Wiki spuštěna 24. 7. 2025

Instalace APACHE

  • Nejdřív nainstalujeme potřebné package:
    • apache2
    • apache-doc
  • Vyzkoušíme, jestli funguje chomsky.ff.cuni.cz a chomsky.korpus.cz
  • Nainstalujeme certbot:
    apt install certbot

    (snap install cerbot instaluje nebezpečnou verzi)

  • Nainstalujeme plugin pro Apache:
    apt-get install python3-certbot-apache
  • Vygenerujeme certifikát:
    # certbot --apache -d chomsky.ff.cuni.cz -d chomsky.korpus.cz
    Saving debug log to /var/log/letsencrypt/letsencrypt.log
    Enter email address (used for urgent renewal and security notices)
     (Enter 'c' to cancel): hana.skoumalova@ff.cuni.cz
    
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Please read the Terms of Service at
    https://letsencrypt.org/documents/LE-SA-v1.4-April-3-2024.pdf. You must agree in
    order to register with the ACME server. Do you agree?
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    (Y)es/(N)o: Y
    
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Would you be willing, once your first certificate is successfully issued, to
    share your email address with the Electronic Frontier Foundation, a founding
    partner of the Let's Encrypt project and the non-profit organization that
    develops Certbot? We'd like to send you email about our work encrypting the web,
    EFF news, campaigns, and ways to support digital freedom.
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    (Y)es/(N)o: N
    Account registered.
    Requesting a certificate for chomsky.ff.cuni.cz and chomsky.korpus.cz
    
    Successfully received certificate.
    Certificate is saved at: /etc/letsencrypt/live/chomsky.ff.cuni.cz/fullchain.pem
    Key is saved at:         /etc/letsencrypt/live/chomsky.ff.cuni.cz/privkey.pem
    This certificate expires on 2024-12-12.
    These files will be updated when the certificate renews.
    Certbot has set up a scheduled task to automatically renew this certificate in the background.
    
    Deploying certificate
    Successfully deployed certificate for chomsky.ff.cuni.cz to /etc/apache2/sites-available/000-default-le-ssl.conf
    
    We were unable to find a vhost with a ServerName or Address of chomsky.korpus.cz.
    Which virtual host would you like to choose?
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    1: 000-default.conf               |                       |       | Enabled
    2: 000-default-le-ssl.conf        | chomsky.ff.cuni.cz    | HTTPS | Enabled
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2
    Successfully deployed certificate for chomsky.korpus.cz to /etc/apache2/sites-available/000-default-le-ssl.conf
    Congratulations! You have successfully enabled HTTPS on https://chomsky.ff.cuni.cz and https://chomsky.korpus.cz
    
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
    If you like Certbot, please consider supporting our work by:
     * Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
     * Donating to EFF:                    https://eff.org/donate-le
    - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  • Vyzkoušíme, jestli https funguje a http je zablokované.
  • Certifikát by se měl automaticky obnovovat. Kdyby ne, provedeme obnovení příkazem
    certbot renew

QR Code
QR Code utkl:admin:apache (generated for current page)