변군이글루

취약점을 방지하기 위한 보안 HTTP 헤더를 설정하기 X-Content-Type-Options ###Apache Header set X-Content-Type-Options nosniff ###Nginx add_header X-Content-Type-Options nosniff; X-XSS-Protection ###Apache Header set X-XSS-Protection "1; mode=block" ###Nginx add_header X-XSS-Protection "1; mode=block"; X-Frame-Options ###Apache Header always append X-Frame-Options DENY ###Nginx add_header X-Frame-Options “DENY”; HTTP..

HSTS (HTTP Strict Transport Security) 설정 Redirect HTTP connections to HTTPS Apache 설정 ServerName example.com RewriteEngine on RewriteCond %{HTTPS} !on RewriteRule ^(.*)$ https://%{HTTP_HOST}$1 [R,L] NGINX 설정 server { listen 80; server_name example.com; return 301 https://$http_host$request_uri; } HSTS 설정 - HSTS를 사용하려면 "Strict-Transport-Security" HTTP 헤더를 설정합니다. max-age = 적용 시간. 초단위 includeSubdom..

Apache Server MPM prefork에서 worker로 변경 CentOS 7, Apache 2.4, PHP 5.4, MariaDB 5.5 Apache prefork 실행 중 $ httpd -V Server version: Apache/2.4.6 (CentOS) Server built: Apr 2 2020 13:13:23 Server's Module Magic Number: 20120211:24 Server loaded: APR 1.4.8, APR-UTIL 1.5.2 Compiled using: APR 1.4.8, APR-UTIL 1.5.2 Architecture: 64-bit Server MPM: prefork threaded: no forked: yes (variable process coun..

YUM으로 APM 설치 $ yum install -y gcc gcc-c++ gdbm-devel ncurses-devel $ yum install -y openssl-devel gd-devel libpng-devel libjpeg-devel \ freetype-devel fontconfig-devel libxml2-devel gmp-devel mhash-devel libmcrypt-devel $ yum install -y httpd mod_ssl $ cat /etc/yum.repos.d/MariaDB.repo # MariaDB 10.1 CentOS repository list # http://downloads.mariadb.org/mariadb/repositories/ [mariadb] name = Mar..

Apache 2.4 Invalid command 'LanguagePriority' - 에러 $ /usr/local/apache2/bin/apachectl -t AH00526: Syntax error on line 78 of /usr/local/apache2/conf/extra/httpd-languages.conf: Invalid command 'LanguagePriority', perhaps misspelled or defined by a module not included in the server configuration - 해결 httpd.conf에서 아래 내용 주석 해제 $ vim /usr/local/apache2/conf/httpd.conf #LoadModule negotiation_module ..

우분투 APM 소스 설치 [Apache 설치] wget http://archive.apache.org/dist/httpd/httpd-2.4.12.tar.gz wget http://archive.apache.org/dist/apr/apr-1.5.1.tar.gz wget http://archive.apache.org/dist/apr/apr-util-1.5.4.tar.gz tar xvfz httpd-2.4.12.tar.gz tar xvfz apr-1.5.1.tar.gz -C httpd-2.4.12/srclib/ tar xvfz apr-util-1.5.4.tar.gz -C httpd-2.4.12/srclib/ mv httpd-2.4.12/srclib/apr-1.5.1 httpd-2.4.12/srclib/apr ..