This is an old revision of the document!
Oracle Cloud
Sign Up
Network Setup
- 메뉴 → 네트워킹 → 개요
- 인터넷 접속을 통한 VCN 생성; VCN 마법사 시작
- vcn 이름
- vcn cidr 블록; 10.0.0.0/16
- 공용 서브넷 cidr 블록; 10.0.0.0/24
- 전용 서버넷 cidr 블록; 10.0.1.0/24
- 생성
- 가상 클라우드 네트워크 보기
- 리소스 → 보안목록 → Default Security List for {VCN 이름}
- 수신규칙추가
- 소스유형; cidr
- 소스; 0.0.0.0/0
- IP프로토콜; TCP
- 대상 포트 범위; 80, 443
- 수신규칙추가
Create SSH Key
$ ssh-keygen $ pbcopy < ~/.ssh/id_rsa.pub or $ cat ~/.ssh/id_rsa.pub
$ vi ~/.ssh/config Host {alias for connect} HostName {ip addredss} User {user for login} IdentityFile ~/.ssh/id_rsa
In the Oracle Virtual Machine
$ vi ~/.ssh/authorized_key {paste generated ssh key}
VM 인스턴스 생성
- 메뉴 → 컴퓨트 → 인스턴스
- 인스턴스 생성
- 배치 및 하드웨어 구성 → 편집
- 이미지 → 이미지 변경
- 플랫폼 이미지에서 운영체제 선택
- 이미지 선택
- SSH 키 입력
- 생성
Connect Compute Instance to Network(VNIC)
- 메뉴 → 네트워킹 → 개요
- IP관리 → 예약된 공용 IP 주소
- 예약된 공용 IP 주소 이름;
- 예약된 공용 IP
- 메뉴 → 컴퓨트 → 인스턴스
- 리소스 → 연결된 VNIC
- 리소스 → IP주소
- … → 편집
- 공용 IP 유형; 공용 IP 없음
- 업데이트
- … → 편집
- 공용 IP 유형; 예약된 공용 IP → 기존 예약된 IP 주소 선택;
Server Settings
timezone
$ sudo dpkg-reconfigure tzdata
update and upgrade
$ sudo apt update $ sudo apt upgrade
Install for Web Server
Apache
basic installation
$ sudo apt install apache2 $ sudo apt upgrade $ sudo apache2ctl configtest $ sudo vi /etc/apache2/apache2.conf ServerName {IP or domain} $ sudo systemctl restart apache2
When connection refused
$ sudo iptables-save > ~/iptables-rules $ sudo iptables -P INPUT ACCEPT $ sudo iptables -P OUTPUT ACCEPT $ sudo iptables -P FORWARD ACCEPT $ sudo iptables -F $ sudo iptables-save $ sudo systemctl restart apache2
apply HTTP/2 , HTTPS TLS v1.3
$ sudo add-apt-repository ppa:ondrej/apache2 $ sudo apt update $ sudo apt upgrade $ sudo apt install apache2 libapache2-mod-fcgid libapache2-mod-proxy-uwsgi libapache2-mod-xforward openssl
version check
$ /usr/sbin/apache2 -v or -V $ /usr/bin/openssl version
set virtual host
$ sudo vi /etc/apache2/sites-available <VirtualHost *:80> ServerName localhost DocumentRoot /var/www/dokuwiki <Directory ~ "/var/www/dokuwiki/(bin/|conf/|data/|inc/)"> <IfModule mode_authz_core.c> AllowOverride All Require all denied </IfModule> <IfModule !mod_authz_core.c> Order allow,deny Deny from all </IfModule> </Directory> ErrorLog /var/log/apache2/dokuwiki_error.log CustomLog /var/log/apache2/dokuwiki_access.log combined </VirtualHost> $ sudo a2ensite dokuwiki $ sudo systemctl restart apache2
<del>MySQL</del> mariaDB
install
<del>$ sudo apt install mysql-server mysql-client</del> $ sudo apt install mariadb-server
change login method to password(optional)
mysql> UPDATE mysql.user SET plugin='mysql_native_password', authentication_string=PASSWORD('{password}') WHERE User='root'; mysql> commit; mysql> FLUSH PRIVILEGES; mysql> quit
settings
$ sudo vi /etc/mysql/mysql.conf.d/mysqld.cnf $ sudo vi /etc/mysql/mariadb.conf.d/50-server.cnf bind-address = 0.0.0.0 $ sudo systemctl restart mysql
add user
$ sudo mysql mysql> use mysql; mysql> create user {id}@'%' identified by '{password}'; mysql> grant all privileges on *.* to '{id}'@'%'; mysql> flush privileges;
Php
$ sudo apt update $ sudo apt upgrade $ sudo apt install php php-gd php-xml php-json php7.4-sqlite3
2021년 1월 22일, 금요일 현재 dokuwiki는 php 8과 호환되지 않는 듯.
