{"id":1462,"date":"2026-04-03T01:39:02","date_gmt":"2026-04-02T18:39:02","guid":{"rendered":"https:\/\/tyanx.com\/?p=1462"},"modified":"2026-04-03T01:42:36","modified_gmt":"2026-04-02T18:42:36","slug":"cai-dat-va-chay-website-wordpress-tren-proxmox","status":"publish","type":"post","link":"https:\/\/tyanx.com\/?p=1462","title":{"rendered":"C\u00e0i \u0111\u1eb7t v\u00e0 ch\u1ea1y Website WordPress tr\u00ean Proxmox"},"content":{"rendered":"

Ngu\u1ed3n : KazeWP<\/a><\/p>\n

A) C\u00c0I \u0110\u1eb6T WORDPRESS<\/h2>\n

1) Chu\u1ea9n b\u1ecb Proxmox \/ LXC Ubuntu 24.04<\/h4>\n

C\u1eadp nh\u1eadt h\u1ec7 th\u1ed1ng:<\/p>\n

sudo apt update && sudo apt upgrade -y<\/code><\/pre>\n
C\u00e0i m\u1ea5y g\u00f3i c\u01a1 b\u1ea3n:<\/p>\n
sudo apt install -y ca-certificates curl gnupg git openssl<\/code><\/pre>\n
N\u1ebfu \u0111ang b\u1eadt UFW th\u00ec m\u1edf port web + SSH:<\/p>\n
sudo ufw allow OpenSSH\r\nsudo ufw allow 80\/tcp\r\nsudo ufw allow 443\/tcp\r\nsudo ufw allow 443\/udp\r\nsudo ufw enable\r\nsudo ufw status<\/code><\/pre>\n
L\u00fd do m\u1edf 443\/udp<\/code> l\u00e0 \u0111\u1ec3 Caddy c\u00f3 th\u1ec3 ph\u1ee5c v\u1ee5 HTTP\/3 n\u1ebfu c\u1ea5u h\u00ecnh\/container d\u00f9ng \u0111\u1ebfn.<\/p>\n
2) C\u00e0i Docker Engine chu\u1ea9n tr\u00ean Ubuntu 24.04<\/h4>\n
Ch\u1ea1y l\u1ea7n l\u01b0\u1ee3t:<\/p>\n
sudo apt remove -y docker.io docker-doc docker-compose docker-compose-v2 podman-docker containerd runc || true<\/code><\/pre>\n
Th\u00eam key v\u00e0 repo Docker:<\/p>\n
sudo install -m 0755 -d \/etc\/apt\/keyrings\r\ncurl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg | sudo gpg --dearmor -o \/etc\/apt\/keyrings\/docker.gpg\r\nsudo chmod a+r \/etc\/apt\/keyrings\/docker.gpg<\/code><\/pre>\n
echo \\\r\n  \"deb [arch=$(dpkg --print-architecture) signed-by=\/etc\/apt\/keyrings\/docker.gpg] https:\/\/download.docker.com\/linux\/ubuntu \\\r\n  $(. \/etc\/os-release && echo \"$VERSION_CODENAME\") stable\" | \\\r\n  sudo tee \/etc\/apt\/sources.list.d\/docker.list > \/dev\/null<\/code><\/pre>\n
C\u00e0i Docker + Compose plugin:<\/p>\n
sudo apt update\r\nsudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin<\/code><\/pre>\n
Ki\u1ec3m tra:<\/p>\n
sudo docker version\r\nsudo docker compose version<\/code><\/pre>\n
C\u00e1c b\u01b0\u1edbc n\u00e0y b\u00e1m theo h\u01b0\u1edbng d\u1eabn c\u00e0i Docker Engine tr\u00ean Ubuntu v\u00e0 Compose plugin ch\u00ednh th\u1ee9c.<\/p>\n
3) Cho user ch\u1ea1y Docker kh\u00f4ng c\u1ea7n sudo<\/code><\/span><\/h4>\n
sudo usermod -aG docker $USER\r\nnewgrp docker<\/code><\/pre>\n
Test:<\/p>\n
docker ps<\/code><\/pre>\n
N\u1ebfu ch\u01b0a \u0103n ngay th\u00ec logout\/login l\u1ea1i SSH m\u1ed9t l\u1ea7n.<\/p>\n
<\/h4>\n
4) Tr\u1ecf domain v\u1ec1 VPS<\/h4>\n
V\u00ed d\u1ee5 b\u1ea1n mu\u1ed1n d\u1ef1ng site blog.example.com<\/code> th\u00ec ph\u1ea3i t\u1ea1o b\u1ea3n ghi DNS A<\/code> ho\u1eb7c AAAA<\/code> tr\u1ecf v\u1ec1 IP m\u00e1y Ubuntu tr\u01b0\u1edbc. Caddy ch\u1ec9 auto HTTPS ngon khi domain public tr\u1ecf \u0111\u00fang v\u1ec1 m\u00e1y v\u00e0 m\u00e1y m\u1edf c\u1ed5ng 80\/443. <\/span><\/p>\n
Check nhanh:<\/p>\n
