環境：CentOS5.4(amazon EC2
cassandra:1.0.7

とりあえず、チラ裏程度の情報です。。。

●まず、jdkをインストールします
ここから

http://www.oracle.com/technetwork/java/javase/downloads/index.html

ダウンロードしましょう。

●インストールは普通にrpmコマンドで
[root@epsilon ~] rpm -ivh jdk-7u2-linux-i586.rpm

●ちゃんとインストール出来てるか確認しましょう
[root@epsilon ~] java -version
java version “1.7.0_02″
Java(TM) SE Runtime Environment (build 1.7.0_02-b13)
Java HotSpot(TM) Client VM (build 22.0-b10, mixed mode, sharing)

●Cassandraのダウンロードをしましょう
[root@epsilon ~] wget http://ftp.jaist.ac.jp/pub/apache//cassandra/1.0.7/apache-cassandra-1.0.7-bin.tar.gz

●適当なディレクトリに解凍しましょう
自分は/usr/local/cassandraにしました。

●Cassandraを起動しましょう
[root@epsilon ~] bin/cassandra -p /var/run/cassandra.pid
pidファイルの場所を指定しておくと、killするときに便利です。
hostnameがなんちゃらってエラーがでる場合はhostnameで表示されるhost名が/etc/hostsに入ってないです。

●もう一つ端末を起動してcassandra-cliからcassandraにアクセスしてみましょう
bin/cassandra-cli -h localhost

●Keyspaceを作成しましょう
[default@unknown]create keyspace Keyspace1 with replication_factor = 1;

●使用するKeyspaceの指定
[default@unknown]use Keyspace1;

●columnを作成します
[default@Keyspace1] create column family Standard1 with comparator=UTF8Type and default_validation_class=UTF8Type and key_validation_class=UTF8Type;
4b07a490-4fe6-11e1-0000-242d50cf1ff6
Waiting for schema agreement…
… schemas agree across the cluster

●データをsetしてみましょう
[default@Keyspace1] set Standard1[jsmith]['first'] = ‘John’; Value inserted.
Elapsed time: 94 msec(s).

●データをgetしてみましょう
[default@Keyspace1] get Standard1['jsmith'];
=> (column=first, value=John, timestamp=1328438642555000)
Returned 1 results.
Elapsed time: 31 msec(s).

●Cassandraの終了は
kill `cat /var/run/cassandra.pid`

DoctrineでJOINしたい場合、普通にJOINメソッドを使うだけだとエラーになります。（ﾊｧﾊｧ

エラーが出ないようにするためにはテーブルのリレーションの設定をしないとダメっぽいです。
たとえばユーザが所持しているアイテムのIDが記録されているUserItemテーブルと
アイテムのマスターテーブルであるItemをJOINする場合は、

UserItemのクラスでこのように↓

public function setUp()
{
	parent::setUp();
	$this->hasOne('Item', array(
		'local' => 'item_id',
		'foreign' => 'id'
	));
}

としてやればエラーがでなくなります。

他のテーブルもJOINしたい場合は
$this->hasOneを追加していけば大丈夫っぽいです。

ちなみに、このやりかたが正しいかどうかは分かりません（ｷﾘｯ

Doctrineのお勉強をしたのでメモしておく。
環境：Symfony1.4、Doctrine1.2

●SELECT

$q = Doctrine_Query::create()
->from('Appcourses')
->where('service_id = ?', $serviceId);

$result = $q->fetchOne();
$q->free();

●JOIN(テーブルに外部キーが設定されてないとエラーになります

$q = Doctrine_Query::create()
->select('t1.service_id, t1.name, t1.description, t1.image_url, t1.price, COALESCE(t2.user_id,0) AS user_id')
->from('Appcourses t1')
->leftJoin('t1.AppcourseUsers t2 ON t1.service_id = t2.service_id AND t2.user_id = ?', $userId)
->orderBy('t1.price ASC');

$result = $q->execute();
$q->free();

//どのようなSQLになっているのか見たい場合
//echo $q->getSqlQuery();

●INSERT（セーブっていうの？

$appCourseLog = new AppcourseLogs();
$appCourseLog->setUserId($userId);
$appCourseLog->setTransactionId($transactionId);
$appCourseLog->setServiceId($serviceId);
$appCourseLog->setStatus($status);
$appCourseLog->setCreatedAt(date('Y-m-d H:i:s'));
$appCourseLog->setUpdatedAt(date('Y-m-d H:i:s'));
$appCourseLog->save();

