Nginx + PHP-FPM Configuration

Running PHP behind Nginx with PHP-FPM is the standard production setup for WordPress, Laravel, and Symfony apps. Our generator wires up fastcgi_pass correctly so you can focus on your application.

Passing PHP to FPM

Route .php requests to the FPM socket with fastcgi_pass and include fastcgi_params. Use a location that only matches real PHP entry points.

location ~ \.php$ {
    include snippets/fastcgi-php.conf;
    fastcgi_pass unix:/run/php/php8.4-fpm.sock;
}

Framework presets

WordPress, Laravel, Symfony and Drupal each need a different front-controller rule. The generator ships presets so you do not expose stray PHP files or uploads directories that can execute code.

Open the PHP-FPM generator

Frequently asked questions

Socket or TCP for PHP-FPM?

A Unix socket is faster and avoids opening a port; use TCP only when FPM runs on another host or in a container.

Why do I get 502 Bad Gateway with PHP-FPM?

Usually the socket path in fastcgi_pass does not match the pool, or the nginx user is not allowed to connect to it. Check the FPM pool listen and listen.owner settings.

Guides

• Nginx Reverse Proxy Configuration
• Caddy Reverse Proxy Configuration
• Nginx Static Site Configuration
• Caddy Static Site Configuration
• Nginx + PHP-FPM Configuration
• Caddy + PHP-FPM Configuration
• Nginx SSL/TLS Configuration
• Nginx Load Balancer Configuration
• Caddy Load Balancer Configuration
• Nginx Rate Limiting Configuration
• Nginx Security Headers Configuration
• Caddy Security Headers Configuration
• Nginx Gzip Compression Configuration
• Nginx Caching Configuration
• Caddy HTTPS Redirect Configuration
• Nginx WebSocket Proxy Configuration
• Nginx Content-Security-Policy Header
• Block Bad Bots and Scanners in Nginx
• fail2ban for Nginx
• nginx.conf Best Practices
• Nginx Location Regex Tester
• Deploy Nginx Config with GitHub Actions
• Nginx CORS Headers Configuration
• Nginx Cache-Control Headers Configuration
• Nginx 301 Redirect Map Configuration
• robots.txt, Sitemap and security.txt
• Apache .htaccess Configuration
• Docker Compose and Dockerfile Configuration
• systemd Service and Timer Configuration
• Cron Expression Explainer
• SSH Hardening with sshd_config
• Linux Firewall Rules: ufw, nftables and iptables
• Glob Pattern Tester
• Analysing Nginx Access Logs with awk
• Subnet Mask and CIDR Calculator
• VLAN Configuration on Linux
• Static Routes and Policy Routing on Linux
• NAT and Port Forwarding with nftables
• DHCP Server Configuration
• BIND Zone File Example
• WireGuard Server and Client Configuration
• A Simple IP Plan for Your Home Network