【搭建网络服务网站】

要求

综合练习：请给mingde搭建web网站
网站需求：
1.基于域名www.mingde.com可以访问网站内容为 welcome to openlab!!!
2.给该公司创建三个子界面分别显示学生信息，教学资料和缴费网站，基于，www.mingde.com/data网站访问教学资料
www.mingde.com/money网站访问缴费网站。
3.要求
（1）学生信息网站只有song和tian两人可以访问，其他用户不能访问。
（2）访问缴费网站实现数据加密基于https访问。

第一步：准备工作

1、关闭安全软件

[root@master ~]# systemctl stop firewalld
[root@master ~]# systemctl disable firewalld
[root@master ~]# setenforce 0

# Windows的C:\Windows\System32\drivers\etc\hosts  文件进行DNS映射
192.168.83.132  www.mingde.com  # 添加

2、安装所需软件

[root@master ~]# yum install nginx mod_ssl -y

3、启用软件

[root@master ~]# systemctl enable --now nginx

第二步：创建文件

1、创建网页目录

[root@master ~]# mkdir -p /www/mingde
[root@master ~]# mkdir /www/mingde/student
[root@master ~]# mkdir /www/mingde/data
[root@master ~]# mkdir /www/mingde/money
[root@master ~]# tree /www
/www
└── mingde
    ├── data
    ├── money
    └── student

2、创建网页内容

[root@master ~]# echo "Welcome to xianmingde!"  >  /www/mingde/index.html
[root@master ~]# echo "student"  >  /www/mingde/student/index.html
[root@master ~]# echo "data"  >  /www/mingde/date/index.html
[root@master ~]# echo "data"  >  /www/mingde/data/index.html
[root@master ~]# echo "money"  >  /www/mingde/money/index.html
[root@master ~]# tree /www/
/www/
└── mingde
    ├── data
    │   └── index.html
    ├── index.html
    ├── money
    │   └── index.html
    └── student
        └── index.html

第三步：搭建网站

1、搭建www.mingde.com网站

[root@master ~]# vim /etc/nginx/nginx.conf  
server {
        listen       80;
        server_name  www.mingde.com;
        root         /www/mingde;  
    }
    

[root@master ~]# systemctl start nginx
# Windows端打开浏览器输入www.mingde.com测试

2、搭建教学资料子网站www.mingde.com/data

[root@master ~]# vim /etc/nginx/nginx.conf   # 接着之前的继续向下编写
server {
                listen       80;
                server_name  www.mingde.com;
                root         /www/mingde;
                # 增加如下子配置
                location  /data {
                                        alias  /www/mingde/data;
                                        index  index.html  index.htm;
                                }
           }

[root@master ~]# systemctl restart  nginx
# Windows端打开浏览器输入www.mingde.com/data测试

3、搭建学生信息子网站www.mingde.com/student

[root@master ~]# useradd zhangjin1
[root@master ~]# passwd zhangjin1    # 密码123
[root@master ~]# useradd songxo
[root@master ~]# passwd songxo    # 密码321
[root@master ~]# htpasswd -c /etc/nginx/password zhangjin1  # 密码123
[root@master ~]# htpasswd  /etc/nginx/password songxo    # 密码321
[root@master ~]# vim /etc/nginx.conf   # 接着之前的继续向下编写
    server {
        listen       80;
        server_name  www.mingde.com;
        root         /www/mingde;
        location     /data  {
                              alias   /www/mingde/data;
                              index   index.html  index.htm;
        }

		#增加如下子配置
        location     /student {
                              alias   /www/mingde/student;
                              index   index.html  index.htm;
                              auth_basic  "Please input password";
                              auth_basic_user_file  /www/mingde/student/password;
        }
    }

[root@master ~]# systemctl restart nginx
# Windows端打开浏览器输入www.mingde.com/student测试，多次测试需要清除浏览器缓存

4、缴费子网站www.mingde.com/money

# 设置密钥
[root@master ~]# openssl genrsa -aes128 2048 > /www/mingde/money/money.key
Generating RSA private key, 2048 bit long modulus (2 primes)
......+++++
.....+++++
e is 65537 (0x010001)
Enter pass phrase:			# 输入加密私钥的密码123456
Verifying - Enter pass phrase:
# 制作密钥证书
[root@master ~]# openssl req -utf8 -new -key /www/mingde/money/money.key -x509 -days 365 -out /www/mingde/money/money.crt   # 制作证书
Enter pass phrase for /www/mingde/money/money.key:
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----# 证书信息：
Country Name (2 letter code) [AU]:86
State or Province Name (full name) [Some-State]:shan'xi
Locality Name (eg, city) []:xian    
Organization Name (eg, company) [Internet Widgits Pty Ltd]:mingde
Organizational Unit Name (eg, section) []:rhce
Common Name (e.g. server FQDN or YOUR name) []:master
Email Address []:11111@qq.com 

# 在加载SSL支持的Nginx并使用上述私钥时除去必须的口令
[root@master ~]# cp /www/mingde/money/money.key /www/mingde/money/money.key.org
[root@master ~]# openssl rsa -in /www/mingde/money/money.key.org -out /www/mingde/money/money.key
Enter pass phrase for /www/mingde/money/money.key.org:		# 输入私钥密码
writing RSA key

[root@master ~]# vim /etc/nginx/nginx.conf	# 接着之前的继续向下编写

    server{
                listen          443 ssl http2;
                server_name     www.mingde.com;
                location  /money {
                                        alias           /www/mingde/money;
                                        index           index.html index.htm;
                }
                ssl_certificate         "/www/mingde/money/money.crt";
                ssl_certificate_key     "/www/mingde/money/money.key";

    }
[root@master ~]# systemctl restart nginx
# Windows端打开浏览器输入www.mingde.com/money测试