Mudanças entre as edições de "Chave de Segurança:SSL"

De BrapciWiki
Ir para navegação Ir para pesquisar
Linha 8: Linha 8:
 
  sudo a2enmod proxy_balancer
 
  sudo a2enmod proxy_balancer
 
  sudo a2enmod lbmethod_byrequests
 
  sudo a2enmod lbmethod_byrequests
 +
 +
Arquivo '''000-default.conf'''
 +
<VirtualHost '''146.164.3.34:80'''>
 +
  ProxyPreserveHost On
 +
  ProxyPass / http://127.0.0.1:8080/
 +
  ProxyPassReverse / http://127.0.0.1:8080/
 +
 +
        RewriteEngine on
 +
        RewriteCond %{SERVER_NAME} =dataverse.nutricao.ufrj.br
 +
        RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
 +
</VirtualHost>
 +
 +
 +
 +
<IfModule mod_ssl.c>
 +
<VirtualHost 146.164.3.34:443>
 +
  ProxyPreserveHost On
 +
  ProxyPass / http://127.0.0.1:8080/
 +
  ProxyPassReverse / http://127.0.0.1:8080/
 +
#  ProxyPass / http://127.0.0.1:4848/
 +
#  ProxyPassReverse / http://127.0.0.1:4848/
 +
        ServerName dataverse.nutricao.ufrj.br
 +
        SSLCertificateFile /etc/letsencrypt/live/dataverse.nutricao.ufrj.br/ful$
 +
        SSLCertificateKeyFile /etc/letsencrypt/live/dataverse.nutricao.ufrj.br/$
 +
        Include /etc/letsencrypt/options-ssl-apache.conf
 +
        SSLProtocol -all +TLSv1.2 +TLSv1.3
 +
</VirtualHost>
 +
</IfModule>
 +
  
 
== Configurando Site para redirecionamento ==
 
== Configurando Site para redirecionamento ==
 +
 
  sudo nano /etc/apache2/sites-available/000-default.conf
 
  sudo nano /etc/apache2/sites-available/000-default.conf
  

Edição das 22h40min de 16 de setembro de 2021

Instalando o APACHE2

apt-get install apache2

Habilitando os MODs do proxy

sudo a2enmod ssl
sudo a2enmod proxy
sudo a2enmod proxy_http
sudo a2enmod proxy_balancer
sudo a2enmod lbmethod_byrequests

Arquivo 000-default.conf 

<VirtualHost 146.164.3.34:80>
  ProxyPreserveHost On
  ProxyPass / http://127.0.0.1:8080/
  ProxyPassReverse / http://127.0.0.1:8080/

       RewriteEngine on
       RewriteCond %{SERVER_NAME} =dataverse.nutricao.ufrj.br
       RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>



<IfModule mod_ssl.c>
<VirtualHost 146.164.3.34:443>
  ProxyPreserveHost On
  ProxyPass / http://127.0.0.1:8080/
  ProxyPassReverse / http://127.0.0.1:8080/
#   ProxyPass / http://127.0.0.1:4848/
#   ProxyPassReverse / http://127.0.0.1:4848/
       ServerName dataverse.nutricao.ufrj.br
       SSLCertificateFile /etc/letsencrypt/live/dataverse.nutricao.ufrj.br/ful$
       SSLCertificateKeyFile /etc/letsencrypt/live/dataverse.nutricao.ufrj.br/$
       Include /etc/letsencrypt/options-ssl-apache.conf
       SSLProtocol -all +TLSv1.2 +TLSv1.3
</VirtualHost>
</IfModule>


Configurando Site para redirecionamento

sudo nano /etc/apache2/sites-available/000-default.conf

<VirtualHost *:80>
   ProxyPreserveHost On
   ProxyPass / http://127.0.0.1:8080/jspui
   ProxyPassReverse / http://127.0.0.1:8080/jspui
</VirtualHost>

Redirecionando para outro servidor

<VirtualHost *:80>
       ServerName cip.brapci.inf.br
       ServerAlias 143.54.112.86
       ServerAdmin renefgj@gmail.com
       ProxyRequests Off
       <Proxy *>
               Order Allow,Deny
               Allow from all
       </Proxy>
       ProxyPass / http://143.54.112.86:80
       ProxyPassReverse / http://143.54.112.86:80
</VirtualHost>

Ativando o Domínio SSL

Dentro da parta crie o arquivo /etc/apache2/sites-available/seunominio-ssl.conf com o conteúdo 

<VirtualHost *:443>
       Options Indexes FollowSymLinks MultiViews
       ServerAdmin renefgj@gmail.com
       ServerName dadosdepesquisa.rnp.br
       ServerAlias www.dadosdepesquisa.rnp.br
       DocumentRoot /var/www/dadosabertos.rnp.br/public_html/wordpress
   <Directory "/var/www/dadosabertos.rnp.br/public_html/wordpress">
       DirectoryIndex index.php index.html index.htm
       AllowOverride All
       Order allow,deny
       Allow from all
   </Directory>
       ErrorLog ${APACHE_LOG_DIR}/error.log
       CustomLog ${APACHE_LOG_DIR}/access.log combined
       SSLEngine on
       SSLEngine on
       SSLCertificateFile /etc/ssl/private/dadosdepesquisa.rnp.br.crt
       SSLCertificateKeyFile /etc/ssl/private/dadosdepesquisa.rnp.br.key
</VirtualHost>


PROXY

apt-get install apache2 

sudo a2enmod ssl

sudo a2enmod proxy
sudo a2enmod proxy_http
sudo a2enmod proxy_balancer
sudo a2enmod lbmethod_byrequests



sudo nano /etc/apache2/sites-available/000-default.conf

<VirtualHost *:80>
   ProxyPreserveHost On
   ProxyPass / http://127.0.0.1:8080/jspui
   ProxyPassReverse / http://127.0.0.1:8080/jspui
</VirtualHost>

Habilitar as regras do Apache2 

a2dissite 000-default
a2ensite dspace


REDIRECIONAMENTO - DSPACE

/etc/apache2/000-default.conf
<VirtualHost *:80>
       ServerName repositorio.rnp.br
       ServerAdmin dadosdepesquisa@rnp.br
       Redirect / https://repositorio.rnp.br
</VirtualHost>
<VirtualHost *:443>
       Options Indexes FollowSymLinks MultiViews
       ServerAdmin renefgj@gmail.com
       ServerName dadosdepesquisa.rnp.br
       ServerAlias www.dadosdepesquisa.rnp.br
       ErrorLog ${APACHE_LOG_DIR}/error.log
       CustomLog ${APACHE_LOG_DIR}/access.log combined
       SSLEngine on
       SSLEngine on
       SSLCertificateFile /etc/ssl/private/repositorio.rnp.br.crt
       SSLCertificateKeyFile /etc/ssl/private/repositorio.rnp.br.key
</VirtualHost>
Disponível em “https://brapci.inf.br/wiki/index.php?title=Chave_de_Segurança:SSL&oldid=645”