How to Use Vultr's LEMP Marketplace Application

The LEMP stack combines Linux, Nginx, MySQL, and PHP to serve dynamic websites and applications. It provides a powerful foundation for hosting PHP-based applications with Nginx's high-performance web server, MySQL's robust database management, and PHP's server-side scripting capabilities. The Vultr Marketplace provides a pre-configured LEMP instance, enabling quick deployment and setup on a Vultr server.

This guide explains deploying and using Vultr's LEMP Marketplace Application. You will deploy an instance, verify the installation, configure DNS and SSL, set up a virtual host, secure MySQL, and implement best practices for production deployments.

Deploy Vultr's LEMP Marketplace Application

1. Log in to your Vultr Console and click the Deploy Server button.

2. Select your preferred server type.

3. Choose a server location.

4. Select a server plan with at least 1GB RAM and 1 CPU core for basic workloads, or 2GB RAM and 2 CPU cores for production applications.

5. Click the Configure button to proceed.

6. Under Marketplace Apps, search for LEMP and select it as the Marketplace Application.

7. Select the Limited Login option from the Additional Features section to create a limited user with sudo access.

8. Review your configurations and click the Deploy Now button to start deployment.

   Note

   It may take up to 10 minutes for your server to finish installing the LEMP stack.

9. After the instance shows the status of Running, navigate to the Server Overview page and copy the SSH connection details.

Initial Setup and Configuration

After deployment, verify the installation, configure DNS, and secure your LEMP stack before hosting applications.

1. Create a DNS A record pointing to your server's IP address, such as lemp.example.com.

2. Connect to your Vultr server instance over SSH using the connection details from the Server Overview page.

Verify LEMP Installation

1. Check the Nginx service status.

   CONSOLE

   Copy

   $ sudo systemctl status nginx

   Explain Code

   Powered by Vultr AgentBeta

   The service should show as active (running).

2. Verify the PHP installation.

   CONSOLE

   Copy

   $ php -v

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   PHP 8.3.12 (cli) (built: Sep 27 2024 03:53:05) (NTS)

3. Check the MySQL service status.

   CONSOLE

   Copy

   $ sudo systemctl status mysql

   Explain Code

   Powered by Vultr AgentBeta

   The service should show as active (running).

4. Verify Nginx is serving the default page by visiting http://SERVER_IP in a web browser.

Configure Firewall Security

Secure your server by configuring the firewall to allow only necessary traffic before enabling SSL.

1. Allow SSH connections.

   CONSOLE

   Copy

   $ sudo ufw allow OpenSSH

   Explain Code

   Powered by Vultr AgentBeta

2. Allow HTTP and HTTPS traffic for Nginx and Certbot.

   CONSOLE

   Copy

   $ sudo ufw allow 'Nginx Full'

   Explain Code

   Powered by Vultr AgentBeta

3. Enable the firewall.

   CONSOLE

   Copy

   $ sudo ufw enable

   Explain Code

   Powered by Vultr AgentBeta

4. Verify firewall status.

   CONSOLE

   Copy

   $ sudo ufw status

   Explain Code

   Powered by Vultr AgentBeta

Secure LEMP with SSL/TLS

Protect your web server with HTTPS using Let's Encrypt certificates via Certbot.

1. Install Certbot and the Nginx plugin.

   CONSOLE

   Copy

   $ sudo apt update
   $ sudo apt install certbot python3-certbot-nginx -y

   Explain Code

   Powered by Vultr AgentBeta

2. Request an SSL certificate for your domain.

   CONSOLE

   Copy

   $ sudo certbot --nginx -d lemp.example.com

   Explain Code

   Powered by Vultr AgentBeta

   Follow the prompts and select the option to redirect HTTP traffic to HTTPS when asked.

3. Verify SSL certificate auto-renewal.

   CONSOLE

   Copy

   $ sudo certbot renew --dry-run

   Explain Code

   Powered by Vultr AgentBeta

4. Access your site securely at https://lemp.example.com.

Configure Nginx Virtual Host

Set up a virtual host to serve your website with proper configurations for PHP applications.

