Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
tutorial:adm:server_preparation_tmp [2020/03/12 14:51] urbanl [Application properties ] |
tutorial:adm:server_preparation_tmp [2020/03/12 14:58] urbanl [Apache Tomcat configuration] |
||
---|---|---|---|
Line 182: | Line 182: | ||
Restart DB: '' | Restart DB: '' | ||
- | |||
- | For Debian installation, | ||
- | < | ||
- | / | ||
- | / | ||
- | </ | ||
< | < | ||
Line 208: | Line 202: | ||
===== Tomcat ===== | ===== Tomcat ===== | ||
- | * Create a new group and add user for the tomcat to run under (for Debian, use / | + | * Create a new group and add user for the tomcat to run under: |
< | < | ||
Line 296: | Line 290: | ||
* Tomcat will be started under user '' | * Tomcat will be started under user '' | ||
- | * For Debian, change the JAVA\_HOME to '' | ||
* After every systemd configuration change it is necessary to reload: | * After every systemd configuration change it is necessary to reload: | ||
Line 390: | Line 383: | ||
<Server port=" | <Server port=" | ||
</ | </ | ||
- | -! CHANGED | + | |
* Make Tomcat listen only on localhost: | * Make Tomcat listen only on localhost: | ||
* In the ''/ | * In the ''/ | ||
* In same file configure ajp port('' | * In same file configure ajp port('' | ||
- | | + | < |
+ | < | ||
address=" | address=" | ||
secretRequired=" | secretRequired=" | ||
Line 401: | Line 395: | ||
port=" | port=" | ||
redirectPort=" | redirectPort=" | ||
+ | </ | ||
* Do not show aplication server version: | * Do not show aplication server version: | ||
Line 454: | Line 448: | ||
* Adjust particular SELinux labels. Example ([[https:// | * Adjust particular SELinux labels. Example ([[https:// | ||
</ | </ | ||
- | |||
- | Please note that on Debian, the log is not rotate during the first day, but after the second day. | ||
Line 506: | Line 498: | ||
</ | </ | ||
- | Virtualhost configuration to forward the communication from port 80 to 443. Add following section and change string ' | + | Virtualhost configuration to forward the communication from port 80 to 443. Add following section and change string ' |
<code xml> | <code xml> | ||
< | < | ||
Line 514: | Line 506: | ||
</ | </ | ||
- | Set the proxy in the virtualhost for https (443/tcp) - at the end of the file ''/ | + | Set the proxy in the virtualhost for https (443/tcp) - at the end of the file ''/ |
< | < | ||
Line 587: | Line 579: | ||
==== Disabling mod_security rules ==== | ==== Disabling mod_security rules ==== | ||
- | In the file ''/ | + | In the file ''/ |
<code xml> | <code xml> | ||
< | < | ||
Line 646: | Line 638: | ||
nolog,\ | nolog,\ | ||
setvar:' | setvar:' | ||
- | </ | ||
- | |||
- | ==== mod_security configuration - Debian ==== | ||
- | Enable mod\_security configuration: | ||
- | < | ||
- | cd / | ||
- | cp modsecurity.conf-recommended modsecurity.conf | ||
- | </ | ||
- | |||
- | Uncomment following rules in the ''/ | ||
- | < | ||
- | SecAction \ | ||
- | " | ||
- | phase:1,\ | ||
- | nolog,\ | ||
- | pass,\ | ||
- | t:none,\ | ||
- | setvar:' | ||
- | |||
- | SecAction \ | ||
- | " | ||
- | phase:1,\ | ||
- | nolog,\ | ||
- | pass,\ | ||
- | t:none,\ | ||
- | setvar:' | ||
</ | </ | ||
Line 736: | Line 702: | ||
- | ====== INSTALACTNI NAVOD ====== | ||
- | |||
- | <note important> | ||