nginx и apache начальная конфигурация админки и кабинета

NGINX
Админка
admin_vhost.conf

server {
    listen *:80;
    server_name admin.ispnet.demo;

    rewrite ^  https://$server_name/$1 permanent;
}

server {
    listen *:443;
    server_name admin.ru
                IPSERVER;

    ssl                     on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers   on;
    ssl_certificate         /etc/nginx/conf.d/ssl/ca.crt;
    ssl_certificate_key     /etc/nginx/conf.d/ssl/ca.key;

    access_log /var/log/nginx/admin_access.log;
    error_log /var/log/nginx/admin_error.log;
    root /var/www/mikbill/admin;
 
    index index.php;
    location / {
        root   /var/www/mikbill/admin;
        index  index.php;
        try_files $uri $uri/ /index.php?$args;
    }
    
    location ~* ^/(app/|res/balanse/|res/convert/|res/convert2/|res/convert3/|res/history/|res/pcq/|res/shapers/|res/sms/|res/smspilot/|res/smsukr/|res/ssh/|res/w.qiwi.ru/|sys/scripts/|sys/updates/).*\.(xml|sh|php|log|sql|txt)$ {deny all;}

    location ~ \.php$ {
        include /etc/nginx/fastcgi_params;
        fastcgi_pass  unix:/var/run/php-worker-socket;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /var/www/mikbill/admin/$fastcgi_script_name;
    }
}





Кабинет
stat_vhost.conf

server {
    listen *:80;
    server_name stat.ispnet.demo;
    rewrite ^  https://$server_name/$1 permanent;
}

server {
    listen *:443;
    server_name stat.ru;

    ssl                     on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers   on;
    ssl_certificate         /etc/nginx/conf.d/ssl/ca.crt;
    ssl_certificate_key     /etc/nginx/conf.d/ssl/ca.key;

    access_log /var/log/nginx/stat_access.log;
    error_log /var/log/nginx/stat_error.log;
    root /var/www/mikbill/stat;

index main.php;
    location / {
        root   /var/www/mikbill/stat;
        index  main.php;
        try_files $uri $uri/ /index.php?$args;
    }
    location ~* ^/(app/|res/balanse/|res/convert/|res/convert2/|res/convert3/|res/history/|res/pcq/|res/shapers/|res/sms/|res/smspilo
t/|res/smsukr/|res/ssh/|res/w.qiwi.ru/|sys/scripts/|sys/update/).*\.(xml|sh|php|log|sql|txt|properties)$ {deny all;}

    location ~ \.php$ {
        include /etc/nginx/fastcgi_params;
        fastcgi_pass  unix:/var/run/php-worker-socket;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /var/www/mikbill/stat/$fastcgi_script_name;
    }
}


Карты
map_vhost.conf

server {
    listen *:443;
    server_name  map.site38.ru ;

    ssl                     on;
    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    ssl_ciphers HIGH:!aNULL:!MD5;
    ssl_prefer_server_ciphers   on;
    ssl_certificate         /etc/nginx/conf.d/ssl/ca.crt;
    ssl_certificate_key     /etc/nginx/conf.d/ssl/ca.key;

    access_log /var/log/nginx/map_access.log;
    error_log /var/log/nginx/map_error.log;
    root /var/www/mikbill/map;

    index index.php;
    location / {
        root   /var/www/mikbill/map;
        index  index.php;
        try_files $uri $uri/ /index.php?$args;
    }

    location ~* ^/(app/|res/balanse/|res/convert/|res/convert2/|res/convert3/|res/history/|res/pcq/|res/shapers/|res/sms/|res/smspilot/|res/smsukr/|res/ssh/|res/w.qiwi.ru/|sys/scripts/|sys/updates/).*\.(xml|sh|php|log|sql|txt)$ {deny all;}

    location ~ \.php$ {
        include /etc/nginx/fastcgi_params;
        fastcgi_pass  unix:/var/run/php-worker-socket;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME /var/www/mikbill/map/$fastcgi_script_name;
    }
}


APACHE
Админка
<VirtualHost *:443>
    ServerAdmin admin@ispnet.demo
    ServerName admin.ispnet.demo
    ErrorLog /var/log/httpd/admin.ispnet.demo_error_log
    CustomLog /var/log/httpd/admin.ispnet.demo_access_log combined
    DocumentRoot  /var/www/mikbill/admin

    <Directory "/var/www/mikbill/admin">
                AllowOverride All
                Options FollowSymlinks Includes
                allow from all
    </Directory>
    SSLEngine on
    SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
    SSLCertificateFile /etc/pki/tls/certs/localhost.crt

    <IfModule setenvif_module>
        BrowserMatch ".*MSIE.*" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
    </IfModule>
</VirtualHost>

<VirtualHost *:80>
    ServerName admin.ispnet.demo
    ServerAdmin admin@ispnet.demo
    Redirect permanent / https://admin.ispnet.demo/
</Virtualhost>

Кабинет
<VirtualHost *:443>
    ServerAdmin admin@ispnet.demo
    ServerName stat.ispnet.demo
    ErrorLog /var/log/httpd/stat.ispnet.demo_error_log
    CustomLog /var/log/httpd/stat.ispnet.demo_access_log combined
    DocumentRoot  /var/www/mikbill/stat

    <Directory "/var/www/mikbill/stat">
                AllowOverride All
                Options FollowSymlinks Includes
                allow from all
    </Directory>
    SSLEngine on
    SSLCertificateKeyFile /etc/pki/tls/private/localhost.key
    SSLCertificateFile /etc/pki/tls/certs/localhost.crt