1. Create a directory for your website.

   CONSOLE

   Copy

   $ sudo mkdir -p /var/www/lemp.example.com/html

   Explain Code

   Powered by Vultr AgentBeta

2. Set proper ownership.

   CONSOLE

   Copy

   $ sudo chown -R www-data:www-data /var/www/lemp.example.com

   Explain Code

   Powered by Vultr AgentBeta

3. Set safe directory permissions.

   CONSOLE

   Copy

   $ sudo chmod -R 755 /var/www/lemp.example.com

   Explain Code

   Powered by Vultr AgentBeta

4. Create a test index file.

   CONSOLE

   Copy

   $ sudo nano /var/www/lemp.example.com/html/index.php

   Explain Code

   Powered by Vultr AgentBeta
   PHP

   Copy

   <!DOCTYPE html>
   <html>
   <head>
       <title>Welcome to LEMP Server</title>
   </head>
   <body>
       <h1>Success! The LEMP virtual host is working.</h1>
       <p>Server time: <?php echo date('Y-m-d H:i:s'); ?></p>
   </body>
   </html>

   Explain Code

   Powered by Vultr AgentBeta

   Save and close the file.

5. Create an Nginx virtual host configuration.

   CONSOLE

   Copy

   $ sudo nano /etc/nginx/sites-available/lemp.example.com

   Explain Code

   Powered by Vultr AgentBeta
   NGINX

   Copy

   server {
       listen 80;
       listen [::]:80;
       server_name lemp.example.com;
   
       root /var/www/lemp.example.com/html;
       index index.php index.html index.htm;
   
       access_log /var/log/nginx/lemp.example.com-access.log;
       error_log /var/log/nginx/lemp.example.com-error.log;
   
       location / {
           try_files $uri $uri/ =404;
       }
   
       location ~ \.php$ {
           include snippets/fastcgi-php.conf;
           fastcgi_pass unix:/var/run/php/php8.3-fpm.sock;
           fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
           include fastcgi_params;
       }
   
       location ~ /\.ht {
           deny all;
       }
   }

   Explain Code

   Powered by Vultr AgentBeta

   Replace lemp.example.com with your domain name and adjust the PHP-FPM socket path if needed.

   Save and close the file.

6. Enable the virtual host.

   CONSOLE

   Copy

   $ sudo ln -s /etc/nginx/sites-available/lemp.example.com /etc/nginx/sites-enabled/

   Explain Code

   Powered by Vultr AgentBeta

7. Disable the default Nginx site.

   CONSOLE

   Copy

   $ sudo rm /etc/nginx/sites-enabled/default

   Explain Code

   Powered by Vultr AgentBeta

8. Test the Nginx configuration.

   CONSOLE

   Copy

   $ sudo nginx -t

   Explain Code

   Powered by Vultr AgentBeta

   Output:

   nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
   nginx: configuration file /etc/nginx/nginx.conf test is successful

9. Reload Nginx to apply changes.

   CONSOLE

   Copy

   $ sudo systemctl reload nginx

   Explain Code

   Powered by Vultr AgentBeta

10. Run Certbot again to configure SSL for the new virtual host.

    CONSOLE

    Copy

    $ sudo certbot --nginx -d lemp.example.com

    Explain Code

    Powered by Vultr AgentBeta

11. Access your site at https://lemp.example.com to verify the test page loads with SSL.

Configure MySQL Database

Set up MySQL with secure authentication and create a database for your application.

Secure MySQL Installation

1. Run the MySQL secure installation script.

   CONSOLE

   Copy

   $ sudo mysql_secure_installation

   Explain Code

   Powered by Vultr AgentBeta

   Follow the prompts:

   • Set root password: Enter a strong password
   • Remove anonymous users: Yes
   • Disallow root login remotely: Yes
   • Remove test database: Yes
   • Reload privilege tables: Yes

Create Database and User

1. Log in to MySQL as root.

   CONSOLE

   Copy

   $ sudo mysql -u root -p

   Explain Code

   Powered by Vultr AgentBeta

   Enter the root password when prompted.

2. Create a database for your application.

   SQL

   Copy

   > CREATE DATABASE myapp_db CHARACTER SET utf8mb4 COLLATE utf8mb4_unicode_ci;

   Explain Code

   Powered by Vultr AgentBeta

3. Create a dedicated database user.

   SQL

   Copy

   > CREATE USER 'myapp_user'@'localhost' IDENTIFIED BY 'secure_password_here';

   Explain Code

   Powered by Vultr AgentBeta

   Replace secure_password_here with a strong password.

