How to Install Nginx, MySQL, PHP (LEMP Stack) on Ubuntu 22.04

LEMP (Linux, Nginx, MySQL, PHP) is an open-source web stack for deploying dynamic web applications. In this setup, Nginx serves static and dynamic content, MySQL handles database management, and PHP processes the dynamic content of web applications on your server.

This article explains how to install the LEMP stack (Linux, Nginx, MySQL, PHP) on Ubuntu 22.04, set up a basic web application, and secure the server with SSL certificates.

Prerequisites

Before you begin:

• Have an Ubuntu 22.04 server.

• Create a new domain A record pointing to the server IP address. For example, app.example.com.

• Access the server using SSH as a non-root user with sudo privileges.

• Update the server.

Install Nginx

1. Update the server package index.

   CONSOLE

   Copy

   $ sudo apt update

   Explain Code

   Powered by Vultr AgentBeta

2. Install Nginx.

   CONSOLE

   Copy

   $ sudo apt install nginx -y

   Explain Code

   Powered by Vultr AgentBeta

3. Start Nginx.

   CONSOLE

   Copy

   $ sudo systemctl start nginx

   Explain Code

   Powered by Vultr AgentBeta

4. Enable Nginx to start at boot time.

   CONSOLE

   Copy

   $ sudo systemctl enable nginx

   Explain Code

   Powered by Vultr AgentBeta

5. View the Nginx service status and verify that it's active on your server.

   CONSOLE

   Copy

   $ sudo systemctl status nginx

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   ● nginx.service - A high performance web server and a reverse proxy server
        Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: enabled)
        Active: active (running) since Sun 2025-04-06 12:24:55 UTC; 24s ago
          Docs: man:nginx(8)
      Main PID: 2604 (nginx)
         Tasks: 5 (limit: 9415)
        Memory: 7.8M
        CGroup: /system.slice/nginx.service
                ├─2604 nginx: master process /usr/sbin/nginx -g daemon on; master_process on;
                ├─2605 nginx: worker process
                ├─2606 nginx: worker process
                ├─2607 nginx: worker process
                └─2608 nginx: worker process

Install MySQL

1. Install the latest MySQL database server package on your server.

   CONSOLE

   Copy

   $ sudo apt install mysql-server -y

   Explain Code

   Powered by Vultr AgentBeta

2. Start the MySQL service.

   CONSOLE

   Copy

   $ sudo systemctl start mysql

   Explain Code

   Powered by Vultr AgentBeta

3. Enable the MySQL service to start at boot time.

   CONSOLE

   Copy

   $ sudo systemctl enable mysql

   Explain Code

   Powered by Vultr AgentBeta

4. View the MySQL service status and verify that it's active on the server.

   CONSOLE

   Copy

   $ sudo systemctl status mysql

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   ● mysql.service - MySQL Community Server
        Loaded: loaded (/lib/systemd/system/mysql.service; enabled; vendor preset: enabled)
        Active: active (running) since Sun 2025-04-06 12:26:48 UTC; 53s ago
      Main PID: 16247 (mysqld)
        Status: "Server is operational"
         Tasks: 38 (limit: 9385)
        Memory: 364.3M
           CPU: 869ms
        CGroup: /system.slice/mysql.service
                └─16247 /usr/sbin/mysqld

5. Start the MySQL secure installation script to disable insecure default configurations.

   CONSOLE

   Copy

   $ sudo mysql_secure_installation

   Explain Code

   Powered by Vultr AgentBeta

   • Enter Y when prompted to enable the VALIDATE PASSWORD component that ensures strict password policies for the database users.

     VALIDATE PASSWORD COMPONENT can be used to test passwords
     and improve security. It checks the strength of password
     and allows the users to set only those passwords which are
     secure enough. Would you like to setup VALIDATE PASSWORD component?
     
     Press y|Y for Yes, any other key for No: y

   • Enter your desired password strength validation policy level. For example, enter 2 to enable strong password usage on the server.

     LOW    Length >= 8
     MEDIUM Length >= 8, numeric, mixed case, and special characters
     STRONG Length >= 8, numeric, mixed case, special characters and dictionary file
     
     Please enter 0 = LOW, 1 = MEDIUM and 2 = STRONG: 

   • Enter Y and press Enter when prompted to remove anonymous users on your database server.

