AlmaLinux 8.6 : WEB Server Install

Contents

1. Apache2 installation and virtual host configuration
2. Use of CGI Scripts
3. PHP installation and configuration
- 1.PHP Install
4. Digest authentication with Apache2
- 4.1 Create password file for Digest authentication
- 4.2 Edit Apache configuration file

1. Apache2 installation and virtual host configuration

1.1 Apache2 Install

①httpd install

# dnf -y install httpd
# httpd -v
Server version: Apache/2.4.37 (AlmaLinux)
Server built: Jun 22 2022 07:12:01

# dnf -y install httpd

# httpd -v

Server version: Apache/2.4.37 (AlmaLinux)

Server built: Jun 22 2022 07:12:01

1.2 Apache Configuration

①Edit httpd.conf file

# cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf_bak
# vi /etc/httpd/conf/httpd.conf
●Line 89 : Administrator Email Address
ServerAdmin <Email Address>
●Per line 98 : ServerName Add
#ServerName www.example.com:80
ServerName <Domain Name>
●Line 147 : Change (Indexes removed)
Options FollowSymLinks
●Line 154 : Change
AllowOverride All
●Line 167 : File names accessible by directory name only
Add "index.php index.cgi index.htm"
DirectoryIndex index.html index.php index.cgi index.htm
●Add to the last line
ServerTokens Prod

# cp /etc/httpd/conf/httpd.conf /etc/httpd/conf/httpd.conf_bak

# vi /etc/httpd/conf/httpd.conf

●Line 89 : Administrator Email Address

ServerAdmin <Email Address>

●Per line 98 : ServerName Add

#ServerName www.example.com:80

ServerName <Domain Name>

●Line 147 : Change (Indexes removed)

Options FollowSymLinks

●Line 154 : Change

AllowOverride All

●Line 167 : File names accessible by directory name only

Add "index.php index.cgi index.htm"

DirectoryIndex index.html index.php index.cgi index.htm

●Add to the last line

ServerTokens Prod

②If Firewalld is enabled, HTTP service permission is required; HTTP uses [80/TCP]

# firewall-cmd --add-service=http --permanent
# firewall-cmd --reload

1 2	# firewall-cmd --add-service=http --permanent # firewall-cmd --reload

⑤Apache Auto-Start Configuration

# systemctl start httpd
# systemctl enable httpd
# systemctl status httpd
● httpd.service - The Apache HTTP Server
Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor prese>
Active: active (running) since Wed 2022-06-08 10:53:30 JST; 14s ago
Docs: man:httpd.service(8)
Main PID: 9013 (httpd)
Status: "Running, listening on: port 80"
Tasks: 213 (limit: 11170)
Memory: 43.1M
CGroup: /system.slice/httpd.service
tq9013 /usr/sbin/httpd -DFOREGROUND
tq9014 /usr/sbin/httpd -DFOREGROUND
tq9015 /usr/sbin/httpd -DFOREGROUND
tq9016 /usr/sbin/httpd -DFOREGROUND
mq9017 /usr/sbin/httpd -DFOREGROUND

# systemctl start httpd

# systemctl enable httpd

# systemctl status httpd

● httpd.service - The Apache HTTP Server

Loaded: loaded (/usr/lib/systemd/system/httpd.service; enabled; vendor prese>

Active: active (running) since Wed 2022-06-08 10:53:30 JST; 14s ago

Docs: man:httpd.service(8)

Main PID: 9013 (httpd)

Status: "Running, listening on: port 80"

Tasks: 213 (limit: 11170)

Memory: 43.1M

CGroup: /system.slice/httpd.service

tq9013 /usr/sbin/httpd -DFOREGROUND

tq9014 /usr/sbin/httpd -DFOREGROUND

tq9015 /usr/sbin/httpd -DFOREGROUND

tq9016 /usr/sbin/httpd -DFOREGROUND

mq9017 /usr/sbin/httpd -DFOREGROUND

⑥operation check
If you access http://[server IP address] and see the AlamLinux Test Page as shown below, it is OK.

