This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.

====== Apache2 Configuration ====== The configuration is built from a DigitalOcean Droplet, preconfigured with LAMP and WordPress: * Droplet Information: https://do.co/34TfYn8 * The WordPress One-Click Quickstart guide: https://do.co/34TfYn8#start ===== Core configuration ===== Note: If no site is "enabled" then a default entry seems to run hosting files under: ''/var/www/html'' Site configuration file location(s): <code bash> # All configuration files /etc/apache2/sites-available/ # Enabled sites /etc/apache2/sites-enabled/ </code> Enable/disable configurations: <code bash> # Disable sudo a2dissite datablog.roman-halliday.com.conf # Enable sudo a2ensite datablog.roman-halliday.com.conf </code> ===== File Ownership ===== Make sure all files are owned correctly: <code bash> # Site content owned by www-data so webserver can modify files chown -R www-data:www-data /var/www # Configuration owned by root for security chown -R root:root /etc/apache2 </code> ===== Refresh Configuration ===== Use one of: <code bash> systemctl reload apache2 service apache2 reload </code> ===== SSL - Let's Encrypt ===== SSL Encryption (the use of ''https'' over ''http'') is a bit standard now, fortunately it's become a lot easier with the addition of [[https://letsencrypt.org/|Lets Encrypt]]. * DigitalOcean Community Documentation: [[https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-20-04|How To Secure Apache with Let's Encrypt on Ubuntu 20.04]] If you configure the http (non secure) websites under ''/etc/apache2/sites-enabled/'', then the ''certbot'' script will leverage [[https://letsencrypt.org/|Lets Encrypt]] to create certificates, configure them and create extra configuration files for the SSL (appending ''-le-ssl'' to the file name) and add a redirect to the original ''.conf'' file. <code bash> certbot --apache </code> ====== Apache2 Migration ====== <code bash> ################################################################################ # Backup ################################################################################ cd /mnt/volume_lon1_01/ sudo cp -r /etc/apache2 . sudo cp -r /var/www . sudo cp -r /etc/letsencrypt . </code> <code bash> ################################################################################ # Fix hostname ################################################################################ sudo hostnamectl set-hostname roman-halliday ################################################################################ # Install LAMP Stack ################################################################################ sudo apt-get install apache2 libapache2-mod-php php-mysql php-pgsql ################################################################################ # MySQL - See : https://www.digitalocean.com/community/tutorials/how-to-install-lamp-stack-on-ubuntu ################################################################################ sudo apt-get install mysqld ################################################################################ # MySQL : Manage security setup script ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY '<password>'; #> I wasn’t able to login to mysql with sudo mysql after running ALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'password'; #> I fixed this by logging it with mysql -p, then running ALTER USER 'root'@'localhost' IDENTIFIED WITH auth_socket;. I did this after running the mysql_secure_installation script. ALTER USER 'root'@'localhost' IDENTIFIED WITH auth_socket; FLUSH PRIVILEGES; SELECT * FROM mysql.user \G SELECT Host, User, plugin, password_last_changed FROM mysql.user \G sudo systemctl restart mysql # Uninstall (if you borked it) sudo apt remove --purge mysql\* -y sudo find / -name mysql ################################################################################ # WordPress requirements: sudo apt-get install php-curl php-gd php-mbstring php-xml php-xmlrpc php-soap php-intl php-zip ################################################################################ # Firewall ################################################################################ sudo ufw allow Apache Full ################################################################################ # Backup (original configurations/files) ################################################################################ sudo apt-get install bzip2 mkdir -p ~/backups sudo tar -cjf ~/backups/etc_apache2-backup-`date +%F`.tar.bz /etc/apache2 sudo tar -cjf ~/backups/etc_letsencrypt-backup-`date +%F`.tar.bz /etc/letsencrypt sudo tar -cjf ~/backups/var_www-backup-`date +%F`.tar.bz /var/www ################################################################################ # Restore Files (from backup) ################################################################################ cd /mnt/volume_lon1_01/ sudo cp -r apache2 /etc/apache2 sudo cp -r www /var/www sudo cp -r letsencrypt /etc/letsencrypt sudo chown -R www-data:www-data /var/www ################################################################################ # Restore Configs - letsencrypt # Also see: # * https://webhostingmonkey.com/move-letsencrypt/ # * https://ivanderevianko.com/2019/03/migrate-letsencrypt-certificates-certbot-to-new-server ################################################################################ # View dir cd /etc/letsencrypt/ # Migrate backup cp -r /mnt/volume_lon1_01/letsencrypt/* . ################################################################################ # Find apache2 log directories ################################################################################ # List all find /etc/apache2/sites-available/ -name "*.conf" -exec grep -E "ErrorLog|CustomLog" {} \; | cut -d '}' -f 2 | sort | uniq find /etc/apache2/sites-available/ -name "*.conf" -exec grep -e "APACHE_LOG_DIR" {} \; | cut -d '$' -f 2 find /etc/apache2/sites-available/ -name "*.conf" -exec grep -e "APACHE_LOG_DIR" {} \; | cut -d '$' -f 2 | sort | uniq # Get path names find /etc/apache2/sites-available/ -name "*.conf" -exec grep -E "ErrorLog|CustomLog" {} \; | cut -d '}' -f 2 | sort | uniq | grep -Po '/\K[^/]*' | sort | uniq | sed '/.log/d' ################################################################################ # Create missing ################################################################################ sudo mkdir -p /var/log/apache2/<dir from above> sudo chown -R root:adm /var/log/apache2/* sudo ls -lh /var/log/apache2/ ################################################################################ # Make DNS Changes ################################################################################ # Enable sistes ################################################################################ # Get site names (without SSL version) find /etc/apache2/sites-available/ -name "*.conf" -maxdepth 1 -exec basename {} \;| grep -v 'le-ssl' | sort # Enable sudo a2ensite david-halliday.co.uk.conf # Disable sudo a2dissite david-halliday.co.uk.conf # Restart Apache sudo systemctl reload apache2 ################################################################################ # Refresh certificates (letsencrypt) ################################################################################ sudo certbot --apache </code> ====== Troubleshooting ====== * https://help.servmask.com/2018/10/27/how-to-increase-maximum-upload-file-size-in-wordpress/ ===== PHP testing page ===== Hosting can be tested with the file: <file php index.php> <?php // For backup, rename this for easy reference: php_info.php phpinfo(); ?> </file> ===== Managing Page redirects/apache changes ===== So many problems with cache in browsers. Good to test with a browser which can have all data cleared, and do work in private browsing. Using wget to test the apache configuration, see some extra samples and docs over at Computer Hope - Linux wget command. <code bash> # Run a command to get the default page, and view the http redirects as returned by the server wget --verbose datablog.roman-halliday.com # Reload apache configuration sudo service apache2 reload </code> ===== Bug: extra index ===== I had an extra ''index.html'' file from before. The old server prioritised ''php'' pages over ''php''. This one the other way around. It took time to realise the reason I was not getting one of the wiki pages working was because of the extra index.html'' file. <code html> <head> <title>Romanian - Roman-Halliday.com</title> </head> <body> <h1>Romanian</h1> <p>wiki will be here</p> </body> </code>