{"id":3150,"date":"2022-03-14T23:15:58","date_gmt":"2022-03-14T14:15:58","guid":{"rendered":"https:\/\/dennie.tokyo\/it\/?p=3150"},"modified":"2023-09-09T13:36:34","modified_gmt":"2023-09-09T04:36:34","slug":"%e3%80%90docker%e3%80%91amazon-linux2-apache-https%e9%80%9a%e4%bf%a1%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/dennie.tokyo\/it\/?p=3150","title":{"rendered":"\u3010docker\u3011Amazon Linux2 apache HTTPS\u901a\u4fe1\u8a2d\u5b9a"},"content":{"rendered":"\n

\u6ce8\u610f: \u3053\u306e\u65b9\u6cd5\u3067\u306fhttps\u901a\u4fe1\u304c\u51fa\u6765\u306a\u3044\u4e8b\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002\u53c2\u8003\u7a0b\u5ea6\u306b\u3057\u3066\u4e0b\u3055\u3044\u30022023.9.9<\/strong><\/p>\n\n\n\n\n\n\n\n

\u524d\u56de\u306e\u8aac\u660e\u3092\u53c2\u8003\u306b docker compose \u3092\u4f7f\u7528\u3057\u3066 Amazon Linux2 \u30b3\u30f3\u30c6\u30ca\u306b Apache \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u3001HTTPS\u901a\u4fe1\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n\n\n\n

\u306a\u304a\u3001\u524d\u56de\u306f\u4ee5\u4e0b\u3092\u53c2\u7167\u3057\u3066\u4e0b\u3055\u3044\u3002<\/p>\n\n\n\n

\u53c2\u8003<\/span>

WEB\u30b5\u30fc\u30d0 SSL\u8a3c\u660e\u66f8\u306e\u8a2d\u5b9a<\/a>\n<\/p>\n<\/div>\n\n\n\n

\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u69cb\u6210<\/h1>\n\n\n\n

\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u69cb\u6210\u306f\u4ee5\u4e0b\u3068\u3057\u307e\u3059\u3002<\/p>\n\n\n\n

\u30c7\u30a3\u30ec\u30af\u30c8\u30ea or \u30d5\u30a1\u30a4\u30eb<\/th>\u8aac\u660e<\/th><\/tr>
app<\/td>html\u3084php\u30d5\u30a1\u30a4\u30eb\u306a\u3069\u3092\u914d\u7f6e\u3059\u308b\u70ba\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea<\/td><\/tr><\/thead>
docker-compose.yml<\/td>docker-compose.yml\u30d5\u30a1\u30a4\u30eb<\/td><\/tr>
docker\/web\/Dockerfile<\/td>Dockerfile\u30d5\u30a1\u30a4\u30eb<\/td><\/tr>
docker\/web\/certs<\/td>\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u30d5\u30a1\u30a4\u30eb\u914d\u7f6e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea<\/td><\/tr>
docker\/web\/conf<\/td>HTTPS\u901a\u4fe1\u7528Apache\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u914d\u7f6e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
\n
<\/div>\n<\/div>\n\n\n\n

\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u306e\u4f5c\u6210<\/h1>\n\n\n\n

mkcert\u3092\u4f7f\u7528\u3057\u3001\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002\u4f5c\u6210\u65b9\u6cd5\u306f\u4ee5\u4e0b\u3092\u53c2\u8003\u306b\u3057\u3066\u4e0b\u3055\u3044\u3002<\/p>\n\n\n\n

\u53c2\u8003<\/span>

mkcert\u3092\u4f7f\u7528\u3057\u305f\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u306e\u4f5c\u6210<\/a>\n<\/p>\n<\/div>\n\n\n\n

\u4f5c\u6210\u3057\u305f\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8(\u30d5\u30a1\u30a4\u30eb)\u306f\u4ee5\u4e0b\u3078\u914d\u7f6e\u3057\u3066\u4e0b\u3055\u3044\u3002<\/p>\n\n\n\n