$ sudo add-apt-repository ppa:ondrej/php $ sudo apt update $ sudo apt upgrade $ sudo apt install php8.0-common php8.0-cli php8.0-fpm libapache2-mod-php8.0 php8.0-{bcmath,bz2,cgi,cli,curl,dba,dev,enchant,fpm,gd,gmp,imap,interbase,intl,ldap,mbstring,mysql,odbc,opcache,pgsql,phpdbg,pspell,readline,snmp,soap,sqlite3,sybase,tidy,xml,xmlrpc,zip,,xsl} php-imagick
$ sudo vi /etc/php/{version}/fpm/php.ini date.timezone = Asia/Seoul cgi.fix_pathinfo=0 session.cookie_httponly = 1 session.cookie_secure = 1 memory_limit = 256M post_max_size = 56M upload_max_filesize = 1024M max_file_uploads = 50 zlib.output_compression = off max_execution_time = 180 opcache.memory_consumption = 128 opcache.interned_strings_buffer = 8 opcache.max_accelerated_files = 50000 opcache.revalidate_freq = 60 opcache.enable_cli = 1 opcache.enable = 1 opcache.jit_buffer_size = 100M opcache.jit = tracing $ sudo systemctl restart php7.4-fpm.service
$ sudo a2enmod proxy_fcgi setenvif $ sudo a2enconf php8.0-fpm $ sudo systemctl restart apache2
$ sudo usermod -a -G www-data ubuntu
$ sudo a2enmod proxy_fcgi $ sudo a2enmod setenvif $ sudo a2enconf php7.4-fpm $ sudo a2dismod php7.4 $ sudo a2dismod mpm_prefork $ sudo a2dismod mpm_worker $ sudo a2enmod mpm_event $ sudo service php7.4-fpm status $ sudo systemctl restart apache2
$ sudo apt update $ sudo apt upgrade $ sudo apt install php7.4-sqlite3 $ sudo systemctl restart apache2
Let's Encrypt 클라이언트 Certbot 설치
$ sudo apt update $ sudo apt upgrade $ sudo apt install software-properties-common $ sudo add-apt-repository universe $ sudo apt update $ sudo apt install certbot python3-certbot-apache
$ sudo certbot --apache email; ACME (A)gree/(C)ancel; A receive email (Y)es/(N)o; N Which names would you liketo activate HTTPS for?; 1: No redirect, 2: Redirect; 2 if not appear domain name, try this $ sudo certbot --apache -d "{domain address}" 1: Attempt to reinstall this existing certificate, 2: Renew & replace the cert (limit ~5 per 7 days); 1: No redirect, 2: Redirect;
인증서 갱신이 정상인 확인
$ sudo certbot renew --dry-run $ sudo systemctl restart apache2
$ certbot renew
$ sudo crontab -e # renew cert; every month 1st day 4 0 4 1 * * /usr/bin/certbot renew --renew-hook="sudo systemctl restart apache2"
$ sudo certbot delete --cert-name {cert name}
phpMyAdmin
$ sudo apt install phpmyadmin
$ sudo vi /etc/apache2/apache2.conf Include /etc/phpmyadmin/apache.conf $ sudo systemctl restart apache2
$ sudo apt install php-mbstring php7.4-mbstring php7.4-gettext php7.4-mysqlnd $ sudo systemctl restart apache2
Web Server Settings
migrate
dokuwiki
wordpress
dns settings
set multi domain
ssl setting
$ sudo vi /etc/apache2/sites-available/000-default.conf <VirtualHost *:80> ... ... <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{HTTPS} off RewriteRult .* __ BROKEN-LINK:https://%{SERVER_NAME}%{REQUEST_URI}LINK-BROKEN__ [R,L] </IfModule> </VirtualHost>
automations
ssl update
db backups
wiki backups
References
- BROKEN-LINK:Connect to Oracle Cloud with SSH and VNCLINK-BROKEN