Linux Apache HTTP服务

1.http基本配置

Apache主配置文件: /etc/httpd/conf/httpd.conf

...

Listen 80               ##修改默认端口
...
<IfModule dir_module>
    DirectoryIndex index.html westos    ##修改默认读取文件及顺序
</IfModule>
...
DocumentRoot "/www/html"        ##修改默认家目录
<Directory "/www">
    Require all granted         ##给予网络文件访问权限,授权
</Directory>

...

2.虚拟主机

mkdir /var/www/news
mkdir /var/www/qq
echo news.westos.com > /var/www/news/westos
echo qq.westos.com > /var/www/qq/westos
echo www.westos.com > /var/www/html/westos

cd /etc/httpd/conf.d/ ##http子配置文件目录
vim default.conf ##编辑默认子配置文件

<Virtualhost _default_:80>      
            Documentroot /var/www/html      ##默认家目录
            customlog "logs/default.log" combined   ##日志存放地址
    </Virtualhost>
    <Directory /var/www/html>
            require all granted         ##授权
</Directory>

cp default.conf news.conf
vim news.conf

    <Virtualhost *:80>
            Servername news.westos.com      ##访问的域名
            Documentroot /var/www/news      ##域名对应的家目录
            customlog "logs/news.log" combined
    </Virtualhost>
    <Directory /var/www/news>
            require all granted
    </Directory>

cp news.conf qq.conf
vim qq.conf

    <Virtualhost *:80>
            Servername qq.westos.com        ##访问的域名
            Documentroot /var/www/qq        ##域名对应的家目录
            customlog "logs/qq.log" combined
    </Virtualhost>
    <Directory /var/www/qq>
            require all granted
    </Directory>

systemctl restart httpd

1)添加目录访问权限,用户

cd /etc/httpd/conf
htpasswd -cm apacheuser admin ##建立apache用户,第一个建立的+c,并记录到apacheuser中
htpasswd -m apacheuser lee
cat apacheuser

vim /etc/httpd/conf.d/news.conf

...
    <Directory /var/www/news/admin>         
            Authuserfile /etc/httpd/conf/apacheuser ##用户和密码文件所在位置
            Authname "Please passwd"
            Authtype basic          ##类型
    #       Require user admin      ##白名单
            Require valid-user      ##允许所有用户访问
    </Directory>
...

2)添加目录访问权限,ip
vim /etc/httpd/conf.d/news.conf

...
    <Directory /var/www/news>
            Order deny,allow
            allow from 172.25.254.25
            deny from all
    </Directory>
...

3.配置HTTPS

1)生成自签名证书

1> 确保已安装crypto-utils软件包。
[root@apache-server ~]# yum install crypto-utils mod_ssl -y
2> 调用genkey,同时为生成的文件指定唯一名称(例如,服务器的主机全名)。
–days可以指定证书有效期
[root@apache-server ~]# genkey apache-server.com

2)安装证书及其私钥

1> 确定已安装mod_ssl软件包。
[root@apache-server ~]# yum install mod_ssl -y
2> vim /etc/httpd/conf.d/yu.conf

<Virtualhost *:443>
        Servername yu.westos.com
        Documentroot /var/www/yu
        Customlog "logs/yu.log" combined
        SSLEngine on
        SSLCertificateFile /etc/pki/tls/certs/apache-server.crt     ##指定证书文件
        SSLCertificateKeyFile /etc/pki/tls/private/apache-server.key    ##指定锁文件
</Virtualhost>
<Directory "/var/www/yu">
        Require all granted
</Directory>

<Virtualhost *:80>              ##端口转换
        Servername yu.westos.com
        RewriteEngine on
        RewriteRule ^(/.*)$ https://%{HTTP_HOST}$1 [redirect=301] 
</Virtualhost>

[root@apache-server ~]# systemctl restart httpd