Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Kedu ka m ga-esi hazie OpenLiteSpeed ​​​​ka ọ gbanwee proxy na Nextcloud dị na netwọkụ m?

N'ụzọ dị ịtụnanya, ọchụchọ na Habré maka OpenLiteSpeed ​​​​anaghị ewepụta ihe ọ bụla! M na-eme ngwa ngwa imezi ikpe na-ezighị ezi a, n'ihi na LSWS bụ sava weebụ kwesịrị ekwesị. Ahụrụ m ya n'anya maka ọsọ ya na interface nlekọta weebụ mara mma:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

N'agbanyeghị eziokwu na OpenLiteSpeed ​​​​bụ onye ama ama dị ka WordPress “ihe ngwa ngwa,” n'isiokwu taa, m ga-egosi otu ngwa ya. Ya bụ, tụgharịa proxying nke arịrịọ. Ị ga-asị na ọ na-adịkarịkarị iji nginx maka nke a? Aga m ekweta. Mana anyị hụrụ LSWS n'anya n'ezie!

Proxying ok, mana kedu ebe? Ọrụ magburu onwe ya bụkwa Nextcloud. Anyị na-eji Nextcloud mepụta "igwe ojii na-ekekọrịta faịlụ" nkeonwe. Maka onye ahịa ọ bụla, anyị na-ekenye VM dị iche na Nextcloud, ma anyị achọghị ikpughe ha "n'èzí". Kama, anyị na-arịọ proxy site na proxy nkịtị. Ihe ngwọta a na-enye gị ohere:
1) wepụ ihe nkesa nke echekwara data onye ahịa na Ịntanetị na
2) chekwaa adreesị IP.

Ihe osise dị ka nke a:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

O doro anya na eserese ahụ dị mfe, n'ihi na ịhazi akụrụngwa ọrụ weebụ abụghị isiokwu nke akụkọ taa.

Ọzọkwa n'isiokwu a, m ga-ahapụ nwụnye na isi nhazi nke nextcloud, karịsịa ebe ọ bụ na e nwere ihe na isiokwu a na Habré. Mana m ga-egosi gị ntọala nke na-enweghị Nextcloud agaghị arụ ọrụ n'azụ proxy.

Nyere:
A na-etinye Nextcloud na onye ọbịa 1 ma hazie ya ka ọ rụọ ọrụ site na http (na-enweghị SSL), nwere naanị interface netwọk mpaghara yana adreesị IP "isi awọ" 172.16.22.110.
Ka anyị hazie OpenLiteSpeed ​​​​on host 2. Ọ nwere oghere abụọ, nke mpụga (na-elele ịntanetị) yana nke dị n'ime nwere adreesị IP na netwọkụ 172.16.22.0/24.
Aha DNS cloud.connect.link na-eduga na adreesị IP nke mpụga interface nke onye ọbịa 2

Ọrụ:
Nweta site na ịntanetị site na iji njikọ 'https://cloud.connect.link' (SSL) na Nextcloud na netwọk dị n'ime.

  • Ịwụnye OpenLiteSpeed ​​​​na Ubuntu 18.04.2.

Ka anyị tinye ebe nchekwa:

wget -O http://rpms.litespeedtech.com/debian/enable_lst_debain_repo.sh | sudo bash
sudo apt-nweta mmelite

tinye, gbaa ọsọ:

sudo apt-nweta wụnye openlitespeed
sudo /usr/local/lsws/bin/lswsctrl malite

  • Ntọlite ​​firewall pere mpe.

    sudo ufw kwe ka ssh
    sudo ufw ndabara kwe ka ọ pụta
    sudo ufw ndabara jụ mbata
    sudo ufw ekwe http
    sudo ufw ekwehttps
    sudo ufw ekwe si onye nlekọta gị n'ọdụ ụgbọ mmiri ọ bụla 7080
    sudo ufw enable

  • Ka anyị hazie OpenLiteSpeed ​​​​dị ka onye nnọchi anya azụ.
    Ka anyị mepụta akwụkwọ ndekọ aha maka virtualhost.