●トランザクション

$conn = Doctrine_Manager::connection();

$conn->beginTransaction();
try {
  $q = Doctrine_Query::create()
  ->from('AppcourseLogs')
  ->where('transaction_id = ?', $transactionId);

  $result = $q->fetchArray();

  $serviceId = $result[0]['service_id'];
  $userId = $result[0]['user_id'];

  $q->free();

  $appCourseUser = new AppcourseUser();
  $appCourseUser->setUserId($userId);
  $appCourseUser->setServiceId($serviceId);
  $appCourseUser->save();
  unset($appCourseUser);

  $conn->commit();

} catch(Exception $e) {
  $conn->rollback();
}

●DELETE

$q = Doctrine_Query::create()
->delete()->from('AppcourseUsers')
->where('user_id = ?', $userId)
->addWhere('service_id = ?', $serviceId);
$q->execute();
$q->free();

●コネクションのクローズ（どのタイミングで使っていいか知らんけど

    $dm = Doctrine_Manager::getInstance();
    $conn = $dm->connection();
    $dm->closeConnection($conn);

遅い外部API呼び出しの前にクローズしておきたいな・・・・・

新規ソーシャルアプリ開発でSymfony1.4を使うことになったので
お勉強しました。

環境：CentOS5.5
PHP:5.3.3

インストール先は

cd /var/www/html

とします。

Apacheの設定は

<VirtualHost *:80>
DocumentRoot "/var/www/html/hoge/web"
ServerName hoge.com

としました。

●今回はアプリケーション名をhogeとしましたのでhogeというディレクトリを作ります

mkdir -p hoge/lib/vendor

cd hoge/lib/vendor

svn co http://svn.symfony-project.com/branches/1.4 symfony

少し時間がかかります。。。。。

●バージョンを確認してみましょう
cd ../../

php lib/vendor/symfony/data/bin/symfony -V

●symfonyコマンドでプロジェクトを作ります

php lib/vendor/symfony/data/bin/symfony generate:project hoge

●フロントエンドを作成します。（通常、管理画面はbackendになるようです

php lib/vendor/symfony/data/bin/symfony generate:app frontend

●シンボリックリンクを作成します

ln -s /var/www/html/hoge/lib/vendor/symfony/data/web/sf /var/www/html/hoge/web

●それではブラウザからアクセスしてみましょう

http://hoge.com/frontend_dev.php

You are not allowed to access this file. Check frontend_dev.php for more information.
というエラーが表示されましたね？

frontend_dev.phpを少し編集しましょう。

vi web/frontend_dev.php

//if (!in_array(@$_SERVER['REMOTE_ADDR'], array('127.0.0.1', '::1')))
//{
//  die('You are not allowed to access this file. Check '.basename(__FILE__).' for more information.');
//}

これでエラーが消えましたね？

●お待ちかね、コントローラーの作成です。

php lib/vendor/symfony/data/bin/symfony generate:module frontend Hello
>> dir+      /var/www/html/hoge/apps/frontend/modules/Hello/actions
>> file+     /var/www/html/hoge/apps/frontend/modules/Hello/actions/actions.class.php
>> dir+      /var/www/html/hoge/apps/frontend/modules/Hello/templates
>> file+     /var/www/html/hoge/apps/frontend/modules/Hello/templates/indexSuccess.php
>> file+     /var/www/html/hoge/test/functional/frontend/HelloActionsTest.php
>> tokens    /var/www/html/hoge/test/functional/frontend/HelloActionsTest.php
>> tokens    /var/www/html/hoge/apps/frontend/modules/Hello/actions/actions.class.php
>> tokens    /var/www/html/hoge/apps/frontend/modules/Hello/templates/indexSuccess.php

●ブラウザからアクセスしてましょう

http://hoge.com/frontend_dev.php/Hello/index

ちゃんと、デフォルトの画面が表示されましたか？

●次はactionsを追加してみましょう

vi apps/frontend/modules/Hello/actions/actions.class.php
public function executeWorld()
{
}

vi apps/frontend/modules/Hello/templates/WorldSuccess.php
<h2>Hello, World! <?php echo date('Y/m/d') ?></h2>

