Ubuntu 22.04でChevereto-Freeを使用して画像ホスティングウェブサイトを作成する

apt update -y  
apt upgrade -y

apt install apt-transport-https ca-certificates curl software-properties-common -y

apt install apache2 mariadb-server

add-apt-repository ppa:ondrej/php -y

apt install php7.4 libapache2-mod-php7.4 php7.4-cli php7.4-fpm php7.4-json php7.4-mysql php7.4-zip php7.4-gd php7.4-mbstring php7.4-curl php7.4-xml php7.4-bcmath -y

mysql_secure_installation

Enter current password for root (enter for none): Press ENTER
Set root password? [Y/n]: Y
New password: Set-your-new-password
Re-enter new password: Set-your-new-password
Remove anonymous users? [Y/n] Y
Disallow root login remotely? [Y/n] Y
Remove test database and access to it? [Y/n] Y
Reload privilege tables now? [Y/n] Y

mysql -u root -p

MariaDB [(none)]> CREATE DATABASE chevereto;  
MariaDB [(none)]> CREATE USER 'chevereto'@'localhost' IDENTIFIED BY 'password';

MariaDB [(none)]> GRANT ALL PRIVILEGES ON chevereto.* TO 'chevereto'@'localhost';

MariaDB [(none)]> FLUSH PRIVILEGES;

MariaDB [(none)]> EXIT;

mkdir -p /var/www/html/chevereto/

cd /var/www/html/chevereto  
wget https://github.com/rodber/chevereto-free/releases/download/1.6.0/1.6.0.zip

unzip 1.6.0.zip

chown -R www-data:www-data /var/www/html/chevereto/  
chmod -R 775 /var/www/html/chevereto/

nano /etc/apache2/sites-available/chevereto.conf

ServerAdmin [email protected]
ServerName chevereto.example.com
DocumentRoot /var/www/html/chevereto

ErrorLog ${APACHE_LOG_DIR}/chevereto.example.com_error.log
CustomLog ${APACHE_LOG_DIR}/chevereto.example.com_access.log combined


Options FollowSymlinks
AllowOverride All
Require all granted

a2ensite chevereto.conf

a2enmod rewrite ssl

systemctl restart apache2

systemctl status apache2

? apache2.service - The Apache HTTP Server
     Loaded: loaded (/lib/systemd/system/apache2.service; enabled; vendor preset: enabled)
     Active: active (running) since Sun 2022-08-28 07:22:12 UTC; 9s ago
       Docs: https://httpd.apache.org/docs/2.4/
    Process: 87027 ExecStart=/usr/sbin/apachectl start (code=exited, status=0/SUCCESS)
   Main PID: 87032 (apache2)
      Tasks: 6 (limit: 2242)
     Memory: 14.1M
        CPU: 111ms
     CGroup: /system.slice/apache2.service
             ??87032 /usr/sbin/apache2 -k start
             ??87033 /usr/sbin/apache2 -k start
             ??87034 /usr/sbin/apache2 -k start
             ??87035 /usr/sbin/apache2 -k start
             ??87036 /usr/sbin/apache2 -k start
             ??87037 /usr/sbin/apache2 -k start

Aug 28 07:22:12 ubuntu2204 systemd[1]: Starting The Apache HTTP Server...

apt-get install python3-certbot-apache -y

certbot --apache -d chevereto.example.com

Saving debug log to /var/log/letsencrypt/letsencrypt.log
Plugins selected: Authenticator standalone, Installer None
Enter email address (used for urgent renewal and security notices) (Enter 'c' to
cancel): [email protected]

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Please read the Terms of Service at
https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf. You must
agree in order to register with the ACME server at
https://acme-v02.api.letsencrypt.org/directory
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(A)gree/(C)ancel: A

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Would you be willing to share your email address with the Electronic Frontier
Foundation, a founding partner of the Let's Encrypt project and the non-profit
organization that develops Certbot? We'd like to send you email about our work
encrypting the web, EFF news, campaigns, and ways to support digital freedom.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
(Y)es/(N)o: Y
Plugins selected: Authenticator apache, Installer apache
Obtaining a new certificate
Performing the following challenges:
http-01 challenge for chevereto.example.com
Enabled Apache rewrite module
Waiting for verification...
Cleaning up challenges
Created an SSL vhost at /etc/apache2/sites-available/chevereto-le-ssl.conf
Enabled Apache socache_shmcb module
Enabled Apache ssl module
Deploying Certificate to VirtualHost /etc/apache2/sites-available/chevereto-le-ssl.conf
Enabling available site: /etc/apache2/sites-available/chevereto-le-ssl.conf
Next, select whether or not to redirect HTTP traffic to HTTPS as shown below:

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
1: No redirect - Make no further changes to the webserver configuration.
2: Redirect - Make all requests redirect to secure HTTPS access. Choose this for
new sites, or if you're confident your site works on HTTPS. You can undo this
change by editing your web server's configuration.
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Select the appropriate number [1-2] then [enter] (press 'c' to cancel): 2

Enabled Apache rewrite module
Redirecting vhost in /etc/apache2/sites-enabled/chevereto.conf to ssl vhost in /etc/apache2/sites-available/chevereto-le-ssl.conf

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Congratulations! You have successfully enabled https://chevereto.example.com

You should test your configuration at:
https://www.ssllabs.com/ssltest/analyze.html?d=chevereto.example.com
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

IMPORTANT NOTES:
 - Congratulations! Your certificate and chain have been saved at:
   /etc/letsencrypt/live/chevereto.example.com/fullchain.pem
   Your key file has been saved at:
   /etc/letsencrypt/live/chevereto.example.com/privkey.pem
   Your cert will expire on 2022-11-29. To obtain a new or tweaked
   version of this certificate in the future, simply run certbot again
   with the "certonly" option. To non-interactively renew *all*
   of your certificates, run "certbot renew"
 - If you like Certbot, please consider supporting our work by:

   Donating to ISRG / Let's Encrypt:   https://letsencrypt.org/donate
   Donating to EFF:                    https://eff.org/donate-le