How to Install Drupal with Nginx and Cloudflare on Ubuntu

Setting up Drupal on an Ubuntu server with Nginx and Cloudflare enhances your website’s performance, security, and scalability. This guide walks you through installing and configuring Drupal, Nginx, and Cloudflare to create a robust, high-performing web environment. Before starting, ensure you have a fresh Ubuntu server (preferably Ubuntu 20.04 or later), root or sudo access, and a registered domain name. Additionally, you’ll need a Cloudflare account to manage DNS and security settings. With these prerequisites in place, you’re ready to begin.

What You’ll Need

Ubuntu server (20.04 or later)
Root or sudo privileges
Domain name registered and pointed to your server’s IP
Cloudflare account to manage DNS and SSL
Basic knowledge of command line operations
Optional: SSH client (like PuTTY or Terminal)

Step-by-Step

Update your server packages: Begin by updating your system to ensure all packages are current.
```
sudo apt update && sudo apt upgrade -y
```

Install necessary dependencies: Install PHP, MySQL (or MariaDB), and other required packages.

sudo apt install nginx mysql-server php-fpm php-mysql php-xml php-gd php-curl php-zip php-mbstring php-xmlrpc php-soap php-intl unzip git -y

Secure MySQL: Run the security script to set root password and remove test databases.
```
sudo mysql_secure_installation
```

Create a database and user for Drupal: Log into MySQL and set up a database.

sudo mysql -u root -p
CREATE DATABASE drupaldb CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;
CREATE USER 'drupaluser'@'localhost' IDENTIFIED BY 'your_password';
GRANT ALL PRIVILEGES ON drupaldb.* TO 'drupaluser'@'localhost';
FLUSH PRIVILEGES;
EXIT;

Download and install Drupal: Download the latest Drupal core, extract it, and set permissions.

cd /var/www/
sudo wget https://www.drupal.org/download-latest/tar.gz -O drupal.tar.gz
sudo tar -xzf drupal.tar.gz
sudo mv drupal-* drupal
sudo chown -R www-data:www-data /var/www/drupal
sudo chmod -R 755 /var/www/drupal

Configure Nginx server block: Create a new server block for your domain.

sudo nano /etc/nginx/sites-available/yourdomain.com

Add the following configuration, replacing your domain and paths accordingly:

server {
    listen 80;
    server_name yourdomain.com www.yourdomain.com;

    root /var/www/drupal;
    index index.php index.html index.htm;

    location / {
        try_files $uri /index.php$is_args$args;
    }

    location @rewrite {
        rewrite ^/(.*)$ /index.php?q=$1;
    }

    location ~ \.php$ {
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php7.4-fpm.sock;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include fastcgi_params;
    }

    location ~ \.htaccess$ {
        deny all;
    }
}

Save and enable the site:

sudo ln -s /etc/nginx/sites-available/yourdomain.com /etc/nginx/sites-enabled/
sudo nginx -t
sudo systemctl reload nginx

Configure SSL with Cloudflare: Log into your Cloudflare dashboard, set your DNS records to point to your server’s IP, and toggle the SSL/TLS mode to “Full”. Enable “Always Use HTTPS” in the SSL settings. Cloudflare will handle the SSL termination, providing HTTPS security.
Set up Drupal configuration: Complete the Drupal installation via the web browser by navigating to your domain. Follow the on-screen instructions, entering your database credentials, site name, and admin account details.
Configure Cloudflare proxy and security settings: In Cloudflare, turn on the proxy (orange cloud) for your DNS records, enable Web Application Firewall (WAF), and set security levels according to your needs. This helps mitigate attacks and improve performance.
Optimize and secure your server: Install Fail2Ban, configure firewalls (ufw), and consider caching solutions like Redis or Varnish for better performance.

Common Mistakes

Not updating server packages before starting, leading to compatibility issues.
Misconfiguring DNS records in Cloudflare, causing site inaccessibility.
Using incorrect PHP socket version in Nginx config, resulting in PHP errors.
Forgetting to set correct file permissions, which can prevent Drupal from functioning properly.
Neglecting to enable Cloudflare proxy, thus missing out on security and performance benefits.

Tips

Always keep your system and Drupal core updated for security patches.
Use strong, unique passwords for database and admin accounts.
Configure Cloudflare to cache static assets aggressively for faster load times.
Regularly back up your database and website files.
Enable HTTPS in Cloudflare and ensure your server supports SSL properly.
Monitor server logs to catch errors early and troubleshoot effectively.

Troubleshooting

If your Drupal site isn’t loading correctly or you encounter errors:

Check Nginx error logs: Review /var/log/nginx/error.log for clues.
Verify PHP-FPM is running: Use systemctl status php7.4-fpm and restart if needed.
Ensure DNS records are correct in Cloudflare: Double-check A and CNAME records point to your server’s IP.
Clear cache: Clear Drupal cache via Drush or the admin interface.
Test SSL configuration: Use tools like SSL Labs to verify your HTTPS setup.

Frequently Asked Questions

1. Can I install Drupal with Nginx and Cloudflare on a shared hosting environment?

Typically, shared hosting environments don’t allow full server configuration. This setup is best suited for VPS or dedicated servers where you control the environment.

2. How do I enable HTTPS with Cloudflare?

Set your DNS records in Cloudflare to proxy mode (orange cloud) and select “Full” or “Full (strict)” SSL mode in the SSL/TLS settings. Cloudflare will handle SSL termination.

3. Do I need to install SSL certificates on my server?

If Cloudflare is set to “Full” mode, you should install a valid SSL certificate on your server for end-to-end encryption. Alternatively, Cloudflare’s flexible SSL mode can work without server certificates but is less secure.

4. How can I improve Drupal site performance on this setup?

Use caching modules, enable Cloudflare caching, optimize images, and consider server-side caching solutions like Redis or Varnish for faster response times.

5. Is it necessary to secure my database?

Yes, restrict database user privileges, use strong passwords, and consider database encryption if sensitive data is involved.

6. How do I update Drupal safely?

Use Drush or the admin interface to update core and modules, and always back up your database and files before performing updates.

Following this comprehensive guide ensures a secure, high-performing Drupal deployment on Ubuntu with Nginx and Cloudflare, giving your website the foundation it needs to thrive.

How to Install Drupal with Nginx and Cloudflare on Ubuntu

How to Install Drupal with Nginx and Cloudflare on Ubuntu

What You’ll Need

Step-by-Step

Common Mistakes

Tips

Troubleshooting

Frequently Asked Questions

1. Can I install Drupal with Nginx and Cloudflare on a shared hosting environment?

2. How do I enable HTTPS with Cloudflare?

3. Do I need to install SSL certificates on my server?

4. How can I improve Drupal site performance on this setup?

5. Is it necessary to secure my database?

6. How do I update Drupal safely?

Related