     Remove anonymous users? (Press y|Y for Yes, any other key for No) : 

   • Enter Y when prompted to Disallow remote login and disable remote access to your database server using the root user account.

     Disallow root login remotely? (Press y|Y for Yes, any other key for No) : 

   • Enter Y when prompted to remove the test database on your server.

     Remove test database and access to it? (Press y|Y for Yes, any other key for No) : 

   • Enter Y when prompted to reload privilege tables. Then press and press Enter to refresh the MySQL privilege tables and apply your configuration changes.

     Reload privilege tables now? (Press y|Y for Yes, any other key for No) : 

6. Access the MySQL console to set up a new root user password.

   CONSOLE

   Copy

   $ sudo mysql

   Explain Code

   Powered by Vultr AgentBeta

7. Modify the root user with a strong password and enable mysql_native_password as the default authentication method.

   SQL

   Copy

   mysql> ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'secured_password';

   Explain Code

   Powered by Vultr AgentBeta

8. Reload the MySQL Privilege tables to apply changes.

   SQL

   Copy

   mysql> FLUSH PRIVILEGES;

   Explain Code

   Powered by Vultr AgentBeta

9. Exit the MySQL console.

   SQL

   Copy

   mysql> EXIT;

   Explain Code

   Powered by Vultr AgentBeta

10. Restart the MySQL database server.

    CONSOLE

    Copy

    $ sudo systemctl restart mysql

    Explain Code

    Powered by Vultr AgentBeta

Install PHP

PHP is available in the default APT repositories on Ubuntu 22.04. PHP-FPM (FastCGI Process Manager) allows PHP to run as a service, enabling interactions with other applications. Follow the steps below to install PHP, PHP-FPM, and essential modules like php-mysql on your server.

1. Install PHP and PHP-FPM on your server.

   CONSOLE

   Copy

   $ sudo apt install php php-fpm -y

   Explain Code

   Powered by Vultr AgentBeta

2. Install essential PHP modules required by most dynamic applications.

   CONSOLE

   Copy

   $ sudo apt install php-mysql php-cli -y

   Explain Code

   Powered by Vultr AgentBeta

   The above command installs the following PHP modules:

   • php-mysql: Allows PHP to connect to MySQL and perform database operations.
   • php-cli: The PHP Command Line Interface (CLI) enables running PHP scripts directly from the terminal.

3. Installing PHP also pulls in the apache2 package as a dependency, uninstall Apache to avoid any service conflicts.

   CONSOLE

   Copy

   $ sudo apt remove apache2 -y

   Explain Code

   Powered by Vultr AgentBeta

4. View the installed PHP version on your server.

   CONSOLE

   Copy

   $ php -v

   Explain Code

   Powered by Vultr AgentBeta

   Your output should be similar to the one below:

   PHP 8.1.2-1ubuntu2.21 (cli) (built: Mar 24 2025 19:04:23) (NTS)
   Copyright (c) The PHP Group
   Zend Engine v4.1.2, Copyright (c) Zend Technologies
       with Zend OPcache v8.1.2-1ubuntu2.21, Copyright (c), by Zend Technologies

5. Start the PHP-FPM service depending on your installed version such as PHP 8.1.

   CONSOLE

   Copy

   $ sudo systemctl start php8.1-fpm

   Explain Code

   Powered by Vultr AgentBeta

6. Enable PHP-FPM to start at boot time.

   CONSOLE

   Copy

   $ sudo systemctl enable php8.1-fpm

   Explain Code

   Powered by Vultr AgentBeta

7. View the PHP-FPM service status and verify that it's running.

   CONSOLE

   Copy

   $ sudo systemctl status php8.1-fpm

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   ● php8.1-fpm.service - The PHP 8.1 FastCGI Process Manager
        Loaded: loaded (/lib/systemd/system/php8.1-fpm.service; enabled; vendor preset: enabled)
        Active: active (running) since Sun 2025-04-06 12:32:31 UTC; 11min ago
          Docs: man:php-fpm8.1(8)
      Main PID: 26515 (php-fpm8.1)
        Status: "Processes active: 0, idle: 2, Requests: 0, slow: 0, Traffic: 0req/sec"
         Tasks: 3 (limit: 9385)
        Memory: 7.4M
           CPU: 96ms
        CGroup: /system.slice/php8.1-fpm.service
                ├─26515 "php-fpm: master process (/etc/php/8.1/fpm/php-fpm.conf)"
                ├─26516 "php-fpm: pool www"
                └─26517 "php-fpm: pool www"