\u30fb\u30d1\u30b9
docker\/web\/certs<\/p>\n\n\n\n

\u30fb\u30d5\u30a1\u30a4\u30eb\u540d
server_key.pem
server.pem<\/p>\n\n\n\n

HTTPS\u901a\u4fe1\u7528\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u8a2d\u7f6e<\/h1>\n\n\n\n

HTTPS\u901a\u4fe1\u3092\u884c\u3046\u70ba\u306eApache\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002\u4eca\u56de\u306f\u4f8b\u3068\u3057\u3066 localssl.conf \u3068\u8a00\u3046\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002
localssl.conf\u306e\u5185\u5bb9\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u53ca\u3073\u3001\u79d8\u5bc6\u9375\u306e\u30d1\u30b9\u3001\u30d5\u30a1\u30a4\u30eb\u540d\u306f\u9069\u5b9c\u5909\u66f4\u3057\u3066\u4e0b\u3055\u3044\u3002<\/p>\n\n\n\n

Listen 443 https\nSSLCertificateFile \/etc\/ssl\/local\/certs\/server.pem\nSSLCertificateKeyFile \/etc\/ssl\/local\/certs\/server_key.pem<\/code><\/pre><\/div>\n\n\n\n
\u4f5c\u6210\u3057\u305f\u30d5\u30a1\u30a4\u30eb\u306f\u4ee5\u4e0b\u3078\u914d\u7f6e\u3057\u3066\u4e0b\u3055\u3044\u3002<\/p>\n\n\n\n
\u30fb\u30d1\u30b9
docker\/web\/conf<\/p>\n\n\n\n
\u30fb\u30d5\u30a1\u30a4\u30eb\u540d
localssl.conf<\/p>\n\n\n\n
docker-compose.yml<\/h1>\n\n\n\n
\u5185\u5bb9<\/h2>\n\n\n\n
\u5185\u5bb9\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n\n\n\n
version: '3'\nservices:\n \n  web:\n    container_name: amazonlinux2_sample08\n    restart: always\n    build: \n      context: .\n      dockerfile: .\/docker\/web\/Dockerfile\n    privileged: true\n    ports:\n      - 80:80\n      - 443:443\n    volumes:\n      - .\/app:\/var\/www\/html\n      - .\/docker\/web\/certs:\/etc\/ssl\/local\/certs\n<\/code><\/pre><\/div>\n\n\n\n
\u30dd\u30a4\u30f3\u30c8\u8aac\u660e<\/h2>\n\n\n\n
\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8<\/h3>\n\n\n\n
\u30b5\u30fc\u30d0\u8a3c\u660e\u66f8\u3092\u30db\u30b9\u30c8OS\u3068\u30b2\u30b9\u30c8OS\u3067\u5171\u6709\u3057\u307e\u3059\u3002\u5177\u4f53\u7684\u306a\u8a2d\u5b9a\u7b87\u6240\u306f\u4ee5\u4e0b\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n
.\/docker\/web\/certs:\/etc\/ssl\/local\/certs<\/code><\/pre><\/div>\n\n\n\n
Dockerfile<\/h1>\n\n\n\n
\u5185\u5bb9<\/h2>\n\n\n\n
\u5185\u5bb9\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n\n\n\n
# \u30a4\u30e1\u30fc\u30b8\nFROM amazonlinux:2\n \n# apache\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\nRUN yum -y update\nRUN yum -y install httpd\n\n# Apache\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u914d\u7f6e\u3059\u308b\u3002\nADD .\/docker\/web\/conf\/*.conf \/etc\/httpd\/conf.d\/\n\n# mod ssl \u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\nRUN yum install -y mod_ssl\n\n# mod ssl \u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f\u6642\u306b\u4f5c\u6210\u3055\u308c\u308bssl\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3092\u4f7f\u7528\u3057\u306a\u3044\nRUN mv \/etc\/httpd\/conf.d\/ssl.conf \/etc\/httpd\/conf.d\/ssl.conf_bk\n\n# apache\u3092\u81ea\u52d5\u8d77\u52d5\u3055\u305b\u308b\nRUN systemctl enable httpd\n \n# \u30b3\u30f3\u30c6\u30ca\u8d77\u52d5\u6642 (docker run) \u30b3\u30de\u30f3\u30c9\nCMD ["\/sbin\/init"]<\/code><\/pre><\/div>\n\n\n\n
\u30dd\u30a4\u30f3\u30c8\u8aac\u660e<\/h2>\n\n\n\n