●ブラウザからアクセスしてみましょう

http://hoge.com/frontend_dev.php/Hello/World

おめでとうございます！
ちゃんとHello Worldと表示されましたね？

続きはまた後で。。。

たまに聞かれるので書いとく。

アクティブモード：
制御用コネクションはクライアントから開始。
データ転送用コネクションはFTPサーバから開始。

パッシブモード：
制御用コネクションはクライアントから開始。
データ転送用コネクションもクライアントから開始し、ポート番号はランダムポートになる。

パッシブモードで動作しているFTPサーバーに
パッシブモード設定されてないクライアントで繋いでも
制御ようコネクションは開始できるけど、データ転送は行えないってことです。

#既にremiからPHP5.3をインストール済みです。

[root@epsilon ~] yum --enablerepo=remi install php-pecl-apc
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * addons: mirror.batblue.com
 * base: mirror.trouble-free.net
 * epel: mirror.umoss.org
 * extras: mirror.batblue.com
 * remi: rpms.famillecollet.com
 * updates: mirror.batblue.com
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package php-pecl-apc.i386 0:3.1.7-1.el5.remi set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

======================================================================================
 Package               Arch          Version                      Repository     Size
======================================================================================
Installing:
 php-pecl-apc          i386          3.1.7-1.el5.remi             remi          104 k

Transaction Summary
======================================================================================
Install       1 Package(s)
Upgrade       0 Package(s)

Total download size: 104 k
Is this ok [y/N]: y
Downloading Packages:
php-pecl-apc-3.1.7-1.el5.remi.i386.rpm                         | 104 kB     00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : php-pecl-apc                                                   1/1

Installed:
  php-pecl-apc.i386 0:3.1.7-1.el5.remi

Complete!

●ちゃんとインストール出来ているか確認しましょう。

[root@epsilon ~] php -r 'phpinfo();' | grep apc
Additional .ini files parsed => /etc/php.d/apc.ini,
apc
MMAP File Mask => /tmp/apc.XXXXXX
apc.cache_by_default => On => On
apc.canonicalize => Off => Off
apc.coredump_unmap => Off => Off
apc.enable_cli => Off => Off
apc.enabled => On => On
apc.file_md5 => Off => Off
apc.file_update_protection => 2 => 2
apc.filters => no value => no value
apc.gc_ttl => 3600 => 3600
apc.include_once_override => Off => Off
apc.lazy_classes => Off => Off
apc.lazy_functions => Off => Off
apc.max_file_size => 1M => 1M
apc.mmap_file_mask => /tmp/apc.XXXXXX => /tmp/apc.XXXXXX
apc.num_files_hint => 1024 => 1024
apc.preload_path => no value => no value
apc.report_autofilter => Off => Off
apc.rfc1867 => Off => Off
apc.rfc1867_freq => 0 => 0
apc.rfc1867_name => APC_UPLOAD_PROGRESS => APC_UPLOAD_PROGRESS
apc.rfc1867_prefix => upload_ => upload_
apc.rfc1867_ttl => 3600 => 3600
apc.serializer => default => default
apc.shm_segments => 1 => 1
apc.shm_size => 64M => 64M
apc.slam_defense => On => On
apc.stat => On => On
apc.stat_ctime => Off => Off
apc.ttl => 7200 => 7200
apc.use_request_time => On => On
apc.user_entries_hint => 4096 => 4096
apc.user_ttl => 7200 => 7200
apc.write_lock => On => On

＃既にremiからPHP5.3をインストール済みです。

[root@epsilon ~] yum --enablerepo=remi install php-pecl-xdebug
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * addons: mirror.batblue.com
 * base: mirror.trouble-free.net
 * epel: mirror.umoss.org
 * extras: mirror.batblue.com
 * remi: rpms.famillecollet.com
 * updates: mirror.batblue.com
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package php-pecl-xdebug.i386 0:2.1.0-1.el5.remi set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package                Arch        Version                   Repository   Size
================================================================================
Installing:
 php-pecl-xdebug        i386        2.1.0-1.el5.remi          remi        165 k

Transaction Summary
================================================================================
Install       1 Package(s)
Upgrade       0 Package(s)

Total download size: 165 k
Is this ok [y/N]: y
Downloading Packages:
php-pecl-xdebug-2.1.0-1.el5.remi.i386.rpm                | 165 kB     00:00
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing     : php-pecl-xdebug                                          1/1

Installed:
  php-pecl-xdebug.i386 0:2.1.0-1.el5.remi

Complete!

