Raspberry PiでWEBサーバー – リバースプロキシ経由

長文になります。PC用サイト表示では、右サイドバーにも目次を用意していますので、そちらを併用してご覧ください。

<VirtualHost *:80>
        # The ServerName directive sets the request scheme, hostname and port that
        # the server uses to identify itself. This is used when creating
        # redirection URLs. In the context of virtual hosts, the ServerName
        # specifies what hostname must appear in the request's Host: header to
        # match this virtual host. For the default virtual host (this file) this
        # value is not decisive as it is used as a last resort host regardless.
        # However, you must set it for any further virtual host explicitly.
        #ServerName www.example.com
        ServerName test.mohlog.com #追加
        ServerAdmin webmaster@localhost
        #DocumentRoot /var/www/html #コメントアウト
        DocumentRoot /var/www/testmohlog #追加
        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn

        #ErrorLog ${APACHE_LOG_DIR}/error.log #コメントアウト
        #CustomLog ${APACHE_LOG_DIR}/access.log combined #コメントアウト
        ErrorLog ${APACHE_LOG_DIR}/error_testmohlog.log #追加
        CustomLog ${APACHE_LOG_DIR}/access_testmohlog.log combined #追加

        # For most configuration files from conf-available/, which are
        # enabled or disabled at a global level, it is possible to
        # include a line for only one particular virtual host. For example the
        # following line enables the CGI configuration for this host only
        # after it has been globally disabled with "a2disconf".
        #Include conf-available/serve-cgi-bin.conf
</VirtualHost>

<VirtualHost *:443>
        ServerAdmin webmaster@localhost
        ServerName test.mohlog.com　#追加
        #DocumentRoot /var/www/html #コメントアウト
        DocumentRoot /var/www/testmohlog　#追加

        # Available loglevels: trace8, ..., trace1, debug, info, notice, warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn

        #ErrorLog ${APACHE_LOG_DIR}/error.log #コメントアウト
        #CustomLog ${APACHE_LOG_DIR}/access.log combined #コメントアウト
        ErrorLog ${APACHE_LOG_DIR}/error_testmohlog.log #追加
        CustomLog ${APACHE_LOG_DIR}/access_testmohlog.log combined #追加

        # For most configuration files from conf-available/, which are
        # enabled or disabled at a global level, it is possible to
        # include a line for only one particular virtual host. For example the
        # following line enables the CGI configuration for this host only
        # after it has been globally disabled with "a2disconf".
        #Include conf-available/serve-cgi-bin.conf

        #   SSL Engine Switch:
        #   Enable/Disable SSL for this virtual host.
        SSLEngine on

        #   A self-signed (snakeoil) certificate can be created by installing
        #   the ssl-cert package. See
        #   /usr/share/doc/apache2/README.Debian.gz for more info.
        #   If both key and certificate are stored in the same file, only the
        #   SSLCertificateFile directive is needed.
        SSLCertificateFile      /etc/ssl/certs/ssl-cert-snakeoil.pem
        SSLCertificateKeyFile   /etc/ssl/private/ssl-cert-snakeoil.key
・・・

mohlog@mohpi:~ $ sudo a2ensite testmohlog
Enabling site testmohlog.
To activate the new configuration, you need to run:
  systemctl reload apache2

mohlog@mohpi:~ $ sudo a2ensite testmohlog-ssl
Enabling site testmohlog-ssl.
To activate the new configuration, you need to run:
  systemctl reload apache2

mohlog@mohpi:~ $ sudo a2enmod ssl
Considering dependency setenvif for ssl:
Module setenvif already enabled
Considering dependency mime for ssl:
Module mime already enabled
Considering dependency socache_shmcb for ssl:
Enabling module socache_shmcb.
Enabling module ssl.
See /usr/share/doc/apache2/README.Debian.gz on how to configure SSL and create self-signed certificates.
To activate the new configuration, you need to run:
  systemctl restart apache2

mohlog@mohpi: $~ sudo a2enmod rewrite
Enabling module rewrite.
To activate the new configuration, you need to run:
  systemctl restart apache2

・・・
<Directory /var/www/>
Options Indexes FollowSymLinks
	AllowOverride All
Require all granted
</Diectory>
・・・

mohlog@mohpi:~ $ sudo apt install php php-mbstring php-pear
mohlog@mohpi:~ $ sudo php -v　#バージョンの確認
PHP 8.2.26 (cli) (built: Nov 25 2024 17:21:51) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.2.26, Copyright (c) Zend Technologies
    with Zend OPcache v8.2.26, Copyright (c), by Zend Technologies

mohlog@mohpi:~ $ sudo apt install php8.2-fpm
mohlog@mohpi:~ $ sudo a2enmod proxy_fcgi setenvif
Considering dependency proxy for proxy_fcgi:
Enabling module proxy.
Enabling module proxy_fcgi.
Module setenvif already enabled
To activate the new configuration, you need to run:
  systemctl restart apache2
mohlog@mohpi:~ $ sudo a2enconf php8.2-fpm
Enabling conf php8.2-fpm.
To activate the new configuration, you need to run:
  systemctl reload apache2
mohlog@mohpi:~ $ sudo systemctl restart php8.2-fpm apache2

<?php phpinfo(); ?>

・・・
;; 最終行に追記　ラズパイのメモリサイズや WordPress の使用状況に応じて調整
php_value[max_execution_time] = 600
php_value[memory_limit] = 512M
php_value[post_max_size] = 512M
php_value[upload_max_filesize] = 256M
php_value[max_input_time] = 600
php_value[max_input_vars] = 2000
php_value[date.timezone] = Asia/Tokyo

・・・
character-set-server  = utf8mb4
collation-server      = utf8mb4_general_ci

mohlog@mohpi:~ $ sudo mysql_secure_installation

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user. If you've just installed MariaDB, and
haven't set the root password yet, you should just press enter here.

Enter current password for root (enter for none): [ENTER]
OK, successfully used password, moving on...

Setting the root password or using the unix_socket ensures that nobody
can log into the MariaDB root user without the proper authorisation.

You already have your root account protected, so you can safely answer 'n'.

Switch to unix_socket authentication [Y/n] n
 ... skipping.

You already have your root account protected, so you can safely answer 'n'.
Change the root password? [Y/n] n
 ... skipping.

By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] y
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!

mohlog@mohpi:~ $ sudo mysql
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 37
Server version: 10.11.6-MariaDB-0+deb12u1 Debian 12

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> create database db_testmohlog;
Query OK, 1 row affected (0.001 sec)

MariaDB [(none)]> grant all privileges on db_testmohlog.* to mohlog identified by 'abcd1234';
Query OK, 0 rows affected (0.002 sec)

MariaDB [(none)]>  exit

mohlog@mohpi:~ $ wget https://wordpress.org/latest.tar.gz
--2025-03-DD 20:40:56--  https://wordpress.org/latest.tar.gz
Resolving wordpress.org (wordpress.org)... 198.143.164.252
Connecting to wordpress.org (wordpress.org)|198.143.164.252|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 26780969 (26M) [application/octet-stream]
Saving to: ‘latest.tar.gz’

latest.tar.gz                 100%[==============================================>]  25.54M  1.98MB/s    in 17s     

2025-03-DD 20:41:14 (1.53 MB/s) - ‘latest.tar.gz’ saved [26780969/26780969]

・・・
define( 'WP_DEBUG', false );

/* カスタム値は、この行と「編集が必要なのはここまでです」の行の間に追加してください。 */
define( 'FS_METHOD', 'direct' );


/* 編集が必要なのはここまでです ! WordPress でのパブリッシングをお楽しみください。 */
・・・