Technical Service Center

• 구성 환경
  • OS : CentOS 7.9 ( AMI 이용 )
  • BareMetal
  • NGINX Plus

• 설치 Flow
  • NGINX Plus 인증서 업로드
  • OS Repository 구성
  • Nginx Plus 설치
  • yum -y install wget ca-certificates

• NGINX REPO 인증서 업로드
• OS YUM Package 설치

yum -y install wget ca-certificates

• OS Repository 구성 (CENTOS 7)

sudo wget -P /etc/yum.repos.d <https://cs.nginx.com/static/files/nginx-plus-7.4.repo> <https://cs.nginx.com/static/files/nginx-plus-7.4.repo>
sudo wget -P /etc/yum.repos.d <https://cs.nginx.com/static/files/app-protect-7.repo> <https://cs.nginx.com/static/files/app-protect-7.repo>

• OS - Firewall Open ( TCP 80 / 443 )

firewall-cmd --permanent --add-port=80/tcp && firewall-cmd --reload
firewall-cmd --permanent --add-port=443/tcp && firewall-cmd --reload

• OS - Selinux OFF ( Reboot Require )

§ sed -i 's/^SELINUX=enforcing/SELINUX=disabled/' /etc/selinux/config  && sync && sleep 3 && reboot

• NGINX Plus Install

yum install nginx-plus app-protect

• NGINX Config 설정 변경
  • NGINX App Protect Enable 필요

* nginx.conf - Main Context
    load_module modules/ngx_http_app_protect_module.so;
*  NGINX.conf 내 HTTP / Server / Location Context
    - app_protect_enable on;

• NGINX Plus Start

systemctl start nginx && systemctl enable nginx

• NGINX Plus 기동 확인

curl 127.0.0.1
nginx -V

• Amazon Linux2 LTS  - Package Install

sudo amazon-linux-extras enable epel
sudo yum clean metadata
sudo yum install ca-certificates epel-release wget

sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/nginx-plus-7.4.repo

sudo wget -P /etc/yum.repos.d https://cs.nginx.com/static/files/app-protect-7.repo

yum -y install nginx-plus
yum -y install app-protect

* nginx.conf - Main Context
    load_module modules/ngx_http_app_protect_module.so;
*  NGINX.conf 내 HTTP / Server / Location Context
    - app_protect_enable on;

systemctl start nginx && systemctl enable nginx

curl 127.0.0.1
nginx -V