10477777 发表于 2018-11-21 09:43:11

LAMP中apache的配置步骤

  # 默认虚拟主机
  
      DocumentRoot "/tmp/123"## 目录“/tmp/123”需要提前创建,并赋予600的权限
      ServerName 333.com
  
  # Discuz配置
  
      DocumentRoot "/data/www"
      ServerName www.111.com
      ServerAlias www.222.com
  php_admin_value open_basedir "/data/www/:/tmp/            ## 区分不同虚拟机,限制多个
  # Apache访问控制
  
      AllowOverride None
      Options None
      Order allow,deny
      Allow from all
      Deny from 127.0.0.1
  
  # 根据“admin.php”来做个白名单
  
      Order deny,allow
      Deny from all
      Allow from 127.0.0.1
  
   ErrorLog "111.com-error_log"
  # 不记录指定文件日志
     SetEnvIf Resquest_URI ".*\.gif$" image-request
     SetEnvIf Resquest_URI ".*\.jpg$" image-request
     SetEnvIf Resquest_URI ".*\.png$" image-request
     SetEnvIf Resquest_URI ".*\.bmp$" image-request
     SetEnvIf Resquest_URI ".*\.swf$" image-request
     SetEnvIf Resquest_URI ".*\.js$" image-request
     SetEnvIf Resquest_URI ".*\.css$" image-request
  # 日志切割(目录在/usr/local/apache2/logs下)
   CustomLog "|/usr/local/apache2/bin/rotatelogs -l /usr/local/apache2/logs/111.com-access_Y%m%d%_log 86400" combined env=!image-request
  # 配置静态缓存
  
     ExpiresActive on
     ExpiresByType image/gif "access plus 1 days"
     ExpiresByType image/jpeg "access plus 24 hours"
     ExpiresByType image/png "access plus 24 hours"
     ExpiresByType test/css "now plus 2 hour"
     ExpiresByType application/x-javascript "now plus 2 hours"
     ExpiresByType application/x-shockwave-flash "now plus 2 hours"
     ExpiresDefault "now plus 0 min"
  
  # 配置防盗链
     SetEnvIfNoCase Referer "^http://.*\.111\.com" local_ref
     SetEnvIfNoCase Referer ".*\.222\.com" local_ref
  
     Order Allow,Deny
     Allow from env=local_ref
  
  # Apache禁止解析php
  
     php_admin_flag engine off
  
     Order deny,allow
     Deny from all
  
  
  # 域名301跳转
  
     RewriteEngine on
     RewriteCond %{HTTP_HOST} ^www.222.com$
     RewriteRule ^/(.*)$ http://www.111.com/$1
  # 禁止指定user_agent
     RewriteCond %{HTTP_USER_AGENT} ^.*curl.*
     RewriteCond %{HTTP_USER_AGENT} ^.*chrome*
     RewriteRule .* -
  # 禁止通过浏览器访问某个目录
     RewriteCond %{REQUEST_URI} ^.*/tmp/.*
     RewriteRule .* -
  
  # 用户认证
  
     AllowOverride AuthConfig
     AuthName "yonghuming"
     AuthType Basic
     AuthUserFile /data/.htpasswd## htpasswd -c /data/.htpasswd user1 这个在配置完别忘了创建
     require valid-user
  
  
  




页: [1]
查看完整版本: LAMP中apache的配置步骤