Creating a WordPress website with a MySQL® database cluster using the management console
To create an infrastructure for a WordPress website with a MySQL® database cluster using the Yandex Cloud management console:
To set up a WordPress website with a MySQL® cluster:
- Get your cloud ready.
- Create a VM for WordPress.
- Create a MySQL® DB cluster.
- Configure Nginx web server.
- Install WordPress and additional components.
- Complete WordPress configuration.
- Configure DNS.
- Test the website.
If you no longer need the resources you created, delete them.
Get your cloud ready
Sign up for Yandex Cloud and create a billing account:
- Navigate to the management console
and log in to Yandex Cloud or create a new account. - On the Yandex Cloud Billing
page, make sure you have a billing account linked and it has theACTIVEorTRIAL_ACTIVEstatus. If you do not have a billing account, create one and link a cloud to it.
If you have an active billing account, you can navigate to the cloud page
Learn more about clouds and folders here.
Required paid resources
-
VM instance: use of computing resources, storage, public IP address, and OS (see Compute Cloud pricing).
-
Managed Service for MySQL® cluster: computing resources allocated to hosts, size of storage and backups (see Managed Service for MySQL® pricing).
-
Public IP addresses if public access is enabled for cluster hosts (see Virtual Private Cloud pricing).
-
Public DNS queries and DNS zones (see Cloud DNS pricing).
Create a VM for WordPress
To create a VM for WordPress:
-
On the folder page in the management console
, click Create resource and selectVirtual machine instance. -
Under Boot disk image, select a public image: Debian 11, Ubuntu 20.04 LTS, or CentOS 7.
-
Under Location, select the availability zone where your VM will reside. If you are not sure which one to choose, leave the default.
-
Under Computing resources, navigate to the
Customtab and specify the platform, number of vCPUs, and amount of RAM:- Platform:
Intel Ice Lake - vCPU:
2 - Guaranteed vCPU performance:
20% - RAM:
2 GB
- Platform:
-
Under Network settings:
- In the Subnet field, select the network and subnet to connect your VM to. If the required network or subnet is not there, create it.
- Under Public IP address, keep
Autofor the VM to get a random external IP address from the Yandex Cloud pool, or select a static address from the list if you had reserved one.
-
Under Access, select SSH key and specify the VM access data:
- In the Login field, enter a username, e.g.,
yc-user. Do not userootor other reserved usernames. To perform operations requiring root privileges, use thesudocommand. -
In the SSH key field, select the SSH key saved in your organization user profile.
If there are no SSH keys in your profile or you want to add a new key:
-
Click Add key.
-
Enter a name for the SSH key.
-
Select one of the following:
-
Enter manually: Paste the contents of the public SSH key. You need to create an SSH key pair on your own. -
Load from file: Upload the public part of the SSH key. You need to create an SSH key pair on your own. -
Generate key: Automatically create an SSH key pair.When adding a new SSH key, an archive containing the key pair will be created and downloaded. In Linux or macOS-based operating systems, unpack the archive to the
/home/<user_name>/.sshdirectory. In Windows, unpack the archive to theC:\Users\<user_name>/.sshdirectory. You do not need additionally enter the public key in the management console.
-
-
Click Add.
The system will add the SSH key to your organization user profile. If the organization has disabled the ability for users to add SSH keys to their profiles, the added public SSH key will only be saved in the user profile inside the newly created resource.
-
- In the Login field, enter a username, e.g.,
-
Under General information, specify the VM name:
wp-mysql-tutorial-web.Alert
Once created, the VM gets an IP address and a host name (FQDN) for connections. If you selected
No addressin the Public IP address field, you will not be able to access the VM from the internet. -
Click Create VM.
It may take a few minutes to create your VM. When the VM status changes to RUNNING, proceed to the next step.
Once created, the VM is assigned a public IP address and a host name (FQDN). You can use them for SSH access.
Create a MySQL® DB cluster
To create a MySQL® DB cluster:
-
On the folder page in the management console
, click Create resource and select MySQL cluster. -
In the Cluster name field, enter the name:
wp-mysql-tutorial-db-cluster. -
Under Host class, select
s3-c2-m8. -
Under Storage size, specify:
10 GB. -
Under Database:
- In the DB name field, enter
wp-mysql-tutorial-db. - In the Username field, enter
wordpress. - In the Password field, enter the password you will use to access the DB.
- In the DB name field, enter
-
Under Network settings, select the network your cluster will be connected to.
-
Under Hosts, add two more hosts in the other availability zones. When creating hosts, do not enable Public access for them.
-
Under DBMS settings, click Settings.
In the default_authentication_plugin field, select
mysql_native_passwordand click Save. -
Click Create cluster.
Creating a DB cluster may take a few minutes.
