Apache

• Deutsch
• English
• Nederlands
• español
• français
• italiano
• magyar
• polski
• português do Brasil
• русский
• 中文(中国大陆)‎
• 日本語
• 한국어

www-servers/apachethreads

Um den Apache Event-MPM zu verwenden, fügen Sie folgendes in die make.conf ein:

Um den Apache Worker-MPM zu verwenden, fügen Sie folgendes in die make.conf ein:

USE="apache2"

APACHE2_OPTS="-D DEFAULT_VHOST -D INFO -D SSL -D SSL_DEFAULT_VHOST -D LANGUAGE"

ServerRoot"/usr/lib64/apache2"

#Module loaded unconditionally, assuming the USE flag is no unset in
# /etc/portage/make.conf or in /etc/portage/package.use
LoadModuleactions_modulemodules/mod_actions.so
...
#other modules loaded that way : alias_module, auth_basic_module, authn_alias_module,
# authn_anon_module, authn_dbm_module, authn_default_module, authn_file_module, 
# authz_dbm_module, authz_default_module, authz_groupfile_module, authz_host_module, 
# authz_owner_module, authz_user_module, autoindex_module, cgi_module, cgid_module, 
# deflate_module, dir_module, env_module, expires_module, ext_filter_module, filter_module,
# headers_module, include_module, log_config_module, logio_module, mime_module, 
# mime_magic_module, negotiation_module, rewrite_module, setenvif_module, 
# speling_module,ssl_module, status_module, unique_id_module, usertrack_module, host_alias_module


#Modules loaded conditionally, assuming matching USE flag is not unset in
# /etc/portage/make.conf or in /etc/portage/package.use (flag to be set in )
<IfDefineAUTHNZ_LDAP>
LoadModuleauthnz_ldap_modulemodules/mod_authnz_ldap.so
</IfDefine>
#other modules loaded that way : cache_module, dav_module, dav_fs_module,
# dav_lock_module,disk_cache_module, file_cache_module, info_module, ldap_module,
# mem_cache_module, userdir_module


Userapache
Groupapache

# Supplemental configuration
#**************************************************************************************vvv
#this part is included via Include /etc/apache2/modules.d/*.conf 

#included from /etc/apache2/modules.d/00_default_settings.conf-------------v
#this is always included as there is not option to deactivate it.
Timeout300
KeepAliveOn
MaxKeepAliveRequests100
KeepAliveTimeout15
UseCanonicalNameOff
AccessFileName.htaccess
ServerTokensProd
TraceEnableoff
ServerSignatureOn
HostnameLookupsOff
EnableMMAPOn
EnableSendfileOn
FileEtagINodeMTimeSize
ContentDigestOff
ErrorLog/var/log/apache2/error_log
LogLevelwarn

<Directory/>
OptionsFollowSymLinks
AllowOverrideNone
Requirealldenied
</Directory>

<IfModuledir_module>
DirectoryIndexindex.htmlindex.html.var
</IfModule>
<FilesMatch"^\.ht">
Requirealldenied
</FilesMatch>
#--------------------------------------------------------------------------^

#included from 00_mod_info.conf--------------------------------------------v
<IfDefineINFO>
<Location/server-info>
SetHandlerserver-info
Requirehost127.0.0.1
</Location>
</IfDefine>
#--------------------------------------------------------------------------^

#--------------------------------------------------------------------------v
#included from 00_languages.conf
# Settings for hosting different languages.
<IfDefineLANGUAGE>

AddLanguageca.ca
...
AddLanguagezh-TW.zh-tw

LanguagePriorityencacsdadeeleoesetfrhehritjakoltznlnnnoplptpt-BRrusvzh-CNzh-TW

ForceLanguagePriorityPreferFallback

AddCharsetus-ascii.ascii.us-ascii
AddCharsetISO-8859-1.iso8859-1.latin1
...
AddCharsetshift_jis.shift_jis.sjis
</IfDefine>
#---------------------------------------------------------------------------^
#**************************************************************************************^^^


#***************************************************************************************vvv
#this part is included via Include /etc/apache2/vhosts.d/*.conf 
#from 00_default_ssl_vhost.conf-----------------------------------------------------vv
<IfDefineSSL>
<IfDefineSSL_DEFAULT_VHOST>
<IfModulessl_module>
Listen443

