{"id":1120,"date":"2021-03-02T00:33:06","date_gmt":"2021-03-02T00:33:06","guid":{"rendered":"https:\/\/blog.gordonbuchan.com\/blog\/?p=1120"},"modified":"2024-06-04T10:21:50","modified_gmt":"2024-06-04T10:21:50","slug":"web-presence-step-by-step-chapter-6-configuring-an-ubuntu-linux-cloud-server-to-create-a-linux-apache-mysql-php-lamp-web-server-part-2","status":"publish","type":"post","link":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/2021\/03\/02\/web-presence-step-by-step-chapter-6-configuring-an-ubuntu-linux-cloud-server-to-create-a-linux-apache-mysql-php-lamp-web-server-part-2\/","title":{"rendered":"Web presence step by step Chapter 6: Configuring an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server, Part 2"},"content":{"rendered":"\n

Previous step: Chapter 5: Configuring an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server, Part 1<\/a>
Next step: Chapter 7: Configuring the SSH server on an Ubuntu Linux cloud server to limit SFTP directory visibility within chroot jail directories<\/a><\/p>\n\n\n\n

Web presence step by step is a series of posts that show you to how to build a web presence.<\/p>\n\n\n\n

In this post, we do advanced configuration on an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server.<\/p>\n\n\n\n

A note re MySQL and MariaDB<\/h1>\n\n\n\n

A few years ago, the company that owned MySQL was purchased by Oracle. The open source code was legally \u201cforked\u201d into a project called MariaDB. When this document refers to \u201cMySQL,\u201d it is actually referring to the MariaDB descendant of the MySQL database engine, made possible by the terms of the GPLv2 open source software license. Notice that to maintain compatibility with existing software, the command to invoke MariaDB on the command line is \u201cmysql.\u201d<\/p>\n\n\n\n

This post assumes that you have performed the steps described in Chapter 5: Configuring an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server, Part 1<\/a>.<\/p>\n\n\n\n

Configuring the Linux Apache MySQL PHP (LAMP) web server<\/h1>\n\n\n\n

In the previous chapter, Chapter 5: Configuring an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server, Part 1<\/a>, we used apt to install the meta-package “lamp-server,” which installs the components for a basic Linux Apache MySQL PHP (LAMP) web server. In this chapter we configure the components.<\/p>\n\n\n\n

Installing MPM-ITK<\/h1>\n\n\n\n

We need to install MPM-ITK, which allows the web server to execute programs under different usernames. This means that if a website has a security issue, the damage is limited to that website’s directory: other websites and the host server should remain unaffected.<\/p>\n\n\n\n

Enter the command:<\/p>\n\n\n\n

apt install libapache2-mpm-itk<\/pre>\n\n\n\n
<\/p>\n\n\n\n
Configuring MySQL<\/h1>\n\n\n\n
The MySQL database server has been installed, but must be configured.<\/p>\n\n\n\n
Enter the command:<\/p>\n\n\n\n
mysql_secure_installation<\/pre>\n\n\n\n
Testing the MySQL server<\/h2>\n\n\n\n
Let’s test the MySQL server. Enter the command:<\/p>\n\n\n\n
mysql -u root -p<\/pre>\n\n\n\n
enter the password you specified during the MySQL configuration step.<\/p>\n\n\n\n
enter the command:<\/p>\n\n\n\n
show databases;<\/pre>\n\n\n\n
You will see a list similar to the following. Enter the command:<\/p>\n\n\n\n
exit<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Testing that the web server is able to run PHP scripts<\/h1>\n\n\n\n
Let’s test that the web server is able to run PHP scripts.<\/p>\n\n\n\n
Enter the commands:<\/p>\n\n\n\n
cd \/var\/www\/html
nano phpinfo.php<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the following text in the nano editor. Save and exit the file:<\/p>\n\n\n\n
<?PHP

phpinfo();<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Use a web browser to load your domain name, followed by \/phpinfo.php, as in:<\/p>\n\n\n\n
linuxstepbystep.com\/phpinfo.php<\/p>\n\n\n\n
If you are successful, a page similar to the following should appear:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Configuring the Apache web server<\/h1>\n\n\n\n
Enter the commands:<\/p>\n\n\n\n
cd \/etc\/apache2
cp apache2.conf apache2.conf.factory
nano apache2.conf<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Use the control-w command to search for the text “<directory”:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
This is what it looks like when you find the section:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Insert a block with the following text:<\/p>\n\n\n\n
<Directory \/usr\/web\/>\n        AllowOverride All\n        Require all granted\n<\/Directory><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Creating the users, directories, and documents for the websites<\/h1>\n\n\n\n
Enter the commands:<\/p>\n\n\n\n
adduser --home \/usr\/web\/comingsoon comingsoon<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter and confirm a password for the user. Answer the prompts for additional information. When asked: “Is the information correct?” enter “y” for yes:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the commands:<\/p>\n\n\n\n
mkdir -p \/usr\/web\/comingsoon\/comingsoon
cd \/usr\/web\/comingsoon\/comingsoon
nano index.php<\/pre>\n\n\n\n
Enter the following text in the nano editor. Save and exit the file:<\/p>\n\n\n\n
<?PHP\n\necho \"<p>coming soon<\/p>\\n\";<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter these commands, note that each “chown” and “chmod” command should be its own line:<\/p>\n\n\n\n
chown -R root:root \/usr\/web\/comingsoon\nchown -R comingsoon:comingsoon \/usr\/web\/comingsoon\/comingsoon\nchmod -R 755 \/usr\/web\/comingsoon\/comingsoon<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
A note about the example domain and a reminder that you should use your domain name in its place<\/h2>\n\n\n\n
Note: for clarity and narrative flow we are using the example domain linuxstepbystep.com but you should substitute your domain name as appropriate.<\/p>\n\n\n\n
Enter this command (all on the same line):<\/p>\n\n\n\n
adduser --home \/usr\/web\/linuxstepbystep_com linuxstepbystep_com<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the commands:<\/p>\n\n\n\n
mkdir -p \/usr\/web\/linuxstepbystep_com\/linuxstepbystep.com\ncd \/usr\/web\/linuxstepbystep_com\/linuxstepbystep.com\nnano index.php<\/pre>\n\n\n\n
Enter the following text in the nano editor. Save and exit the file:<\/p>\n\n\n\n
<?PHP

