Moving HTTPD From One Machine to Another: Difference between revisions
Jump to navigation
Jump to search
Jgutierrez6 (talk | contribs) mNo edit summary |
Jgutierrez6 (talk | contribs) mNo edit summary |
||
(2 intermediate revisions by the same user not shown) | |||
Line 8: | Line 8: | ||
#: <source> | #: <source> | ||
firewall-cmd --permanent --add-service={http,https} | firewall-cmd --permanent --add-service={http,https} | ||
firewall-cmd --reload | |||
</source> | </source> | ||
# Copy these files from old to new machine | # Copy these files from old to new machine | ||
Line 27: | Line 28: | ||
#:<source> | #:<source> | ||
/var/log/httpd/*log { | /var/log/httpd/*log { | ||
missingok | |||
notifempty | |||
sharedscripts | |||
delaycompress | |||
postrotate | |||
/bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true | |||
endscript | |||
} | } | ||
/var/log/httpd/*/*log { | /var/log/httpd/*/*log { | ||
missingok | |||
notifempty | |||
sharedscripts | |||
delaycompress | |||
postrotate | |||
/bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true | |||
endscript | |||
} | } | ||
</source> | </source> | ||
Line 72: | Line 63: | ||
Mode from config file: permissive | Mode from config file: permissive | ||
</source> | </source> | ||
# Check httpd and resolve any config errors. If no errors, then restart httpd | |||
#: <source> systemctl restart httpd </source> | |||
# Move Public IP Ethernet Cord from old to new machine. Then test. Goodluck. |
Latest revision as of 22:50, 28 August 2024
Introduction
Here are instructions on how to migrate HTTPD functions to another machine. Main example is migrating from CentOS 7 to Rocky Linux 8 (vav to vav2)
Instructions
- Install these packages
dnf install -y webalizer httpd certbot python3-certbot-apache mod_limitipconn
- Enable http and https ports
firewall-cmd --permanent --add-service={http,https} firewall-cmd --reload
- Copy these files from old to new machine
- /etc/httpd/conf.d/*
- /var/www/html/index.html
- /etc/webalizer.d/*
- /etc/letsencrypt
- /root/UCSF_SSL_CERT
- /var/log/httpd/*
- /var/lib/webalizer/
- /var/www/usage/
- Turn off TraceEnable in httpd.conf in new machine
echo "TraceEnable off" >> /etc/httpd/conf/httpd.conf
- Add httpd logs to logrotate configuration file
- vim /etc/logrotate.d/httpd
- Delete everything inside and replace with:
/var/log/httpd/*log { missingok notifempty sharedscripts delaycompress postrotate /bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true endscript } /var/log/httpd/*/*log { missingok notifempty sharedscripts delaycompress postrotate /bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true endscript }
- Add these jobs to cron
0 0 * * * /bin/certbot renew 0 6 * * SAT /etc/webalizer.d/cronwebalizer.csh
- Change selinux from enforce to permissive
- setenforce 0
- vim /etc/selinux/config
SELINUX=permissive
- Check with "sestatus". Make sure these two below are permissive
Current mode: permissive Mode from config file: permissive
- Check httpd and resolve any config errors. If no errors, then restart httpd
systemctl restart httpd
- Move Public IP Ethernet Cord from old to new machine. Then test. Goodluck.