    cd /usr/local/lsws/
    sudo mkdirc Cloud.connect.link
    cd cloud.connect.link/
    sudo mkdir {conf, html, logs}
    sudo chown lsadm:lsadm ./conf/

Ka anyị hazie virtualhost site na interface weebụ LSWS.
Mepee njikwa url http://cloud.connect.link:7080
Nbanye/paswọọdụ ndabara: admin/123456

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Tinye onye nnabata mebere (Ndị ọbịa mebere> Tinye).
Mgbe ị na-agbakwụnye, ozi njehie ga-apụta na-egosi na faịlụ nhazi adịghị. Nke a bụ ihe nkịtị na enwere ike idozi ya site na ịpị Pịa ka ịmepụta.

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Na General tab, ezipụta Document Root (ọ bụ ezie na ọ dịghị mkpa, nhazi ahụ agaghị apụ na-enweghị ya). Ngalaba Aha, ma ọ bụrụ na akọwapụtaghị, ga-esi na Virtual Host Name, nke anyị kpọrọ aha nke ngalaba anyị.

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Ugbu a ọ bụ oge icheta na ọ bụghị naanị sava weebụ, kama ọ bụ proxy na-atụgharị. Ntọala ndị a ga-agwa LSWS ihe ị ga-eji proxy na ebe. N'ime ntọala virtualhost, mepee taabụ Mpụga App wee tinye ngwa ọhụrụ nke ụdị sava Weebụ:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Anyị na-egosi aha na adreesị. Ị nwere ike ịkọwa aha aka ike, mana ị ga-echeta ya; Adreesị ahụ bụ ebe Nextcloud bi na netwọk dị n'ime:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

N'otu ntọala virtualhost ahụ, mepee taabụ Context wee mepụta ọnọdụ ọhụrụ nke ụdị Proxy:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Ezipụta paramita ndị a: URI = /, sava webụ = nextcloud_1 (aha sitere na nzọụkwụ gara aga)

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Malitegharịa ekwentị LSWS. A na-eme nke a site na otu ọpịpị site na ntanetị weebụ, ọrụ ebube! (onye na-ebu òké na m na-ekwu okwu)

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying
Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

  • Anyị wụnye asambodo ma hazie https.
    Usoro maka inweta asambodo anyị ga-ahapụ ya wee kweta na anyị enweela ya na ọ dabere na igodo dị na /etc/letsencrypt/live/cloud.connect.link directory.

Ka anyị mepụta "onye na-ege ntị" (Ndị na-ege ntị> Tinye), kpọọ ya "https". Ka anyị rụtụ aka na ọdụ ụgbọ mmiri 443 wee mara na ọ ga-echekwa:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Na taabụ SSL, gosi ụzọ isi na asambodo:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Emepụtala “onye na-ege ntị”, ugbu a na ngalaba Virtual Host Mappings anyị ga-agbakwunye onye nnabata anyị na ya:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Ọ bụrụ na LSWS ga-abụ naanị onye nnọchi anya otu ọrụ, enwere ike ịmechaa nhazi ahụ. Mana anyị na-eme atụmatụ iji ya ziga arịrịọ na "ụdị" dị iche iche dabere na aha ngalaba. Na ngalaba niile ga-enwe asambodo nke ha. Ya mere, ị ga-aga na virtualhost config na ọzọ ezipụta igodo ya na akwụkwọ na SSL taabụ. N'ọdịnihu, a ga-eme nke a maka onye ọbịa ọhụrụ ọ bụla.

