ELAchain dokumentace

Uživatelské nástroje

Nástroje pro tento web

Historie:
en_installation:apache

Rozdíly

Zde můžete vidět rozdíly mezi vybranou verzí a aktuální verzí dané stránky.

Odkaz na výstup diff

Obě strany předchozí revizePředchozí verze
Následující verze		Předchozí verze
en_installation:apache [2022/05/25 16:24] – kozaken_installation:apache [2024/04/17 11:32] (aktuální) – [Apache configuration] kozak
Řádek 28: Řádek 28:
     SSLEngine on     SSLEngine on
     SSLProtocol   all -SSLv3 -TLSv1 -TLSv1.1     SSLProtocol   all -SSLv3 -TLSv1 -TLSv1.1
-    SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDH-ECDSA-AES-128-GCM-SHA256:ECDH-RSA-AES-128-GCM-SHA2>+    SSLCipherSuite   ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDH-ECDSA-AES-128-GCM-SHA256:ECDH-RSA-AES-128-GCM-SHA2>
     SSLHonorCipherOrder     on     SSLHonorCipherOrder     on
     SSLCompression          off     SSLCompression          off
Řádek 41: Řádek 41:
     Header always set Referrer-Policy "same-origin"     Header always set Referrer-Policy "same-origin"
     Header set Content-Security-Policy "script-src 'self' 'unsafe-eval' https:; object-src 'self' 'unsafe-eval' https:"     Header set Content-Security-Policy "script-src 'self' 'unsafe-eval' https:; object-src 'self' 'unsafe-eval' https:"
-    Header set Feature-Policy "vibrate 'self'; geolocation 'self'; notifications 'self'" 
 </VirtualHost> </VirtualHost>
  
Řádek 73: Řádek 72:
     Header always set Referrer-Policy "same-origin"     Header always set Referrer-Policy "same-origin"
     Header set Content-Security-Policy "script-src 'self' 'unsafe-eval' https:; object-src 'self' 'unsafe-eval' https:"     Header set Content-Security-Policy "script-src 'self' 'unsafe-eval' https:; object-src 'self' 'unsafe-eval' https:"
-    Header set Feature-Policy "vibrate 'self'; geolocation 'self'; notifications 'self'" 
 </VirtualHost> </VirtualHost>
 </IfModule> </IfModule>
  
 </code> </code>
- 
   * The **blockchain.yourDomain.conf**  configuration file needs to be included among the Apache configs   * The **blockchain.yourDomain.conf**  configuration file needs to be included among the Apache configs
       * ''sudo a2ensite blockchain.yourDomain''       * ''sudo a2ensite blockchain.yourDomain''
Řádek 90: Řádek 87:
       * ''sudo a2enmod proxy''       * ''sudo a2enmod proxy''
       * ''sudo a2enmod proxy_http''       * ''sudo a2enmod proxy_http''
-      * sudo a2enmod http2+      * ''sudo a2enmod http2''
       * ''sudo a2enmod headers''       * ''sudo a2enmod headers''
 SSL certificates are automatically generated via the mod_md module built into Apache. If you want to add another domain for which certificates need to be generated (for example, your application running on a node under another domain), we recommend creating a new config, for example **application.yourDomain.conf**  in /etc/apache2/sites-available/ and include it to Apache configs running the command ''sudo a2ensite application.yourDomain''. Then restart Apache ''sudo systemctl restart apache2''  and certificates should start to be generated for this domain on a regular basis. Config for an application running on local port 8083 should look like this: SSL certificates are automatically generated via the mod_md module built into Apache. If you want to add another domain for which certificates need to be generated (for example, your application running on a node under another domain), we recommend creating a new config, for example **application.yourDomain.conf**  in /etc/apache2/sites-available/ and include it to Apache configs running the command ''sudo a2ensite application.yourDomain''. Then restart Apache ''sudo systemctl restart apache2''  and certificates should start to be generated for this domain on a regular basis. Config for an application running on local port 8083 should look like this:
Řádek 117: Řádek 114:
     SSLEngine on     SSLEngine on
     SSLProtocol   all -SSLv3 -TLSv1 -TLSv1.1     SSLProtocol   all -SSLv3 -TLSv1 -TLSv1.1
-    SSLCipherSuite          ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDH-ECDSA-AES-128-GCM-SHA256:ECDH-RSA-AES-128-GCM-SHA2>+    SSLCipherSuite   ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDH-ECDSA-AES-128-GCM-SHA256:ECDH-RSA-AES-128-GCM-SHA2>
     SSLHonorCipherOrder     on     SSLHonorCipherOrder     on
     SSLCompression          off     SSLCompression          off
Řádek 130: Řádek 127:
     Header always set Referrer-Policy "same-origin"     Header always set Referrer-Policy "same-origin"
     Header set Content-Security-Policy "script-src 'self' 'unsafe-eval' https:; object-src 'self' 'unsafe-eval' https:"     Header set Content-Security-Policy "script-src 'self' 'unsafe-eval' https:; object-src 'self' 'unsafe-eval' https:"
-    Header set Feature-Policy "vibrate 'self'; geolocation 'self'; notifications 'self'" 
 </VirtualHost> </VirtualHost>
 </IfModule>​​ </IfModule>​​
Řádek 138: Řádek 134:
 ​​ ​​
  
 +==== Your own SSL certificates ====
 +
 +Just add the path to the certificate to the mentioned config **/etc/apache2/sites-available/blockchain.****yourDomain.****conf**
 +
 +4th line ''MDomain **blockchain.yourDomain**'' rewrite to:
 +<code>
 +<MDomain **blockchain.yourDomain**>
 +    MDCertificateFile    /etc/ssl/certs/ssl-cert.pem
 +    MDCertificateKeyFile /etc/ssl/private/ssl-cert.key
 +</MDomain>
 +
 +</code>
  
en_installation/apache.1653488683.txt.gz · Poslední úprava: 2022/05/25 16:24 autor: kozak