●ちゃんとインストールされているか確認しましょう。

[root@epsilon ~] php -r 'phpinfo();' | grep -i xdebug
/etc/php.d/xdebug.ini,
    with Xdebug v2.1.0, Copyright (c) 2002-2010, by Derick Rethans
xdebug
xdebug support => enabled
xdebug.auto_trace => Off => Off
xdebug.collect_assignments => Off => Off
xdebug.collect_includes => On => On
xdebug.collect_params => 0 => 0
xdebug.collect_return => Off => Off
xdebug.collect_vars => Off => Off
xdebug.default_enable => On => On
xdebug.dump.COOKIE => no value => no value
xdebug.dump.ENV => no value => no value
xdebug.dump.FILES => no value => no value
xdebug.dump.GET => no value => no value
xdebug.dump.POST => no value => no value
xdebug.dump.REQUEST => no value => no value
xdebug.dump.SERVER => no value => no value
xdebug.dump.SESSION => no value => no value
xdebug.dump_globals => On => On
xdebug.dump_once => On => On
xdebug.dump_undefined => Off => Off
xdebug.extended_info => On => On
xdebug.file_link_format => no value => no value
xdebug.idekey => root => no value
xdebug.manual_url => http://www.php.net => http://www.php.net
xdebug.max_nesting_level => 100 => 100
xdebug.overload_var_dump => On => On
xdebug.profiler_aggregate => Off => Off
xdebug.profiler_append => Off => Off
xdebug.profiler_enable => Off => Off
xdebug.profiler_enable_trigger => Off => Off
xdebug.profiler_output_dir => /tmp => /tmp
xdebug.profiler_output_name => cachegrind.out.%p => cachegrind.out.%p
xdebug.remote_autostart => Off => Off
xdebug.remote_connect_back => Off => Off
xdebug.remote_cookie_expire_time => 3600 => 3600
xdebug.remote_enable => Off => Off
xdebug.remote_handler => dbgp => dbgp
xdebug.remote_host => localhost => localhost
xdebug.remote_log => no value => no value
xdebug.remote_mode => req => req
xdebug.remote_port => 9000 => 9000
xdebug.scream => Off => Off
xdebug.show_exception_trace => Off => Off
xdebug.show_local_vars => Off => Off
xdebug.show_mem_delta => Off => Off
xdebug.trace_format => 0 => 0
xdebug.trace_options => 0 => 0
xdebug.trace_output_dir => /tmp => /tmp
xdebug.trace_output_name => trace.%c => trace.%c
xdebug.var_display_max_children => 128 => 128
xdebug.var_display_max_data => 512 => 512
xdebug.var_display_max_depth => 3 => 3

MySQLをセキュアに運用するための基本として、インストール直後に
mysql_secure_installationを使うと良いかもしれない。
rootのパスワードの設定や余分な設定の削除などをやってくれる。

使い方は簡単。

[root@epsilon ~] mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MySQL
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MySQL to secure it, we'll need the current
password for the root user.  If you've just installed MySQL, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none):
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.

Set root password? [Y/n]
Setting the root password ensures that nobody can log into the MySQL
root user without the proper authorisation.

Set root password? [Y/n] y
New password:
Re-enter new password:
Password updated successfully!
Reloading privilege tables..
 ... Success!
By default, a MySQL installation has an anonymous user, allowing anyone
to log into MySQL without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] y
 ... Success!

By default, MySQL comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MySQL
installation should now be secure.

Thanks for using MySQL!

これは便利。

CREATE TABLE deviceInfo_Tmp ENGINE = MYISAM AS
SELECT * FROM deviceInfo
WHERE width >= 480

INSERT INTO deviceInfo SELECT * FROM deviceInfo_Tmp

NGINXを使ってみた。

環境：CentOS5.4
nginx:0.8.50

●インストール
まず、nginxのコンパイルの前にpcre-develをぶち込んでおきましょう。
[root@epsilon /usr/local/src] yum -y install pcre-devel

nginxのソースはwgetでダウンロードすればいいでしょう。
（今回はdevelopmentをダウンロードしました
[taka@epsilon /usr/local/src] wget http://sysoev.ru/nginx/nginx-0.8.50.tar.gz

