Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- connect_wise_control [2017/05/13 12:27] – Externe Bearbeitung 127.0.0.1
+++ connect_wise_control [2017/05/13 12:40] (aktuell) – [Connect Wise Control configuration] matthias
@@ Zeile 28: / Zeile 28: @@
   apt update
 And install "certbot" for Apache:
-  apt-get install python-certbot-apache -t jessie-backports
+  apt install python-certbot-apache -t jessie-backports
 ==== Apache configuration ====
+First modify "/etc/apache2# cat ports.conf" and restrict Apache to listen only the the first IP. You may add a IPv6 address if you like.
-Port 80 for Let's Encrypt setup. Initially comment out the rewrite rules, run
+<code>
+Listen 80
-  certbot --apache
+<IfModule ssl_module>
+	Listen 1.2.3.4:443
+	Listen [2a00:100:200:300::1]:443
+</IfModule>
-This will create the file "000-default-le-ssl.conf".
+<IfModule mod_gnutls.c>
+	Listen 1.2.3.4:443
+	Listen [2a00:100:200:300::1]:443
+</IfModule>
+</code>
-/etc/apache2/sites-enabled/000-default.conf
+Initial setup of "/etc/apache2/sites-enabled/000-default.conf " with port 80 for Let's Encrypt setup.
+<code>
+<VirtualHost *:80>
+	ServerName web.example.com
+	ServerAdmin webmaster@example.com
+	DocumentRoot /var/www/html
+	ErrorLog ${APACHE_LOG_DIR}/error.log
+	CustomLog ${APACHE_LOG_DIR}/access.log combined
+</VirtualHost>
+</code>
+Now run:
+  certbot --apache
+This will create the file "/etc/apache2/sites-enabled/000-default-le-ssl.conf" and modifies "/etc/apache2/sites-enabled/000-default.conf" to read:
 <code>
@@ Zeile 55: / Zeile 81: @@
 </code>
-It is important to explicitly bind Apache to the IP addresses intended for the web interfaces as Apache by default binds to all IP addresses and we want to use port 443 on the second address for the relay. Run:
+It is important to explicitly bind Apache to the IP addresses intended for the web interfaces as Apache by default binds to all IP addresses and we want to use port 443 on the second address for the relay.
-  certbot --apache
-and follow the instructions.
 Then modify the file "/etc/apache2/sites-enabled/000-default-le-ssl.conf" to read:
 <code>
-<VirtualHost 109.75.177.113:443>
+<VirtualHost 1.2.3.4:443>
 	ServerName web.example.com
@@ Zeile 119: / Zeile 141: @@
 Edit the key "RelayListenUri" to bind the relay to the additional IP and port 443:
-  <add key="RelayListenUri" value="relay://93.190.68.37:443/">
+  <add key="RelayListenUri" value="relay://5.6.7.8:443/">
   </add>