Configure PHP-FPM

PHP-FPM (FastCGI Process Manager) operates as a system service on your server, using pools to manage PHP requests. Each pool is configured with several settings that impact PHP's performance and resource management. By adjusting the PHP-FPM pool configurations, you can optimize how PHP processes are handled on your server for better performance and resource allocation. Follow the steps below to adjust your default PHP-FPM pool settings for optimal server performance.

1. View the PHP-FPM unix socket path using the ss utility.

   CONSOLE

   Copy

   $ ss -pl | grep php

   Explain Code

   Powered by Vultr AgentBeta

   Your output should be similar to the one below.

   u_str LISTEN 0      511                      /run/php/php8.1-fpm.sock 70675                          * 0

   /run/php/php8.1-fpm.sock is the PHP-FPM sock path based on the above output. PHP-FPM communicates with other applications such as Nginx using the Unix socket file or TCP connections on the localhost port 9000.

2. Navigate to the PHP-FPM pool configurations directory.

   CONSOLE

   Copy

   $ cd /etc/php/8.1/fpm/pool.d/

   Explain Code

   Powered by Vultr AgentBeta

3. Open the default PHP-FPM pool configuration www.conf using a text editor such as Nano.

   CONSOLE

   Copy

   $ sudo nano www.conf

   Explain Code

   Powered by Vultr AgentBeta

   • Verify the PHP-FPM pool name.

     INI

     Copy

     [www]

     Explain Code

     Powered by Vultr AgentBeta

   • Find the following user directives and verify that PHP-FPM runs with the web server user www-data.

     INI

     Copy

     user = www-data
     group = www-data

     Explain Code

     Powered by Vultr AgentBeta

   Save and close the file.

   Within the pool configuration:

   • pm.max_children: Maximum number of child PHP processes to run simultaneously for balanced resource usage.
   • pm.start_servers: Number of PHP processes created at startup to handle initial requests (default: 2).
   • pm.min_spare_servers: Minimum idle PHP processes (default: 1).
   • pm.max_spare_servers: Maximum idle PHP processes (default: 3).
   • pm.max_requests: Limits the number of requests per PHP child process before it is recycled.

   You can change the PHP-FPM pool values depending on your server specifications and available resources.

Configure Nginx with PHP-FPM

Nginx uses PHP-FPM via a Unix socket or TCP port 9000 to serve dynamic web pages. By default, it requires PHP-FPM to process web application files. Follow the steps below to configure Nginx with PHP-FPM to serve web application files on the server.

1. Create a new index.php file in your web root directory /var/www/html.

   CONSOLE

   Copy

   $ sudo touch /var/www/html/index.php

   Explain Code

   Powered by Vultr AgentBeta

2. Run the following command to add new PHP information contents to the file.

   CONSOLE

   Copy

   $ echo "<?php phpinfo(); ?>" | sudo tee /var/www/html/index.php

   Explain Code

   Powered by Vultr AgentBeta

3. Remove the default Nginx configuration.

   CONSOLE

   Copy

   $ sudo rm -rf /etc/nginx/sites-enabled/default && sudo rm -rf /etc/nginx/sites-available/default

   Explain Code

   Powered by Vultr AgentBeta

4. Create a new Nginx virtual host configuration file such as app.example.com.conf depending on your domain or web application name.

   CONSOLE

   Copy

   $ sudo nano /etc/nginx/sites-available/app.example.com.conf

   Explain Code

   Powered by Vultr AgentBeta

5. Add the following configurations to the file. Replace app.example.com with your actual domain name.

   INI

   Copy

   server {
       listen 80;
       server_name app.example.com;
   
       root /var/www/html;
       index index.php index.html;
   
       location / {
           try_files $uri $uri/ =404;
       }
   
       location ~ \.php$ {
           include snippets/fastcgi-php.conf;
           fastcgi_pass unix:/run/php/php8.1-fpm.sock;
       }
   }

   Explain Code

   Powered by Vultr AgentBeta

   Save and close the file.

