Moving HTTPD From One Machine to Another: Difference between revisions
Jump to navigation
Jump to search
Jgutierrez6 (talk | contribs) No edit summary |
Jgutierrez6 (talk | contribs) No edit summary |
||
Line 27: | Line 27: | ||
#:<source> | #:<source> | ||
/var/log/httpd/*log { | /var/log/httpd/*log { | ||
missingok | |||
notifempty | |||
sharedscripts | |||
delaycompress | |||
postrotate | |||
/bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true | |||
endscript | |||
} | } | ||
/var/log/httpd/*/*log { | /var/log/httpd/*/*log { | ||
missingok | |||
notifempty | |||
sharedscripts | |||
delaycompress | |||
postrotate | |||
/bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true | |||
endscript | |||
} | } | ||
</source> | </source> |
Revision as of 20:01, 28 August 2024
Introduction
Here are instructions on how to migrate HTTPD functions to another machine. Main example is migrating from CentOS 7 to Rocky Linux 8 (vav to vav2)
Instructions
- Install these packages
dnf install -y webalizer httpd certbot python3-certbot-apache mod_limitipconn
- Enable http and https ports
firewall-cmd --permanent --add-service={http,https}
- Copy these files from old to new machine
- /etc/httpd/conf.d/*
- /var/www/html/index.html
- /etc/webalizer.d/*
- /etc/letsencrypt
- /root/UCSF_SSL_CERT
- /var/log/httpd/*
- /var/lib/webalizer/
- /var/www/usage/
- Turn off TraceEnable in httpd.conf in new machine
echo "TraceEnable off" >> /etc/httpd/conf/httpd.conf
- Add httpd logs to logrotate configuration file
- vim /etc/logrotate.d/httpd
- Delete everything inside and replace with:
/var/log/httpd/*log { missingok notifempty sharedscripts delaycompress postrotate /bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true endscript } /var/log/httpd/*/*log { missingok notifempty sharedscripts delaycompress postrotate /bin/systemctl reload httpd.service > /dev/null 2>/dev/null || true endscript }
- Add these jobs to cron
0 0 * * * /bin/certbot renew 0 6 * * SAT /etc/webalizer.d/cronwebalizer.csh
- Change selinux from enforce to permissive
- setenforce 0
- vim /etc/selinux/config
SELINUX=permissive
- Check with "sestatus". Make sure these two below are permissive
Current mode: permissive Mode from config file: permissive
- Check httpd and resolve any config errors. If no errors, then restart httpd
systemctl restart httpd
- Move Public IP Ethernet Cord from old to new machine. Then test. Goodluck.