<VirtualHost_default_:443>
ServerNamelocalhost
#------------------------------------------v
# this part is included via Include /etc/apache2/vhosts.d/default_vhost.include
ServerAdminroot@localhost
DocumentRoot"/var/www/localhost/htdocs"


<Directory"/var/www/localhost/htdocs">
OptionsIndexesFollowSymLinks
AllowOverrideAll
Requireallgranted
</Directory>

<IfModulealias_module>
ScriptAlias/cgi-bin/"/var/www/localhost/cgi-bin/"
</IfModule>

<Directory"/var/www/localhost/cgi-bin">
AllowOverrideNone
OptionsNone
Requireallgranted
</Directory>
#end of Include ---------------------------^

ErrorLog/var/log/apache2/ssl_error_log

<IfModulelog_config_module>
TransferLog/var/log/apache2/ssl_access_log
</IfModule>
SSLEngineon
SSLCipherSuiteALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP:+eNULL
SSLCertificateFile/etc/ssl/apache2/server.crt
SSLCertificateKeyFile/etc/ssl/apache2/server.key

<FilesMatch"\.(cgi|shtml|phtml|php)$">
SSLOptions+StdEnvVars
</FilesMatch>

<Directory"/var/www/localhost/cgi-bin">
SSLOptions+StdEnvVars
</Directory>

<IfModulesetenvif_module>
BrowserMatch".*MSIE.*"\
nokeepalivessl-unclean-shutdown\
downgrade-1.0force-response-1.0
</IfModule>


<IfModulelog_config_module>
CustomLog/var/log/apache2/ssl_request_log\
"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</IfModule>
</VirtualHost>
</IfModule>
</IfDefine>
</IfDefine>
#---------------------------------------------------------------------------------^^
#from 00_default_vhost.conf-------------------------------------------------------vv
<IfDefineDEFAULT_VHOST>
Listen80
NameVirtualHost*:80

<VirtualHost*:80>
ServerNamelocalhost

#---------------------------------------------------------------v
# this part is included via Include /etc/apache2/vhosts.d/default_vhost.include
ServerAdminroot@localhost
DocumentRoot"/var/www/localhost/htdocs"


<Directory"/var/www/localhost/htdocs">
OptionsIndexesFollowSymLinks
AllowOverrideAll
Requireallgranted
</Directory>

<IfModulealias_module>
ScriptAlias/cgi-bin/"/var/www/localhost/cgi-bin/"
</IfModule>

<Directory"/var/www/localhost/cgi-bin">
AllowOverrideNone
OptionsNone
Requireallgranted
</Directory>
#end of Include -----------------------------------------------^

<IfModulempm_peruser_module>
ServerEnvironmentapacheapache
</IfModule>
</VirtualHost>
</IfDefine>
#-----------------------------------------------------------------------------------^^
# end of include ****************************************************************************************^^^

Start the server, as described in the Usage section.

Diese Funktion, die in den frühen Versionen von Firefox eingeführt wurde, ist etwas nervig für Entwickler. Das bedeutet wenn ein Server auf localhost nicht reagiert, Firefox localhost.com und/oder www.localhost.com versucht und Sie am Ende bei einer nicht gefunden Seite landen könnten.

Um dieses 'Feature' zu deaktivieren:

1. Geben Sie about:config in die Browser-Leiste ein
2. Geben Sie browser.fixup.alternate.enabled in das angezeigte Suchfeld ein
3. Führen Sie einen Rechtsklick auf browser.fixup.alternate.enabled in der gefilterten Liste aus und wählen Sie Toggle, um den Wert auf false zu setzen

ModSecurity ist eine Regelbasierte Web Application Firewall, die den Datenverkehr von Webservices überwacht und Angriffe abwehrt, die bekannte Softwareschwachstellen ausnutzen.

APACHE2_OPTS="... -D SECURITY"

Enabling LUA support

Install Apache with the USE flag apache2_modules_lua enabled.

