Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsSome links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
To run Joomla on Ubuntu behind Nginx and Cloudflare, install a supported PHP runtime and database, configure Nginx to pass PHP requests to PHP-FPM, complete Joomla’s browser installer, and secure the connection from Cloudflare to your server. For production, use Cloudflare Full (strict) with a valid origin certificate; Flexible mode leaves that connection unencrypted and can create redirect loops.
This guide focuses on Joomla 6 and a self-managed Ubuntu server. Joomla’s current requirements list PHP 8.3 as supported and PHP 8.4 as recommended, Nginx 1.26 as supported and 1.29 as recommended, and MariaDB 10.6 as supported and 12.0 as recommended. Check that the Ubuntu release and package repositories you choose can provide compatible versions before installation.
As an Amazon Associate I earn from qualifying purchases.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhat do you need before installing Joomla?
Joomla needs a web server, PHP, a supported database and a database account. Nginx serves ordinary files such as images and stylesheets; PHP-FPM executes PHP code when Nginx passes it a request. The database stores Joomla’s site content and configuration. Cloudflare sits in front of the server, but it does not replace any of those application components.
For Joomla 6, the supported minimums and recommendations are not interchangeable: PHP 8.3.0, Nginx 1.26 and MariaDB 10.6 are supported, while PHP 8.4, Nginx 1.29 and MariaDB 12.0 are recommended. If you use MySQL instead of MariaDB, Joomla lists MySQL 8.0.13 as its minimum supported version. These are Joomla technical requirements, not a guarantee that a particular Ubuntu release includes those versions in its default repositories.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Check the PHP modules and limits
Joomla lists json, simplexml, dom, zlib, gd, and one of mysqlnd, pdo_mysql or pdo_pgsql among its required PHP modules. It recommends mbstring. The installation guide specifies a PHP memory limit of 256M, upload and POST limits of 64M each, and a maximum execution time of 30 seconds.
PHP settings apply to the PHP-FPM service that handles web requests; changing only a command-line PHP configuration does not necessarily change the website’s settings. After installation, verify the effective FPM configuration and restart or reload the service when you change it. Avoid exposing a public diagnostic page containing PHP configuration details.
Choose self-managed Ubuntu or managed hosting
A self-managed server gives you control over the operating system, Nginx and PHP configuration, but makes you responsible for maintenance and recovery. Managed Joomla hosting can transfer some server operations to a provider; the exact division of responsibilities depends on the plan.
| Decision area | Self-managed Ubuntu | Managed Joomla hosting |
|---|---|---|
| Root access and configuration | You control the server and can configure Nginx, PHP-FPM and system services. | Control varies by provider and plan; root access and configuration permissions are not established here. |
| Patching and upgrades | You are responsible for operating-system, web-server, PHP, database and Joomla maintenance. | Provider responsibilities vary; confirm which components are patched and who performs upgrades before choosing. |
| Backup and restore | You must arrange database and file backups and test how to restore them. | Backup frequency, retention and restore assistance vary; check the actual service terms. |
| Monitoring and support | You arrange monitoring and diagnose server issues, unless you separately contract support. | Monitoring and support scope vary by provider and plan. |
| Total operating cost | Not stated; it depends on server resources, support, backups and the time you spend operating it. | Not stated; it depends on the hosting plan and any add-ons. No comparable cost is established here. |
Self-management is most suitable when you can maintain a Linux server and have a recovery plan. Managed hosting may be a better fit if you do not want to administer the operating system, but verify the provider’s backup and support commitments rather than assuming they are included.
How do you prepare Ubuntu and install the web stack?
Start with a supported Ubuntu server, a domain you control and a way to administer the host securely. Apply available operating-system updates, then install Nginx, PHP-FPM with Joomla’s required modules, and either MariaDB or MySQL. Package names and available versions depend on the Ubuntu release and configured repositories, so confirm the installed versions against Joomla’s requirements.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
- Update the host. Use Ubuntu’s package manager to refresh package metadata and install available security and software updates. Reboot if an update requires it, then reconnect before continuing.
- Install Nginx, PHP-FPM and the database server. Select a PHP-FPM version supported by your Joomla release. Add the PHP packages that provide the listed modules; on Ubuntu, module names may be grouped into packages, so check the package contents and confirm the extensions are enabled for FPM.
