#所有访问80端口的请求都重写到443
　　　　server {
            listen 80;
            server_name xxx.com www.xxx.com;
            rewrite ^(.*)$  https://$host$1 permanent; 
        }
    
        server {
            listen      443 ssl;
            server_name  xxx.com www.xxx.com;
            #ssl on;
            ssl_certificate xxx.crt;　　#crt文件
            ssl_certificate_key xxx.key; #key文件
            ssl_session_timeout 5m;
            ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
            ssl_ciphers ECDHE-RSA-AES128-GCM-SHA256:HIGH:!aNULL:!MD5:!RC4:!DHE;
            ssl_prefer_server_ciphers on;
    
            #charset koi8-r;
            root  /var/www/html;
    
            location / { 
                index  index.html index.htm index.php;
　　　　　　　　　　#tp5的路由重新
                if (!-e $request_filename) {
                    rewrite  ^(.*)$  /index.php?s=/$1  last;
                    break;
                }
            }
            location ~ \.php(.*)$ {
                fastcgi_pass   127.0.0.1:9000;
                fastcgi_index  index.php;
                fastcgi_split_path_info  ^((?U).+\.php)(/?.+)$;
                fastcgi_param  SCRIPT_FILENAME  $document_root$fastcgi_script_name;
                fastcgi_param  PATH_INFO  $fastcgi_path_info;
                fastcgi_param  PATH_TRANSLATED  $document_root$fastcgi_path_info;
                include        fastcgi_params;
            }   
            location ~ /\.ht {
                deny  all;
            }
        }

$cmd = "echo '$str' > /etc/nginx/conf.d/$file_name";
exec($cmd);

exec('service nginx restart');

## Next comes the main part: which users can run what software on 
## which machines (the sudoers file can be shared between multiple
## systems).
## Syntax:
##
##     user    MACHINE=COMMANDS
##
## The COMMANDS section may have other options added to it.
##
## Allow root to run any commands anywhere 
root    ALL=(ALL)     ALL
apache ALL=(root) NOPASSWD: /usr/sbin/service nginx restart

exec('sudo service nginx restart');

at 命令参数
at [参数] [时间]
-m：当指定的任务被完成之后，将给用户发送邮件，即使没有标准输出
-I：atq的别名
-d：atrm的别名
-v：显示任务将被执行的时间
-c：打印任务的内容到标准输出
-V：显示版本信息
-q：使用指定队列
-f：从指定文件读入任务，而不是从标准输入读入
-t：一时间参数的形式提交要运行的任务

//exec('sudo service nginx restart');
exec(at -f "xxx.txt" now + 3 min); //3分钟后执行一次xxx.txt文件里面的命令,xxx.txt里面就可以放service nginx restart了

#打开 /etc/passwd，把apache修改为如下：
apache:x:48:48:Apache:/usr/share/httpd:/bin/bash