ping blog.example.com<\/code><\/pre>\n
IP tr\u1ea3 v\u1ec1 ph\u1ea3i l\u00e0 IP Proxmox c\u1ee7a b\u1ea1n.<\/p>\n
5) Clone KazeWP<\/h4>\n
cd \/opt\r\nsudo git clone https:\/\/github.com\/10h30\/kazewp.git\r\nsudo chown -R $USER:$USER \/opt\/kazewp\r\ncd \/opt\/kazewp\r\nchmod +x kazewp.sh\r\nfind . -type f -name \"*.sh\" -exec chmod +x {} \\;<\/code><\/pre>\n
6) Ch\u1ea1y KazeWP l\u1ea7n \u0111\u1ea7u<\/h4>\n
Repo h\u1ed7 tr\u1ee3 2 ki\u1ec3u:<\/p>\n
    \n
  • ch\u1ea1y menu t\u01b0\u01a1ng t\u00e1c: .\/kazewp.sh<\/code><\/li>\n
  • ch\u1ea1y th\u1eb3ng: .\/kazewp.sh install <domain><\/code><\/li>\n<\/ul>\n
    .\/kazewp.sh install blog.example.com<\/code><\/pre>\n
    Trong l\u00fac c\u00e0i, script s\u1ebd h\u1ecfi c\u00e1c th\u00f4ng tin ki\u1ec3u:<\/p>\n
      \n
    • domain<\/li>\n
    • email admin<\/li>\n
    • username admin<\/li>\n
    • password admin<\/li>\n
    • site title<\/li>\n<\/ul>\n
      Theo m\u00f4 t\u1ea3 repo, KazeWP s\u1ebd t\u1ef1:<\/p>\n
        \n
      • t\u1ea1o site WordPress ri\u00eang trong container,<\/li>\n
      • t\u1ea1o database MariaDB ri\u00eang,<\/li>\n
      • c\u1ea5u h\u00ecnh Caddy reverse proxy,<\/li>\n
      • d\u00f9ng Bash \u0111\u1ec3 t\u1ef1 \u0111\u1ed9ng h\u00f3a t\u1ea1o\/x\u00f3a\/list site<\/li>\n<\/ul>\n
        7) Sau khi install xong, ki\u1ec3m tra container<\/h4>\n
        Xem container \u0111ang ch\u1ea1y:<\/p>\n
        docker ps<\/code><\/pre>\n
        docker logs <ten-container> --tail 100<\/code><\/pre>\n
        N\u1ebfu KazeWP d\u1ef1ng th\u00e0nh c\u00f4ng, b\u1ea1n s\u1ebd c\u00f3 \u00edt nh\u1ea5t c\u00e1c ph\u1ea7n ki\u1ec3u:<\/p>\n
          \n
        • Caddy<\/li>\n
        • WordPress container cho domain<\/li>\n
        • MariaDB ri\u00eang cho domain<\/li>\n<\/ul>\n
          8) Truy c\u1eadp domain \u0111\u1ec3 ho\u00e0n t\u1ea5t \/ ki\u1ec3m tra<\/h4>\n
          M\u1edf tr\u00ecnh duy\u1ec7t:<\/p>\n
          https:\/\/blog.example.com<\/code><\/pre>\n
          9) C\u00e1c l\u1ec7nh qu\u1ea3n l\u00fd h\u1eb1ng ng\u00e0y<\/h4>\n
          .\/kazewp.sh list\r\n.\/kazewp.sh stop blog.example.com\r\n.\/kazewp.sh start blog.example.com\r\n.\/kazewp.sh restart blog.example.com\r\n.\/kazewp.sh delete blog.example.com\r\n.\/kazewp.sh delete all<\/code><\/pre>\n
           <\/p>\n
          10) B\u1ed9 l\u1ec7nh full, copy-paste<\/h4>\n
          sudo apt update && sudo apt upgrade -y\r\nsudo apt install -y ca-certificates curl gnupg git openssl\r\n\r\nsudo ufw allow OpenSSH\r\nsudo ufw allow 80\/tcp\r\nsudo ufw allow 443\/tcp\r\nsudo ufw allow 443\/udp\r\nsudo ufw enable\r\n\r\nsudo apt remove -y docker.io docker-doc docker-compose docker-compose-v2 podman-docker containerd runc || true\r\n\r\nsudo install -m 0755 -d \/etc\/apt\/keyrings\r\ncurl -fsSL https:\/\/download.docker.com\/linux\/ubuntu\/gpg | sudo gpg --dearmor -o \/etc\/apt\/keyrings\/docker.gpg\r\nsudo chmod a+r \/etc\/apt\/keyrings\/docker.gpg\r\n\r\necho \"deb [arch=$(dpkg --print-architecture) signed-by=\/etc\/apt\/keyrings\/docker.gpg] https:\/\/download.docker.com\/linux\/ubuntu $(. \/etc\/os-release && echo \"$VERSION_CODENAME\") stable\" | sudo