    <IfModule setenvif_module>
        BrowserMatch ".*MSIE.*" \
        nokeepalive ssl-unclean-shutdown \
        downgrade-1.0 force-response-1.0
    </IfModule>
</VirtualHost>

<VirtualHost *:80>
    ServerName stat.ispnet.demo
    ServerAdmin admin@ispnet.demo
#    Redirect permanent / https://stat.ispnet.demo/
    ErrorLog /var/log/httpd/stat.ispnet.demo_error_log
    CustomLog /var/log/httpd/stat.ispnet.demo_access_log combined
    DocumentRoot  /var/www/mikbill/stat

    <Directory "/var/www/mikbill/stat">
                AllowOverride All
                Options FollowSymlinks Includes
                allow from all
    </Directory>
</Virtualhost>

Самоподписные сертификаты
/etc/nginx/conf.d/ssl
ca.crt

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----
MIIFrDCCA5SgAwIBAgIQOPZFweJdkSzOOys5EjF0DTANBgkqhkiG9w0BAQsFADBV
MQswCQYDVQQGEwJDTjEaMBgGA1UEChMRV29TaWduIENBIExpbWl0ZWQxKjAoBgNV
BAMTIUNlcnRpZmljYXRpb24gQXV0aG9yaXR5IG9mIFdvU2lnbjAeFw0xNDExMDgw
MDU4NThaFw0yOTExMDgwMDU4NThaMFUxCzAJBgNVBAYTAkNOMRowGAYDVQQKExFX
b1NpZ24gQ0EgTGltaXRlZDEqMCgGA1UEAxMhV29TaWduIENBIEZyZWUgU1NMIENl
cnRpZmljYXRlIEcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47SA
DmswUIIvH+edv/h8QiXtrmHE64aHI38RH8CTXxuSkB53jLx29/sKpdV9rNxLGNhY
Lt9GazQPRWRghMLrmg5R1CpUUT4nO2Rohm98awA8mfZMqEUnraXLKzftWcNSTE/e
NJzyt9H6WMvlYp5VRly3xY04JDXvlyx8ZRAN75+XCNXlsxJ6kt3+iA+PpK+9xdY2
90Eb6Fndhv81v+3k0aCTblGomcvf3b5xiMPasWXMe5XEZo++TgZ/m1OMazzOlyaC
Hxcwuj/I3swLobTvEj2Tywgw5xqYl4A6JoSP/nN0lVMPUbKqiVf0lkByEx3kZ5hO
j8ZAC/UdDEUt4NWSgwIDAQABo4IBdjCCAXIwDgYDVR0PAQH/BAQDAgEGMB0GA1Ud
JQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATASBgNVHRMBAf8ECDAGAQH/AgEAMDAG
A1UdHwQpMCcwJaAjoCGGH2h0dHA6Ly9jcmxzMS53b3NpZ24uY29tL2NhMS5jcmww
cgYIKwYBBQUHAQEEZjBkMCcGCCsGAQUFBzABhhtodHRwOi8vb2NzcDEud29zaWdu
LmNvbS9jYTEwOQYIKwYBBQUHMAKGLWh0dHA6Ly9haWExLndvc2lnbi5jb20vY2Ex
ZzItc2VydmVyMS1mcmVlLmNlcjAdBgNVHQ4EFgQU0qcWIHyv2ZWe60MKGfLguXQO
qMcwHwYDVR0jBBgwFoAU4WbPDtHxs0u3BiAU/ocS1fb++z4wRwYDVR0gBEAwPjA8
Bg0rBgEEAYKbUQYBAgIBMCswKQYIKwYBBQUHAgEWHWh0dHA6Ly93d3cud29zaWdu
LmNvbS9wb2xpY3kvMA0GCSqGSIb3DQEBCwUAA4ICAQCWWt+WkRdokF0vtDIVgAMD
C+kct3Ns2qj6lN3dPjQrLoCTbPqmZ9MbeoJBzp7/P++yg2qe/DL9RPOCZqrPRC+z
N0HweRLjAieGSJK+z1bXy9fnHiWdQdsK5zMSWK2V2J7Ut5Upuv7/34Ckd1sVYg9p
+IdtdOqFonZdn5UuA7yK+YqsgWRQ8gtFS+yXMDl05ad+FiRiK1DxXNhPzS6iGCWj
zvYfYN0V3iAVGw5/r4XZQKwHKjTdUbAaqOYOn1/bRnDm9dklHPAd5UKhLSKdbhHJ
jaZlvA6qdnPIVmAv+z+GuaX1M+/VEx9JTDgHnlkiWsdO2SUkulNw/GMqVFHrw0tB
feToPCyldlq/2UyoDa5SbqVdmD1skG14H8NwlYYHP1Tj6oqBZGKajzGveyp+kiLD
jsxTrMecmRErSD9ScStuwOGzCuUDYteJGChMCo0/C0WJgYuIpJPCf0TlHltAAPwv
zDv4ankx/UQUto9IhUyrCp27Nwr8URng/llqO49gYqcHgq8IZqDy2mAC6tg0fldx
obX+adf73Vqc8//E6s10+pRw01iSzq8S5G7r3bivHeJl1EbqCz7jaA4KTCeDUJEG
xnv4+psm7SwOZ7hs5SyYbV96KMOEPAMN9+ID4ZTCWCf4TYFZL/F8YclXXb3cnIDQ
ZN98h3iF5pSLcIsFR+TIew==
-----END CERTIFICATE-----

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----


ca.key

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

Комментарии

Популярные сообщения из этого блога

mikbill расшифровка завершений сессий

Accel-ppp команды

Zabbix agent установка и настройка