{"id":45,"date":"2018-06-25T00:34:45","date_gmt":"2018-06-24T15:34:45","guid":{"rendered":"https:\/\/www.chohi.ga\/?p=45"},"modified":"2018-08-06T20:37:29","modified_gmt":"2018-08-06T11:37:29","slug":"%ed%99%88%eb%84%a4%ed%8a%b8%ec%9b%8c%ed%81%ac-%ed%98%84%ed%99%a9","status":"publish","type":"post","link":"https:\/\/www.kkoc.org\/?p=45","title":{"rendered":"\uc6b0\ub9ac\uc9d1 \uac1c\ubc1c\uc11c\ubc84"},"content":{"rendered":"

1. \ud648\ub124\ud2b8\uc6cc\ud06c \ud604\ud669<\/h1>\n

\"\"<\/a><\/p>\n

2018\ub144 3\uc6d4\ub9d0\uc5d0 \ucc98\uc74c HP MicroServer GEN8\uc744 \uad6c\uc785\ud558\uace0, 6\uc6d4 15\uc77c\uc744 \ub05d\uc73c\ub85c \uc11c\ubc84\uc5d0 \ud544\uc694\ud55c \ubd80\ud488\ub4e4\uc744 \ubaa8\ub450 \uad6c\ub9e4\ud558\uc600\uc2b5\ub2c8\ub2e4.<\/p>\n

\uadf8\uac04 \uad6c\ub9e4 \ubaa9\ub85d \ubc0f \uc11c\ubc84 \uc124\uce58 \ud604\ud669<\/p>\n

ProLiant \ub9c8\uc774\ud06c\ub85c\uc11c\ubc84 Gen8\n - CPU : \uc81c\uc628 E3-1265L v2\n - \uba54\ubaa8\ub9ac : \uc0bc\uc131 8G PC3L-12800E * 2EA\n - SSD : Micron Crucial MX500 500GB\n - HDD : WD 8TB \ud654\uc774\ud2b8\n - NIC : Mellanox 10G(MNPA19_XTR)\n         Peer To Peer \ubc29\uc2dd\uc73c\ub85c PC\uc640 \uc5f0\uacb0 \n\nVMware \uc124\uce58\n - Xpenology : DNS, Mail, VPN, NAS \uc6a9\ub3c4\ub85c \ud65c\uc6a9\n - CentOS7 : Apache HTTP Webserver, PHP, MySQL \uc124\uce58\n  . WordPress \uc124\uce58(www.chohi.ga) - \uac1c\uc778 \ud648\ud398\uc774\uc9c0\n  . \uadf8\ub204\ubcf4\ub4dc + \uc544\ubbf8\ub098\ube4c\ub354 \uc124\uce58(www.duksfarm.ga) - \uc7a5\uc778\uc5b4\ub978 \ub355\uc774\ub18d\uc7a5 \ud648\n\n\ud398\uc774\uc9c0\n - Ubuntu : Atlassian \uc81c\ud488 \uc124\uce58\n  . Jira (jira.chohi.ga)\n  . Confluence (confluence.chohi.ga)\n  . Bitbucket (bitbucket.chohi.ga)\n\n\ub3c4\uba54\uc778\n - Freenom\u00a0:\u00a0\ubb34\ub8cc\n\nSSL \uc778\uc99d\uc11c \n - Let's Encrypt\u00a0: \ubb34\ub8cc\n<\/pre>\n
2. Apache HTTP Server SSL \ud658\uacbd<\/h1>\n
\uba87\uc77c \uc804\uc5d0 \uc9c0\uc778\uacfc \uc598\uae30\ub3c4\uc911\uc5d0 Tomcat\uc5d0 \ub300\ud574\uc11c \uc758\uacac\uc744 \ub098\ub208\uc801\uc774 \uc788\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n
\ud55c\ucc38\uc744 Tomcat\uacfc \uc6f9\uc11c\ubc84\uc758 \ud2c0\ub9b0\uc810\uc744 \uc598\uae30\ud558\uace0 Webserver, WAS\uc11c\ubc84\uc5d0 \ub300\ud574 \ub9d0\uc744\ud588\uc9c0\ub9cc… Tomcat\uc740 \uc6f9\uc11c\ubc84\ub77c\uace0 \ud558\ub354\uad70\uc694.<\/p>\n
\uacb0\ub860\uc740 Apache Tomcat\uacfc Apache HTTP Webserver\ub97c \uad6c\ubd84\ubabb\ud558\ub294 \ubd84\uc774\uc600\uc2b5\ub2c8\ub2e4.<\/p>\n
\uc548\ud0c0\uae4c\uc6b4 \ud604\uc2e4\uc740 \uc544\uc9c1\ub3c4 Tomcat\uc774 WAS\uc11c\ubc84\ub77c\ub294\uac83\uc744 \ubaa8\ub974\ub294\ubd84\uc774 \ub9ce\uc774 \uacc4\uc2ed\ub2c8\ub2e4.<\/p>\n
Webserver\uc640 WAS\uc11c\ubc84\ub97c \uad6c\ubd84\ud558\uae30 \uc704\ud574\uc11c VM\uc73c\ub85c 2\uac1c\uc758 \uc11c\ubc84\ub97c \uc124\uce58\ud558\uace0 \uc544\ub798\uc640 \uadf8\ub9bc\ucc98\ub7fc \uc11c\ubc84\ub97c \uad6c\uc131\ud558\uc600\uc2b5\ub2c8\ub2e4.<\/p>\n