tee \/etc\/apt\/sources.list.d\/docker.list > \/dev\/null\r\n\r\nsudo apt update\r\nsudo apt install -y docker-ce docker-ce-cli containerd.io docker-buildx-plugin docker-compose-plugin\r\n\r\nsudo usermod -aG docker $USER\r\nnewgrp docker\r\n\r\ncd \/opt\r\nsudo git clone https:\/\/github.com\/10h30\/kazewp.git\r\nsudo chown -R $USER:$USER \/opt\/kazewp\r\ncd \/opt\/kazewp\r\nchmod +x kazewp.sh\r\nfind . -type f -name \"*.sh\" -exec chmod +x {} \\;\r\n\r\n.\/kazewp.sh install blog.example.com<\/code><\/pre>\n
           <\/p>\n
          B) Th\u00eam DNS cho web m\u1edbi tr\u00ean Cloudflare<\/h2>\n
          Tr\u01b0\u1eddng h\u1ee3p th\u00eam subdomain blog.example.com<\/code><\/span><\/h4>\n
          V\u00e0o Cloudflare > DNS > Add record:<\/p>\n
            \n
          • Type: A<\/code><\/li>\n
          • Name: blog<\/code><\/li>\n
          • IPv4 address: 99.199.199.238<\/code> (ip wan)<\/li>\n
          • Proxy status: DNS only<\/strong><\/li>\n
          • TTL: Auto<\/code><\/li>\n<\/ul>\n
            Ki\u1ec3m tra DNS \u0111\u00e3 \u0103n ch\u01b0a<\/h4>\n
            Tr\u00ean Ubuntu ho\u1eb7c m\u00e1y kh\u00e1c, ch\u1ea1y:<\/p>\n
            nslookup blog.example.com<\/code><\/pre>\n
            Ph\u1ea3i ra:<\/p>\n
            99.199.199.238 <\/code><\/pre>\n
             <\/p>\n
            D. C\u00e0i th\u00eam web m\u1edbi<\/h3>\n
            SSH v\u00e0o Ubuntu:<\/p>\n
            cd \/opt\/kazewp\r\n.\/kazewp.sh install blog.example.com<\/code><\/pre>\n
            Sau \u0111\u00f3 script s\u1ebd h\u1ecfi c\u00e1c th\u00f4ng tin nh\u01b0:<\/p>\n
              \n
            • domain<\/li>\n
            • admin username<\/li>\n
            • admin password<\/li>\n
            • admin email<\/li>\n
            • site title<\/li>\n<\/ul>\n
              Sau khi c\u00e0i xong, ki\u1ec3m tra container<\/p>\n
              docker ps --format \"table {{.Names}}\\t{{.Ports}}\\t{{.Status}}\"<\/code><\/pre>\n
              Ti\u1ebfp t\u1ee5c xem danh s\u00e1ch site:<\/p>\n
              cd \/opt\/kazewp\r\n.\/kazewp.sh list<\/code><\/pre>\n
               <\/p>\n
              C) DDNS cho Cloudflare cho WAN IP tr\u00ean Mikrotik<\/h2>\n
              1) L\u1ea5y th\u00f4ng tin c\u1ea7n thi\u1ebft t\u1eeb Cloudflare<\/h4>\n
              B\u1ea1n c\u1ea7n 4 th\u1ee9:<\/p>\n
              A. API Token<\/h5>\n
              V\u00e0o Cloudflare t\u1ea1o API Token<\/strong> m\u1edbi v\u1edbi quy\u1ec1n:<\/p>\n
                \n
              • Zone - DNS - Edit<\/code><\/li>\n
              • Zone - Zone - Read<\/code><\/li>\n<\/ul>\n
                Scope:<\/p>\n
                  \n
                • ch\u1ec9 \u0111\u00fang zone (blog.example.com)<\/li>\n<\/ul>\n
                  Kh\u00f4ng d\u00f9ng Global API Key n\u1ebfu kh\u00f4ng c\u1ea7n.<\/p>\n
                  B. Record ID<\/h5>\n
                  Hai c\u00e1i n\u00e0y l\u1ea5y b\u1eb1ng API.<\/p>\n
                  B\u1ea1n thay:<\/p>\n
                    \n
                  • YOUR_TOKEN<\/code><\/li>\n
                  • YOUR_ZONE_ID<\/code><\/li>\n<\/ul>\n
