Changer le upload_tmp_dir : nginx, php-fpm, nextcloud
Bonjour à tous,
J'ai mis en oeuvre le serveur nextcloud sur ma raspberry pi 3.
J'ai monté un disque dur externe sur /mnt pour éviter de charger la carte SD de 8Go.
De cette facon, j'aimerais changer le upload_tmp_dir (/tmp et /mnt/data_tmp) tandis que le data_dir se change sans problème.
L'interface web de nextcloud permet de télécharger les fichiers depuis le serveur (via webdav et oc web interface menu).
De ce téléchargement se déclanche 3 process :
-1 nginx
-2 pool www
Code:
1
2
3
4
5
6
7
8
9
10
11
| USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
mysql 1003 0.1 1.8 638020 18164 ? Ssl 20:28 0:05 /usr/sbin/mysqld
root 2335 0.0 1.5 137980 15504 ? Ss 21:18 0:00 php-fpm: master process (/etc/php/7.0/fpm/php-fpm.conf)
www-data 2337 1.1 2.1 140608 21532 ? S 21:18 0:10 php-fpm: pool www
www-data 2338 1.0 1.8 138472 18888 ? S 21:18 0:09 php-fpm: pool www
root 2355 0.0 0.1 47568 1292 ? Ss 21:18 0:00 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
www-data 2356 10.9 0.3 47744 3752 ? S 21:18 1:43 nginx: worker process
www-data 2357 7.8 1.2 56088 12132 ? R 21:18 1:14 nginx: worker process
www-data 2358 0.0 0.2 47568 2836 ? S 21:18 0:00 nginx: worker process
www-data 2359 0.0 0.2 47568 2836 ? S 21:18 0:00 nginx: worker process
pi 2636 0.0 0.2 7732 2788 pts/0 R+ 21:34 0:00 ps aux |
J'ai trouvé quelques pistes pour résoudre le problème, je pense notemment à la conf nginx et php (surtout openbase_dir).
https://raspberry-hosting.com/en/faq...m-raspberry-pi
https://www.techandme.se/increase-max-file-size/
https://serverfault.com/questions/64...fpm-permission
https://support.plesk.com/hc/en-us/a...rary-PHP-files
Je vous remercie par avance.
Ci-dessous ma conf nginx pour mon serveur.
Code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
| upstream php-handler {
#server 127.0.0.1:8000;
server unix:/var/run/php/php7.0-fpm.sock;
}
server {
listen 101;
listen [::]:101;
server_name www.domaine.org;
# enforce https
return 301 https://$host$request_uri;
}
server {
listen 102 ssl http2;
listen [::]:102 ssl http2;
server_name www.domaine.org;
ssl on;
ssl_certificate /etc/letsencrypt/live/www.domaine.org/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/www.domaine.org/privkey.pem;
# .well-known doit resté accessible
location .well-known/ {
allow all;
}
# Add headers to serve security related headers
# Before enabling Strict-Transport-Security headers please read into this
# topic first.
# add_header Strict-Transport-Security "max-age=15768000;
# includeSubDomains; preload;";
#
# WARNING: Only add the preload option once you read about
# the consequences in https://hstspreload.org/. This option
# will add the domain to a hardcoded list that is shipped
# in all major browsers and getting removed from this list
# could take several months.
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Path to the root of your installation
root /var/www/nextcloud/;
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
# The following 2 rules are only needed for the user_webfinger app.
# Uncomment it if you're planning to use this app.
#rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
#rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json
# last;
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
# set max upload size
client_max_body_size 10G; #or 0 to disable allowed size
fastcgi_buffers 64 128K;
# Enable gzip but do not remove ETag headers
gzip on;
gzip_vary on;
gzip_comp_level 4;
gzip_min_length 256;
gzip_proxied expired no-cache no-store private no_last_modified no_etag auth;
gzip_types application/atom+xml application/javascript application/json application/ld+json application/manifest+json application/rss+xml application/vnd.geo+json application/vnd.ms-fontobject application/x-font-ttf application/x-web-app-manifest+json application/xhtml+xml application/xml font/opentype image/bmp image/svg+xml image/x-icon text/cache-manifest text/css text/plain text/vcard text/vnd.rim.location.xloc text/vtt text/x-component text/x-cross-domain-policy;
# Uncomment if your server is build with the ngx_pagespeed module
# This module is currently not supported.
#pagespeed off;
location / {
rewrite ^ /index.php$uri;
client_body_temp_path /tmp;
#upload_tmp_dir /mnt/my_data/tmp;
#tempdirectory /mnt/my_data/tmp;
}
location ~ ^/.well-known/acme-challenge/* {
allow all;
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all;
}
location ~ ^/(?:\.|autotest|occ|issue|indie|db_|console) {
deny all;
}
location ~ ^/(?:index|remote|public|cron|core/ajax/update|status|ocs/v[12]|updater/.+|ocs-provider/.+)\.php(?:$|/) {
fastcgi_split_path_info ^(.+\.php)(/.*)$;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_param PATH_INFO $fastcgi_path_info;
fastcgi_param HTTPS on;
#Avoid sending the security headers twice
fastcgi_param modHeadersAvailable true;
fastcgi_param front_controller_active true;
fastcgi_pass php-handler;
fastcgi_intercept_errors on;
fastcgi_request_buffering off;
#upload_tmp_dir = /tmp;
}
location ~ ^/(?:updater|ocs-provider)(?:$|/) {
try_files $uri/ =404;
index index.php;
}
# Adding the cache control header for js and css files
# Make sure it is BELOW the PHP block
location ~ \.(?:css|js|woff|svg|gif)$ {
try_files $uri /index.php$uri$is_args$args;
add_header Cache-Control "public, max-age=15778463";
# Add headers to serve security related headers (It is intended to
# have those duplicated to the ones above)
# Before enabling Strict-Transport-Security headers please read into
# this topic first.
# add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
#
# WARNING: Only add the preload option once you read about
# the consequences in https://hstspreload.org/. This option
# will add the domain to a hardcoded list that is shipped
# in all major browsers and getting removed from this list
# could take several months.
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
# Optional: Don't log access to assets
access_log off;
}
location ~ \.(?:png|html|ttf|ico|jpg|jpeg)$ {
try_files $uri /index.php$uri$is_args$args;
# Optional: Don't log access to other assets
access_log off;
}
######## UPDATE V13 NEXTCLOUD ########
#fastcgi_read_timeout 5s;
#fastcgi_request_buffering off;
#proxy_max_temp_file_size 1024m; #10GB?
#proxy_buffering on;
#large_client_header_buffers 16 32k;
} |