- Check service status. Confirm that Nginx, PHP-FPM and the database service start successfully. If a service fails, inspect that service’s system log before proceeding; a missing package, version mismatch or configuration error should be fixed before the site is deployed.
- Set Joomla’s PHP limits. Configure the FPM PHP settings for
memory_limit = 256M,upload_max_filesize = 64M,post_max_size = 64Mandmax_execution_time = 30. Ensure the POST limit is not lower than the upload limit. Reload or restart PHP-FPM after editing its configuration.
Keep system administration separate from the Joomla site account. Do not expose database administration tools or PHP-FPM directly to the public internet as part of this setup.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
How do you create a Joomla database and user?
Create a database dedicated to this Joomla site and a separate database user with access only to that database. Record the database name, username, password and database host; the browser installer will ask for these details. For a database on the same server, the host is commonly configured as a local connection, but use the connection value appropriate to your database setup.
- Open a database administrator session using the secure local method configured for your MariaDB or MySQL installation.
- Create a database using a name you can identify later. Choose a character set and collation appropriate for the Joomla version and database server; do not reuse a database that contains unrelated applications.
- Create a unique user with a strong password. Grant that account the privileges Joomla needs on its own database, rather than granting broad administrative privileges across the database server.
- Test that the new account can connect to the intended database, then store its credentials in a secure password manager or secrets store. Do not place the password in a publicly readable web directory.
The exact SQL syntax and authentication defaults can vary between MariaDB and MySQL releases. Use the database server’s documentation for the installed version, and confirm the account can connect before launching Joomla’s installer.
How do you place Joomla files on the server?
Download the current Joomla package from Joomla’s official download path, transfer it to the Ubuntu host and extract it into the document root for the domain. The web server must be able to read the application files, while only the directories Joomla needs to write should be writable by the web-server account.
- Create a document root dedicated to the site, for example a directory under
/var/www/named for the domain. Keep it separate from other websites on the same host. - Upload and extract the Joomla package into that directory so the application’s entry point is at the document root, not nested one directory deeper than the Nginx configuration expects.
- Set ownership and permissions deliberately. Nginx and PHP-FPM need read access to application files; Joomla’s writable paths need narrowly scoped write access. Do not make the entire site world-writable as a shortcut.
- Check that the extracted files belong to the intended site and that the PHP-FPM process can access the paths it needs. Incorrect ownership often shows up later as failed media uploads, extension installation errors or permission-denied messages.
Joomla’s installation guide requires the package to be on the server and database connection details to be available before starting the browser installer. The successful production installation removes the installation folder; do not try to preserve it for routine administration.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
How do you configure Nginx to run Joomla through PHP-FPM?
Create an Nginx server block for the domain and point its document root at the directory containing Joomla’s files. Configure Nginx to serve existing static files directly and forward PHP requests to the active PHP-FPM Unix socket using FastCGI parameters. The socket’s filename depends on the PHP-FPM version and Ubuntu packages installed on the server.
Build the virtual host
The following is a configuration outline, not a complete TLS certificate setup. Replace the example domain and filesystem paths with the values for your server, and use the actual socket path shown by your PHP-FPM installation.
server {
listen 80;
server_name example.com www.example.com;
root /var/www/example.com;
index index.php index.html;
location / {
try_files $uri $uri/ /index.php?$args;
}
location ~ .php$ {
try_files $uri =404;
include fastcgi_params;
fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
fastcgi_pass unix:/run/php/php8.3-fpm.sock;
}
}Use the socket path for the installed FPM service; do not assume the example path exists on your host. The try_files fallback routes application paths to Joomla’s front controller when a matching static file is not present. Test the configuration before reloading Nginx, and review the error log if the configuration test fails.
Enable and verify the site configuration
- Save the server block in the Nginx site configuration location used by your Ubuntu installation.
- Enable the site using the method expected by that Nginx layout, and ensure another default server block will not capture requests for the domain first.
- Run Nginx’s configuration test. Correct syntax errors or missing paths before reloading the service.
- Confirm DNS resolves the domain to the server and that the firewall permits the traffic needed for the site. Then request the domain and check that Nginx returns the expected response.