[taka@epsilon /usr/local/src] tar xzvf nginx-0.8.50.tar.gz

[taka@epsilon /usr/local/src] cd nginx-0.8.50

configureします。
[taka@epsilon /usr/local/src/nginx-0.8.50] ./configure
Configuration summary
+ using system PCRE library
+ OpenSSL library is not used
+ md5: using system crypto library
+ sha1 library is not used
+ using system zlib library

nginx path prefix: “/usr/local/nginx”
nginx binary file: “/usr/local/nginx/sbin/nginx”
nginx configuration prefix: “/usr/local/nginx/conf”
nginx configuration file: “/usr/local/nginx/conf/nginx.conf”
nginx pid file: “/usr/local/nginx/logs/nginx.pid”
nginx error log file: “/usr/local/nginx/logs/error.log”
nginx http access log file: “/usr/local/nginx/logs/access.log”
nginx http client request body temporary files: “client_body_temp”
nginx http proxy temporary files: “proxy_temp”
nginx http fastcgi temporary files: “fastcgi_temp”
nginx http uwsgi temporary files: “uwsgi_temp”
nginx http scgi temporary files: “scgi_temp”

make && make installします。
[taka@epsilon /usr/local/src/nginx-0.8.50] make
[taka@epsilon /usr/local/src/nginx-0.8.50] su -
[root@epsilon /usr/local/src/nginx-0.8.50] make install

今回はnginxのworkerプロセスの実行ユーザはnginxとしました。
[root@epsilon /usr/local/src/nginx-0.8.50] useradd nginx

設定ファイルの書き換えです。
（設定ファイルの内容は記事の最後に
[root@epsilon /usr/local/src/nginx-0.8.50] cd /usr/local/nginx/conf/
[root@epsilon /usr/local/nginx/conf] vi nginx.conf

ログ用のディレクトリを作成しました。
[root@epsilon /usr/local/nginx/conf] mkdir /var/log/nginx

●起動
バイナリのパスを叩いてやるだけです。
[root@epsilon /usr/local/nginx] /usr/local/nginx/sbin/nginx
[root@epsilon /usr/local/nginx] ls /var/run
NetworkManager cups haldaemon.pid netreport pm setrans utmp
avahi-daemon dbus mdadm nginx.pid ppp sshd.pid wpa_supplicant
console dhclient-eth0.pid mdmpd nscd saslauthd sudo

ちゃんと、masterプロセスがrootで、workerプロセスがnginxで実行されてます。
[root@epsilon /usr/local/nginx] ps -ef|grep nginx
root 4960 1 0 04:35 ? 00:00:00 nginx: master process /usr/local/nginx/sbin/nginx
nginx 4961 4960 0 04:35 ? 00:00:00 nginx: worker process
root 4971 4645 0 04:35 pts/0 00:00:00 grep –color=always nginx

●動作チェック
サーバにブラウザでアクセスして・・・・
ちゃんと「Welcome to nginx!」と表示されていれば起動に成功です！

●停止
[root@epsilon /usr/local/nginx] kill `cat /var/run/nginx.pid`

●再起動
[root@epsilon /usr/local/nginx] kill -HUP `cat /var/run/nginx.pid`

●initスクリプトの作成
（スクリプトの内容は記事の最後に
[root@epsilon /usr/local/nginx/conf] vi /etc/init.d/nginx
[root@epsilon /usr/local/nginx/conf] chkconfig --add nginx

設定ファイルの構文チェック
[root@epsilon /usr/local/nginx/conf] service nginx configtest
the configuration file /usr/local/nginx/conf/nginx.conf syntax is ok
configuration file /usr/local/nginx/conf/nginx.conf test is successful

起動。
[root@epsilon /etc/init.d] service nginx start
Starting nginx: [ OK ]

ストップ
[root@epsilon /etc/init.d] service nginx stop
Stopping nginx: [ OK ]

●nginx.conf

user  nginx nginx;
worker_processes  1;

#error_log  logs/error.log;
#error_log  logs/error.log  notice;
error_log  /var/log/nginx/error.log  info;

pid        /var/run/nginx.pid;

events {
    worker_connections  1024;
}

http {
    include       mime.types;
    default_type  application/octet-stream;

    log_format  main  '$remote_addr - $remote_user [$time_local] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" "$http_x_forwarded_for"';

    access_log  /var/log/nginx/access.log  main;

    sendfile        on;
    #tcp_nopush     on;

    #keepalive_timeout  0;
    keepalive_timeout  65;

    #gzip  on;

    server {
        listen       80;
        server_name  localhost;

        #charset koi8-r;

        #access_log  logs/host.access.log  main;

        location / {
            root   html;
            index  index.html index.htm;
        }

        #error_page  404              /404.html;

        # redirect server error pages to the static page /50x.html
        #
        error_page   500 502 503 504  /50x.html;
        location = /50x.html {
            root   html;
        }