4. Grant privileges to the user.

   SQL

   Copy

   > GRANT ALL PRIVILEGES ON myapp_db.* TO 'myapp_user'@'localhost';

   Explain Code

   Powered by Vultr AgentBeta

5. Flush privileges and exit.

   SQL

   Copy

   > FLUSH PRIVILEGES;
   > EXIT;

   Explain Code

   Powered by Vultr AgentBeta

6. Test the new user connection.

   CONSOLE

   Copy

   $ mysql -u myapp_user -p myapp_db

   Explain Code

   Powered by Vultr AgentBeta

   Enter the password when prompted. If you can access the database, the setup is correct.

Configure PHP

Optimize PHP settings for production use and security.

Update PHP Configuration

1. Edit the PHP-FPM configuration file.

   CONSOLE

   Copy

   $ sudo nano /etc/php/8.3/fpm/php.ini

   Explain Code

   Powered by Vultr AgentBeta

2. Update the following settings for production use.

   INI

   Copy

   upload_max_filesize = 64M
   post_max_size = 64M
   memory_limit = 256M
   max_execution_time = 300
   max_input_time = 300
   display_errors = Off
   log_errors = On
   error_log = /var/log/php/error.log

   Explain Code

   Powered by Vultr AgentBeta

   Adjust values based on your application requirements.

   Save and close the file.

3. Create the PHP log directory.

   CONSOLE

   Copy

   $ sudo mkdir -p /var/log/php
   $ sudo chown www-data:www-data /var/log/php

   Explain Code

   Powered by Vultr AgentBeta

4. Restart PHP-FPM to apply changes.

   CONSOLE

   Copy

   $ sudo systemctl restart php8.3-fpm

   Explain Code

   Powered by Vultr AgentBeta

Install Common PHP Extensions

1. Install frequently used PHP extensions.

   CONSOLE

   Copy

   $ sudo apt install php8.3-mysql php8.3-curl php8.3-gd php8.3-mbstring php8.3-xml php8.3-zip php8.3-intl -y

   Explain Code

   Powered by Vultr AgentBeta

2. Restart PHP-FPM after installing extensions.

   CONSOLE

   Copy

   $ sudo systemctl restart php8.3-fpm

   Explain Code

   Powered by Vultr AgentBeta

3. Verify installed extensions.

   CONSOLE

   Copy

   $ php -m

   Explain Code

   Powered by Vultr AgentBeta

Best Practices and Configuration

Implement these recommendations to ensure your LEMP stack runs securely and efficiently.

Security Hardening

1. Configure Nginx security headers in your virtual host.

   CONSOLE

   Copy

   $ sudo nano /etc/nginx/sites-available/lemp.example.com

   Explain Code

   Powered by Vultr AgentBeta

   Add the following inside the server block:

   NGINX

   Copy

   add_header X-Frame-Options "SAMEORIGIN" always;
   add_header X-Content-Type-Options "nosniff" always;
   add_header X-XSS-Protection "1; mode=block" always;
   add_header Referrer-Policy "no-referrer-when-downgrade" always;

   Explain Code

   Powered by Vultr AgentBeta

   Save, close, and reload Nginx.

2. Disable PHP version exposure.

   CONSOLE

   Copy

   $ sudo nano /etc/php/8.3/fpm/php.ini

   Explain Code

   Powered by Vultr AgentBeta

   Set:

   INI

   Copy

   expose_php = Off

   Explain Code

   Powered by Vultr AgentBeta

   Restart PHP-FPM: sudo systemctl restart php8.3-fpm

3. Keep the system and packages updated.

   CONSOLE

   Copy

   $ sudo apt update
   $ sudo apt upgrade -y

   Explain Code

   Powered by Vultr AgentBeta

Performance Optimization

1. Enable PHP OPcache for better performance.

   CONSOLE

   Copy

   $ sudo nano /etc/php/8.3/fpm/php.ini

   Explain Code

   Powered by Vultr AgentBeta
   INI

   Copy

   opcache.enable=1
   opcache.memory_consumption=128
   opcache.interned_strings_buffer=8
   opcache.max_accelerated_files=10000
   opcache.revalidate_freq=60

   Explain Code

   Powered by Vultr AgentBeta

   Restart PHP-FPM.

2. Configure Nginx client body size for uploads.

   CONSOLE

   Copy

   $ sudo nano /etc/nginx/nginx.conf

   Explain Code

   Powered by Vultr AgentBeta

   Add inside the http block:

   NGINX

   Copy

   client_max_body_size 64M;

   Explain Code

   Powered by Vultr AgentBeta

   Reload Nginx.