   The above Nginx configuration creates a new virtual host on the server that listens for incoming connections on the HTTP port 80 and serves content using the domain app.example.com from the /var/www/html web root directory. Within the configuration:

   • index index.html index.php index.nginx-debian.html;: Specifies the default file to serve using the main request path.
   • location ~ \.php$ {: Sets the configurations to apply when a specific request matches a .php file extension.
   • include snippets/fastcgi-php.conf;: Enables the predefined FastCGI configuration snippet for Nginx that contains various directives for handling PHP requests.
   • fastcgi_pass unix:/run/php/php8.1-fpm.sock;: Sets the location of the PHP-FPM socket Nginx should use to communicate with the PHP-FPM service.

6. Enable the new Nginx virtual host configuration. Replace app.example.com with your domain name.

   CONSOLE

   Copy

   $ sudo ln -s /etc/nginx/sites-available/app.example.com.conf /etc/nginx/sites-enabled/app.example.com.conf

   Explain Code

   Powered by Vultr AgentBeta

7. Test the Nginx configuration for errors.

   CONSOLE

   Copy

   $ sudo nginx -t

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
   nginx: configuration file /etc/nginx/nginx.conf test is successful

8. Restart Nginx to apply your configuration changes.

   CONSOLE

   Copy

   $ sudo systemctl restart nginx

   Explain Code

   Powered by Vultr AgentBeta

9. Allow the HTTP port 80 through the firewall.

   CONSOLE

   Copy

   $ sudo ufw allow 80/tcp

   Explain Code

   Powered by Vultr AgentBeta

10. Access your domain using a web browser such as Chrome and verify that your PHP Information displays.

    

Secure the Server

Server security is crucial when deploying dynamic web applications with the LEMP stack. To ensure security, all components should only accept internal connections on the loopback IP 127.0.0.1, while the Nginx web server should listen on HTTP port 80 and HTTPS port 443. Follow the steps below to configure the UFW firewall to permit these connections and generate trusted SSL certificates to encrypt server traffic.

Configure Uncomplicated Firewall (UFW)

Uncomplicated Firewall (UFW) is active and enabled on Ubuntu 22.04 Vultr servers by default. Follow the steps below to configure UFW and allow connections to the Nginx web server.

1. List all available UFW application profiles.

   CONSOLE

   Copy

   $ sudo ufw app list

   Explain Code

   Powered by Vultr AgentBeta

   Verify that the default Nginx profile is available similar to the following output.

   Nginx Full
   Nginx HTTP
   Nginx HTTPS
   OpenSSH

2. Allow the Nginx Full profile to enable the HTTP Port 80 and HTTPS Port 443 through the firewall.

   CONSOLE

   Copy

   $ sudo ufw allow 'Nginx Full'

   Explain Code

   Powered by Vultr AgentBeta

3. Reload UFW to apply the firewall changes.

   CONSOLE

   Copy

   $ sudo ufw reload

   Explain Code

   Powered by Vultr AgentBeta

4. View the firewall status to verify that the new rules are available.

   CONSOLE

   Copy

   $ sudo ufw status

   Explain Code

   Powered by Vultr AgentBeta

   You should see an output like this:

   To                         Action      From
   --                         ------      ----
   22/tcp                     ALLOW       Anywhere
   Nginx Full                 ALLOW       Anywhere
   22/tcp (v6)                ALLOW       Anywhere (v6)
   Nginx Full (v6)            ALLOW       Anywhere (v6)

Generate Let's Encrypt SSL Certificates

1. Install the Certbot Let's Encrypt client application plugin for Nginx.

   CONSOLE

   Copy

   $ sudo apt install -y certbot python3-certbot-nginx

   Explain Code

   Powered by Vultr AgentBeta

2. Request a new Let's Encrypt SSL certificate on your server. Replace app.example.com with your domain and hello@example.com with your actual email address.

   CONSOLE

   Copy

   $ sudo certbot --nginx --agree-tos --redirect --email hello@example.com -d app.example.com

   Explain Code

   Powered by Vultr AgentBeta

3. Verify that Certbot auto-renews the SSL certificate upon expiry.

   CONSOLE

   Copy

   $ sudo certbot renew --dry-run

   Explain Code

   Powered by Vultr AgentBeta

4. Restart Nginx to apply the configuration changes.

   CONSOLE

   Copy

   $ sudo systemctl restart nginx

   Explain Code

   Powered by Vultr AgentBeta

Test the Installation

Nginx, MySQL, and PHP (LEMP) work together to serve dynamic content for your web applications. Follow the steps below to set up a sample application that retrieves and displays a Greetings from Vultr message from a MySQL database on your server.

