sed(stream editor)
Linux 텍스트 명령어 편집기 sed(stream editor)는 텍스트 파일이나 텍스트 스트림에서 텍스트를 편집할 수 있는 강력한 도구입니다. sed는 특히 Unix 계열 운영체제에서 널리 사용되며, 정규 표현식을 […]
[OS]CentOS
Tomcat8 특정 아이피만 허용
remark : Tomcat8 특정 아이피만 허용 To allow access only for the clients connecting from localhost:
|
1 2 3 4 |
<Valve className="org.apache.catalina.valves.RemoteAddrValve" allow="127\.\d+\.\d+\.\d+|::1|0:0:0:0:0:0:0:1"/> |
or
|
1 2 3 4 |
<Valve className="org.apache.catalina.valves.RemoteCIDRValve" allow="10.0.0.0/8, 127.0.0.1, ::1"/> |
To allow unrestricted access for the […]
Let’s Encrypt / open SSL/TLS
Remark : SSL certificate 1. Install Let’s Encrypt client (Certbot)
|
1 2 3 4 |
# yum install epel-release # yum install certbot python2-certbot-apache mod_ssl |
2. Get an SSL Certificate
|
1 2 3 4 5 6 7 |
# sudo certbot --apache -d test.com -d www.test.com Or # sudo certbot --apache -d sub.test.com |
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 |
Saving debug log to /var/log/letsencrypt/letsencrypt.log Plugins selected: Authenticator apache, Installer apache Enter email address (used for urgent renewal and security notices) (Enter 'c' to cancel): admin@domain.com Starting new HTTPS connection (1): acme-v02.api.letsencrypt.org - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Please read the Terms of Service at https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must agree in order to register with the ACME server at https://acme-v02.api.letsencrypt.org/directory - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (A)gree/(C)ancel: A - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Would you be willing to share your email address with the Electronic Frontier Foundation, a founding partner of the Let's Encrypt project and the non-profit organization that develops Certbot? We'd like to send you email about our work encrypting the web, EFF news, campaigns, and ways to support digital freedom. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - (Y)es/(N)o: N Starting new HTTPS connection (1): supporters.eff.org Obtaining a new certificate Performing the following challenges: http-01 challenge for domain.com Waiting for verification... Cleaning up challenges Created an SSL vhost at /etc/httpd/conf.d/domain.com-le-ssl.conf Deploying Certificate to VirtualHost /etc/httpd/conf.d/domain.com-le-ssl.conf |
|
1 2 3 4 5 6 7 8 9 10 |
Please choose whether or not to redirect HTTP traffic to HTTPS, removing HTTP access. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - 1: No redirect - Make no further changes to the webserver configuration. 2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for new sites, or if you're confident your site works on HTTPS. You can undo this change by editing your web server's configuration. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 1 |
2.1 delete SSL (필요시)
|
1 2 3 |
# sudo certbot delete --cert-name example.com |
3. […]
firewalld zone 추가
Remark: firewalld 은 zone 기준으로 세팅해보자 1. firewalld zone Check 2. zone add 2.1 zone delete 3. mysql-access 192.168.0.111 allow 4. mysql-access port=3306/tcp allow 5. firewall reload
firewall 특정 아이피 막기
1. 특정 IP 막기 2. firewall 적용 3. firewall 적용 확인 4. IP 풀기 4.1 firewall 적용
firewalld 방화벽
firewalld 기본설치 Remark: CentOS 에서 firewalld 가 기본적으로 설치 되어있습니다. 1. firewall Status Check 2. firewall reload 3. http 서비스를 추가합니다. 4. 시스템 재부팅 또는 […]
열린 포트 확인
CentOS 열린포트 확인 remark : 열린포트 확인 해보기 netstat -tnlp
MySQL 디비 백업 및 복원
백업 : root 권한으로 백업 복원 : root 권한으로 복원 스케쥴 걸기 : sql.sh 파일을 만들어 crontab 에 세팅 등록 내용 설정 분,시,일,월,요일, 실행명령 순으로 […]
보안설정
일반적인 보안 Ping 막기 iptable 세팅 ssh 포트변경 ftp 특정 IP 만 허용 사이트세팅 로그확인