echo \"<p>linuxstepbystep.com<\/p>\";<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter these commands, note that each “chown” and “chmod” command should be its own line:<\/p>\n\n\n\n
chown -R root:root \/usr\/web\/linuxstepbystep_com\nchown -R linuxstepbystep_com:linuxstepbystep_com \/usr\/web\/linuxstepbystep_com\/linuxstepbystep.com\nchmod -R 755 \/usr\/web\/linuxstepbystep_com\/linuxstepbystep.com<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Creating the virtual hosts for the websites<\/h1>\n\n\n\n
cd \/etc\/apache2\nmv sites-available sites-available.factory\nmkdir -p \/etc\/apache2\/sites-available\ncd \/etc\/apache2\/sites-available<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the command:<\/p>\n\n\n\n
nano 000.comingsoon.conf<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the following text in the nano editor. Save and exit the file:<\/p>\n\n\n\n
<VirtualHost *:80>\n<IfModule mpm_itk_module>\n        AssignUserID comingsoon comingsoon\n<\/IfModule>\nServerName comingsoon\nDocumentRoot \/usr\/web\/comingsoon\/comingsoon\nServerAdmin info@linuxstepbystep.com\nCustomLog \/var\/log\/apache2\/comingsoon-access_log combined\nErrorLog \/var\/log\/apache2\/comingsoon-error_log\n<\/VirtualHost><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the commands:<\/p>\n\n\n\n
a2ensite 000.comingsoon.conf\nnano 004.linuxstepbystep.com.conf<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the following text in the nano editor. Note the screen capture: the line starting with “AssignUserID” should be all on the same line. Save and exit the file:<\/p>\n\n\n\n
<VirtualHost *:80>\n<IfModule mpm_itk_module>\n        AssignUserID linuxstepbystep_com linuxstepbystep_com\n<\/IfModule>\nServerName linuxstepbystep.com\nServerAlias www.linuxstepbystep.com\nDocumentRoot \/usr\/web\/linuxstepbystep_com\/linuxstepbystep.com\nServerAdmin info@linuxstepbystep.com\nCustomLog \/var\/log\/apache2\/linuxstepbystep.com-access_log combined\nErrorLog \/var\/log\/apache2\/linuxstepbystep.com-error_log\n<\/VirtualHost><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the command:<\/p>\n\n\n\n
a2ensite 004.linuxstepbystep.com.conf<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the command:<\/p>\n\n\n\n
systemctl restart apache2<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Testing the web server to see whether it can host separate virtual hosts (multiple websites)<\/h2>\n\n\n\n
The objective of this test is to display different text for each host name we enter in the web browser’s address bar.<\/p>\n\n\n\n
Enter your domain name in a web browser’s address bar:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the IP address of your cloud server in the web server’s address bar. This is to test whether the default “park page” is active. This page will be displayed if a host name is pointed at the IP address of the cloud server, but the cloud server’s web server has not yet been configured with a virtual host profile for that host name.<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Installing SSL Encryption with Let’s Encrypt<\/h1>\n\n\n\n
Enter the following command:<\/p>\n\n\n\n
apt install certbot python3-certbot-apache<\/pre>\n\n\n\n
Do you want to continue?<\/p>\n\n\n\n
Enter “y” for yes:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the command:<\/p>\n\n\n\n
certbot --apache<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter an email address:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Please read the Terms of Service at<\/p>\n\n\n\n
Enter “a” for agree<\/p>\n\n\n\n
Would you be willing to share your email address<\/p>\n\n\n\n
Enter “no” for no<\/p>\n\n\n\n
Which names would you like to activate HTTPS for?<\/p>\n\n\n\n
leave input blank, press Enter:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Please choose whether or not to redirect HTTP traffic to HTTPS<\/p>\n\n\n\n
Enter “2” then press Enter:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter the command:<\/p>\n\n\n\n
systemctl restart apache2<\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Enter your domain name in a web browser’s address bar.<\/p>\n\n\n\n
Notice the little lock symbol to the left of the host name. Click on the lock symbol, Click on Certificate. View the certificate’s details:<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
Previous step: Chapter 5: Configuring an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server, Part 1<\/a>
Next step: Chapter 7: Configuring the SSH server on an Ubuntu Linux cloud server to limit SFTP directory visibility within chroot jail directories<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
Previous step: Chapter 5: Configuring an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server, Part 1Next step: Chapter 7: Configuring the SSH server on an Ubuntu Linux cloud server to limit SFTP directory visibility within chroot jail directories Web presence step by step is a series of posts that show … <\/p>\n
Continue reading “Web presence step by step Chapter 6: Configuring an Ubuntu Linux cloud server to create a Linux Apache MySQL PHP (LAMP) web server, Part 2”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-1120","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1120","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/comments?post=1120"}],"version-history":[{"count":187,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1120\/revisions"}],"predecessor-version":[{"id":5000,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/posts\/1120\/revisions\/5000"}],"wp:attachment":[{"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/media?parent=1120"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/categories?post=1120"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.gordonbuchan.com\/blog\/index.php\/wp-json\/wp\/v2\/tags?post=1120"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}