For security reasons this USE flag may be masked. To reverse, edit package.use.mask first:

APACHE2_OPTS="... -D PHP"

<IfDefinePHP>
# The mod_php.so symlink is controlled by
# eselect-php. However, the module name changed from
# php5_module to php7_module so we can't blindly load whatever
# is there. Instead we let eselect-php manage a small
# configuration file that loads the appropriate module.
#
# This is relative to ServerRoot (see httpd.conf).
Include../../../var/lib/eselect-php/mod_php.conf

# Tell apache that mod_php should handle PHP files.
#
# NOTE: Avoiding AddHandler/AddType for security (bug
# #538822). Please read the related news item!
<FilesMatch"\.(php|php[57]|phtml)$">
SetHandlerapplication/x-httpd-php
</FilesMatch>

# PHP source files which are meant to be displayed as
# syntax-highlighted source code.
<FilesMatch"\.phps$">
SetHandlerapplication/x-httpd-php-source
</FilesMatch>

DirectoryIndexindex.phpindex.phtml
</IfDefine>

<html>
 <body>
<?php phpinfo(); ?>
 </body>
</html>

 [1] php5.3
 [2] php5.4 *
 [3] php5.5

<IfDefineFCGID>
LoadModulefcgid_modulemodules/mod_fcgid.so
SocketPath/var/run/fcgidsock
SharememPath/var/run/fcgid_shm

AddHandlerphp-fcgid.php
AddTypeapplication/x-httpd-php.php
Actionphp-fcgid/fcgid-bin/php-fcgid-wrapper
# max request 128mb
FcgidMaxRequestLen134217728
<Location/fcgid-bin/>
SetHandlerfcgid-script
Options+ExecCGI
</Location>
</IfDefine>

APACHE2_OPTS="... -D FCGID"

<IfDefinePHP>
<FilesMatch"\.php$">
SetHandler"proxy:unix:/var/run/php-fpm/www.sock|fcgi://localhost"
</FilesMatch>

# Set it to handle the files
<IfModulemod_mime.c>
AddHandlerapplication/x-httpd-php.php.php5.phtml
AddHandlerapplication/x-httpd-php-source.phps
</IfModule>
DirectoryIndexindex.phpindex.phtml
</IfDefine>

<IfDefinePHP>
# Send all requested PHP files to PHP-FPM via fcgi://PHP_FPM_LISTEN_ADDRESS:PHP_FPM_LISTEN_PORT/DOCUMENT_ROOT/1ドル
ProxyPassMatch^/(.*\.php)$fcgi://127.0.0.1:9000/var/www/localhost/htdocs/1ドル

# Set it to handle the files
<IfModulemod_mime.c>
AddHandlerapplication/x-httpd-php.php.php5.phtml
AddHandlerapplication/x-httpd-php-source.phps
</IfModule>

DirectoryIndexindex.phpindex.phtml
</IfDefine>

;Setpermissionsforunixsocket,ifoneisused.InLinux,read/write
;permissionsmustbesetinordertoallowconnectionsfromawebserver.Many
;BSD-derivedsystemsallowconnectionsregardlessofpermissions.
;DefaultValues:userandgrouparesetastherunninguser
;modeissetto0666
listen.owner=apache
listen.group=apache
;listen.mode=0666

;TheaddressonwhichtoacceptFastCGIrequests.
;Validsyntaxesare:
;'ip.add.re.ss:port'-tolistenonaTCPsockettoaspecificaddresson
;aspecificport;
;'port'-tolistenonaTCPsockettoalladdressesona
;specificport;
;'/path/to/unix/socket'-tolistenonaunixsocket.
;Note:Thisvalueismandatory.
;listen=127.0.0.1:9000
listen=/var/run/php-fpm/www.sock

APACHE2_OPTS="... -D PHP -D PROXY"

Let’s Encrypt ist eine gemeinnützige Zertifikatsauthorität, die kostenlose TLS-Zertifikate vergibt. certbot ist eine in der Gentoo repository verfügbare Software, die es auf einfache Weise ermöglicht, TLS-Zertifikate zu installieren und automatisch den HTTPS-Zugang für Apache einrichtet.

Siehe den Artikel von Let's Encrypt für Infos, wie certbot verwendet wird. Die EFF hat auch spezifische Anweisungen, wie certbot auf Gentoo verwendet wird, um Apache zu konfigurieren.

Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.

127.0.0.1 localhost System_Hostname