Différences

Ci-dessous, les différences entre deux révisions de la page.

--- admin:services:visio.chapril.org [2020/03/24 21:29] – [Service visio.chapril.org] fpoulain
+++ admin:services:visio.chapril.org [2020/05/21 21:34] – cpm
@@ Ligne 1: / Ligne 1: @@
-====== Service visio.chapril.org =======
+======= Service visio.chapril.org ========
+====== Installation ======
+===== Configuration DNS =====
+Sur la vm dns, ajouter le domaine //visio.chapril.org// : voir [[admin:procedures:ajout-record-dns]].
+===== Configuration bastion =====
+Créer le fichier //root@bastion:/etc/nginx/sites-available/visio.chapril.org//
+Créer le lien symbolique :
+<code>
+cd /etc/nginx/sites-enabled/
+ln -s ../sites-available/visio.chapril.org
+</code>
+Créer le dossier des logs HTTP :
+<code>
+mkdir /var/log/nginx/visio.chapril.org/
+</code>
+Désactiver le HTTPS dans la conf Nginx de //visio.chapril.org// :
+<code>
+nginx -t
+nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
+nginx: configuration file /etc/nginx/nginx.conf test is successful
+nginx -s reload
+</code>
+Étendre la liste des domaines gérée apr Dehydrated :
+<code>
+echo "visio.chapril.org" >> /etc/dehydrated/domains.txt
+</code>
+Lancer Dehydrated pour récupérer le certificat du domaine :
+<code>
+dehydrated -c
+# INFO: Using main config file /etc/dehydrated/config
+# INFO: Using additional config file /etc/dehydrated/conf.d/test-ca.sh
+Processing visio.chapril.org
+ + Creating new directory /var/lib/dehydrated/certs/visio.chapril.org ...
+ + Signing domains...
+ + Generating private key...
+ + Generating signing request...
+ + Requesting new certificate order from CA...
+ + Received 1 authorizations URLs from the CA
+ + Handling authorization for visio.chapril.org
+ + 1 pending challenge(s)
+ + Deploying challenge tokens...
+ + Responding to challenge for visio.chapril.org authorization...
+ + Challenge is valid!
+ + Cleaning challenge tokens...
+ + Requesting certificate...
+ + Checking certificate...
+ + Done!
+ + Creating fullchain.pem...
+ + Done!
+</code>
+Activer le HTTPS dans la configuration Nginx de //visio.chapril.org// et recharger :
+<code>
+nginx -t
+nginx -s reload
+</code>
+====== Raw ======
 <code null bash>
 francois@renard:~$ ssh dns.c
@@ Ligne 1158: / Ligne 1229: @@
 ===== Installation =====
+Définir les logs dans la conf Nginx ''/etc/nginx/sites-enabled/visio.chapril.org'' :
+<code>
+    access_log /var/log/nginx/visio.chapril.org/visio.chapril.org-access.log;
+    error_log /var/log/nginx/visio.chapril.org/visio.chapril.org-error.log;
+</code>
+Création du dossier de logs :
+<code>
+mkdir /var/log/nginx/visio.chapril.org/
+</code>