Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Me pehea taku whakarite OpenLiteSpeed ​​​​ki te huri i te takawaenga ki Nextcloud i te whatunga o roto?

He mea whakamiharo, ko te rapu i runga i a Habré mo OpenLiteSpeed ​​​​kaore e hoatu he aha! Ka tere ahau ki te whakatika i tenei mahi he, na te mea he tūmau tukutuku tika a LSWS. He pai ki ahau mo tona tere me te atanga whakahaere tukutuku pai:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Ahakoa ko OpenLiteSpeed ​​​​te tino rongonui hei "whakatere" WordPress, i roto i te tuhinga o tenei ra ka whakaatu ahau i tetahi whakamahinga motuhake. Ara te takawaenga whakamuri o nga tono (takawaenga whakamuri). E kii ana koe he mea noa ake te whakamahi nginx mo tenei? Ka whakaae ahau. Engari he tino mamae ka aroha matou ki te LSWS!

He pai te takawaenga, engari kei hea? I roto i te ratonga tino ataahua - Nextcloud. Ka whakamahia e matou a Nextcloud ki te hanga i nga "kapua tiritahi konae" motuhake. Mo ia kiritaki, ka tohatohahia e matou he VM motuhake me Nextcloud, a kaore matou e hiahia ki te whakaatu i a raatau "waho". Engari, ka tono tono takawaenga ma te takawaenga whakamuri noa. Ka taea e tenei otinga:
1) tango i te tūmau e penapena ai nga raraunga kiritaki mai i te Ipurangi me te
2) tiakina nga wahitau ip.

Ko te kaupapa penei:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

E marama ana kua whakangwarihia te kaupapa, na te mea Ko te whakahaere o nga hanganga ratonga tukutuku ehara i te kaupapa o te tuhinga o tenei ra.

I roto ano i tenei tuhinga ka whakakorehia e ahau te whakaurunga me te whirihoranga taketake o te kapua kaawa, ina koa he rauemi kei runga i tenei kaupapa mo Habré. Engari ka tino whakaatu ahau i nga tautuhinga, kaore a Nextcloud e mahi i muri i te takawaenga.

Ka hoatu:
Kua whakauruhia a Nextcloud ki te kaihautu 1 me te whirihora ki te mahi i runga i te http (kaore he SSL), he atanga whatunga rohe anake me te wahitau IP "hina" 172.16.22.110.
Me whirihora a OpenLiteSpeed ​​​​i runga i te kaihautu 2. E rua ona atanga, o waho (tirohia ki te Ipurangi) me roto me tetahi wahitau IP i runga i te whatunga 172.16.22.0/24
Ko te wahitau IP atanga o waho o te Kaihautu 2 ko te ingoa DNS cloud.connect.link

He mahi:
Haere mai i te Ipurangi ma te hono 'https://cloud.connect.link' (SSL) ki Nextcloud i te whatunga o roto.

  • Te whakauru i te OpenLiteSpeed ​​​​i runga i te Ubuntu 18.04.2.

Me taapiri he putunga:

wget -O http://rpms.litespeedtech.com/debian/enable_lst_debain_repo.sh |sudo bash
sudo apt-tiki whakahou

tāuta, whakahaere:

sudo apt-tiki tāuta openlitespeed
sudo /usr/local/lsws/bin/lswsctrl timata

  • Tatūnga pātūahi iti.

    sudo ufw tukua ssh
    sudo ufw taunoa tukua puta
    sudo ufw taunoa te whakakahore i te taumai
    sudo ufw tukua http
    sudo ufw tukuahttps
    sudo ufw tukua mai to ope whakahaere ki tetahi tauranga 7080
    sudo ufw whakahohe

  • Whakaturia OpenLiteSpeed ​​​​hei takawaenga whakamuri.
    Me hanga whaiaronga i raro i te virtualhost.

    cd /usr/local/lsws/
    sudo mkdirc cloud.connect.link
    cd cloud.connect.link/
    sudo mkdir {conf,html, rangitaki}
    sudo chown lsadm:lsadm ./conf/

Me whirihora i te kaihautu mariko mai i te atanga tukutuku LSWS.
Whakatuwherahia te whakahaere url http://cloud.connect.link:7080
Takiuru taunoa/kupuhipa: admin/123456

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Tāpirihia he kaihautū mariko (Kaihautū Mariko > Tāpiri).
Ina taapiri, ka puta he karere hapa - kei te ngaro te konae whirihoranga. He mea noa tenei, ka whakatauhia ma te paatene i te paatene ki te hanga.

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

I roto i te ripa Whānui, whakapūtāhia te Pūtake Tuhinga (ahakoa kaore e hiahiatia ana, ka kore te whirihora e tango me te kore). Ko te Ingoa Rohe, ki te kore e tohua, ka tangohia mai i te Ingoa Kaihautū Mariko, i whakaingoatia e matou to matou ingoa rohe.

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Inaianei kua tae ki te wa ki te mahara ehara i te mea he tūmau tukutuku noa ta tatou, engari he takawaenga whakamuri. Ko nga tautuhinga e whai ake nei ka korero ki a LSWS he aha te takawaenga me te waahi. I roto i nga tautuhinga virtualhost, whakatuwherahia te ripa Taupānga Waho ka taapirihia he tono hou mo te momo tūmau Tukutuku:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Tauwhāitihia te ingoa me te wāhi noho. Ka taea e koe te tautuhi i tetahi ingoa noa, engari me maumahara koe, ka whai hua i nga waahanga e whai ake nei. Ko te wahitau te wahi e noho ana a Nextcloud i te whatunga o roto:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

I roto i nga tautuhinga kaihautu mariko ano, whakatuwherahia te ripa Horopaki ka waihangahia he horopaki hou o te momo Takawaenga:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Tauwhāitihia ngā tawhā: URI = /, Tūmau Tukutuku = nextcloud_1 (ingoa mai i te taahiraa o mua)

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Tīmatahia te LSWS. Ka mahia tenei ma te paato kotahi mai i te atanga tukutuku, nga merekara! (he kawe kiore tuku iho e korero ana i roto i ahau)

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri
Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

  • Ka hoatu e matou te tiwhikete, whirihora https.
    Ko te tikanga mo te whiwhi tiwhikete ka waiho e matou, whakaae kei a matou ano, ka takoto me te ki i roto i te /etc/letsencrypt/live/cloud.connect.link directory.