                    curl -X GET \"https:\/\/api.cloudflare.com\/client\/v4\/zones\/YOUR_ZONE_ID\/dns_records?type=A\" \\\r\n  -H \"Authorization: Bearer YOUR_TOKEN\" \\\r\n  -H \"Content-Type: application\/json\"<\/code><\/pre>\n
                     <\/p>\n
                    C\u00e1ch l\u1ea5y zone_id<\/code> v\u00e0 record_id<\/code><\/strong><\/p>\n
                    C\u00f3 th\u1ec3 d\u00f9ng 2 l\u1ec7nh n\u00e0y tr\u00ean Ubuntu\/Windows c\u00f3 curl:<\/p>\n
                    L\u1ea5y zone:<\/p>\n
                    curl -X GET \"https:\/\/api.cloudflare.com\/client\/v4\/zones?name=blog.example.com\" \\\r\n  -H \"Authorization: Bearer YOUR_TOKEN\" \\\r\n  -H \"Content-Type: application\/json\"<\/code><\/pre>\n
                    L\u1ea5y record:<\/p>\n
                    curl -X GET \"https:\/\/api.cloudflare.com\/client\/v4\/zones\/YOUR_ZONE_ID\/dns_records?type=A&name=blog.example.com\" \\\r\n  -H \"Authorization: Bearer YOUR_TOKEN\" \\\r\n  -H \"Content-Type: application\/json\"<\/code><\/pre>\n
                     <\/p>\n
                    2) T\u1ea1o script update Cloudflare tr\u00ean MikroTik<\/h4>\n
                    V\u00e0o:<\/p>\n
                    System \u2192 Scripts \u2192 Add<\/strong><\/p>\n
                    \u0110\u1eb7t t\u00ean:
                    cf-ddns-website<\/code><\/p>\n
                    N\u1ed9i dung script n\u00e0y:<\/p>\n
                    :local cfToken \"PASTE_CLOUDFLARE_API_TOKEN_HERE\"\r\n:local zoneId \"PASTE_ZONE_ID_HERE\"\r\n:local recordRoot \"PASTE_RECORD_ID_TYANX_COM_HERE\"\r\n:local recordWww \"PASTE_RECORD_ID_WWW_HERE\"\r\n\r\n:local rootName \"tyanx.com\"\r\n:local wwwName \"www.tyanx.com\"\r\n\r\n:local wanIP \"\"\r\n:local ddnsHost \"hg309kheq7q.sn.mynetname.net\"\r\n\r\n# Lay IP public tu DDNS hostname cua MikroTik\r\n:do {\r\n    :set wanIP [:resolve $ddnsHost]\r\n} on-error={\r\n    :log error \"CF-DDNS: khong resolve duoc DDNS hostname\"\r\n    :error \"resolve failed\"\r\n}\r\n\r\n:if ([:len $wanIP] = 0) do={\r\n    :log error \"CF-DDNS: WAN IP rong\"\r\n    :error \"empty wan ip\"\r\n}\r\n\r\n:global lastCloudflareIP\r\n\r\n:if ($lastCloudflareIP = $wanIP) do={\r\n    :log info (\"CF-DDNS: IP khong doi, bo qua: \" . $wanIP)\r\n    :return\r\n}\r\n\r\n:local urlRoot (\"https:\/\/api.cloudflare.com\/client\/v4\/zones\/\" . $zoneId . \"\/dns_records\/\" . $recordRoot)\r\n:local urlWww  (\"https:\/\/api.cloudflare.com\/client\/v4\/zones\/\" . $zoneId . \"\/dns_records\/\" . $recordWww)\r\n\r\n:local headers (\"Authorization: Bearer \" . $cfToken . \",Content-Type: application\/json\")\r\n\r\n:local bodyRoot (\"{\\\"type\\\":\\\"A\\\",\\\"name\\\":\\\"\" . $rootName . \"\\\",\\\"content\\\":\\\"\" . $wanIP . \"\\\",\\\"ttl\\\":1,\\\"proxied\\\":false}\")\r\n:local bodyWww  (\"{\\\"type\\\":\\\"A\\\",\\\"name\\\":\\\"\" . $wwwName  . \"\\\",\\\"content\\\":\\\"\" . $wanIP . \"\\\",\\\"ttl\\\":1,\\\"proxied\\\":false}\")\r\n\r\n:do {\r\n    \/tool fetch url=$urlRoot http-method=put http-header-field=$headers http-data=$bodyRoot output=none\r\n    \/tool fetch url=$urlWww  http-method=put http-header-field=$headers http-data=$bodyWww  output=none\r\n    :set lastCloudflareIP $wanIP\r\n    :log info (\"CF-DDNS: da cap nhat Cloudflare -> \" . $wanIP)\r\n} on-error={\r\n    :log error \"CF-DDNS: loi khi goi Cloudflare API\"\r\n}<\/code><\/pre>\n