⑦Hide the Welcome page, create a new index.html file as a Test Page, and check the operation of apache.

Rename the welcome page

# mv /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.org

1	# mv /etc/httpd/conf.d/welcome.conf /etc/httpd/conf.d/welcome.conf.org

Create HTML test page

# vi /var/www/html/index.html
<html>
<body>
<div style="width: 100%; font-size: 40px; font-weight: bold; text-align: center;">
Apache Test Page
</div>
</body>
</html>

# vi /var/www/html/index.html

<html>

<body>

Apache Test Page

</div>

</body>

</html>

If you access http://<server IP address> and the Test Page is displayed as shown below, it is OK.

1.3 Virtual Host Settings

Assign and configure the FQDN [alma.korodes.com] to be operated by the virtual host in the document root [/var/www/html/alam.korodes.com] directory

# vi /etc/httpd/conf.d/vhost.conf
Virtual Host Domain Settings
<VirtualHost *:80>
DocumentRoot /var/www/html/alma.korodes.com
ServerName alma.korodes.com
ServerAdmin ＜Email Address>  ←Administrator's email address
ErrorLog logs/alma.korodes.com-error_log
CustomLog logs/alma.korodes.com-access_log combined
</VirtualHost>

<Directory "/var/www/html/alma.korodes.com">
Options FollowSymLinks
AllowOverride All
</Directory>

# vi /etc/httpd/conf.d/vhost.conf

Virtual Host Domain Settings

DocumentRoot /var/www/html/alma.korodes.com

ServerName alma.korodes.com

ServerAdmin ＜Email Address> ←Administrator's email address

ErrorLog logs/alma.korodes.com-error_log

CustomLog logs/alma.korodes.com-access_log combined

</VirtualHost>

Options FollowSymLinks

AllowOverride All

</Directory>

Creating a Document Directory

# mkdir /var/www/html/alma.korodes.com

1	# mkdir /var/www/html/alma.korodes.com

Restart Apache

# systemctl restart httpd

1	# systemctl restart httpd

2. Use of CGI Scripts

①Confirmation of CGI availability

# grep -n "^ *ScriptAlias" /etc/httpd/conf/httpd.conf
250:     ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"
The above is displayed and available under "/var/www/cgi-bin/".

# grep -n "^ *ScriptAlias" /etc/httpd/conf/httpd.conf

250: ScriptAlias /cgi-bin/ "/var/www/cgi-bin/"

The above is displayed and available under "/var/www/cgi-bin/".

②Create test scripts and check operation

# vi /var/www/cgi-bin/index.cgi
#!/usr/bin/python3
print("Content-type: text/html\n")
print("CGI Script Test Page")

# vi /var/www/cgi-bin/index.cgi

#!/usr/bin/python3

print("Content-type: text/html\n")

print("CGI Script Test Page")

# chmod 755 /var/www/cgi-bin/index.cgi
# curl localhost/cgi-bin/index.cgi
CGI Script Test Page

# chmod 755 /var/www/cgi-bin/index.cgi

# curl localhost/cgi-bin/index.cgi

CGI Script Test Page

3. PHP installation and configuration

1.PHP Install

①Install

# dnf module -y install php:7.2/common

1	# dnf module -y install php:7.2/common

②Version Confirmation

# php -v

# php -v

If you are on Php 7.2, upgrade
The EPEL and Remi repositories are required, so install them if you have not already done so.

# dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
# dnf -y install https://rpms.remirepo.net/enterprise/remi-release-8.rpm

1 2	# dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm # dnf -y install https://rpms.remirepo.net/enterprise/remi-release-8.rpm

Stop PHP once.

# dnf module disable php

1	# dnf module disable php

Installing PHP 8.1

# dnf module install php:remi-8.1

1	# dnf module install php:remi-8.1

php-fpm configuration

# systemctl enable php-fpm

1	# systemctl enable php-fpm

# systemctl start php-fpm
# php -v
If the version is updated to 8.1 (or later), OK.

# systemctl start php-fpm

# php -v

If the version is updated to 8.1 (or later), OK.

