https://www.vultr.com

The Everywhere Cloud

Deploy an instance.
Accelerate your application.


Enabling .htaccess in Apache for Drupal

By -

Content management systems like Drupal require specific web server directives in order to work properly. The following steps enable Apache to recognize .htaccess files containing those specific web server directives.

The steps outlined here require the use HTTPS for better security on both Debian-based Linux distributions and the FreeBSD operating system.

==========

1. DEBIAN-BASED LINUX DISTRIBUTIONS

1.1. Go to the directory containing the Apache site configuration files.

user@host: $ cd /etc/apache2/sites-available

1.2. BACK UP the default HTTPS configuration file for the secure site.

user@host: $ sudo cp default-ssl.conf default-ssl-conf.back

1.3. Open the default HTTPS configuration file.

user@host: $ sudo nano default-ssl.conf

1.4. Find the "DocumentRoot" section and add the "Directory" block marked "For Drupal" as follows.

# BEGIN CODE

<IfModule mod_ssl.c>
        <VirtualHost _default_:443>
# ...
                DocumentRoot /var/www/html

                #For Drupal
                <Directory /var/www/html >
                        # "Directory" must be the same as "DocumentRoot".
                        Options Indexes FollowSymLinks MultiViews
                        AllowOverride All
                        # "AllowOverride All" ensures that .htaccess works.
                        Order allow,deny
                        Allow from all
                </Directory>
                #For Drupal

# ...
        </VirtualHost>
</IfModule>

# END CODE

1.5. Restart the web server.

user@host: $ sudo /etc/init.d/apache2 restart

1.6. Test the Drupal site by accessing HTTPS.

user@host: $ lynx https://localhost


2. FREEBSD OPERATING SYSTEM

2.1. Go to the directory containing the Apache site configuration files.

user@host: $ cd /usr/local/etc/apache24/extra

2.2. BACK UP the default HTTPS configuration file for the secure site.

user@host: $ sudo cp httpd-ssl.conf httpd-ssl-conf.back

2.3. Open the default HTTPS configuration file.

user@host: $ sudo ee httpd-ssl.conf

2.4. Find the "DocumentRoot" section and add the "Directory" block marked "For Drupal" as follows.

# BEGIN CODE

<VirtualHost _default_:443>
# ...
DocumentRoot /usr/local/www/apache24/data
# ...
        #For Drupal
        <Directory /usr/local/www/apache24/data >
                # "Directory" must be the same as "DocumentRoot".
                Options Indexes FollowSymLinks MultiViews
                AllowOverride All
                # "AllowOverride All" ensures that .htaccess works.
                Order allow,deny
                Allow from all
        </Directory>
        #For Drupal

# ...
</VirtualHost>

# END CODE

2.5. Restart the web server.

user@host: $ sudo service apache24 restart

2.6. Test the Drupal site by accessing HTTPS.

user@host: $ curl -k https://localhost

==========

Comments

Post a Comment

Popular posts from this blog

Enabling HTTPS in Home Assistant

By -
Image
The following procedure activates HTTPS for the Home Assistant server. The secure protocol uses TLS/SSL certificates to encrypt the data transferred between user and server. Although it is possible to make this home automation system, whether in  Linux or  FreeBSD , accessible over the Internet, Home Assistant is usually operated within private networks, either physical or virtual. In this case, self-signed certificates may be acceptable to use and quicker to deploy. ========== 1. Log in as the system account. 1.1. Linux, with $HOME "bin" included in $PATH (-i) of system account (-u). user@host: $ sudo -i -u homeassistant 1.2. FreeBSD, coming from "root" superuser. root@host: # su - homeassistant 2. Go to the Home Assistant configuration directory. user@host: $ cd ~/.homeassistant 3. Make a directory for SSL certificates. user@host: $ mkdir ssl 4. Ensure that only the system account and members of its group can access the directory. user@host: $ chmod 7
Read more

Configuring the FreeBSD Firewall with IPFW

By -
Image
IPFW is one of several firewalls included in FreeBSD by default. It has a command-line tool to handle the policies for incoming and outgoing connections. In the configurations discussed here, network connections "from any to any" are deliberately avoided to prevent potential bounce attacks from happening, if the server is not intended to act as a router. Instead, a request/respond or incoming/outgoing rule pair is adopted to direct the flow of network traffic. The main objective is to set up IPFW to block unauthorized remote access to unsecured ports on the server. But if attackers manage to break in through a vulnerability on some programs running on authorized incoming ports, the outgoing restrictions will prevent massive data exfiltration, stopping intruders dead in their tracks. A similar approach can be done on Debian-based Linux distributions using UFW . ========== 1. STRICT CONFIGURATION 1.1. Create a custom shell script for IPFW commands. root@host: #  ee /etc/myip
Read more

Running Home Assistant on FreeBSD Servers

By -
Image
Home Assistant is an open-source home automation system powered by Python, primarily intended to run on single-board computers like the Raspberry Pi, with Linux as the host operating system. The following procedure shows how to run Home Assistant Core on FreeBSD servers, on either physical or virtual machines. ========== 1. PREPARING THE SERVER 1.1. Update the package list and upgrade the existing packages. root@host: # pkg update && pkg upgrade -y 1.2. Install Python and other required packages. root@host: # pkg install python38 py38-sqlite3 openssl autoconf libffi rust 1.3. Create a system account with disabled login (-w no), a dedicated home directory (-m), and some informational text (-c comment). root@host: #  pw useradd homeassistant -w no -m -c "Home Assistant" 1.3.1. If groups for hardware input/output are present, append the system account. Else, skip this step for now. root@host: #  pw groupmod gpio -m homeassistant root@host: #  pw groupmod i2c -m homeassis
Read more