- Once TLS is configured, make the HTTP and HTTPS server blocks consistent: both should use the same site root and PHP-FPM handling, with HTTP redirected to HTTPS only after the HTTPS origin works.
A web-server error page, a blank response or a download prompt instead of a Joomla page usually means the request is reaching the wrong server block, PHP-FPM is unavailable, or the FastCGI configuration is incomplete. Check the Nginx error log and PHP-FPM service log; do not troubleshoot by granting broader file permissions without identifying the failing path.
How do you finish Joomla’s browser installation?
After DNS points the domain at the server and Nginx can serve the extracted package, open the site in a browser. Joomla’s installer collects the site name, super-user account and database connection details, then completes the application setup.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
- Enter a site name and create the administrator account. Use a unique password and an account name that is not easy to guess.
- Enter the database type, host, database name, database username and password you created. The database type must match the server you installed.
- Review any installer warnings about PHP requirements, connectivity or permissions. Correct the underlying configuration rather than ignoring a warning that affects installation or security.
- Complete installation and confirm Joomla reports success. The production installer removes its installation folder on success.
- Open the public site and the administrator interface. Test a login, save a change, and verify that an image or other media upload works before treating the installation as ready.
If Joomla cannot connect to the database, recheck the host, database name, username, password and privileges individually. If installation fails during file creation, check ownership and the exact writable directory rather than making every application file writable.
Which Cloudflare SSL mode should you use with Nginx?
Use Full (strict) for production when the origin server has an unexpired certificate whose hostname matches the domain. It encrypts both the visitor-to-Cloudflare and Cloudflare-to-origin connections and validates the origin certificate. Cloudflare says to choose Full (strict) whenever possible, with an exception noted for Enterprise customers in its SSL/TLS documentation.
| Cloudflare mode | Visitor to Cloudflare | Cloudflare to origin | Certificate validation and practical risk |
|---|---|---|---|
| Flexible | Encrypted | HTTP, not encrypted | Does not validate an origin certificate for the origin connection. Cloudflare warns that an origin HTTPS redirect combined with Flexible causes a redirect loop; it is not the preferred mode for sensitive or personalized sites. |
| Full | Encrypted | HTTPS, encrypted | Uses HTTPS to the origin but does not provide the strict certificate validation of Full (strict). Use a valid certificate and prefer strict validation for production. |
| Full (strict) | Encrypted | HTTPS, encrypted | Validates that the origin certificate is unexpired and matches the hostname; Cloudflare accepts a publicly trusted certificate or a Cloudflare Origin CA certificate. |
The mode governs two separate connections. A working visitor-side HTTPS connection alone does not prove that Cloudflare is using HTTPS to your server. Flexible encrypts only the first leg; Cloudflare’s guidance recommends Full or Full (strict) for sites handling sensitive or personalized data.
Install and verify the origin certificate first
- Obtain an origin certificate suitable for the domain. Its hostname must match the name Cloudflare uses to reach the server, and it must be unexpired. A publicly trusted certificate or a Cloudflare Origin CA certificate can satisfy Full (strict).
- Configure Nginx’s HTTPS server block with the certificate and private key, and retain the correct document root and PHP-FPM handling on HTTPS.
- Test the Nginx configuration, reload Nginx and confirm the origin serves the site over HTTPS. Resolve any certificate, hostname or PHP errors before changing Cloudflare’s mode.
- In Cloudflare’s zone SSL/TLS settings, choose Full (strict). Then check that the site loads through Cloudflare without a redirect loop or certificate error.
Do not select Flexible as a workaround for a missing origin certificate if Nginx redirects HTTP to HTTPS. Cloudflare reaches the origin over HTTP in Flexible mode; if the origin then redirects back to HTTPS, the two systems can repeatedly redirect the request. Fix the origin TLS setup and use Full (strict) instead.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When should you enable HTTPS redirects, rewrites and HSTS?
Enable Cloudflare’s HTTPS features only after the origin HTTPS connection is working. Cloudflare’s guidance is to install a valid origin certificate, set the zone to Full (strict), then use Always Use HTTPS and Automatic HTTPS Rewrites. HSTS should come later, after you have confirmed HTTPS works throughout the site.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
- Verify that the origin can serve HTTPS with the correct certificate and that Cloudflare is set to Full (strict).
