# 1. 安裝Apache
sudo dnf install httpd -y
# 2. 放行防火墻（允許HTTP/HTTPS流量）
sudo firewall-cmd --permanent --add-service=http
sudo firewall-cmd --permanent --add-service=https
sudo firewall-cmd --reload
# 3. 啟動(dòng)并設(shè)置開機(jī)自啟
sudo systemctl enable --now httpd
# 4.生成默認(rèn)測試頁文件
echo 172.25.254.100 > /var/www/html/index.html
# 5.測試：
curl 172.25.254.100
172.25.254.100

#修改配置文件
[root@apache ~]# vim /etc/httpd/conf/httpd.conf
47 Listen 8080
#刷新服務(wù)
[root@apache ~]# systemctl reload httpd
#設(shè)定火墻通過
[root@apache ~]# firewall-cmd --permanent --add-port=8080/tcp
success
[root@apache ~]# firewall-cmd --reload
#檢測
[root@apache ~]# netstat -antlupe | grep httpd
tcp6       0      0 :::8080                 :::*                   LISTEN      0 
         78081      32315/httpd
#訪問：
[root@apache ~]# curl 172.25.254.100:8080
172.25.254.100

修改selinux  ——開著的話會(huì)有所影響
grubby --update-kernel ALL --args selinux=0
reboot ——重啟
getenforce
Disabled
#建立默認(rèn)發(fā)布目錄
[root@apache ~]# mkdir /web/html -p
#修改配置文件
[root@apache ~]# vim /etc/httpd/conf/httpd.conf
125 DocumentRoot "/web/html" #指定默認(rèn)發(fā)布目錄位置
126 <Directory "/web/html"> 
127         Require all granted #對于目錄訪問進(jìn)行授權(quán)
128 </Directory>
[root@apache ~]# systemctl restart httpd
[root@apache ~]# echo "/web/html's page" > /web/html/index.html
[root@apache ~]# curl 172.25.254.100:8080
/web/html's page

#建立新的默認(rèn)發(fā)布文件
[root@apache ~]# echo "/web/html/lee's page" > /web/html/lee.html
#當(dāng)沒有對配置進(jìn)行修改時(shí)新默認(rèn)發(fā)布文件不會(huì)被默認(rèn)訪問
[root@apache ~]# curl 172.25.254.100:8080
/web/html's page
[root@apache ~]# curl 172.25.254.100:8080/lee.html
/web/html/lee's page
#修改配置文件
[root@apache ~]# vim /etc/httpd/conf/httpd.conf
172 <IfModule dir_module>
173     DirectoryIndex lee.html index.html
174 </IfModule>
#重啟服務(wù)
[root@apache ~]# systemctl reload httpd
#測試：
[root@apache ~]# curl 172.25.254.100:8080
/web/html/lee's page

#安裝mod_ssl
[root@apache ~]# dnf install mod_ssl -y
#建立證書和key文件目錄
[root@apache ~]# mkdir /etc/httpd/certs
#制作證書
[root@apache ~]# openssl req \
-newkey rsa:2048 \
-nodes \
-sha256 \
-keyout /etc/httpd/certs/timinglee.org.key \
-x509 \
-days 365 \
-out /etc/httpd/certs/timinglee.org.crt
Country Name (2 letter code) [XX]:CN
State or Province Name (full name) []:Shannxi
Locality Name (eg, city) [Default City]:XI'AN
Organization Name (eg, company) [Default Company Ltd]:timinglee
Organizational Unit Name (eg, section) []:webserver
Common Name (eg, your name or your server's hostname) []:www.timinglee.org
Email Address []:timinglee@timinglee.org
#命令執(zhí)行完成，證書出現(xiàn)
[root@apache ~]# ls /etc/httpd/certs/
timinglee.org.crt timinglee.org.key
#編輯主配置文件
[root@apache ~]# vim /etc/httpd/conf.d/ssl.conf
 86 SSLCertificateFile /etc/httpd/certs/timinglee.org.crt
 95 SSLCertificateKeyFile /etc/httpd/certs/timinglee.org.key
#重啟服務(wù)
root@apache ~]# systemctl reload httpd
[root@apache ~]# netstat -antlupe | grep httpd
tcp6       0     0 :::443                 :::*                   LISTEN     0 
        85111     33518/httpd
tcp6       0     0 :::80                   :::*                   LISTEN     0 
        80172     33518/httpd
#在瀏覽器中訪問
https://服務(wù)器ip

修改selinux  ——有所影響
grubby --update-kernel ALL --args selinux=1
reboot ——重啟
getenforce
Enforcing
#為每個(gè)發(fā)布站點(diǎn)建立默認(rèn)發(fā)布目錄
[root@apache ~]# mkdir -p /var/www/virtual/timinglee.org/news
[root@apache ~]# mkdir -p /var/www/virtual/timinglee.org/bbs
#為每個(gè)站點(diǎn)建立默認(rèn)發(fā)布文件
[root@apache ~]# echo new.timinglee.org > /var/www/virtual/timiniglee.org/news/index.html
[root@apache ~]# echo bbs.timinglee.org > /var/www/virtual/timiniglee.org/bbs/index.html
#修改配置文件
[root@apache ~]# vim /etc/httpd/conf.d/vhosts.conf
<VirtualHost _default_:80>
 DocumentRoot /var/www/html
</VirtualHost>
<VirtualHost *:80>
 ServerName bbs.timinglee.org
 DocumentRoot /var/www/virtual/timiniglee.org/bbs/
</VirtualHost>
<VirtualHost *:80>
 ServerName news.timinglee.org
 DocumentRoot /var/www/virtual/timiniglee.org/news/
</VirtualHost>
#刷新服務(wù)
[root@apache ~]# systemctl reload httpd
#測試：
1.在瀏覽器所在主機(jī)中手動(dòng)編寫本地解析文件
[root@apache ~]# vim /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
#加入虛擬主機(jī)解析域名
172.25.254.100 mariadb.timinglee.org www.timinglee.org news.timinglee.org 
bbs.timinglee.org
2.測試效果
[root@apache ~]# curl www.timinglee.org
172.25.254.100
[root@apache ~]# curl bbs.timinglee.org
bbs.timinglee.org
[root@apache ~]# curl news.timinglee.org
new.timinglee.org