                  /var/www/html
  configFile              $SERVER_ROOT/conf/vhosts/MyWordPress/vhconf.conf
  allowSymbolLink         1
  enableScript            1
}

listener Default {
  address                 *:8088
  secure                  0
  map                     Example *
}

listener HTTPListener {
  address                 *:80
  secure                  0
  map                     MyWordPress *
}

vhTemplate centralConfigLog {
  templateFile            conf/templates/ccl.conf
  listeners               Default
}

vhTemplate EasyRailsWithSuEXEC {
  templateFile            conf/templates/rails.conf
  listeners               Default
}

sudo systemctl daemon-reload
sudo systemctl start lsws.service
sudo systemctl enable lsws.service
sudo /usr/local/lsws/bin/lswsctrl restart

# Installazione database
sudo apt install mariadb-server -y

# Configurazione sicura
sudo mysql_secure_installation

sudo systemctl enable lsws
sudo systemctl start lsws
sudo systemctl enable mariadb
sudo systemctl start mariadb

sudo mysql -u root -p

CREATE DATABASE wordpress;
CREATE USER 'wpuser'@'localhost' IDENTIFIED BY 'password_sicura';
GRANT ALL PRIVILEGES ON wordpress.* TO 'wpuser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

# Creiamo una cartella dove scaricare e installare WordPress
sudo mkdir -p /var/www/html
cd /var/www/html
sudo wget https://wordpress.org/latest.tar.gz
sudo tar -xzvf latest.tar.gz
sudo mv wordpress/* .
sudo rm -rf wordpress latest.tar.gz
sudo chown -R www-data:www-data /var/www/html

# Configuriamo WordPress
sudo cp wp-config-sample.php wp-config.php
sudo nano wp-config.php

/** The name of the database for WordPress */
define( 'DB_NAME', 'wordpress' );
/** Database username */
define( 'DB_USER', 'wpuser' );
/** Database password */
define( 'DB_PASSWORD', 'password_sicura' );
/** Database hostname */
define( 'DB_HOST', 'localhost' );
/** Tipo di accesso*/
define('FS_METHOD','direct');

define('AUTH_KEY',         '|eT~7DEN__:LEBxm9&}`+`@G%h:j:sY;@4.PZDu;6*cWiLLA^}wy)ouI[uT+VAka');
define('SECURE_AUTH_KEY',  '$/7XV3>.Os#W[HCTg02-z;jhM]ae;z#?kpCE5ntroVXeY%YjK#O>^A3!V. Qeg1W');
define('LOGGED_IN_KEY',    'zA)iTgD!iDLxG8y~CDO:@{=K6mB7a/aAx|]G9ug<&Ky%7u]O|NTbX:0}B;C=X83v');
define('NONCE_KEY',        '-OQWj0a~PRPPZ-*xO^>avi[xmBc-^4va6*Ykv,H7A/p]]N)IH(_K*k~b-}-nT>_T');
define('AUTH_SALT',        '|omZf^<-|g;*H.R%RHMk-)nYyqseO;WyxkO`30s%#,G!O8-zwfG.V8qo]dJq-=gy');
define('SECURE_AUTH_SALT', ';rg a(u`2ZJz;5zZEoO_^2!#M<<]}DP<0lOM vLSN*SFMj-]:ee*cTa4w95R{&Z9');
define('LOGGED_IN_SALT',   ']qtbcf43B=B`x_,A}-~2tp=A;]OBLGm-%/O[!/|Q 82Wn<C0<-<n=pey?amIeUQJ');
define('NONCE_SALT',       'rz-c}( Pl&@Ds}|2`EMn;/x1&=aXm` K/#C`x>Dh10f0d>.ZgF6u+5vh4wYft0l`');

# Devi creare manualmente questa directory e il file per il virtualhost di WordPress in Openlitespeed
sudo mkdir -p /usr/local/lsws/conf/vhosts/MyWordPress
sudo nano /usr/local/lsws/conf/vhosts/MyWordPress/vhconf.conf

docRoot                   /var/www/html
vhDomain                  localhost
adminEmails               admin@localhost
enableGzip                1

index  {
  useServer               0
  indexFiles              index.php, index.html
}

scriptHandler  {
  add                     lsphp82
  handler                 lsphp82
  suffixes                php
}

rewrite  {
  enable                  1
  autoLoadHtaccess        1
}

sudo /usr/local/lsws/bin/lswsctrl restart