Enable nginx and fix systemd service

README.md

@@ -91,11 +91,12 @@ tmpfs /var/log/nginx tmpfs rw,user,noatime 0 0
 
 As time syncronisation is important, you should configure ntp servers in `/etc/systemd/timesyncd.conf` and make them match with the entries in `/etc/rc.local` iptables configuration
 
-Enable the PHP-FPM default instances:
+Enable the PHP-FPM default instances and nginx:
 ```
 systemctl enable php7.2-fpm@default
 systemctl enable php7.3-fpm@default
 systemctl enable php7.4-fpm@default
+systemctl enable nginx
 ```
 
 Edit `/etc/fstab` and add the `noatime,usrjquota=aquota.user,jqfmt=vfsv1` option to the `/home` mountpoint and `noatime`to `/`. Then initialize quota:

etc/systemd/system/nginx.service

@@ -23,11 +23,11 @@ ProtectKernelModules=true
 ProtectControlGroups=true
 LockPersonality=true
 SystemCallArchitectures=native
-BindPaths=/var/log/nginx/
+ReadWritePaths=-/var/log/nginx/
-BindPaths=/var/lib/nginx/
+ReadWritePaths=-/var/lib/nginx/
-BindPaths=/var/www/var/run/
+ReadWritePaths=-/var/www/var/run/
-BindPaths=/run/
+ReadWritePaths=-/run/
-InaccessiblePaths=/root/
+InaccessiblePaths=-/root/
 
 [Install]
 WantedBy=multi-user.target

install_php.sh

@@ -138,3 +138,4 @@ CXXFLAGS='-O3 -mtune=native -march=native' CFLAGS='-O3 -mtune=native -march=nati
 make -j $(nproc) install
 make distclean
 git reset --hard
+ln -fs /usr/bin/php7.4 /usr/bin/php