Unterschiede
Hier werden die Unterschiede zwischen zwei Versionen angezeigt.
Beide Seiten der vorigen Revision Vorhergehende Überarbeitung Nächste Überarbeitung | Vorhergehende Überarbeitung Nächste ÜberarbeitungBeide Seiten der Revision | ||
centos:mail_c7:horde_2 [11.09.2014 14:17. ] – [Ping Settings] django | centos:mail_c7:horde_2 [20.09.2014 21:05. ] – django | ||
---|---|---|---|
Zeile 2: | Zeile 2: | ||
Nach der erfolgreichen [[centos: | Nach der erfolgreichen [[centos: | ||
- | ===== Apache vHost ===== | ||
- | ==== vHost Definition ==== | ||
- | Für unsere WEB-Applikation richten wir uns nun einen geeigneten **[[centos: | ||
- | Im Konfigurationsverzeichnis unseres [[centos: | ||
- | # vim / | ||
- | |||
- | <file apache / | ||
- | # horde.sec-mail.guru (Horde Groupware Version 5) | ||
- | # | ||
- | < | ||
- | ServerAdmin webmaster@nausch.org | ||
- | ServerName horde.sec-mail.guru | ||
- | ServerAlias xn--bro-hoa.sec-mail.guru | ||
- | ServerPath / | ||
- | |||
- | < | ||
- | Options -Indexes +FollowSymLinks | ||
- | Require all granted | ||
- | </ | ||
- | |||
- | RewriteEngine on | ||
- | RewriteCond %{HTTPS} off | ||
- | RewriteRule (.*) https:// | ||
- | |||
- | DirectoryIndex index.php | ||
- | |||
- | ErrorLog logs/ | ||
- | CustomLog logs/ | ||
- | </ | ||
- | < | ||
- | ServerAdmin webmaster@nausch.org | ||
- | ServerName horde.sec-mail.guru | ||
- | ServerAlias xn--bro-hoa.sec-mail.guru | ||
- | ServerPath / | ||
- | DocumentRoot "/ | ||
- | |||
- | AddType application/ | ||
- | |||
- | # Link to system Javascript Libraries | ||
- | Alias / | ||
- | Alias / | ||
- | Alias / | ||
- | |||
- | # Link to Micro$oft stuff | ||
- | Alias / | ||
- | Alias / | ||
- | |||
- | # Django | ||
- | # Required, because there is a host with same ServerName and | ||
- | # ServerAlias LISTENING ON PORT 80, - and if these lines are | ||
- | # not present, and .htaccess-Files or LDAP-Access is enabled | ||
- | # for one or more Directory the host on PORT 443 and PORT 80 | ||
- | # will ASK for .htaccess ord LDAP-Access, | ||
- | # ---------------------------------------------------------- | ||
- | # -- DO NOT DELETE THE FOLLOWING LINES, STARTING WITH SSL -- | ||
- | # -- WHEN USING .htaccess or LDAP-Access! | ||
- | # ---------------------------------------------------------- | ||
- | SSLEngine on | ||
- | SSLProtocol -ALL +SSLv3 +TLSv1 | ||
- | SSLCipherSuite EECDH+AES256: | ||
- | SSLHonorCipherOrder on | ||
- | SSLCertificateFile / | ||
- | SSLCertificateKeyFile / | ||
- | SSLCertificateChainFile / | ||
- | |||
- | < | ||
- | < | ||
- | # Access-stuff (Zugriff von überall erlauben.) | ||
- | #Require all granted | ||
- | # Access-stuff (Zugriff nur vom Admin-Netz aus!) | ||
- | Require host nausch.org | ||
- | </ | ||
- | Options All | ||
- | AllowOverride All | ||
- | |||
- | # Rewrite the requestet URI, when it is with german " | ||
- | RewriteEngine On | ||
- | RewriteCond %{REQUEST_URI} ^/$ | ||
- | RewriteCond %{HTTP_HOST} ^xn--bro-hoa.sec-mail.guru$ [NC] | ||
- | RewriteRule ^$ https:// | ||
- | |||
- | # Exclude file from password protection | ||
- | SetEnvIf Request_URI " | ||
- | SetEnvIf Request_URI " | ||
- | SetEnvIf Request_URI " | ||
- | SetEnvIf Request_URI " | ||