Configure the Nginx web server
After the wp-mysql-tutorial-web VM's status changes to RUNNING:
-
Under Network on the VM page in the management console
, find the VM's public IP address. -
Connect to the VM via SSH. You can use the
sshutility in Linux or macOS, or PuTTY in Windows.The recommended authentication method when connecting over SSH is using a key pair. Make sure to configure the generated key pair so that the private key matches the public key sent to the VM.
-
Install Nginx, PHP-FPM process manager, and additional packages:
Debian/UbuntuCentOSsudo apt-get update sudo apt-get install -y nginx-full php-fpm php-mysql sudo systemctl enable nginxsudo yum -y install epel-release sudo yum -y install nginx sudo rpm -Uvh http://rpms.famillecollet.com/enterprise/remi-release-7.rpm sudo yum -y --enablerepo=remi-php74 install php php-mysql php-xml php-soap php-xmlrpc php-mbstring php-json php-gd php-mcrypt sudo yum -y --enablerepo=remi-php74 install php-fpm sudo systemctl enable nginx sudo systemctl enable php-fpm -
Use the Nginx configuration files to configure the web server:
Debian/UbuntuCentOS-
You can edit files in the
nanoeditor:sudo nano /etc/nginx/sites-available/wordpress -
Edit the file as follows:
server { listen 80 default_server; root /var/www/wordpress; index index.php; server_name <DNS-server_name>; location / { try_files $uri $uri/ =404; } error_page 404 /404.html; error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass unix:/var/run/php/php7.4-fpm.sock; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } } -
Allow launching your site:
sudo rm /etc/nginx/sites-enabled/default sudo ln -s /etc/nginx/sites-available/wordpress /etc/nginx/sites-enabled/
You can edit the files
nginx.confandwordpress.confin thenanoeditor:-
Open
nginx.conf:sudo nano /etc/nginx/nginx.conf -
Edit the file as follows:
user nginx; worker_processes auto; error_log /var/log/nginx/error.log; pid /run/nginx.pid; include /usr/share/nginx/modules/*.conf; events { worker_connections 1024; } http { log_format main '$remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log main; sendfile on; tcp_nopush on; tcp_nodelay on; keepalive_timeout 65; types_hash_max_size 2048; include /etc/nginx/mime.types; default_type application/octet-stream; include /etc/nginx/conf.d/*.conf; } -
Open
wordpress.conf:sudo nano /etc/nginx/conf.d/wordpress.conf -
Edit the file as follows:
server { listen 80 default_server; root /usr/share/nginx/wordpress/; index index.php; server_name <DNS-server_name>; location / { try_files $uri $uri/ =404; } error_page 404 /404.html; error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; fastcgi_pass 127.0.0.1:9000; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; include fastcgi_params; } }
-
Install WordPress and additional components
-
Download and unpack the latest WordPress version:
Debian/UbuntuCentOSwget https://wordpress.org/latest.tar.gz tar -xzf latest.tar.gz mv wordpress/wp-config-sample.php wordpress/wp-config.php sudo mv wordpress /var/www/wordpress sudo chown -R www-data:www-data /var/www/wordpresscurl https://wordpress.org/latest.tar.gz --output latest.tar.gz tar -xzf latest.tar.gz mv wordpress/wp-config-sample.php wordpress/wp-config.php sudo mv wordpress /usr/share/nginx/wordpress sudo chown -R nginx:nginx /usr/share/nginx/wordpress/Change the SELinux settings:
sudo semanage fcontext -a -t httpd_sys_content_t "/usr/share/nginx/wordpress(/.*)?" sudo semanage fcontext -a -t httpd_sys_rw_content_t "/usr/share/nginx/wordpress(/.*)?" sudo restorecon -R /usr/share/nginx/wordpress sudo setsebool -P httpd_can_network_connect 1 -
Get WordPress security keys:
curl --silent https://api.wordpress.org/secret-key/1.1/salt/Save the command output. You will need the keys in the next step.
