<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <title>Setup Web and DNS</title> <meta content="C. de Laat" name="author"> </head> <body style=" color: azure; background-color: black;" vlink="#ffff66" alink="#ff9900" link="#ffcc66"> <table width="100%" border="0" align="left"> <tbody> <tr> <td valign="top"> <a href="http://www.delaat.net/"><img src="../home.png" border="2" height="40"></a> </td> <td valign="top"> <h1 style="text-align: center;"> Web Server (apache) and DNS (bind) setup on a MacMini using Homebrew </h1> </td> <td valign="top" align="right"><a href="http://sne.science.uva.nl/"><img style="width: 79px; height: 40px;" alt="" src="../logo-sne.png" width="78" border="2" height="40"></a><a href="http://www.uva.nl/"><img src="../logo-uva.png" width="40" border="2" height="40"></a> </td> </tr> <tr> <td colspan="3" rowspan="1"> <h2>DNS and HTTPD server setup</h2> Possible setups: <ul> <li>via homebrew <ol> <li><a href="https://getgrav.org/blog/macos-mojave-apache-multiple-php-versions">https://getgrav.org/blog/macos-mojave-apache-multiple-php-versions</a></li> <li><a href="https://getgrav.org/blog/macos-mojave-apache-mysql-vhost-apc">https://getgrav.org/blog/macos-mojave-apache-mysql-vhost-apc</a></li> <li><a href="https://getgrav.org/blog/macos-mojave-apache-ssl">https://getgrav.org/blog/macos-mojave-apache-ssl</a></li> <li><a href="https://certbot.eff.org/lets-encrypt/osx-apache">https://certbot.eff.org/lets-encrypt/osx-apache</a></li> </ol> </li> <li>Using only installed version <ul> <li><a href="https://coolestguidesontheplanet.com/install-apache-mysql-php-on-macos-mojave-10-14/">https://coolestguidesontheplanet.com/install-apache-mysql-php-on-macos-mojave-10-14/</a></li> </ul> </li> <li>via server (depricated) <ul> <li><a href="https://www.macstrategy.com/article.php?210">https://www.macstrategy.com/article.php?210</a></li> </ul> </li> </ul> In this table are the commands for apache via brew as in <a href="https://getgrav.org/blog/macos-mojave-apache-multiple-php-versions">https://getgrav.org/blog/macos-mojave-apache-multiple-php-versions</a>. Apple server needs to be completely uninstalled and out of the window! <ul> <ul> </ul> </ul> <table border="1"> <tbody style="vertical-align: top;"> <tr style="background-color: rgb(148, 23, 81);"> <td> </td> <td>cmd</td> <td>comment </td> </tr> <tr style="background-color: rgb(0, 0, 104);"> <td> </td> <td>Xcode </td> <td> </td> </tr> <tr> <td>S </td> <td>install Xcode </td> <td> </td> </tr> <tr> <td>S</td> <td>xcode-select --install</td> <td> </td> </tr> <tr style="background-color: rgb(0, 0, 104);"> <td> </td> <td>BREW</td> <td> </td> </tr> <tr> <td>S</td> <td>ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"</td> <td> </td> </tr> <tr> <td>T</td> <td>brew --version</td> <td> </td> </tr> <tr> <td>S</td> <td>brew update</td> <td> </td> </tr> <tr> <td>S</td> <td>brew upgrade</td> <td> </td> </tr> <tr> <td>S</td> <td>brew doctor</td> <td> </td> </tr> <tr> <td>O</td> <td>sudo chown -R "$USER":admin /usr/local sudo chown -R "$USER":admin /Library/Caches/Homebrew</td> <td> </td> </tr> <tr> <td>S</td> <td>brew install openldap libiconv</td> <td> </td> </tr> <tr style="background-color: rgb(0, 0, 104);"> <td> </td> <td>APACHE</td> <td> </td> </tr> <tr> <td>S</td> <td>sudo apachectl stop</td> <td> </td> </tr> <tr> <td>S</td> <td>sudo launchctl unload -w /System/Library/LaunchDaemons/org.apache.httpd.plist 