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Naanị ihe fọdụrụ bụ ịhazigharị url ka e wee ziga arịrịọ http na https.
(Site n'ụzọ, olee mgbe nke a ga-agwụ? Ọ bụ oge maka ihe nchọgharị na ngwanrọ ndị ọzọ iji gbanwee gaa na https na ndabara, na-ebugharị na-enweghị SSL aka ma ọ bụrụ na ọ dị mkpa).
Gbanwuo Kwado Degharịa wee detuo iwu Degharịa:

Degharịa % {SERVER_PORT} 80
Tinyegharịa Iwu ^(.*)$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

N'ihi nghọtahie dị ịtụnanya, ị nweghị ike itinye iwu Megharịa site na iji mmalite nke amara amara. Ya mere, ka anyị malitegharịa LSWS ọ bụghị nke ọma, kama n'ụzọ siri ike na nke ọma:

sudo systemctl malitegharịa lsws.service

Ka ihe nkesa wee gee ọdụ ụgbọ mmiri 80, anyị ga-emepụta onye na-ege ntị ọzọ. Ka anyị kpọọ ya http, gosi ọdụ ụgbọ mmiri 80 na eziokwu na ọ ga-abụ enweghị nchekwa:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Site na ntụnyere na ịtọlite ​​onye na-ege https, ka anyị were ya mapụta onye nnabata anyị.

Ugbu a LSWS ga-ege ntị na ọdụ ụgbọ mmiri 80 wee ziga arịrịọ site na ya gaa na 443, na-edegharị url.
N'ikpeazụ, a na m akwado iweda ọkwa ntinye LSWS, nke edobere na Debug na ndabara. N'ụdị a, ndekọ na-amụba n'ọsọ ọkụ! Ọtụtụ mgbe, ọkwa ịdọ aka ná ntị zuru ezu. Gaa na nhazi nkesa> Debanye aha:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Nke a mezuru nhazi nke OpenLiteSpeed ​​​​dị ka onye nnọchi anya. Ọzọ anyị malitegharịrị LSWS, soro njikọ ahụ https://cloud.connect.link ma hụ:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Ka Nextcloud kwe ka anyị bata, anyị kwesịrị itinye ngalaba cloud.connect.link na ndepụta nke ndị tụkwasịrị obi. Ka anyị gaa dezie config.php. M etinyere Nextcloud na-akpaghị aka mgbe ị na-etinye Ubuntu na nhazi ahụ dị ebe a: /var/snap/nextcloud/current/nextcloud/config.
Tinye paramita 'cloud.connect.link' na igodo trusted_domains:

'trusted_domains' =>
n'usoro (
0 => '172.16.22.110',
1 => 'cloud.connect.link',
),

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

Na-esote, n'otu nhazi ahụ ịkwesịrị ịkọwa adreesị IP nke proxy anyị. Biko mara na a ga-akọwarịrị adreesị dị ka nke a na-ahụ anya na nkesa Nextcloud, ya bụ. LSWS obodo interface IP. Enweghị usoro a, interface weebụ Nextcloud na-arụ ọrụ, mana ngwa anaghị enye ikike.

'trusted_proxies' =>
n'usoro (
0 => '172.16.22.100',
),

Ọ dị mma, mgbe nke a gasịrị, anyị nwere ike ịbanye na interface ikike:

Nextcloud n'ime na n'èzí OpenLiteSpeed ​​​​: melite proxying

A doziri nsogbu! Ugbu a onye ahịa ọ bụla nwere ike iji "igwe ojii faịlụ" n'enweghị ihe ọ bụla na-eji URL nke onwe ha, ihe nkesa nwere faịlụ na-ekewapụ na Ịntanetị, ndị ahịa n'ọdịnihu ga-enweta ihe niile otu ma ọ bụghị otu adreesị IP ọzọ ga-emerụ ahụ.
Na mgbakwunye, ịnwere ike iji proxy reverse iji wepụta ọdịnaya kwụ ọtọ, mana n'ihe banyere Nextcloud nke a agaghị enye mmụba pụtara ìhè na ọsọ. Yabụ na nke a bụ nhọrọ na nhọrọ.

Obi dị m ụtọ ịkọrọ akụkọ a, enwere m olileanya na ọ ga-abara mmadụ uru. Ọ bụrụ na ị maara ụzọ ndị ọzọ mara mma ma dị irè maka idozi nsogbu a, m ga-enwe ekele maka nkwupụta gị!

isi: www.habr.com

Tinye a comment