-
Add the security keys to the WordPress configuration file:
wp-config.php. You can edit files in thenanoeditor:Debian/UbuntuCentOSsudo nano /var/www/wordpress/wp-config.phpsudo nano /usr/share/nginx/wordpress/wp-config.phpReplace the configuration section for the values from the previous step:
define('AUTH_KEY', 't vz,|............R lZ5]'); define('SECURE_AUTH_KEY', '@r&pPD............dK-A%='); define('LOGGED_IN_KEY', '%6TuLl............9>/dNE'); define('NONCE_KEY', 'DO(u.H............$?ja-e'); define('AUTH_SALT', '|G Vo<............Xeb.~y'); define('SECURE_AUTH_SALT', 'Y5tIYA............7Lxf8J'); define('LOGGED_IN_SALT', 'gR]>WZ............<>|;YY'); define('NONCE_SALT', '=]nQIb............HLT2:9'); -
Go to the connection configuration section for the
wp-mysql-tutorial-db-clustercluster:// ** MySQL® settings - You can get this info from your web host. ** // /** The name of the database for WordPress. */ define( 'DB_NAME', '<DB_NAME>' ); /** MySQL® database username. */ define( 'DB_USER', '<DB_USER>' ); /** MySQL® database password. */ define( 'DB_PASSWORD', '<DB_PASSWORD>' ); /** MySQL® hostname. */ define( 'DB_HOST', '<DB_HOST>' );Replace the placeholders in the file:
-
<DB_NAME>:wp-mysql-tutorial-dbDB name. -
<DB_USER>:wordpressuser name. -
<DB_PASSWORD>: Password you set when creating the database cluster. -
<DB_HOST>: MySQL® host name inXXXX-XXXXXXXXXX.mdb.yandexcloud.netformat.To find out the FQDN of your MySQL® host:
Management consoleCLI- Go to the MySQL® cluster page in the management console
. - On the Databases tab next to the DB, click
→ Connect. - Find the
mysql --host=ХХХХ-ХХХХХХХХХХ.mdb.yandexcloud.netline, whereХХХХ-ХХХХХХХХХХ.mdb.yandexcloud.netis the FQDN of the host with theMASTERrole.
Get a host list and copy the
MASTERhost'sNAME:yc managed-mysql host list --cluster-name <MySQL®>_cluster_name+------------------------+----------------------+---------+--------+-------------------+-----------+ | NAME | CLUSTER ID | ROLE | HEALTH | ZONE ID | PUBLIC IP | +------------------------+----------------------+---------+--------+-------------------+-----------+ | rc1a-...mdb.yandexcloud.net | c9quhb1l32unm1sdn0in | MASTER | ALIVE | ru-central1-a | false | | rc1b-...mdb.yandexcloud.net | c9quhb1l32unm1sdn0in | REPLICA | ALIVE | ru-central1-b | false | +------------------------+----------------------+---------+--------+-------------------+-----------+ - Go to the MySQL® cluster page in the management console
-
-
Restart Nginx and PHP-FPM:
Debian/UbuntuCentOSsudo systemctl restart nginx.service sudo systemctl restart php7.4-fpm.servicesudo systemctl restart nginx.service sudo systemctl restart php-fpm.service
Complete WordPress configuration
- Under Network on the VM page in the management console
, find the VM's public IP address. - Open the VM by entering its address in your browser.
- Select the language and click Continue.
- Fill out information to access the website:
- Enter any website name, for example,
wp-your-project. - Specify the username to be used to log in to the admin panel (for example,
admin). - Enter the password to be used to log in to the admin panel.
- Enter your email address.
- Enter any website name, for example,
- Click Install WordPress.
- If the installation is successful, click Log in.
- Log in to the website with the username and password specified in the previous steps. This will open the admin panel where you can start working with your website.
Configure DNS
If you have a registered domain name, use the Cloud DNS service to manage the domain.
The tutorial below describes configuring DNS for the example.com domain name.
Add a DNS zone
To add a public DNS zone:
Add resource records
Create DNS records in the public zone:
- Under Network on the VM page in the management console
, find the VM's public IP address. - Create an A record:
- Open the Cloud DNS section of the folder containing the
example.comDNS zone. - Select the
example.comDNS zone from the list. - Click Create record.
- Specify the record settings:
- Name: Leave empty.
- Type: Leave set to
A. - Data: Enter your VM's public address.
- TTL (in seconds) (record time to live): Keep the default value.
- Click Create.
- Open the Cloud DNS section of the folder containing the
- Create a CNAME record:
- Select the
example.comDNS zone from the list. - Click Create record.
- Specify the record settings:
- Name:
www. - Type: Select
CNAME. - Data: Enter
example.com. - TTL (in seconds) (record time to live): Keep the default value.
- Name:
- Click Create.
- Select the
Delegate the domain name
Delegation is the transfer of authority from the registrar's servers to yours. For a domain, NS resource records (ns1.yandexcloud.net and ns2.yandexcloud.net) are created.
To delegate a domain, specify its DNS servers in the registrar's account.
Delegation does not take effect immediately. Internet provider servers normally update records within 24 hours (86,400 seconds). This depends on the TTL value which specifies how long domain records are cached.
You can check domain delegation using Whoisdig utility:
dig +short NS example.com
Result:
ns2.yandexcloud.net.
ns1.yandexcloud.net.
Test the website
To test the site, enter its IP address or domain name in your browser:
http://<public_IP_of_VM>http://www.example.com
To access the WordPress control panel, use http://www.example.com/wp-admin/.
How to delete the resources you created
To stop paying for the resources you created:
If you reserved a static public IP address for the VM, delete it.