Backup Configuration

1. Create regular backups of important directories.

   CONSOLE

   Copy

   $ sudo tar -czf /root/backup-$(date +%F).tar.gz /var/www /etc/nginx /etc/php

   Explain Code

   Powered by Vultr AgentBeta

2. Back up MySQL databases.

   CONSOLE

   Copy

   $ sudo mysqldump -u root -p --all-databases > /root/mysql-backup-$(date +%F).sql

   Explain Code

   Powered by Vultr AgentBeta

Troubleshooting

This section covers common issues and diagnostic commands to help resolve problems with your LEMP stack.

Check Service Status

1. Verify all services are running.

   CONSOLE

   Copy

   $ sudo systemctl status nginx
   $ sudo systemctl status php8.3-fpm
   $ sudo systemctl status mysql

   Explain Code

   Powered by Vultr AgentBeta

2. View service logs.

   CONSOLE

   Copy

   $ sudo journalctl -u nginx -e
   $ sudo journalctl -u php8.3-fpm -e
   $ sudo journalctl -u mysql -e

   Explain Code

   Powered by Vultr AgentBeta

Common Issues

502 Bad Gateway Error

1. Check PHP-FPM status and restart if needed.

   CONSOLE

   Copy

   $ sudo systemctl status php8.3-fpm
   $ sudo systemctl restart php8.3-fpm

   Explain Code

   Powered by Vultr AgentBeta

2. Verify the PHP-FPM socket path matches the Nginx configuration.

   CONSOLE

   Copy

   $ ls -l /var/run/php/

   Explain Code

   Powered by Vultr AgentBeta

PHP Files Downloading Instead of Executing

1. Verify PHP-FPM is running.

   CONSOLE

   Copy

   $ sudo systemctl status php8.3-fpm

   Explain Code

   Powered by Vultr AgentBeta

2. Check that the Nginx virtual host includes the PHP location block.

3. Restart both services.

   CONSOLE

   Copy

   $ sudo systemctl restart nginx php8.3-fpm

   Explain Code

   Powered by Vultr AgentBeta

Permission Denied Errors

1. Set proper ownership for web directories.

   CONSOLE

   Copy

   $ sudo chown -R www-data:www-data /var/www/lemp.example.com
   $ sudo chmod -R 755 /var/www/lemp.example.com

   Explain Code

   Powered by Vultr AgentBeta

2. Check Nginx and PHP-FPM are running as the same user.

   CONSOLE

   Copy

   $ ps aux | grep nginx
   $ ps aux | grep php-fpm

   Explain Code

   Powered by Vultr AgentBeta

MySQL Connection Errors

1. Verify MySQL is running and accessible.

   CONSOLE

   Copy

   $ sudo systemctl status mysql
   $ mysql -u root -p -e "SELECT 1;"

   Explain Code

   Powered by Vultr AgentBeta

2. Check user privileges.

   CONSOLE

   Copy

   $ sudo mysql -u root -p -e "SELECT user, host FROM mysql.user;"

   Explain Code

   Powered by Vultr AgentBeta

Use Cases

The LEMP stack provides a flexible environment suitable for various PHP-based web workloads:

• Content Management Systems: Deploy WordPress, Joomla, Drupal, or other popular CMS platforms with Nginx's high-performance serving.
• PHP Frameworks: Host Laravel, Symfony, CodeIgniter, or custom PHP applications with optimized PHP-FPM processing.
• E-commerce Platforms: Run Magento, PrestaShop, or WooCommerce stores with robust database management and secure SSL.
• API Backends: Serve RESTful APIs with fast response times and efficient connection handling through Nginx.
• Web Applications: Deploy custom business applications, dashboards, CRM systems, or SaaS platforms.
• Development Environments: Create isolated staging and testing environments for application development and deployment testing.

Conclusion

In this guide, you deployed Vultr's LEMP Marketplace Application and configured it for production use. You secured the server with firewall rules and SSL/TLS certificates, set up Nginx virtual hosts with proper permissions, configured MySQL with secure authentication and dedicated database users, and optimized PHP settings for performance and security. With this production-ready LEMP stack, you can host PHP applications, manage databases, and serve dynamic content efficiently.