UbuntuのRedmineをApacheで動かす (HTTPSとCORSに対応)

sudo systemctl stop redmine

sudo systemctl disable redmine

sudo apt update

sudo apt install apache2 apache2-dev

sudo apt-get install -y dirmngr gnupg apt-transport-https ca-certificates curl

curl https://oss-binaries.phusionpassenger.com/auto-software-signing-gpg-key.txt | gpg --dearmor | sudo tee /etc/apt/trusted.gpg.d/phusion.gpg >/dev/null

sudo sh -c 'echo deb https://oss-binaries.phusionpassenger.com/apt/passenger jammy main > /etc/apt/sources.list.d/passenger.list'
sudo apt-get update

sudo apt-get install -y libapache2-mod-passenger

sudo /usr/bin/passenger-config validate-install

What would you like to validate?
Use <space> to select.
If the menu doesn't display correctly, press '!'

   ⬢  Passenger itself
 ‣ ⬢  Apache

-------------------------------------------------------------------------

Checking whether there are multiple Apache installations...
Only a single installation detected. This is good.

-------------------------------------------------------------------------

 * Checking whether this Passenger install is in PATH... ✓
 * Checking whether there are no other Passenger installations... ✓
 * Checking whether Apache is installed... ✓
 * Checking whether the Passenger module is correctly configured in Apache... ✓

sudo systemctl restart apache2

sudo /usr/sbin/passenger-memory-stats

Version: 6.0.20
Date   : 2024-03-21 10:55:39 +0000

--------- Apache processes ----------
PID   PPID  VMSize     Private  Name
-------------------------------------
3801  1     82.2 MB    0.7 MB   /usr/sbin/apache2 -k start
3818  3801  1194.8 MB  0.7 MB   /usr/sbin/apache2 -k start
3819  3801  1194.8 MB  0.7 MB   /usr/sbin/apache2 -k start
### Processes: 3
### Total private dirty RSS: 2.01 MB


-------- Nginx processes --------

### Processes: 0
### Total private dirty RSS: 0.00 MB


---- Passenger processes -----
PID   VMSize    Private  Name
------------------------------
3803  294.6 MB  2.4 MB   Passenger watchdog
3806  849.3 MB  4.2 MB   Passenger core

sudo mkdir /etc/certificate
sudo cp certificate.crt /etc/certificate
sudo cp private.key /etc/certificate

sudo vim /etc/apache2/sites-available/redmine.conf

<VirtualHost *:443>
    ServerName example.com
    DocumentRoot /opt/redmine/public
    PassengerRuby /home/redmine/.rbenv/shims/ruby
    # PassengerFriendlyErrorPages on

    SSLCertificateFile      /etc/certificate/certificate.crt
    SSLCertificateKeyFile   /etc/certificate/private.key
    SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH
    SSLProtocol All -SSLv2 -SSLv3 -TLSv1 -TLSv1.1
    SSLHonorCipherOrder On
    SSLCompression off
    SSLSessionTickets Off
    Header always set X-Frame-Options SAMEORIGIN
    Header always set X-Content-Type-Options nosniff
</VirtualHost>

<Directory /opt/redmine/public>
    Allow from all
    Options -MultiViews
    Require all granted
</Directory>

sudo a2ensite redmine
sudo a2ensite default-ssl
sudo a2enmod ssl
sudo a2enmod headers

sudo systemctl restart apache2

sudo apache2ctl configtest

sudo vim /etc/apache2/conf-available/cors.conf

<Location />
  <IfModule mod_headers.c>
    Header always set Access-Control-Allow-Origin "*"
    Header always set Access-Control-Allow-Methods "POST, GET, OPTIONS, DELETE, PUT, PATCH"
    Header always set Access-Control-Max-Age "7200"
    Header always set Access-Control-Allow-Headers "Content-Type, x-redmine-api-key"
  </IfModule>

  <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteCond %{REQUEST_METHOD} OPTIONS
    RewriteRule ^(.*)$ $1 [R=200,L]
  </IfModule>
</Location>

sudo a2enconf cors
sudo a2enmod rewrite
sudo systemctl restart apache2