③Restart Apache

After PHP installation, restarting Apache will invoke PHP-FPM (FPM : FastCGI Process Manager) by default, and php-fpm service will be started in conjunction with httpd startup.

# systemctl restart httpd
# systemctl status php-fpm
● php-fpm.service - The PHP FastCGI Process Manager
Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; vendor pre>
Active: active (running) since Fri 2022-07-15 16:17:34 JST; 17s ago
Main PID: 6046 (php-fpm)
Status: "Processes active: 0, idle: 5, Requests: 0, slow: 0, Traffic: 0req/s>
Tasks: 6 (limit: 11187)
Memory: 20.1M
CGroup: /system.slice/php-fpm.service
tq6046 php-fpm: master process (/etc/php-fpm.conf)
tq6047 php-fpm: pool www
tq6048 php-fpm: pool www
tq6049 php-fpm: pool www
tq6050 php-fpm: pool www
mq6051 php-fpm: pool wwwJul 15 16:17:34 Alma systemd[1]: Starting The PHP FastCGI Process Manager...
Jul 15 16:17:34 Alma systemd[1]: Started The PHP FastCGI Process Manager.

# systemctl restart httpd

# systemctl status php-fpm

● php-fpm.service - The PHP FastCGI Process Manager

Loaded: loaded (/usr/lib/systemd/system/php-fpm.service; enabled; vendor pre>

Active: active (running) since Fri 2022-07-15 16:17:34 JST; 17s ago

Main PID: 6046 (php-fpm)

Status: "Processes active: 0, idle: 5, Requests: 0, slow: 0, Traffic: 0req/s>

Tasks: 6 (limit: 11187)

Memory: 20.1M

CGroup: /system.slice/php-fpm.service

tq6046 php-fpm: master process (/etc/php-fpm.conf)

tq6047 php-fpm: pool www

tq6048 php-fpm: pool www

tq6049 php-fpm: pool www

tq6050 php-fpm: pool www

mq6051 php-fpm: pool wwwJul 15 16:17:34 Alma systemd[1]: Starting The PHP FastCGI Process Manager...

Jul 15 16:17:34 Alma systemd[1]: Started The PHP FastCGI Process Manager.

④Confirmation of PHP operation
Create the following files

# vi /var/www/html/<FQDN>/test.php
<?php phpinfo(); ?>

1 2	# vi /var/www/html/<FQDN>/test.php <?php phpinfo(); ?>

If you access http://<FQDN>/test.php with a browser and see the following screen, it is OK

4. Digest authentication with Apache2

Since Basic Authentication, a well-known authentication authorization method for http, sends authentication information in plain text, there is a risk of ID and password leakage if the packet is intercepted.
On the other hand, Digest Authentication encrypts and transmits authentication information, so there is almost no risk of information leakage.

4.1 Create password file for Digest authentication

Specify an authenticated area called realm. This realm allows the same directory to be accessed as authenticated.
As an example, we will create a user named "secretuser" and a password file ".digestauth" with "DigestAuth" as the realm. Execute the following command and enter the password for "secretuser" when prompted.

# /usr/bin/htdigest -c /etc/httpd/.digestauth "DigestAuth" secretuser

1	# /usr/bin/htdigest -c /etc/httpd/.digestauth "DigestAuth" secretuser

Confirmation

# cat /etc/httpd/.digestauth
secretuser:DigestAuth:64939177c7b7c6eac3687925b27e771d

1 2	# cat /etc/httpd/.digestauth secretuser:DigestAuth:64939177c7b7c6eac3687925b27e771d

As above, secretuser and encrypted password are created

4.2 Edit Apache configuration file

Specify the directory to which Digest authentication will be applied. (In this case, specify the secret directory.)

# vi /etc/httpd/conf/httpd.conf

1	# vi /etc/httpd/conf/httpd.conf

Add the following at the end

<Directory "/var/www/html/[FQDN]/secret">
AuthType Digest
AuthName "DigestAuth"
AuthDigestDomain /secret/
AuthUserFile "/etc/httpd/.digestauth"
Require valid-user
</Directory>