Skip to main content

CentOS 7 配置

首先做基本的服务器配置，以及基本的安全策略：

Initial Server Setup with CentOS 7

How To Configure SSH Key-Based Authentication on a Linux Server

记得改权限否则无法 ssh 连上去！

chmod 700 .ssh
chmod 600 .ssh/authorized_keys

Additional Recommended Steps for New CentOS 7 Servers

选择服务器架构：LAMP、LEMP 等

How To Install Linux, Apache, MySQL, PHP (LAMP) stack On CentOS 7

How To Install Linux, Nginx, MySQL, PHP (LEMP stack) on Ubuntu 18.04

CentOS 的 yum 的软件版本很多不是最新的，要安装最新的 MariaDB 和 PHP：

How to Upgrade MariaDB 5.5 to MariaDB 10.0 on CentOS 7

PHP 7 on CentOS via Yum

安装完之后可以选择移除这个仓库：

$ cd /etc/yum.repos.d
$ yum remove rpmforge-release

安装其他应用：

How To Install and Secure phpMyAdmin with Apache on a CentOS 7 Server

How To Install WordPress on CentOS 7; Giving WordPress Its Own Directory

如何创建自己的 SSL 证书： How To Create an SSL Certificate on Apache for CentOS 7

SSL 相关文件存放在etc/httpd/ssl

将所有的网络请求重定向到 HTTPS： Httpd Wiki RedirectSSL (redirect all http request to https)

最后，检查是否安装好了：

How To Protect your Server Against the POODLE SSLv3 Vulnerability

Check your SSL/TLS certificate installation

My SSL Lock is not displaying properly

SSL/TLS Strong Encryption: How-To

在 CentOS 7 上搭建 Git Server

I want my project url something like this: https://www.yianzhou.com/git/project.git

So the clone command can be in this format: $ git clone https://www.yianzhou.com/git/project.git

先创建一个新的配置文件，目的是与其他区分开: /etc/httpd/conf.d/git.conf

SetEnv GIT_PROJECT_ROOT /opt/git
SetEnv GIT_HTTP_EXPORT_ALL
ScriptAlias /git/ /usr/libexec/git-core/git-http-backend/

<LocationMatch "^/git/*">
AuthType Basic
AuthName "Git Access"
AuthUserFile /opt/git/.htpasswd
Require valid-user
</LocationMatch>

因为我们需要使用 HTTP 访问，所以要更改文件目录的权限: chown -R apache /opt/git

创建用户：htpasswd /opt/git/.htpasswd andy

重启网络服务：systemctl restart httpd

现在可以创建一个项目试一试:

$ cd /opt/git
$ mkdir myproject.git
$ cd myproject.git
$ git init --bare

在本地电脑上测试：git clone

如果是已有的项目:

cd <localdir>
git init
git add .
git commit -m 'message'
git remote add origin <url>
git push -u origin master

参考: