Nextcloud mkati ndi kunja kwa OpenLiteSpeed : khazikitsani ma proxying
Kodi ndingakhazikitse bwanji OpenLiteSpeed kuti ndisinthe projekiti ku Nextcloud pa netiweki yamkati?
Chodabwitsa n'chakuti, kusaka kwa Habré kwa OpenLiteSpeed sikupereka kalikonse! Ndifulumira kukonza chisalungamo ichi, chifukwa LSWS ndi seva yabwino pa intaneti. Ndimakonda chifukwa cha liwiro lake komanso mawonekedwe ake apamwamba pa intaneti:
Ngakhale OpenLiteSpeed ndi yotchuka kwambiri ngati WordPress "accelerator", m'nkhani yamasiku ano ndikuwonetsa kugwiritsa ntchito kwake. Ndiye kubwezeredwa kwa zopempha (reverse proxy). Mukunena kuti ndizofala kugwiritsa ntchito nginx pa izi? Ndivomera. Koma zimawawa kwambiri tidakondana ndi LSWS!
Kuyimilira kuli bwino, koma kuti? Muutumiki wocheperako - Nextcloud. Timagwiritsa ntchito Nextcloud kupanga "mtambo wogawana mafayilo" mwachinsinsi. Kwa kasitomala aliyense, timagawa VM yosiyana ndi Nextcloud, ndipo sitikufuna kuwawonetsa "kunja". M'malo mwake, timapempha ma proxy kudzera pa proxy yofanana. Yankho ili limalola:
1) chotsani seva yomwe deta ya kasitomala imasungidwa pa intaneti ndi
2) sungani ma ip-adilesi.
Chithunzicho chikuwoneka motere:
Zikuwonekeratu kuti chiwembucho ndi chosavuta, chifukwa bungwe la mautumiki apa intaneti si mutu wankhani yamasiku ano.
Komanso m'nkhaniyi ndisiya kuyika ndikusintha koyambira kwamtambo wotsatira, makamaka popeza Habré ali ndi zida pamutuwu. Koma ndikuwonetsa zosintha, popanda Nextcloud sigwira ntchito kumbuyo kwa proxy.
Kupatsidwa:
Nextcloud imayikidwa pa host 1 ndikukonzedwa kuti igwire ntchito pa http (popanda SSL), ili ndi mawonekedwe amtundu wamba komanso "imvi" IP adilesi 172.16.22.110.
Tiyeni tikonze OpenLiteSpeed pa host 2. Ili ndi zolumikizira ziwiri, zakunja (zowoneka pa intaneti) komanso zamkati ndi adilesi ya IP pa netiweki 172.16.22.0/24
Adilesi ya IP ya Host 2 yakunja ndi dzina la DNS cloud.connect.link
Ntchito:
Pezani pa intaneti kudzera pa ulalo 'https://cloud.connect.link' (SSL) kupita ku Nextcloud pa netiweki yamkati.
Tchulani magawo: URI = /, Seva ya pa intaneti = nextcloud_1 (dzina kuchokera pa sitepe yapitayi)
Yambitsaninso LSWS. Izi zimachitika ndikudina kamodzi kuchokera pa intaneti, zozizwitsa! (wonyamula mbewa cholowa amalankhula mwa ine)
Timayika satifiketi, konzani https. Ndondomeko yopezera satifiketi tidzazisiya, kuvomereza kuti tili nazo kale ndikugona ndi kiyi mu /etc/letsencrypt/live/cloud.connect.link directory.
Patsamba la SSL, tchulani njira yopita ku kiyi ndi satifiketi:
"Womvera" wapangidwa, tsopano mu gawo la Virtual Host Mappings tidzawonjezera wolandira wathu kwa izo:
Ngati LSWS ingokhala proxy ku ntchito imodzi, kasinthidwe katha kumalizidwa. Koma tikukonzekera kuzigwiritsa ntchito potumiza zopempha ku "zochitika" zosiyanasiyana kutengera dzina la domain. Ndipo madera onse adzakhala ndi ziphaso zawo. Chifukwa chake, muyenera kupita ku virtualhost config ndikutchulanso fungulo lake ndi satifiketi mu tabu ya SSL. M'tsogolomu, izi ziyenera kuchitidwa kwa wolandira watsopano aliyense.
Zimatsalira kukonza url kulembedwanso kuti zopempha za http zitumizidwe ku https. (Mwa njira, izi zidzatha liti? Ndi nthawi yoti asakatuli ndi mapulogalamu ena apite ku https mwachisawawa, ndikupita ku No-SSL pamanja ngati kuli kofunikira).
Yatsani Yambitsani Kulembanso ndi kulemba Malamulo Olembanso:
Chifukwa cha kusamvetsetsana kwachilendo, ndizosatheka kugwiritsa ntchito malamulo a Lembaninso ndikuyambiranso mwachizolowezi Graceful. Chifukwa chake, tiyambitsanso LSWS osati mwaulemu, koma mwamwano komanso moyenera:
sudo systemctl kuyambitsanso lsws.service
Kuti seva imvetsere ku port 80, tiyeni tipange Womvera wina. Tiyeni tiyitchule kuti http, tchulani doko la 80 komanso kuti silikhala Lotetezeka:
Pofananiza ndi makonda a omvera a https, tiyeni tilumikizane nawo.
Tsopano LSWS imvera pa port 80 ndikutumiza zopempha ku 443 kuchokera pamenepo, ndikulembanso ulalo.
Pomaliza, ndikupangira kutsitsa mulingo wodula mitengo wa LSWS, womwe umayikidwa ku Debug mwachisawawa. Munjira iyi, zipika zimachulukana pa liwiro la mphezi! Nthawi zambiri, mlingo wa Chenjezo ndi wokwanira. Pitani ku Kusintha kwa Seva> Log:
Izi zimamaliza kasinthidwe ka OpenLiteSpeed ngati woyimira kumbuyo. Apanso, yambitsaninso LSWS, tsatirani ulalo https://cloud.connect.link ndi kuwona:
Kuti Nextcloud itilowetse, tiyenera kuwonjezera domain cloud.connect.link pamndandanda wodalirika. Tiyeni tipite kusintha config.php. Ndinayika Nextcloud pokhapokha ndikuyika Ubuntu ndipo config ili pano: /var/snap/nextcloud/current/nextcloud/config.
Onjezani magawo a 'cloud.connect.link' ku kiyi ya trusted_domains:
Kuphatikiza apo, mukusintha komweko, muyenera kufotokoza adilesi ya IP ya projekiti yathu. Ndikuwonetsani kuti adilesiyo iyenera kufotokozedwa yomwe ikuwoneka ku seva ya Nextcloud, i.e. IP ya mawonekedwe a LSWS akomweko. Popanda sitepe iyi, mawonekedwe a intaneti a Nextcloud amagwira ntchito, koma mapulogalamu saloledwa.