- | SetEnvIf Request_URI " | ||
- | SetEnvIf Request_URI " | ||
- | |||
- | # ActiveSync | ||
- | RewriteEngine On | ||
- | RewriteRule ^/ | ||
- | RewriteRule .* - [E=HTTP_MS_ASPROTOCOLVERSION: | ||
- | RewriteRule .* - [E=HTTP_X_MS_POLICYKEY: | ||
- | RewriteRule .* - [E=HTTP_AUTHORIZATION: | ||
- | </ | ||
- | |||
- | # Deny access to the test.php files except from localhost | ||
- | < | ||
- | Require local | ||
- | </ | ||
- | |||
- | # Deny access to directories that are not served directly by the webserver | ||
- | < | ||
- | Require all denied | ||
- | </ | ||
- | |||
- | < | ||
- | < | ||
- | RewriteEngine On | ||
- | RewriteCond | ||
- | RewriteCond | ||
- | RewriteRule | ||
- | | ||
- | </ | ||
- | |||
- | DirectoryIndex index.php | ||
- | ErrorLog logs/ | ||
- | CustomLog logs/ | ||
- | </ | ||
- | </ | ||
- | |||
- | <WRAP round important> | ||
- | |||
- | Solange wir unseren vHost noch nicht in der Produktionsumgebung steht und fertig konfiguriert wurde, beschränken wir den Zugriff auf den vHost noch. Hierzu tragen wir in der **Directive // | ||
- | <code apache> | ||
- | < | ||
- | # Access-stuff (Zugriff von überall erlauben.) | ||
- | #Require all granted | ||
- | # Access-stuff (Zugriff nur vom Admin-Netz aus!) | ||
- | Require host nausch.org | ||
- | </ | ||
- | ... | ||
- | </ | ||
- | Nach erfolgter Konfiguration, | ||
- | <code apache> | ||
- | < | ||
- | # Access-stuff (Zugriff von überall erlauben.) | ||
- | Require all granted | ||
- | # Access-stuff (Zugriff nur vom Admin-Netz aus!) | ||
- | #Require host nausch.org | ||
- | </ | ||
- | ... | ||
- | </ | ||
- | </ | ||
- | |||
- | ==== Konfiguration aktivieren ==== | ||
- | Bevor unseren Webserver starten, damit der neue vHost auch bedient werden kann, überprüfen wir die Konfiguration noch auf syntaktische Fehler. | ||
- | # apachectl -t | ||
- | |||
- | | ||
- | |||
- | Abschließend führen wir einen Reload sdes Daemon durch. | ||
- | # systemctl reload httpd.service | ||
- | |||
- | Bei Bedarf können wir auch den Status des Apche Webservers abfragen. | ||
- | # systemctl status httpd.service | ||
- | |||
- | < | ||
- | | ||
- | | ||
- | Process: 20019 ExecStop=/ | ||
- | Process: 22718 ExecReload=/ | ||
- | Main PID: 20024 (httpd) | ||
- | | ||
- | | ||
- | | ||
- | | ||
- | | ||
- | | ||
- | | ||
- | | ||
- | |||
- | Sep 10 19:45:20 vml000097.dmz.nausch.org systemd[1]: Reloading The Apache HTTP Server. | ||
- | Sep 10 19:45:21 vml000097.dmz.nausch.org systemd[1]: Reloaded The Apache HTTP Server. | ||
- | </ | ||
===== mySQL Datenbank ===== | ===== mySQL Datenbank ===== | ||
Zeile 1144: | Zeile 968: | ||
$conf[activesync][ping][waitinterval] 15 | $conf[activesync][ping][waitinterval] 15 | ||
- | ==== Hauptkonfigurationsdatei / | + | ===== Hauptkonfigurationsdatei / |
Mit einem Klick auf die Schaltfläche {{: | Mit einem Klick auf die Schaltfläche {{: | ||
# less / | # less / | ||
Zeile 1292: | Zeile 1116: | ||
/* CONFIG END. DO NOT CHANGE ANYTHING IN OR BEFORE THIS LINE. */ | /* CONFIG END. DO NOT CHANGE ANYTHING IN OR BEFORE THIS LINE. */ | ||
</ | </ | ||
+ | ====== Links ====== | ||
+ | * **⇐ [[centos: | ||
+ | * **⇒ [[centos: | ||
+ | * **[[centos: | ||
+ | * **[[wiki: | ||
+ | * **[[http:// | ||
+ | |||
+ | ~~DISCUSSION~~ | ||
+ |