Bangun Web Server Pro di Android pake WordPress dan Cloudflare Tunnel

server {
    listen 80;
    server_name www.webkamu.com;
    root /var/namadomain/wordpress;
    index index.php index.html;

    # Optimasi Gzip biar makin ngebut
    gzip on;
    gzip_static on;
    gzip_vary on;
    gzip_proxied any;
    gzip_comp_level 5;
    gzip_min_length 100;
    gzip_buffers 16 8k;
    gzip_types
        text/plain
        text/css
        text/javascript
        text/xml
        text/x-component
        application/javascript
        application/x-javascript
        application/json
        application/xml
        application/rss+xml
        application/atom+xml
        application/vnd.ms-fontobject
        application/x-font-ttf
        application/x-font-opentype
        application/x-font-truetype
        application/wasm application/x-web-app-manifest+json
        image/svg+xml
        image/x-icon
        image/vnd.microsoft.icon
        font/ttf
        font/eot
        font/otf
        font/opentype;

    location ~* \.(svn|hg|bzr|sh|git|json|env|php_bak|sql|yaml|bak|swp|dist|passwd)$ {
        deny all;
        access_log off;
        error_log off;
        log_not_found off;
    }

    location ~* /(wp-config|wp-config-sample|config|stripe) {
        deny all;
        access_log off;
        error_log off;
        log_not_found off;
    }

    location ~* ^/swagger {
        location ~* \.(json|yaml|yml|xml|txt)$ {
            deny all;
            access_log off;
            error_log off;
            log_not_found off;
        }
        allow all;
        access_log off;
        error_log off;
        log_not_found off;
    }

    location ~* /(node_modules|backup|db|logs)/.*\.php$ {
        deny all;
        access_log off;
        error_log off;
        log_not_found off;
    }
    
    location / {
        try_files $uri $uri/ /index.php?$args;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $realip_remote_addr;
        #proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Port 443;
        access_log off;
        error_log off;
        log_not_found off;
    }

    location ~ \.php$ {
        access_log off;
        error_log off;
        log_not_found off;
        include snippets/fastcgi-php.conf;
        fastcgi_pass unix:/var/run/php/php8.4-fpm.sock;
    }
}

tunnel: <ID_TUNNEL_KAMU>
credentials-file: /root/.cloudflared/<ID_TUNNEL_KAMU>.json
metrics: 127.0.0.1:4444

ingress:
  - hostname: domainkamu.com
    service: http://127.0.0.1:80
  - service: http_status:404

cloudflared service install
sudo service cloudflared start
sudo service cloudflared status

// --- Koneksi Database ---
define( 'DB_NAME', 'wordpress_db' );
define( 'DB_USER', 'nama_user' );
define( 'DB_PASSWORD', 'password_kamu' );
define( 'DB_HOST', 'localhost' );

// --- Pengaturan URL & SSL Proxy ---
define('WP_HOME','https://www.webkamu.com');
define('WP_SITEURL','https://www.webkamu.com');
define('FS_METHOD', 'direct');

/* Cron via HTTP internal biar irit bandwidth aja */
define('WP_CRON_URL', 'http://127.0.0.1/wp-cron.php');

if ($_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') { $_SERVER['HTTPS'] = 'on'; }

id=ikymomo_chroot
name=IkyMomo Chroot Engine
version=v1.0
versionCode=1
author=IkyMomo
description=Auto-mount and start Nginx, PHP-FPM, MariaDB, and Cloudflared on Boot

#!/system/bin/sh
MODDIR=${0%/*}
CHROOT_PATH="/data/local/ubuntu"
mount -o bind /dev $CHROOT_PATH/dev
mount -o bind /dev/pts $CHROOT_PATH/dev/pts
mount -o bind /proc $CHROOT_PATH/proc
mount -o bind /sys $CHROOT_PATH/sys

#!/system/bin/sh
MODDIR=${0%/*}
CHROOT_PATH="/data/local/ubuntu"
sleep 30
chroot $CHROOT_PATH /usr/bin/env -i HOME=/root TERM=xterm PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin /bin/bash -c "service nginx start && service php8.4-fpm start && service cron start && service cloudflared start && service mariadb start"