Laravel Load Balancing

// routes/web.php

Route::get('/health', function () {
    return response()->json([
        'status' => 'ok',
        'timestamp' => now()->toISOString(),
        'server' => gethostname(),
        'php_version' => PHP_VERSION,
    ], 200);
})->withoutMiddleware([\App\Http\Middleware\VerifyCsrfToken::class]);

// Health check แบบละเอียด
Route::get('/health/detailed', function () {
    $checks = [
        'database' => checkDatabaseConnection(),
        'redis' => checkRedisConnection(),
        'storage' => checkStorageAccess(),
    ];

    $allHealthy = collect($checks)->every(fn($check) => $check === true);

    return response()->json([
        'status' => $allHealthy ? 'healthy' : 'unhealthy',
        'checks' => $checks,
        'server' => gethostname(),
        'timestamp' => now()->toISOString(),
    ], $allHealthy ? 200 : 503);
})->withoutMiddleware([\App\Http\Middleware\VerifyCsrfToken::class]);

Helper Functions

// app/helpers.php

function checkDatabaseConnection(): bool
{
    try {
        DB::connection()->getPdo();
        return true;
    } catch (\Exception $e) {
        return false;
    }
}

function checkRedisConnection(): bool
{
    try {
        Redis::connection()->ping();
        return true;
    } catch (\Exception $e) {
        return false;
    }
}

function checkStorageAccess(): bool
{
    try {
        Storage::disk('local')->put('health-check.txt', 'ok');
        Storage::disk('local')->delete('health-check.txt');
        return true;
    } catch (\Exception $e) {
        return false;
    }
}

ติดตั้ง Certbot

# Install Certbot
sudo apt install certbot python3-certbot-nginx -y

# Obtain SSL Certificate
sudo certbot --nginx -d yourdomain.com -d www.yourdomain.com

# Test Auto-renewal
sudo certbot renew --dry-run

SSL Configuration ที่แนะนำ

# /etc/nginx/conf.d/ssl-params.conf

ssl_protocols TLSv1.2 TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_ciphers ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_stapling on;
ssl_stapling_verify on;

# HSTS (optional - ใช้เมื่อแน่ใจว่าใช้ HTTPS เท่านั้น)
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;