\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u8aad\u307f\u8fbc\u307f<\/h3>\n\n\n\n
localssl.conf \u3092Apache\u306b\u8aad\u307f\u8fbc\u307e\u305b\u307e\u3059\u3002\u30db\u30b9\u30c8OS\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea .\/docker\/web\/conf\/ \u4ee5\u4e0b\u306e\u30d5\u30a1\u30a4\u30eb\u62e1\u5f35\u5b50\u304c .conf \u306e\u30d5\u30a1\u30a4\u30eb\u3092 \u30b2\u30b9\u30c8OS\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea \/etc\/httpd\/conf.d\/ \u3078\u30b3\u30d4\u30fc\u3057\u307e\u3059\u3002\/etc\/httpd\/conf.d\/ \u4ee5\u4e0b\u306fApache\u304c\u8aad\u307f\u8fbc\u3080\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3068\u306a\u3063\u3066\u3044\u307e\u3059\u3002\u5177\u4f53\u7684\u306a\u8a2d\u5b9a\u7b87\u6240\u306f\u4ee5\u4e0b\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n
ADD .\/docker\/web\/conf\/*.conf \/etc\/httpd\/conf.d\/<\/code><\/pre><\/div>\n\n\n\n
\u306a\u304a\u3001Apache\u304c\u8aad\u307f\u8fbc\u3080\u30e2\u30b8\u30e5\u30fc\u30eb\u306b\u3064\u3044\u3066\u306f\u4ee5\u4e0b\u3092\u53c2\u8003\u306b\u3057\u3066\u4e0b\u3055\u3044\u3002<\/p>\n\n\n\n
\n\u53c2\u8003<\/span>
Apache \u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u8aad\u307f\u8fbc\u307f<\/a><\/p>\n<\/div>\n\n\n\n
mod_ssl \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h3>\n\n\n\n
ssl \u901a\u4fe1\u3092\u884c\u3046\u70ba\u306eApache\u306e\u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002\u5177\u4f53\u7684\u306a\u8a2d\u5b9a\u306f\u4ee5\u4e0b\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n
RUN yum install -y mod_ssl<\/code><\/pre><\/div>\n\n\n\n
mod_ssl\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6642\u306b\u8aad\u307f\u8fbc\u307e\u308c\u308b\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u306e\u30ad\u30e3\u30f3\u30bb\u30eb<\/h3>\n\n\n\n
mod_ssl\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3068\u3001ssl.conf \u3068\u8a00\u3046\u30d5\u30a1\u30a4\u30eb\u304c\u8aad\u307f\u8fbc\u307e\u308c\u307e\u3059\u3002\u3053\u306e\u30d5\u30a1\u30a4\u30eb\u3092\u4fee\u6b63\u3057\u3066\u4f7f\u7528\u3057\u3066\u3082\u3044\u3044\u306e\u3067\u3059\u304c\u3001\u4eca\u56de\u306f\u3001localssl.conf \u3092\u4f7f\u7528\u3059\u308b\u70ba\u3001ssl.conf\u3092\u30ea\u30cd\u30fc\u30e0\u3057\u3066\u8aad\u307f\u8fbc\u307f\u3092\u884c\u308f\u306a\u3044\u3088\u3046\u306b\u3057\u307e\u3059\u3002\u5177\u4f53\u7684\u306a\u8a2d\u5b9a\u306f\u4ee5\u4e0b\u3068\u306a\u308a\u307e\u3059\u3002<\/p>\n\n\n\n
