====== Installationsanleitung Rio-Dossier-Server======
^ Version ^ Status ^ Datum ^ Author ^ URL ^
| 0.1| Erster Entwurf| 26.08.2020| Silvan Dux| |
| 0.2| Ergänzungen| TT.MM.JJJJ| Vorname Nachname| |
| 1.0| Review und Freigabe| TT.MM.JJJJ| Vorname Nachname| |
===== 1. Kurzfassung =====
//Installationsanleitung für die Module des Rio-Dossier-Servers "dossier-zh-ruga-01" auf einer Ubunutu 20.054 LTS Standardinstallation.//
===== 2. Installation PHP 7.4 =====
Installation PHP 7.4
Installing PHP 7.4
===== 3. Installation MongoDB =====
Installation
===== 4. Installation MySQL =====
Installtion
===== 5.1 Installation Nginx =====
Installation Nginx
Installing Nginx
Adjusting Firewall
Checking Webserver
In Browser "http://192.168.3.35" aufrufen
Nginx Server Block
[nano
Welcome to dossier.rafisa.net!
Success! The dossier.rafisa.net server block is working!
[
[nano
server {
listen 80;
listen [::]:80;
root /var/www/dossier.rafisa.net/html;
index index.html index.htm index.nginx-debian.html;
server_name dossier.rafisa.net www.dossier.rafisa.net;
location / {
try_files $uri $uri/ =404;
}
}
]
[nano
...
http {
...
server_names_hash_bucket_size 64;
...
}
...
]
===== 5.2 Installation Nginx SSL =====
Creating SSL Certificate
[nano
ssl_certificate /etc/ssl/certs/nginx-selfsigned.crt;
ssl_certificate_key /etc/ssl/private/nginx-selfsigned.key;
]
[nano
ssl_protocols TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/nginx/dhparam.pem;
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;
ssl_ecdh_curve secp384r1; # Requires nginx >= 1.1.0
ssl_session_timeout 10m;
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off; # Requires nginx >= 1.5.9
ssl_stapling on; # Requires nginx >= 1.3.7
ssl_stapling_verify on; # Requires nginx => 1.3.7
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 5s;
# Disable strict transport security for now. You can uncomment the following
# line if you understand the implications.
# add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
]
[nano
server {
listen 80;
listen [::]:80;
server_name dossier.rafisa.net www.dossier.rafisa.net;
return 302 https://$server_name$request_uri;
}
server {
# SSL configuration
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
include snippets/self-signed.conf;
include snippets/ssl-params.conf;
server_name dossier.rafisa.net www.dossier.rafisa.net;
root /var/www/dossier.rafisa.net/html;
index index.html index.htm index.nginx-debian.html;
}
]
[nano
return 301 https://$server_name$request_uri;
]
===== 5.3 Installation Nginx HTTP2 ====
HTTP2 Nginx
Prerequisites
TLS/SSL Certificate für den Server
Adding SSL Certificate
Config
[nano
server {
listen 80;
listen [::]:80;
server_name dossier.rafisa.net www.dossier.rafisa.net;
return 301 https://$server_name$request_uri;
}
server {
# SSL configuration
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
include snippets/self-signed.conf;
include snippets/ssl-params.conf;
server_name dossier.rafisa.net www.dossier.rafisa.net;
root /var/www/dossier.rafisa.net/html;
index index.html index.htm index.nginx-debian.html;
ssl_certificate /etc/nginx/ssl/dossier.rafisa.net.crt;
ssl_certificate_key /etc/nginx/ssl/dossier.rafisa.net.key;
}
]
[#Add line after ssl_prefer_server_ciphers on;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;
]
[nano
server {
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
root /var/www/dossier.rafisa.net/html;
index index.html index.htm index.nginx-debian.html;
server_name 192.168.3.35;
location / {
try_files $uri $uri/ =404;
}
ssl_certificate /etc/nginx/ssl/dossier.rafisa.net.crt;
ssl_certificate_key /etc/nginx/ssl/dossier.rafisa.net.key;
ssl_dhparam /etc/nginx/ssl/dhparam.pem;
}
server {
listen 80;
listen [::]:80;
server_name 192.168.3.35;
return 301 https://$server_name$request_uri;
}
]
===== 6. Quellenverzeichnis =====
-Installation Ngnix Ubunutu 20.04 (https://www.digitalocean.com/community/tutorials/how-to-install-nginx-on-ubuntu-20-04)
-Installation Nginx Self-Signed SSL Ubuntu 18.04(https://www.digitalocean.com/community/tutorials/how-to-create-a-self-signed-ssl-certificate-for-nginx-in-ubuntu-18-04)
-Installation Nginx HTTP2 Ubuntu 18.04 (https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-with-http-2-support-on-ubuntu-18-04)