computers:apache_server_configuration
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
| computers:apache_server_configuration [2016/01/06 17:34] – [Apache] chkuo | computers:apache_server_configuration [2022/11/02 16:04] (current) – chkuo | ||
|---|---|---|---|
| Line 5: | Line 5: | ||
| <code bash> | <code bash> | ||
| - | sudo apt-get install apache2 | + | sudo apt install apache2 |
| - | sudo apt-get install | + | sudo apt install |
| </ | </ | ||
| - | ===== Apache | + | ===== Process control and status check ===== |
| - | To start/ | + | |
| <code bash> | <code bash> | ||
| - | sudo / | + | sudo systemctl |
| - | sudo / | + | sudo systemctl |
| - | sudo / | + | sudo systemctl |
| + | sudo systemctl status apache2 | ||
| </ | </ | ||
| - | the configuration file is: ''/ | + | ===== Configuration ===== |
| + | * the configuration file is: ''/ | ||
| + | * Directory listing | ||
| + | * To disable directory listing | ||
| + | * add '' | ||
| + | * To enable directory listing in a specific directory | ||
| + | * add a '' | ||
| + | * Within the '' | ||
| + | * Sample configuration: | ||
| <file 000-default.conf> | <file 000-default.conf> | ||
| Line 84: | Line 93: | ||
| </ | </ | ||
| + | ===== Update ===== | ||
| - | ==== directory listing ==== | + | <code bash> |
| - | * disable directory listing by specifying '' | + | # for Ubuntu 20.04.5 LTS; 2022/11/02 |
| - | * to enable directory listing in a specific directory, | + | # to update beyond Apache/2.4.41 |
| + | $ apache2 | ||
| + | Server version: Apache/2.4.41 (Ubuntu) | ||
| + | Server built: | ||
| + | $ sudo add-apt-repository ppa: | ||
| + | $ sudo apt update | ||
| + | $ sudo apt install apache2 | ||
| + | $ apache2 -v | ||
| + | Server version: Apache/2.4.54 (Ubuntu) | ||
| + | Server built: | ||
| + | $ systemctl status apache2 | ||
| + | $ sudo systemctl start apache2 | ||
| + | $ sudo systemctl enable apache2 | ||
| + | </ | ||
| + | ===== Password protection ===== | ||
| + | Inside the directory to be protected, add a '' | ||
| + | <code bash> | ||
| + | AuthType Basic | ||
| + | AuthName " | ||
| + | AuthUserFile / | ||
| + | require valid-user | ||
| + | </ | ||
| + | |||
| + | ''/ | ||
| + | |||
| + | to generate ''/ | ||
| + | <code bash> | ||
| + | htpasswd –c / | ||
| + | </ | ||
| + | the '' | ||
| + | |||
| + | |||
| + | ===== HTTPS/SSL ===== | ||
| + | * Use [[https:// | ||
| + | * install: | ||
| + | <code bash> | ||
| + | # require snapd; pre-installed on Ubuntu 20.04 | ||
| + | # remove the pre-installed cerbot (if present) | ||
| + | $ sudo apt remove certbot | ||
| + | # install certbot using snap | ||
| + | $ sudo snap install --classic certbot | ||
| + | # get a certificate; | ||
| + | # (1) get a certificate without changing the Apache configuration | ||
| + | $ sudo certbot certonly --apache | ||
| + | # (2) get a certificate and have certbot edit the Apache configuration | ||
| + | $ sudo certbot --apache | ||
| + | # | ||
| + | # check status | ||
| + | $ sudo systemctl status certbot.timer | ||
| + | # test renewal | ||
| + | $ sudo certbot renew --dry-run | ||
| + | # manual renewal; not recommended | ||
| + | # better to put '/ | ||
| + | $ sudo certbot renew | ||
| + | # enable ssl | ||
| + | $ sudo a2enmod ssl | ||
| + | </ | ||
| + | * modify ''/ | ||
| + | < | ||
| + | ServerName example.com | ||
| + | ServerAdmin admin@example.com | ||
| + | </ | ||
| + | * SSL test: [[https:// | ||
| ===== PHP ===== | ===== PHP ===== | ||
| ==== Info ==== | ==== Info ==== | ||
| Line 130: | Line 202: | ||
| ==== Permissions ==== | ==== Permissions ==== | ||
| - | Make the permissions more restrictive for security reasons. Assuming the wiki is installed in ''/ | + | Make the permissions more restrictive for security reasons. Assuming |
| <code bash> | <code bash> | ||
| # change the ownership | # change the ownership | ||
| - | sudo chown -R www-data:admin / | + | sudo chown -R www-data:adm / |
| # restrict access by other | # restrict access by other | ||
| sudo chmod -R o-rwx / | sudo chmod -R o-rwx / | ||
| Line 156: | Line 228: | ||
| sudo mkdir -p / | sudo mkdir -p / | ||
| # change ownership | # change ownership | ||
| - | sudo chown -R www-data:admin / | + | sudo chown -R www-data:adm / |
| # configure the virtual host For WebDAV | # configure the virtual host For WebDAV | ||
| # create the WebDAV password file with the user test | # create the WebDAV password file with the user test | ||
| Line 162: | Line 234: | ||
| sudo htpasswd -c / | sudo htpasswd -c / | ||
| # change the ownership and permissions | # change the ownership and permissions | ||
| - | sudo chown www-data:admin / | + | sudo chown www-data:adm / |
| sudo chmod 640 / | sudo chmod 640 / | ||
| # backup the vhost configuration | # backup the vhost configuration | ||
| Line 197: | Line 269: | ||
| ==== References ==== | ==== References ==== | ||
| - | * [[http://www.howtoforge.com/ | + | * [[https://www.digitalocean.com/ |
| - | * [[http://www.linuxserver.org/linux/ubuntu/webdav-ubuntu-10-04/]] | + | * [[https://www.digitalocean.com/community/tutorials/how-to-install-the-apache-web-server-on-ubuntu-18-04]] |
computers/apache_server_configuration.1452072857.txt.gz · Last modified: 2016/01/06 17:34 by chkuo