apache罗列

<VirtualHost *:80>

DocumentRoot /srv/default/www

CustomLog "logs/default-vhost.log" combined

</VirtualHost>

<Directory /srv/default/www>

Require all granted

</Directory>

<VirtualHost *:80>

ServerName www0.example.com

DocumentRoot /srv/www0.example.com/www

ServerAlias www0

CustomLog "logs/www0.example.com.log" combined

</VirtualHost>

<Directory /srv/www0.example.com/www>

Require all granted

</Directory>

<VirtualHost *:443>

ServerName demo.example.com

SSLEngine on

SSLCertificateFile /etc/pki/tls/certs/demo.example.com.crt

SSLCertificateKeyFile /etc/pki/tls/private/demo.example.com.key

SSLCertificateChainFile /etc/pki/tls/certs/example-ca.crt

DocumentRoot /srv/www0/www

</VirtualHost>

<Directory /srv/www0/www>

Require all granted

</Directory>

<VirtualHost *:80>

ServerName www0.example.com

RewriteEngine on

RewriteRule ^(/.*)$ https://%{HTTP_POST}$1 [redirect=301]

</VirtualHost>

apache user and group

selinux:httpd_sys_script_exec_t

mod_php

<FilesMatch \.php$>

SetHandler application/x-httpd-php

</FilesMatch>

DirectoryIndex index.php

WSGIScriptAlias /myapp/ /srv/myapp/www/myapp.py

如果数据库用remote host，selinux里httpd_can_network_connect_db需要设置为1

httpd_can_network_connect = 1