- Enable Always Use HTTPS in Cloudflare to redirect visitor requests to HTTPS.
- Enable Automatic HTTPS Rewrites to help address mixed-content links where compatible secure resources are available.
- Test public pages, administrator pages, media and any embedded resources over HTTPS. Check that redirects land on the intended canonical HTTPS URL and that the browser does not report mixed content.
- Enable HSTS only after HTTPS is fully working. Include subdomains only if every subdomain covered by the policy supports HTTPS.
HSTS tells browsers to use HTTPS for future visits, so enabling it before all relevant hostnames and paths work securely can make access problems harder to correct for affected visitors. Treat preload as a separate, deliberate choice after the site has been verified; do not use it as a substitute for testing.
What should you test before calling the site ready?
Run a practical acceptance check through Cloudflare and, where appropriate, against the origin. A site that renders its home page can still have broken administrator access, uploads, redirects or PHP handling.
Recommended Free Tools
- Public pages: Open the home page and several content pages over canonical HTTPS. Confirm the browser shows no certificate warning.
- Administrator: Visit Joomla’s administrator URL, sign in, save a benign setting or content change, then sign out.
- Media: Upload an image through Joomla and confirm it can be displayed publicly. Upload failures often point to PHP limits or directory ownership.
- PHP: Review Nginx and PHP-FPM logs for errors. Confirm the FPM configuration has the intended memory, upload, POST and execution limits.
- Database: Confirm the site can read and save content. Keep database credentials private and do not give the Joomla account privileges over unrelated databases.
- TLS and redirects: Check that HTTP visitors reach HTTPS, Cloudflare uses Full (strict), and the origin certificate matches the hostname and remains valid.
- Content and caching: Check that CSS, images and other assets load correctly after changes. If a change appears missing, distinguish a stale cached asset from a Joomla or origin problem before changing cache behavior.
- Recovery: Make sure you know how to restore both Joomla files and the database from backups. A backup that has never been restored is not a verified recovery plan.
Do not enable HSTS preload until the site and the hostnames it covers have been verified. The amount of time needed to test is less costly than discovering that the administrator area, a subdomain or an origin redirect is incompatible after browsers have retained an HTTPS policy.
What are the common setup mistakes?
- Installing an unsupported component version: Match PHP, Nginx and database versions to Joomla’s supported requirements. A package being available from Ubuntu does not by itself establish that it meets Joomla’s version requirements.
- Configuring the wrong PHP instance: Nginx uses PHP-FPM, which may load different settings and extensions from command-line PHP. Check the FPM service and its effective configuration.
- Using a mismatched socket: If Nginx points to a PHP-FPM socket that does not exist, PHP requests fail even if PHP is installed. Identify the active socket and use that exact path.
- Making every file writable: Broad permissions may hide an ownership problem but expose the site to unnecessary risk. Give write access only where Joomla requires it.
- Choosing Flexible with an origin redirect: The origin may redirect Cloudflare’s HTTP connection back to HTTPS, producing a loop. Configure valid origin TLS and switch to Full (strict).
- Enabling HSTS too early: First verify the origin, redirects and all affected hostnames over HTTPS. Delay HSTS and preload until they are ready.
- Skipping post-install checks: Test administrator login, uploads, PHP errors and HTTPS behavior instead of assuming a successful installer means every path is healthy.
Frequently Asked Questions
Can I use MySQL instead of MariaDB for Joomla 6?
Yes. Joomla’s listed minimum supported MySQL version is 8.0.13. Check the installed server version and ensure the PHP database driver you use is available to PHP-FPM.
Does Cloudflare Full (strict) accept a Cloudflare Origin CA certificate?
Yes. Cloudflare’s guidance allows an unexpired Cloudflare Origin CA certificate for the origin connection, provided its hostname matches the domain Cloudflare uses.
Why does the Joomla installer say a PHP extension is missing when PHP is installed?
The web installer checks the PHP runtime serving the site, which is PHP-FPM in this Nginx setup. An extension available to command-line PHP may not be enabled for FPM; check the FPM module configuration and reload the service after changes.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
