Install froxlor with debian 13 trixie and nginx 11.11.26

# install froxlor

## Install froxlor repository
apt -y install apt-transport-https lsb-release ca-certificates curl gnupg
curl -sSLo /usr/share/keyrings/deb.froxlor.org-froxlor.gpg https://deb.froxlor.org/froxlor.gpg
sh -c 'echo "deb signed-by=/usr/share/keyrings/deb.froxlor.org-froxlor.gpg https://deb.froxlor.org/debian $(lsb_release -sc) main" > /etc/apt/sources.list.d/froxlor.list'

## update
apt update && apt upgrade

## install froxlor
apt install froxlor

## change apache default port to 81, because we will use nginx later and use apache as backup server
sed -i --follow-symlinks 's/^Listen 80\b/Listen 81/; s/<VirtualHost \*:80>/<VirtualHost :81>/' /etc/apache2/ports.conf /etc/apache2/sites-enabled/.conf && apache2ctl configtest && systemctl reload apache2

## Create privileged database user
mysql -u root
CREATE USER 'froxroot'@'localhost' IDENTIFIED BY 'CHANGEME';
GRANT ALL PRIVILEGES ON . TO 'froxroot'@'localhost' WITH GRANT OPTION;
FLUSH PRIVILEGES;
EXIT;

## Install nginx
apt-get install nginx

## Add Sury PHP repo (newer PHP than stock Trixie)
apt-get install -y curl apt-transport-https ca-certificates lsb-release gnupg2
curl -sSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg
echo "deb signed-by=/usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/ $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/sury-php.list
apt-get update

## Install php8.5 (module list mirrored from php8.4)
apt-get install php8.5 php8.5-curl php8.5-mysql php8.5-gd php8.5-xml php8.5-intl php8.5-zip php8.5-mbstring php8.5-pgsql php8.5-gmp php8.5-fpm php8.5-bcmath php8.5-gnupg

## Apache: php8.5 module + disable php8.4-fpm
apt-get install -y libapache2-mod-php8.5
a2enmod php8.5
systemctl disable --now php8.4-fpm
systemctl enable  --now php8.5-fpm
systemctl status php8.5-fpm
systemctl restart apache2

## a2enmod proxy_fcgi setenvif

---

## Nginx setup — port 80 (froxlor's own vhost)

After installing php8.5-fpm, drop the stock nginx default site — froxlor generates its own vhosts into `sites-enabled` (`10_froxlor_ipandport_<IP>.80.conf` and `10_froxlor_ipandport_<IP>.443.conf`). Check what nginx has loaded:

nginx -T | grep -E "listen|server_name|root|fastcgi_pass"

`rm /etc/nginx/sites-enabled/default` and remove any hand-made proxy site (`sites-available/hel.draconarius.com` + symlink in sites-enabled) from earlier attempts — keep only froxlor's generated vhosts:

nginx -t && systemctl reload nginx

Expected shape of the froxlor vhosts (root is the panel itself, not a webroot with `/froxlor/` under it):

server {
    listen    135.181.138.163:80 default_server;
    # Froxlor default vhost
    server_name    hel.draconarius.com;
    include /etc/nginx/acme.conf;    # Let's Encrypt challenges
    root     /var/www/html/froxlor/;
    index    index.php index.html index.htm;
location ~ \.php {
    include /etc/nginx/fastcgi_params;
    fastcgi_pass unix:/var/run/php/1-froxlor.panel-hel.draconarius.com-php-fpm.socket;
    ...
}
}

php8.5-fpm pool runs as **froxlorlocal:froxlorlocal** and the panel files are `-rw-------` — that's froxlor's design; never chown/chmod them, and adding any user to `froxlorlocal` does not grant access (mode 0600 ignores group membership).

## Apache on :81 — fallback via the same fpm socket

a2enmod proxy_fcgi
cat /etc/apache2/sites-available/000-default.conf

Add inside `<VirtualHost *:81>`:

```apache
<FilesMatch \.php$>
    SetHandler "proxy:unix:/var/run/php/1-froxlor.panel-hel.draconarius.com-php-fpm.socket|fcgi://localhost/"
</FilesMatch>
apache2ctl configtest && systemctl restart apache2
Access URLs
- http://hel.draconarius.com/ → froxlor login page (nginx :80, php8.5 via fpm)
- https://hel.draconarius.com/ → same via SSL vhost (/etc/ssl/froxlor-custom/hel.draconarius.com.crt)
- http://135.181.138.163/froxlor/admin_index.php → panel (nginx)
- http://135.181.138.163:81/froxlor/admin_index.php → fallback (Apache :81 → fpm socket)
- PHP via Apache: curl http://127.0.0.1:81/php-version.php → php 8.5.12
Removed / notes
- php8.4 was purged; froxlor was removed with it and reinstalled from deb.froxlor.org/debian trixie main against the new php8.5 — froxlor now runs natively on nginx + php8.5-fpm.
- Apache :81 is now a fallback that proxies to the same fpm socket, so Apache and nginx serve the identical panel through the identical pool (a shared dependency — fpm down = both down).
- If mod_php (libapache2-mod-php8.5) ends up unused, a2dismod php8.5 to fully stop Apache from interpreting PHP directly.

https://docs.froxlor.org/latest/general/installation/apt-package.html

Anonymous

Install froxlor with debian 13 trixie and nginx 11.11.26

Information Epoch 1794457975