2>/dev/null</td> <td> </td> </tr> <tr> <td>S</td> <td>brew install httpd </td> <td> </td> </tr> <tr> <td>O</td> <td>sudo brew services start httpd </td> <td> </td> </tr> <tr> <td>T</td> <td>ps -aef | grep httpd </td> <td> </td> </tr> <tr> <td>O</td> <td>sudo brew services restart httpd </td> <td> </td> </tr> <tr> <td>T</td> <td>tail -f /usr/local/var/log/httpd/error_log </td> <td> </td> </tr> <tr> <td>O</td> <td>sudo apachectl stop</td> <td> </td> </tr> <tr> <td>O</td> <td>sudo apachectl -k restart</td> <td> </td> </tr> <tr> <td>T </td> <td>apachectl -S</td> <td>to get setup paths</td> </tr> <tr> <td>T </td> <td>apachectl configtest</td> <td>test</td> </tr> <tr> <td>S </td> <td>bbedit /usr/local/etc/httpd/httpd.conf </td> <td> </td> </tr> <tr> <td>S </td> <td>HTTPD edits including vhosts: <ol> <li>Listen 8080 => Listen 80</li> <li>enable ==> LoadModule deflate_module lib/httpd/modules/mod_deflate.so</li> <li>enable ==> LoadModule rewrite_module lib/httpd/modules/mod_rewrite.so</li> <li>enable ==> LoadModule vhost_alias_module lib/httpd/modules/mod_vhost_alias.so</li> <li>ServerAdmin admin@domain.net</li> <li>#ServerName www.example.com:8080 ==> ServerName localhost:80</li> <li>enable ==> Include /usr/local/etc/httpd/extra/httpd-autoindex.conf</li> <li>enable ==> Include /usr/local/etc/httpd/extra/httpd-vhosts.conf</li> </ol> </td> <td> </td> </tr> <tr> <td> </td> <td>vhosts <ol> </ol> edit: /usr/local/etc/httpd/extra/httpd-vhosts.conf Include catch directory and for vhosts: <VirtualHost *:80>     DocumentRoot "/usr/local/var/www"     ServerName catch.delaat.net </VirtualHost> <Directory "/usr/local/var/www">     Options Indexes FollowSymLinks     AllowOverride All     Require all granted </Directory> <VirtualHost *:80>     DocumentRoot "/Users/delaat/Sites"     ServerName delaat.net     ServerAlias alias.delaat.net </VirtualHost> <Directory "/Users/delaat/Sites">     Options Indexes FollowSymLinks     AllowOverride All     Require all granted </Directory> DocumentRoot "/usr/local/var/www" ==> DocumentRoot "/Users/delaat/Sites" Directory "/usr/local/var/www" ==> Directory "/Users/delaat/Sites"</td> <td> </td> </tr> <tr style="background-color: rgb(0, 0, 104);"> <td> </td> <td>php</td> <td> </td> </tr> <tr> <td>S</td> <td>brew install php</td> <td>DOES NOT WORK BECAUSE OF mod_mpm_event.so</td> </tr> <tr> <td> </td> <td>To enable PHP in Apache add the following to httpd.conf and restart Apache:     LoadModule php7_module /usr/local/opt/php/lib/httpd/modules/libphp7.so     <FilesMatch \.php$>         SetHandler application/x-httpd-php     </FilesMatch> Finally, check DirectoryIndex includes index.php     DirectoryIndex index.php index.html The php.ini and php-fpm.ini file can be found in:     /usr/local/etc/php/7.3/ To have launchd start php now and restart at login:   brew services start php Or, if you don't want/need a background service you can just run:   php-fpm</td> <td> </td> </tr> <tr style="background-color: rgb(0, 0, 104);"> <td> </td> <td>certbot</td> <td> </td> </tr> <tr> <td> </td> <td>sudo install -d -o $(whoami) -g admin /usr/local/Frameworks</td> <td> </td> </tr> <tr> <td> </td> <td>brew install certbot</td> <td> </td> </tr> <tr> <td> </td> <td>HTTPD edits: Uncomment: <ul> <li>LoadModule ssl_module modules/mod_ssl.so</li> <li>LoadModule socache_shmcb_module modules/mod_socache_shmcb.so</li> </ul> add at the end: <IfModule mod_ssl.c>    