网站需求:
1.基于域名[www.openlab.com](http://www.openlab.com)可以访问网站内容为 welcome to openlab!!!
2.给该公司创建三个子界面分别显示学生信息,教学资料和缴费网站,基于[www.openlab.com/student](http://www.openlab.com/student) 网站访问学生信息,[www.openlab.com/data](http://www.openlab.com/data)网站访问教学资料,网站访问缴费网站(http://www.openlab.com/money网站访问缴费网站)。
3.要求 (1)学生信息网站只有song和tian两人可以访问,其他用户不能访问。
(2)访问缴费网站实现数据加密基于https访问。
架设一台NFS服务器,并按照以下要求配置
1、开放/nfs/shared目录,供所有用户查询资料
2、开放/nfs/upload目录,为192.168.xxx.0/24网段主机可以上传目录,
并将所有用户及所属的组映射为nfs-upload,其UID和GID均为210
3、将/home/tom目录仅共享给192.168.xxx.xxx这台主机,并只有用户tom可以完全访问该目录
一丶配置web服务
# 首先查看防火墙状态是否关闭
[root@localhost ~]# systemctl status firewalld.service
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; preset: enabled)
Active: active (running) since Mon 2024-01-15 16:24:48 CST; 5h 10min ago
Docs: man:firewalld(1)
Main PID: 953 (firewalld)
Tasks: 2 (limit: 8817)
Memory: 42.2M
CGroup: /system.slice/firewalld.service
└─953 /usr/bin/python3 -s /usr/sbin/firewalld --nofork --nopid
Jan 15 16:24:46 localhost systemd[1]: Starting firewalld - dynamic firewall daemon...
Jan 15 16:24:48 localhost systemd[1]: Started firewalld - dynamic firewall daemon.
# 查看防火墙下转态是都有放行http和https服务
[root@localhost ~]# firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: ens160
sources:
services: dhcpv6-client mdns mountd nfs ntp rpc-bind ssh
ports: 22/tcp 80/tcp
protocols:
forward: yes
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
# 添加HTTP和HTTPS;添加后重启防火墙程序,即可查看到添加的两个协议
[root@localhost ~]# firewall-cmd --add-service http --permanent
success
[root@localhost ~]# firewall-cmd --add-service https --permanent
success
[root@localhost ~]# systemctl restart firewalld.service
[root@localhost ~]# firewall-cmd --list-all
public (active)
target: default
icmp-block-inversion: no
interfaces: ens160
sources:
services: dhcpv6-client http https mdns mountd nfs ntp rpc-bind ssh
ports: 22/tcp 80/tcp
protocols:
forward: yes
masquerade: no
forward-ports:
source-ports:
icmp-blocks:
rich rules:
#前置条件准备完后,开始准备环境配置,配置yum源:
[root@localhost ~]# yum install nginx -y
OS 9.1 kB/s | 1.9 kB 00:00
everything 9.9 kB/s | 1.9 kB 00:00
EPOL 8.7 kB/s | 1.9 kB 00:00
debuginfo 12 kB/s | 2.2 kB 00:00
source 10 kB/s | 2.2 kB 00:00
update 9.4 kB/s | 1.9 kB 00:00
update-source 11 kB/s | 2.2 kB 00:00
Package nginx-1:1.23.3-1.oe2309.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
# 此处我已经配置过了,只做一遍演示
# 接下来,做文件配置,开始按要求完成:
[root@localhost