RUN mv \/etc\/httpd\/conf.d\/ssl.conf \/etc\/httpd\/conf.d\/ssl.conf_bk<\/code><\/pre><\/div>\n\n\n\n
\u30b3\u30de\u30f3\u30c9\u306e\u5b9f\u884c<\/h1>\n\n\n\n
docker-compose.yml\u304c\u5b58\u5728\u3059\u308b\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3067\u3001\u4ee5\u4e0b\u306e\u9806\u306b\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
\u30fb\u30d3\u30eb\u30c9<\/p>\n\n\n\n
docker-compose build<\/code><\/pre><\/div>\n\n\n\n
\u30fb\u30b3\u30f3\u30c6\u30ca\u8d77\u52d5<\/p>\n\n\n\n
docker-compose up -d<\/code><\/pre><\/div>\n\n\n\n
\u30fb\u30b3\u30f3\u30c6\u30ca\u8d77\u52d5\u78ba\u8a8d<\/p>\n\n\n\n
docker-compose ps<\/code><\/pre><\/div>\n\n\n\n
\u52d5\u4f5c\u78ba\u8a8d<\/h1>\n\n\n\n
\n
\u52d5\u4f5c\u78ba\u8a8d\u7528\u30d5\u30a1\u30a4\u30eb\u306e\u4f5c\u6210<\/h2>\n\n\n\n
\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3092\u5b9f\u884c\u3057\u3001\u78ba\u8a8d\u306e\u70ba\u306b\u30d6\u30e9\u30a6\u30b6\u306b\u8868\u793a\u3055\u305b\u308b\u30d5\u30a1\u30a4\u30eb\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002
\u5185\u5bb9\u306f \u201ctest\u201d \u3068\u8a00\u3046\u6587\u5b57\u3068\u3057\u307e\u3059\u304c\u5185\u5bb9\u306f\u306a\u3093\u3067\u3082\u826f\u3044\u3067\u3059\u3002<\/p>\n\n\n\n
\u30fb\u30b3\u30de\u30f3\u30c9<\/p>\n\n\n\n
vi \/var\/www\/html\/index.html<\/code><\/pre><\/div>\n<\/div><\/div>\n\n\n\n
\u78ba\u8a8d<\/h2>\n\n\n\n
\u30d6\u30e9\u30a6\u30b6\u3078 https:\/\/localhost \u3092\u5165\u529b\u3057\u3066\u4e0b\u3055\u3044\u3002 “test” \u3068\u8868\u793a\u3055\u308c\u308c\u3070\u6210\u529f\u3067\u3059\u3002<\/p>\n\n\n\n
\u6700\u5f8c\u306b<\/h1>\n\n\n\n
\u7279\u306b\u3042\u308a\u307e\u305b\u3093\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"
\u6ce8\u610f: \u3053\u306e\u65b9\u6cd5\u3067\u306fhttps\u901a\u4fe1\u304c\u51fa\u6765\u306a\u3044\u4e8b\u3092\u78ba\u8a8d\u3057\u307e\u3057\u305f\u3002\u53c2\u8003\u7a0b\u5ea6\u306b\u3057\u3066\u4e0b\u3055\u3044\u30022023.9.9<\/p>\n","protected":false},"author":1,"featured_media":5,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-3150","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-apache"],"_links":{"self":[{"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=\/wp\/v2\/posts\/3150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3150"}],"version-history":[{"count":19,"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=\/wp\/v2\/posts\/3150\/revisions"}],"predecessor-version":[{"id":4030,"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=\/wp\/v2\/posts\/3150\/revisions\/4030"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=\/wp\/v2\/media\/5"}],"wp:attachment":[{"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dennie.tokyo\/it\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}