        # proxy the PHP scripts to Apache listening on 127.0.0.1:80
        #
        #location ~ \.php$ {
        #    proxy_pass   http://127.0.0.1;
        #}

        # pass the PHP scripts to FastCGI server listening on 127.0.0.1:9000
        #
        #location ~ \.php$ {
        #    root           html;
        #    fastcgi_pass   127.0.0.1:9000;
        #    fastcgi_index  index.php;
        #    fastcgi_param  SCRIPT_FILENAME  /scripts$fastcgi_script_name;
        #    include        fastcgi_params;
        #}

        # deny access to .htaccess files, if Apache's document root
        # concurs with nginx's one
        #
        #location ~ /\.ht {
        #    deny  all;
        #}
    }

    # another virtual host using mix of IP-, name-, and port-based configuration
    #
    #server {
    #    listen       8000;
    #    listen       somename:8080;
    #    server_name  somename  alias  another.alias;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

    # HTTPS server
    #
    #server {
    #    listen       443;
    #    server_name  localhost;

    #    ssl                  on;
    #    ssl_certificate      cert.pem;
    #    ssl_certificate_key  cert.key;

    #    ssl_session_timeout  5m;

    #    ssl_protocols  SSLv2 SSLv3 TLSv1;
    #    ssl_ciphers  ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
    #    ssl_prefer_server_ciphers   on;

    #    location / {
    #        root   html;
    #        index  index.html index.htm;
    #    }
    #}

}

●initスクリプト

#!/bin/sh
#
# nginx - this script starts and stops the nginx daemon
#
# chkconfig:   - 85 15
# description:  Nginx is an HTTP(S) server, HTTP(S) reverse \
#               proxy and IMAP/POP3 proxy server
# processname: nginx
# config:      /etc/nginx/nginx.conf
# config:      /etc/sysconfig/nginx
# pidfile:     /var/run/nginx.pid

# Source function library.
. /etc/rc.d/init.d/functions

# Source networking configuration.
. /etc/sysconfig/network

# Check that networking is up.
[ "$NETWORKING" = "no" ] && exit 0

nginx="/usr/local/nginx/sbin/nginx"
prog=$(basename $nginx)

NGINX_CONF_FILE="/usr/local/nginx/conf/nginx.conf"

[ -f /etc/sysconfig/nginx ] && . /etc/sysconfig/nginx

lockfile=/var/lock/subsys/nginx

make_dirs() {
   # make required directories
   user=`nginx -V 2>&1 | grep "configure arguments:" | sed 's/[^*]*--user=\([^ ]*\).*/\1/g' -`
   options=`$nginx -V 2>&1 | grep 'configure arguments:'`
   for opt in $options; do
       if [ `echo $opt | grep '.*-temp-path'` ]; then
           value=`echo $opt | cut -d "=" -f 2`
           if [ ! -d "$value" ]; then
               # echo "creating" $value
               mkdir -p $value && chown -R $user $value
           fi
       fi
   done
}

start() {
    [ -x $nginx ] || exit 5
    [ -f $NGINX_CONF_FILE ] || exit 6
    make_dirs
    echo -n $"Starting $prog: "
    daemon $nginx -c $NGINX_CONF_FILE
    retval=$?
    echo
    [ $retval -eq 0 ] && touch $lockfile
    return $retval
}

stop() {
    echo -n $"Stopping $prog: "
    killproc $prog -QUIT
    retval=$?
    echo
    [ $retval -eq 0 ] && rm -f $lockfile
    return $retval
}

restart() {
    configtest || return $?
    stop
    sleep 1
    start
}

reload() {
    configtest || return $?
    echo -n $"Reloading $prog: "
    killproc $nginx -HUP
    RETVAL=$?
    echo
}

force_reload() {
    restart
}

configtest() {
  $nginx -t -c $NGINX_CONF_FILE
}

rh_status() {
    status $prog
}

rh_status_q() {
    rh_status >/dev/null 2>&1
}

case "$1" in
    start)
        rh_status_q && exit 0
        $1
        ;;
    stop)
        rh_status_q || exit 0
        $1
        ;;
    restart|configtest)
        $1
        ;;
    reload)
        rh_status_q || exit 7
        $1
        ;;
    force-reload)
        force_reload
        ;;
    status)
        rh_status
        ;;
    condrestart|try-restart)
        rh_status_q || exit 0
            ;;
    *)
        echo $"Usage: $0 {start|stop|status|restart|condrestart|try-restart|reload|force-reload|configtest}"
        exit 2
esac