差異處

這裏顯示兩個版本的差異處。

--- tech:apache [2018/10/25 15:21] – [設定多個不同網域(Domain Name)網站設定] Jonathan Tsai
+++ tech:apache [2025/10/17 10:59] (目前版本) – [- ProxyPass directive 抓遠端主機頁面] jonathan
@@ 行 1: / 行 1: @@
 ====== Apache WebServer 設定技巧 ======
+===== 設定啟用 HSTS =====
+  * [[https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security|點這裡了解 HSTS(HTTP Strict Transport Security)]]
+  * 將 httpd.conf 內的 headers_module 啟用<file>
+:
+LoadModule headers_module modules/mod_headers.so
+:</file>
+  * VirtualHost 內增加 header 設定<file>
+:
+<VirtualHost www.example.com:80>
+Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"
+</VirtualHost>
+<VirtualHost www.example.com:443>
+Header always set Strict-Transport-Security "max-age=63072000; includeSubdomains; preload"
+</VirtualHost>
+:
+</file>
+**如果是 Debian 環境**
+  * <cli>sudo a2enmod headers</cli>
+  * 編輯 virtual host exp. <cli>vi sites-enabled/wordpress.conf</cli><file>
+:
+<VirtualHost *:80>
+    UseCanonicalName Off
+    ServerAdmin  webmaster@localhost
+    DocumentRoot /var/www/wordpress
+    Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
+</VirtualHost>
+<VirtualHost *:443>
+    SSLEngine on
+    ServerAdmin  webmaster@localhost
+    DocumentRoot /var/www/wordpress
+    Header always set Strict-Transport-Security "max-age=15552000; includeSubDomains"
+</VirtualHost>
+:
+</file>
+  * 重新啟動 apache <cli>sudo systemctl restart apache2</cli>
 ===== 改用 MPM worker 模組提升效能 =====
   * https://www.brilliantcode.net/877/apache-2-2-2-4-performance-tuning-mpm-engine/
@@ 行 57: / 行 97: @@
 我是用在將 VMWare 在內部運作的網頁能夠簡易的呈現到 Internet 的 WebServer 上.
-<ditaa name=ProxyPass>
+<mermaid>
+graph LR
-                +----------------------+   +--------------+
+    Browser["Browser"]
-  +---------+   | webServer(ProxyPass) |   |   vm-mail    |
+    WebServer["webServer (ProxyPass)<br/>/webmail<br/>mail.ichiayi.com"]
-  | Browser +-->+       /webmail       +-->+  /webmail    |
+    VMmail["vm-mail<br/>/webmail<br/>192.168.11.238"]
-  +---------+   |   mail.ichiayi.com   |   |192.168.11.238|
-                +----------------------+   +--------------+
+    Browser -->|"訪問"| WebServer
+    WebServer -->|"ProxyPass 轉發"| VMmail
-</ditaa>
+    style Browser fill:#e1f5ff,stroke:#333,stroke-width:2px
+    style WebServer fill:#fff4e1,stroke:#333,stroke-width:2px
+    style VMmail fill:#e1ffe1,stroke:#333,stroke-width:2px
+</mermaid>
 Browser 連上 webServer(http://mail.ichiayi.com/webmail), 出現的畫面是由 vm-mail(http://192.168.11.238/webmail) 所提供頁面
@@ 行 137: / 行 181: @@
   * http://www.askapache.com/htaccess/apache-authentication-in-htaccess.html#allow-conditional
   * http://httpd.apache.org/docs/2.2/mod/core.html#satisfy
+  * https://docs.microfocus.com/SM/9.60/Hybrid/Content/security/concepts/support_of_http_strict_transport_security_protocol.htm
+  * https://www.simplified.guide/apache/enable-hsts
 {{tag>apache httpd 密技}}