\uc6f9\uc11c\ubc84 : 192.168.22.11\nWAS\uc11c\ubc84 : 192.168.22.12<\/pre>\n
\"\"<\/a><\/p>\n
WebServer\ub97c \ud1b5\ud558\uc9c0 \uc54a\uace0 \uc811\uadfc\ud558\uae30 \uc704\ud574\uc11c\ub294 8080, 8090, 7990 \ud3ec\ud2b8\ud3ec\uc6cc\ub529 \uc124\uc815\ud574\uc11c \uc811\uadfc\uc774 \uac00\ub2a5\ud569\ub2c8\ub2e4.\u00a0\u00a0<\/span><\/p>\n
ex) http:\/\/www.chohi.ga:8080\/\u00a0\u00a0<\/span><\/p>\n
\uc800\ub294 \ub3c4\uba54\uc778\uc73c\ub85c \ubc14\ub85c \uc11c\ube44\uc2a4 \ud558\uae30 \uc6d0\ud574\uc11c\u00a0\uc5bc\uad74 \ub9c8\ub2f4\uc778 Apache HTTP Webserver\uc5d0\uac8c DNS\ub97c \ucc98\ub9ac\ud560 \uc218 \uc788\ub3c4\ub85d\u00a0 \uc544\ub798\uc640 \uac19\uc774 \uc791\uc5c5\uc744 \uc9c4\ud589\ud558\uc600\uc2b5\ub2c8\ub2e4.<\/p>\n
www.chohi.ga : 192.168.22.11 \uc11c\ubc84\uc758 wordpress \ud648\ud398\uc774\uc9c0\nwww.duksfarm.ga : 192.168.22.11 \uc11c\ubc84\uc758 \uadf8\ub204\ubcf4\ub4dc+\uc544\ubbf8\ub098 \ube4c\ub354 \ud648\ud398\uc774\uc9c0\njira.chohi.ga : 192.168.22.12 \uc11c\ubc84\uc758 Jira - \ub0b4\ubd80 8080 \uc6f9\ud3ec\ud2b8\nconfluence.chohi.ga : 192.168.22.12 \uc11c\ubc84\uc758 Confluence 8090 \uc6f9\ud3ec\ud2b8\nbitbucket.chohi.ga : 192.168.22.12 \uc11c\ubc84\uc758 Bitbucket 7990 \uc6f9\ud3ec\ud2b8<\/pre>\n
Apache HTTP Webserver\uc640 Tomcat\uc11c\ubc84\uac04\uc758 \uc5f0\uacc4\ub294 mod_jk\ub97c \uc0ac\uc6a9\ud558\uc600\uc2b5\ub2c8\ub2e4.<\/p>\n
\ucc38\uace0 \uc790\ub8cc\ub3c4 \ub9ce\uace0 \uad00\ub9ac\uc790\uac00 \uc124\uc815\ud560 \uc218 \uc788\ub294 \uae30\ub2a5\uc774 mod_proxy\ubcf4\ub2e4 \ub9ce\ub2e4\uace0 \ud569\ub2c8\ub2e4.<\/p>\n
mod_jk \uc124\uc815<\/h2>\n
##CentOS 7\n# which apxs\n\/bin\/apxs           <- apxs \ud30c\uc77c \uc704\uce58 \ud655\uc778\n\n##tomcat-connectors \ub2e4\uc6b4\ub85c\ub4dc\n#wget http:\/\/mirror.apache-kr.org\/tomcat\/tomcat-connectors\/jk\/tomcat-connectors-1.2.43-src.tar.gz \n\n# .\/configure --with-apxs=\/bin\/apxs   <- apxs \uc704\uce58 \uc124\uc815\n# make\n# make install<\/pre>\n
httpd.conf \uc218\uc815(\/etc\/httpd\/conf\/)<\/h2>\n
#VirtialHost \ucd94\uac00<\/strong><\/p>\n
...\nNameVirtualHost *:80\n\n<VirtualHost *:80>\n  ServerAlias www.chohi.ga\n  ServerSignature Off\n\n  <IfModule mod_rewrite.c>\n    RewriteEngine On\n    RewriteRule ^ https:\/\/%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]\n  <\/IfModule>\n\n  ErrorLog \/var\/log\/httpd\/redirect.error.log\n  LogLevel warn\n<\/VirtualHost>\n\n<VirtualHost *:80>\n  ServerName duksfarm.ga\n  ServerAlias www.duksfarm.ga\n  ServerSignature Off\n\n  <IfModule mod_rewrite.c>\n    RewriteEngine On\n    RewriteRule ^ https:\/\/%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]\n  <\/IfModule>\n\n  ErrorLog \/var\/log\/httpd\/redirect.error.log\n  LogLevel warn\n<\/VirtualHost>\n...\n\n<\/pre>\n
#mod_jk \uc124\uc815<\/strong><\/p>\n