1. Log in to MySQL as the root user.

   CONSOLE

   Copy

   $ mysql -u root -p

   Explain Code

   Powered by Vultr AgentBeta

   Enter the root user password you set earlier to access the MySQL console.

2. Create a new sample database vultr_db.

   SQL

   Copy

   mysql> CREATE DATABASE vultr_db;

   Explain Code

   Powered by Vultr AgentBeta

3. Switch to the database.

   SQL

   Copy

   mysql> USE vultr_db;

   Explain Code

   Powered by Vultr AgentBeta

4. Create a new database user db_user with a strong password.

   SQL

   Copy

   mysql> CREATE USER 'db_user'@'localhost' IDENTIFIED BY 'strong-password';

   Explain Code

   Powered by Vultr AgentBeta

5. Grant the user full privileges to the vultr_db database.

   SQL

   Copy

   mysql> GRANT ALL PRIVILEGES ON vultr_db.* TO 'db_user'@'localhost';

   Explain Code

   Powered by Vultr AgentBeta

6. Reload the MySQL privileges table to apply the new user changes.

   SQL

   Copy

   mysql> FLUSH PRIVILEGES;

   Explain Code

   Powered by Vultr AgentBeta

7. Create a new table VultrDocs with two columns. The id column works as the primary key, and message contains VARCHAR strings.

   SQL

   Copy

   mysql> CREATE TABLE IF NOT EXISTS VultrDocs ( id INT AUTO_INCREMENT PRIMARY KEY, message VARCHAR(255) NOT NULL );

   Explain Code

   Powered by Vultr AgentBeta

8. Insert new data to the message column in the VultrDocs table with the string Greetings from Vultr.

   SQL

   Copy

   mysql> INSERT INTO VultrDocs (message) VALUES ('Greetings from Vultr');

   Explain Code

   Powered by Vultr AgentBeta

9. View the table data to verify that the new string is available.

   SQL

   Copy

   mysql> SELECT * from VultrDocs;

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   +----+----------------------+
   | id | message              |
   +----+----------------------+
   |  1 | Greetings from Vultr |
   +----+----------------------+
   1 row in set (0.00 sec)

10. Exit the MySQL console.

    SQL

    Copy

    mysql> exit;

    Explain Code

    Powered by Vultr AgentBeta

11. Create a new test.php file in your /var/www/html/ web root directory using a text editor such as Nano.

    CONSOLE

    Copy

    $ sudo nano /var/www/html/test.php

    Explain Code

    Powered by Vultr AgentBeta

12. Add the following contents to the file.

    PHP

    Copy

    <?php
    $servername = "localhost";
    $username = "db_user";
    $password = "db_password";
    $dbname = "vultr_db";
    
    // Create database connection
    $conn = new mysqli($servername, $username, $password, $dbname);
    
    // Check database connection
    if ($conn->connect_error) {
        die("Database Connection Failed." . $conn->connect_error);
    }
    
    // Retrieve the record from VultrDocs Table
    $sql = "SELECT message FROM VultrDocs";
    $result = $conn->query($sql);
    
    if ($result->num_rows > 0) {
        $row = $result->fetch_assoc();
        echo "<h1>" . $row["message"]. "</h1>";
    
    } else {
        echo "<h1>No message found.</h1>";
    }
    
    $conn->close();

    Explain Code

    Powered by Vultr AgentBeta

    Save and close the file.

    The above PHP application code connects to your MySQL database and displays the Greetings from Vultr string from your sample vultr_db database when the connection is successful.

13. Access your domain in a new web browser window using the /test.php path.

    https://app.example.com/test.php

    Verify that your Greetings from Vultr string displays in your browser window.

    

Conclusion

In this article, you deployed and secured the Nginx, MySQL, and PHP (LEMP) stack on your Ubuntu 22.04 server, enabling the creation and secure delivery of multiple web applications based on your server configurations.