Me hanga he "whakarongo" (Listeners > Add), me karanga "https". Tohua ki te tauranga 443 ka mahara ka noho Haumaru:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

I roto i te ripa SSL, whakapūtā te ara ki te kī me te tiwhikete:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Kua hangahia te "kaiwhakarongo", inaianei kei roto i te waahanga Mahere Mahere Kaihautu Mariko ka taapirihia e taatau kaihautu mariko ki a ia:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Mena ka takawaenga te LSWS ki tetahi ratonga, ka taea te whakaoti i te whirihoranga. Engari kei te whakamahere matou ki te whakamahi ki te tuku tono ki nga "waahanga" rereke i runga i te ingoa rohe. A ka whai tiwhikete nga rohe katoa. Na reira, me haere koe ki te whirihora virtualhost me te tautuhi ano i tana matua me tana tiwhikete ki te ripa SSL. Hei nga ra kei mua, me mahi tenei mo ia kaihautu mariko hou.

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Ka noho tonu ki te whirihora i te tuhi url kia tukuna nga tono http ki https.
(Ae ra, ahea ka mutu? Kua tae ki te wa mo nga kaitirotiro me etahi atu rorohiko ki te haere ki https ma te taunoa, ka tuku atu ki te kore-SSL ma te ringa mena ka tika).
Whakakāngia Whakahohe Tuhi Anō ka tuhi Ture Tuhituhi Anō:

RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Na te pohehe kee, kare e taea te whakamahi i nga ture Tuhituhi ano me te timata ano a Graceful. Na reira, ka timata ano tatou i te LSWS ehara i te mea ataahua, engari i runga i te kino me te pai:

sudo systemctl tīmata anō lsws.service

Kia whakarongo ai te tūmau ki te tauranga 80, me hanga tetahi atu Kaiwhakarongo. Karangatia e tatou he http, tohua te tauranga 80 ka kore e Haumaru:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Ma te whakataurite ki te tautuhinga kaiwhakarongo https, me hono atu ta tatou ope mariko ki a ia.

Inaianei ka whakarongo a LSWS ki te tauranga 80 ka tuku tono ki te 443 mai i a ia, ka tuhi ano i te url.
Hei whakamutunga, ka tūtohu ahau ki te whakaheke i te taumata takiuru LSWS, kua tautuhia ki te Debug ma te taunoa. I tenei aratau, ka maha nga rakau i te tere uira! Mo te nuinga o nga keehi, he rawaka te taumata Whakatupato. Haere ki te Whirihoranga Tūmau > Rangitaki:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Ka oti te whirihoranga o OpenLiteSpeed ​​​​hei takawaenga whakamuri. Kia ano, whakaara ano i te LSWS, whai i te hono https://cloud.connect.link a ka kite:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Kia uru mai a Nextcloud ki roto, me taapiri te rohe cloud.connect.link ki te rarangi whakawhirinaki. Me haere tatou ki te whakatika config.php. I whakauruhia e ahau a Nextcloud aunoa i te wa e whakauru ana i te Ubuntu me te whirihora kei konei: /var/snap/nextcloud/current/nextcloud/config.
Tāpirihia te tawhā 'cloud.connect.link' ki te kī whakawhirinaki_domains:

'trusted_domains' =>
ngohi (
0 => '172.16.22.110',
1 => 'cloud.connect.link',
),

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

I tua atu, i roto i te whirihora ano, me tohu e koe te wahitau IP o to maatau takawaenga. Ka aro atu ahau ki te meka me tohu te wahitau ko te mea e kitea ana e te tūmau Nextcloud, i.e. Ko te IP o te atanga LSWS rohe. Ki te kore tenei taahiraa, ka mahi te atanga paetukutuku Nextcloud, engari kaore nga tono e whakamanahia.

'trusted_proxies' =>
ngohi (
0 => '172.16.22.100',
),

He pai, i muri i tera ka uru tatou ki te atanga whakamanatanga:

Nextcloud roto me waho OpenLiteSpeed: whakarite takawaenga whakamuri

Kua whakaoti rapanga! Inaianei ka taea e ia kaihoko te whakamahi haumaru i te "kapua konae" i tana ake url whaiaro, ka wehea te kaimau me nga konae mai i te Ipurangi, ka whiwhi nga kaihoko a muri ake nei nga mea katoa kaore e pa ki tetahi atu wahitau IP.
I tua atu, ka taea e koe te whakamahi i te takawaenga whakamuri ki te tuku i nga ihirangi pateko, engari i te keehi o Nextcloud, kaore tenei e nui ake te tere. Na he mea whiriwhiri me te kowhiri.

Kei te koa ahau ki te whakapuaki i tenei korero, ko taku tumanako ka whai hua ki tetahi. Mena kei te mohio koe ki nga tikanga huatau me te pai mo te whakaoti rapanga, ka mihi ahau mo nga korero!

Source: will.com

Tāpiri i te kōrero