LoadModule jk_module modules\/mod_jk.so\n\n<IfModule mod_jk.c>\n  JkWorkersFile conf\/workers.properties\n  JkLogFile logs\/mod_jk_new.log\n  JkLogLevel error\n  JkLogStampFormat \"[%a %b %d %H:%M:%S %Y] \"\n  JkOptions +ForwardKeySize +ForwardURICompat -ForwardDirectories +ForwardURICompatUnparsed\n  JkRequestLogFormat \"%w %V %T\"\n<\/IfModule><\/pre>\n
workers.properties \ucd94\uac00(\/etc\/httpd\/conf\/)<\/h2>\n
worker.list=worker1,worker2,worker3\n\n#JIRA\nworker.worker1.type=ajp13\nworker.worker1.host=192.168.22.12\nworker.worker1.port=8009<\/pre>\n
#Confluence\nworker.worker2.type=ajp13\nworker.worker2.host=192.168.22.12\nworker.worker2.port=8010<\/pre>\n
#Bitbucket\nworker.worker3.type=ajp13\nworker.worker3.host=192.168.22.12\nworker.worker3.port=8011\n\n<\/pre>\n
ssl. conf \uc218\uc815(\/etc\/httpd\/conf.d)<\/h2>\n
#www.duksfarm.ga\n\n<VirtualHost *:443>\n  Header always set Strict-Transport-Security \"max-age=31536000; includeSubdomains;\"\n\n  # General setup for the virtual host, inherited from global configuration\n  DocumentRoot \"\/home\/www\/html\"\n\n  ...\n\n  CustomLog logs\/ssl_request_log \"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \\\"%r\\\" %b\"\n\n  ServerName duksfarm.ga\n  Include \/etc\/letsencrypt\/options-ssl-apache.conf\n  ServerAlias www.duksfarm.ga\n  SSLCertificateFile \/etc\/letsencrypt\/live\/duksfarm.ga\/cert.pem\n  SSLCertificateKeyFile \/etc\/letsencrypt\/live\/duksfarm.ga\/privkey.pem\n  SSLCertificateChainFile \/etc\/letsencrypt\/live\/duksfarm.ga\/chain.pem\n<\/VirtualHost>\n\n<\/pre>\n
#www.chohi.ga\n\n<VirtualHost *:443>\n  Header always set Strict-Transport-Security \"max-age=31536000; includeSubdomains;\"\n\n  # General setup for the virtual host, inherited from global configuration\n  DocumentRoot \"\/home\/www\/wordpress\"\n\n  ...\n\n  CustomLog logs\/ssl_request_log \"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \\\"%r\\\" %b\"\n\n  ServerName chohi.ga\n  Include \/etc\/letsencrypt\/options-ssl-apache.conf\n  ServerAlias www.chohi.ga\n  SSLCertificateFile \/etc\/letsencrypt\/live\/chohi.ga\/cert.pem\n  SSLCertificateKeyFile \/etc\/letsencrypt\/live\/chohi.ga\/privkey.pem\n  SSLCertificateChainFile \/etc\/letsencrypt\/live\/chohi.ga\/chain.pem\n<\/VirtualHost>\n\n<\/pre>\n
#jira\uc124\uc815\n\n<VirtualHost *:443>\n  Header always set Strict-Transport-Security \"max-age=31536000; includeSubdomains;\"\n \n  # is not inherited from httpd.conf.\n  ErrorLog logs\/ssl_error_log\n  TransferLog logs\/ssl_access_log\n  LogLevel warn\n\n  SSLEngine on\n\n  SSLProtocol all -SSLv2 -SSLv3\n\n  SSLCipherSuite HIGH:3DES:!aNULL:!MD5:!SEED:!IDEA\n\n  BrowserMatch \"MSIE [2-5]\" nokeepalive ssl-unclean-shutdown downgrade-1.0 force-response-1.0\n  CustomLog logs\/ssl_request_log \"%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \\\"%r\\\" %b\"\n  JkMount \/* worker1\n\n  ServerName jira.chohi.ga:443\n  Include \/etc\/letsencrypt\/options-ssl-apache.conf\n  \n  SSLCertificateFile \/etc\/letsencrypt\/live\/chohi.ga\/cert.pem\n  SSLCertificateKeyFile \/etc\/letsencrypt\/live\/chohi.ga\/privkey.pem\n  SSLCertificateChainFile \/etc\/letsencrypt\/live\/chohi.ga\/chain.pem\n<\/VirtualHost>\n\n\n\n\n#confluence\uc124\uc815\n\n...\nJkMount \/* worker2\n...\n\n\n\n#bitbucket \uc124\uc815\n\n...\nJkMount \/* worker3\n...\n\n<\/pre>\n
