Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- faecher:informatik:pt2024:freigabe_ins_netz:start [18.07.2024 21:49] – [Zertifikate] sbel
+++ faecher:informatik:pt2024:freigabe_ins_netz:start [19.07.2024 11:19] (aktuell) – [Zertifikat erhalten mit mod_md] sbel
@@ Zeile 7: / Zeile 7: @@
   * Lösung: Ein "Dyndns" Provider, z.B. dynv6.com
-{{ :faecher:informatik:pt2024:freigabe_ins_netz:ports_und_so.drawio.png |}}
+{{ :faecher:informatik:pt2024:freigabe_ins_netz:ddclient.drawio.png |}}
 ==== DynDNS mit dynv6.com ====
@@ Zeile 33: / Zeile 33: @@
 ''ddclient -daemon=0 -debug -verbose -noquiet''
+Wenn das klappt, kann man den ddclient-Daemon neu starten: ''systemctl restart ddclient.service'', mit ''journalctl -f -u ddclient'' kann man die Meldungen des Daemons im Log anschauen.
 ==== Portweiterleitung am Router ====
@@ Zeile 42: / Zeile 44: @@
 ==== Zertifikat erhalten mit mod_md ====
-Müssen wir live testen ;)
+  * Mod-MD Paket installieren: ''apt install libapache2-mod-md''
+  * SSL und Mod--MD bei apache anschalten: ''a2enmod ssl md'' und ''systemctl restart apache2
+  * Nun muss man die Datei ''/etc/apache2/sites-enabled/000-default.conf'' anpassen, so dass sie wie unten aussieht - meinecloud.dns.army muss dabei alletrdings durch einen DynDNS Namen ersetzt werden.
+<code>
+ServerName meinecloud.dns.army
+MDomain meinecloud.dns.army
+MDContactEmail certifica@ua25.de
+MDCertificateAgreement accepted
+MDPrivateKeys RSA 4096
+<VirtualHost *:80>
+	# The ServerName directive sets the request scheme, hostname and port that
+	# the server uses to identify itself. This is used when creating
+	# redirection URLs. In the context of virtual hosts, the ServerName
+	# specifies what hostname must appear in the request's Host: header to
+	# match this virtual host. For the default virtual host (this file) this
+	# value is not decisive as it is used as a last resort host regardless.
+	# However, you must set it for any further virtual host explicitly.
+	#ServerName www.example.com
+	ServerAdmin webmaster@localhost
+	DocumentRoot /srv/nextcloud
+	<Directory "/srv/nextcloud">
+		AllowOverride all
+		Require all granted
+	</Directory>
+	# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
+	# error, crit, alert, emerg.
+	# It is also possible to configure the loglevel for particular
+	# modules, e.g.
+	#LogLevel info ssl:warn
+	ErrorLog ${APACHE_LOG_DIR}/error.log
+	CustomLog ${APACHE_LOG_DIR}/access.log combined
+	# For most configuration files from conf-available/, which are
+	# enabled or disabled at a global level, it is possible to
+	# include a line for only one particular virtual host. For example the
+	# following line enables the CGI configuration for this host only
+	# after it has been globally disabled with "a2disconf".
+	#Include conf-available/serve-cgi-bin.conf
+</VirtualHost>
+<VirtualHost *:443>
+	# The ServerName directive sets the request scheme, hostname and port that
+	# the server uses to identify itself. This is used when creating
+	# redirection URLs. In the context of virtual hosts, the ServerName
+	# specifies what hostname must appear in the request's Host: header to
+	# match this virtual host. For the default virtual host (this file) this
+	# value is not decisive as it is used as a last resort host regardless.
+	# However, you must set it for any further virtual host explicitly.
+	#ServerName www.example.com
+	ServerAdmin webmaster@localhost
+	DocumentRoot /srv/nextcloud
+	<Directory "/srv/nextcloud">
+		AllowOverride all
+		Require all granted
+	</Directory>
+	# Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
+	# error, crit, alert, emerg.
+	# It is also possible to configure the loglevel for particular
+	# modules, e.g.
+	#LogLevel info ssl:warn
+	ErrorLog ${APACHE_LOG_DIR}/error.log
+	CustomLog ${APACHE_LOG_DIR}/access.log combined
+	# For most configuration files from conf-available/, which are
+	# enabled or disabled at a global level, it is possible to
+	# include a line for only one particular virtual host. For example the
+	# following line enables the CGI configuration for this host only
+	# after it has been globally disabled with "a2disconf".
+	#Include conf-available/serve-cgi-bin.conf
+	SSLEngine on
+</VirtualHost>
+</code>