Listen 443 </IfModule> Include /usr/local/etc/httpd/extra/httpd-vhosts-le-ssl.conf create if needed httpd-vhosts-le-ssl.conf <VirtualHost *:443>     DocumentRoot "/Users/XXXX/Sites"     ServerName delaat.net     ServerAlias ipv4.delaat.net ipv6.delaat.net     ServerAlias www.delaat.net Include /etc/letsencrypt/options-ssl-apache.conf SSLCertificateFile /etc/letsencrypt/live/XXXXXXX/fullchain.pem SSLCertificateKeyFile /etc/letsencrypt/live/XXXXXXX/privkey.pem </VirtualHost> and in httpd-vhosts.conf e.g.: <VirtualHost *:80>     DocumentRoot "/Users/delaat/Sites"     ServerName delaat.net     ServerAlias ipv4.delaat.net ipv6.delaat.net     ServerAlias www.delaat.net RewriteEngine on RewriteCond %{SERVER_NAME} =ipv4.delaat.net [OR] RewriteCond %{SERVER_NAME} =delaat.net [OR] RewriteCond %{SERVER_NAME} =www.delaat.net [OR] RewriteCond %{SERVER_NAME} =ipv6.delaat.net RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent] </VirtualHost> <ul> </ul> </td> <td> </td> </tr> <tr> <td>S </td> <td>sudo certbot --apache or sudo certbot --apache --staging and after successful testing: sudo certbot --apache --force-renewal</td> <td> </td> </tr> <tr> <td>O </td> <td>sudo certbot renew --dry-run</td> <td> </td> </tr> <tr> <td>O </td> <td>sudo certbot renew</td> <td>for production</td> </tr> <tr> <td>O</td> <td>sudo certbot certificates</td> <td> </td> </tr> <tr> <td>S </td> <td>0 0,12 * * * python -c 'import random; import time; time.sleep(random.random() * 3600)' && certbot renew OR:  /Library/LaunchDaemons/com.certbot.renew.plist <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict>     <key>Label</key>     <string>com.certbot.renew</string>     <key>ProgramArguments</key>     <array>         <string>certbot</string>     <string>renew></string>     </array>     <key>StartCalendarInterval</key>     <dict>         <key>Hour</key>         <integer>14</integer>         <key>Minute</key>         <integer>56</integer>     </dict>     <key>StandardOutPath</key>     <string>/usr/local//var/log/certbot.renew.log</string>     <key>StandardErrorPath</key>     <string>/usr/local//var/log/certbot.renew.log</string>  </dict> </plist> sudo chown root:wheel /Library/LaunchDaemons/com.certbot.renew.plist sudo launchctl load -w /Library/LaunchDaemons/com.certbot.renew.plist sudo launchctl list | grep cert </td> <td> </td> </tr> <tr> <td>S</td> <td>HTTPD edits to enable http2 <ol> <li>disable ===> #LoadModule mpm_prefork_module lib/httpd/modules/mod_mpm_prefork.so</li> <li>enable ===> LoadModule mpm_event_module lib/httpd/modules/mod_mpm_event.so</li> <li>enable ===> LoadModule http2_module lib/httpd/modules/mod_http2.so</li> <li>add ===> Protocols h2 h2c http/1.1</li> </ol> </td> <td> </td> </tr> <tr style="background-color: rgb(0, 0, 104);"> <td> </td> <td>BIND </td> <td> </td> </tr> <tr> <td>S</td> <td>brew install bind</td> <td> </td> </tr> <tr> <td>O</td> <td>sudo brew services start bind</td> <td> </td> </tr> <tr> <td>O</td> <td>sudo brew services restart bind</td> <td> </td> </tr> <tr> <td>O</td> <td>sudo brew services stop bind</td> <td> </td> </tr> <tr> <td>S </td> <td>/usr/local/etc/named.conf</td> <td> </td> </tr> <tr> <td>S</td> <td>/usr/local/var/named/ </td> <td> </td> </tr> <tr> <td>T </td> <td>host -t ns delaat.net </td> <td> </td> </tr> </tbody> </table> How this page is made (author Cees de Laat): bluegriffon </td> </tr> </tbody> </table> </body> </html>