LPIC2 2021 Sesión 11 (2021-03-09)

Aquesta és una revisió antiga del document

Manual Certificacion LPIC-2.pdf, pag XX
Material Practicas LPIC-2/LPIC-202/
Presentaciones/2020/202/
gdrive://

DOC: Material Practicas LPIC-2/LPIC-202/2-Web Services/Squid/Laboratorio Squid.pdf

restricciones:

horarias
por tipo de contenido (extensiones)

report: sarg → DOC (no certificación): Material Practicas LPIC-2/LPIC-202/2-Web Services/Squid/Install sarg.txt

wget -N http://www.alcancelibre.org/al/server/AL-Server.repo -O /etc/yum.repos.d/AL-Server.repo
yum -y install sarg

/etc/sarg/sarg.conf

#       sarg -l file
access_log /var/log/squid/access.log

#       sarg -o dir
output_dir /var/www/html/squid-reports

#       Date format in reports: e (European=dd/mm/yy), u (American=mm/dd/yy), w(Weekly=yy.ww)
date_format e

sarg -x # http://192.168.1.5/squid-reports/

DOC: Material Practicas LPIC-2/LPIC-202/2-Web Services/Nginx/Instalar y configurar Nginx en CentOS 7.pdf
modo asíncrono (VS apache), más ligero, más rápido

Centos no lo soporta hasta v8:

yum install epel-release -y # repo adicional
yum install nginx -y

/etc/nginx/
- nginx.conf
- conf.d/

Laboratorio: virtualhost con nginx

mkdir -p /var/www/virtual_hosts/www.mysite.com/{html,logs}

/etc/nginx/conf.d/www.mysite.com.conf

server {
  listen 80;
  server_name nginx.192.168.2.5.nip.io;
  access_log /var/www/virtual_hosts/www.mysite.com/logs/access.log;
  error_log /var/www/virtual_hosts/www.mysite.com/logs/error.log;
  location / {
    root /var/www/virtual_hosts/www.mysite.com/html;
    index index.html index.htm index.php;
  }
}

crear index.html (si no, da forbidden)
recordar que el apache esté parado
nginx -t: chequeo archivo configuración
nginx -s reload: recarga la configuración en caliente

Laboratorio: SSL

cd /etc/nginx
openssl genrsa -out mysite.key 2048
openssl req -new -key mysite.key -out mysite.csr
openssl x509 -req -days 365 -in mysite.csr -signkey mysite.key -out mysite.crt

/etc/nginx/conf.d/ssl.mysite.com.conf

server {
  listen 80;
  listen 443 default ssl;
  ssl_certificate /etc/nginx/mysite.crt;
  ssl_certificate_key /etc/nginx/mysite.key;
  server_name nginx.192.168.2.5.nip.io;
  access_log /var/www/virtual_hosts/www.mysite.com/logs/access.log;
  error_log /var/www/virtual_hosts/www.mysite.com/logs/error.log;
  location / {
    root /var/www/virtual_hosts/www.mysite.com/html;
    index index.html index.htm index.php;
  }
}