tomcat \uc218\uc815(server.xml)<\/h2>\n
#jira\n<Connector port=\"8009\" redirectPort=\"8443\" enableLookups=\"false\" protocol=\"AJP\/1.3\" URIEncoding=\"UTF-8\"\/>\n\n#confluence  \n<Connector port=\"8010\" redirectPort=\"8443\" enableLookups=\"false\" protocol=\"AJP\/1.3\" URIEncoding=\"UTF-8\"\/>\n\n#bitbucket  <\uc124\uce58\ub41c\ub514\ub809\ud1a0\ub9ac>\/shared\/server.xml\n<Connector port=\"8011\" redirectPort=\"8443\" enableLookups=\"false\" protocol=\"AJP\/1.3\" URIEncoding=\"UTF-8\"\/><\/pre>\n
Apache HTTP WebServer \uc7ac\uae30\ub3d9<\/p>\n
#service httpd restart<\/pre>\n
https:\/\/www.chohi.ga<\/a>
\nhttps:\/\/www.duksfarm.ga<\/a>
\nhttps:\/\/jira.chohi.ga\u00a0<\/a>
\nhttps:\/\/confluence.chohi.ga\u00a0<\/a>
\nhttps:\/\/bitbucket.chohi.ga\u00a0<\/a><\/p>\n
\ub2e4\uc74c \uc11c\ubc84\uc124\uc815\ud560\ub54c \uace0\uc0dd\ud558\uc9c0 \uc54a\ub3c4\ub85d \uc124\uc815\ud55c \ub0b4\uc6a9\uc744 \ub0a8\uaca8\ub461\ub2c8\ub2e4.<\/p>\n","protected":false},"excerpt":{"rendered":"
1. \ud648\ub124\ud2b8\uc6cc\ud06c \ud604\ud669 2018\ub144 3\uc6d4\ub9d0\uc5d0 \ucc98\uc74c HP MicroServer GEN8\uc744 \uad6c\uc785\ud558\uace0, 6\uc6d4 15\uc77c\uc744 \ub05d\uc73c\ub85c \uc11c\ubc84\uc5d0 \ud544\uc694\ud55c \ubd80\ud488\ub4e4\uc744 \ubaa8\ub450 \uad6c\ub9e4\ud558\uc600\uc2b5\ub2c8\ub2e4. \uadf8\uac04 \uad6c\ub9e4 \ubaa9\ub85d \ubc0f \uc11c\ubc84 \uc124\uce58 \ud604\ud669 ProLiant \ub9c8\uc774\ud06c\ub85c\uc11c\ubc84 Gen8 – CPU : \uc81c\uc628 E3-1265L v2 – \uba54\ubaa8\ub9ac : \uc0bc\uc131… <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[],"_links":{"self":[{"href":"https:\/\/www.kkoc.org\/index.php?rest_route=\/wp\/v2\/posts\/45"}],"collection":[{"href":"https:\/\/www.kkoc.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kkoc.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kkoc.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kkoc.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=45"}],"version-history":[{"count":45,"href":"https:\/\/www.kkoc.org\/index.php?rest_route=\/wp\/v2\/posts\/45\/revisions"}],"predecessor-version":[{"id":733,"href":"https:\/\/www.kkoc.org\/index.php?rest_route=\/wp\/v2\/posts\/45\/revisions\/733"}],"wp:attachment":[{"href":"https:\/\/www.kkoc.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=45"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kkoc.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=45"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kkoc.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=45"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}