                    Ch\u1ea1y test ngay<\/p>\n
                    \/system script run cf-ddns-website<\/code><\/pre>\n
                     <\/p>\n
                    3) T\u1ea1o scheduler ch\u1ea1y t\u1ef1 \u0111\u1ed9ng<\/h4>\n
                    V\u00e0o:<\/p>\n
                    System \u2192 Scheduler \u2192 Add<\/strong><\/p>\n
                    \u0110\u1eb7t nh\u01b0 n\u00e0y:<\/p>\n
                      \n
                    • Name: cf-ddns-website-scheduler<\/code><\/li>\n
                    • Interval: 00:05:00<\/code><\/li>\n
                    • On Event:<\/li>\n<\/ul>\n
                      \/system script run cf-ddns-website<\/code><\/pre>\n
                      Nh\u01b0 v\u1eady c\u1ee9 5 ph\u00fat router s\u1ebd check 1 l\u1ea7n.
                      Mu\u1ed1n nhanh h\u01a1n c\u00f3 th\u1ec3 \u0111\u1ec3 00:01:00<\/code>.<\/p>\n
                      Ch\u1ea1y test ngay<\/p>\n
                      nslookup blog.example.com\r\nnslookup www.blog.example.com<\/code><\/pre>\n
                       <\/p>\n
                      Nh\u01b0 v\u1eady l\u00e0 \u0111\u00e3 xong !<\/p>\n","protected":false},"excerpt":{"rendered":"Ngu\u1ed3n : KazeWP A) C\u00c0I \u0110\u1eb6T WORDPRESS 1) Chu\u1ea9n b\u1ecb Proxmox \/ LXC Ubuntu 24.04 C\u1eadp nh\u1eadt h\u1ec7…","protected":false},"author":1,"featured_media":1469,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"csco_singular_sidebar":"","csco_page_header_type":"","csco_page_load_nextpost":"","footnotes":""},"categories":[18,2,14],"tags":[48,50,49],"class_list":{"0":"post-1462","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-wordpress","8":"category-self-hosted","9":"category-virtualization","10":"tag-proxmox","11":"tag-self-hosted","12":"tag-wordpress","13":"cs-entry"},"_links":{"self":[{"href":"https:\/\/tyanx.com\/index.php?rest_route=\/wp\/v2\/posts\/1462","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tyanx.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tyanx.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tyanx.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tyanx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1462"}],"version-history":[{"count":11,"href":"https:\/\/tyanx.com\/index.php?rest_route=\/wp\/v2\/posts\/1462\/revisions"}],"predecessor-version":[{"id":1474,"href":"https:\/\/tyanx.com\/index.php?rest_route=\/wp\/v2\/posts\/1462\/revisions\/1474"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tyanx.com\/index.php?rest_route=\/wp\/v2\/media\/1469"}],"wp:attachment":[{"href":"https:\/\/tyanx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1462"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tyanx.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1462"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tyanx.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1462"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}