Totorial - How to setup PI WEB SERVER

Overview :

• Download the latest Rasbian
• Prepare a SD / Micro SD card to receive the downloaded Images.
• Un compress and Transfer the downloaded Raspbian Image to the SD / Micro SD card.
• Install Raspbian.
• Configure Raspbian for a static network.
• Install  Apache Web Server
• Install PHP and Associated Packages
• Install MySql
• Configure your router to access your Webserver and a domain name that points to your webserver.
  What you will need :
  • Raspberry Pi 2 Model B or one of its clones like Banana Pi M1 or M2 or Banana Pro
  • Ethernet connection or a supported USB Wifi adapter for the Pi
  • SD or Micro SD Card that fits into your Pi (4GB or above is recommended)
  • USB Keyboard and Mouse
  • Connection to a TV or Monitor
  You should seriously consider :
  • Learning about SSH and how to remotely access the Pi from another machine on your network.
  • Learning about Port forwarding settings for your Router.
  STEP 1 : Install Raspbian ( Xem bai 2 trong Blog nhe)

    STEP 2 : Give the Pi a static IP address

By default, the Pi is set to ask for a dynamic IP address from the router. You will need to change this setting to a fixed IP addresssince you will be hosting a webpage on the Pi and need the address to be fixed.

Assigning a Static IP address to the Pi can either be done at the Router level (which is fairly easy but the steps to do this are router’s model and brand specific) or at the Raspberry Pi level (outlined below).

Note :  replace the x in the lines below with what appears on your screen as you type in the commands.

Log on Raspbian and enter the following commands at the terminal :

1. “ifconfig” (ifconfig displays details of your current network connection )
2. Write down the values next to inet add:192.168.x.xxx. These numbers is the IP address that your Pi is currently at.
3. Also write down the Broadcast Range (Bcast) and Subnet Mask (Mask) that appear next to the inet add.
4.  To get information from your router, type in “sudo route -n“.  This will give you the gateway and destination values.
5. Write down the Gateway = 192.168.x.x & Destination = 192.168.x.x

We have now obtained all of the data that we need to setup our Raspberry Pi with a static IP address, it’s time to save it to a config file.

Type in “sudo nano /etc/network/interfaces”  ( nano is a text editor and will open the file interfaces located in the folder /etc/network)

In nano, look for the the line that reads “iface eth0 inet dhcp”. This line is telling the ethernet “eth0” networking interface to use “dhcp” (dynamic IP). Firstly, replace “dhcp or manual” with “static”.

Next , add the following lines directly below the line you just altered, with the data you had written down earlier.

address your.chosen.IP.address

netmask your.netmask

network  your.destination

broadcast your.broadcast.range

gateway your.gateway

The file should look something similar to the image below :

Save your file and exit out of nano by pressing ctrl+x

Reboot your Pi by typing in “sudo reboot“

Once rebooted, your Pi will be on a static IP address. Crosscheck this by typing in “ifconfig” again.

STEP 3 : Install Apache, PHP, MySQL and associated Libraries

For your Raspberry Pi to serve up websites, you will need to install a webserver.  Apache is a program that listens for server access requests from Internet browsers and grants them, if permitted. So if you want anyone to be able to access a website on your Raspberry Pi—including yourself—you need to install a Web server.

To install Apache, type in “sudo apt-get install apache2″

To install MySQL, type in “sudo apt-get install mysql-server″ (lệnh này sẽ cài bản 5.5)

Type in the IP address of the Pi onto the browser of another computer on your network and you should see “It works!” The default landing page of Apache.

To allow your Apache server to process PHP files, you’ll need to install PHP5 and the PHP5 module for Apache.

At the Terminal, Enter “sudo apt-get install php5 libapache2-mod-php5 -y“

Once all the software is installed, restart Apache by typing in “sudo service apache2 restart“

The website is hosted at “/var/www/index.html” on your Pi.

You can edit the file or replace it with your own website.

STEP 4 : Pointing your Domain Name ; Handling Dynamic IP and giving access to the Pi from the world wide web.

Almost all ISPs provide a dynamic dns address to your home internet connection.  This is done for a variety of reasons – one of which is to prevent hackers from attacking a single address  consistently.

 To solve the dynamic DNS issue, we need use a Dynamic DNS solution provider like www.noip.com. No-ip lets you create a free domain account or use a domain name you already own.  To get a detailed explanation of how this works, refer to their getting started section.

Goto www.noip.com > create an account

1. Sign in to your noip account > goto Add Host> create your host name with one of the offered domain names (projpi.ddns.net)
2. Keep the Host type as DNS Host A ( If your ISP blocks Port 80 for example, and you’re trying to run a webserver or other service on port 80, then you can choose Port 80 Redirect (at that point you’ll be asked to specify the port to use for the redirection)
3. In the field marked IP Address: you should already see your current IP address.
4. The next two options aren’t used for a basic account setup so leave them as they are.
5. click the “Add Host” button at the bottom of the page to save it.

Now that you have added a host or domain into your account, we have to deal with the dynamic IP address problem. To make noip automatically update the IP address everytime your isp changes your IP address, you will need to install noip’s Dynamic Update Client.

To install the DUC on the Raspberry Pi, Enter  the following commands at the terminal :

1. “sudo mkdir /home/pi/noip ” ( Create a folder for noip’s DUC)
2. “cd /home/pi/noip” (Change working folder to the new folder just created)
3. “sudo wget http://www.no-ip.com/client/linux/noip-duc-linux.tar.gz” (Download the Software)
4. “sudo tar vzxf noip-duc-linux.tar.gz” (Extract the downloaded software)
5. “ls” (to show the newly folder created by extracting the archive)
6. “cd noip-2.1.9-1” (Change working directory to noip-2.1.9-1 or what ever is the newly created folder by the step above)

You will now need to compile and install the downloaded DUC  by entering :

1. sudo make
2. sudo make install (during the install process you will need to enter your email and password that you created at noip.com)

the Dynamic Update client is started by running  “sudo /usr/local/bin/noip2” .

The DUC service will now run until the Pi is shutdown.

To make the DUC startup automatically and run in the back ground, We will need write a small script that will execute at startup.

 “sudo nano /etc/init.d/noipscript” (use nano the word editor to create a file called noipscript)

Enter the following lines into nano :

#! /bin/sh

### BEGIN INIT INFO
# Provides:          noip2
# Required-Start:    $syslog
# Required-Stop:     $syslog
# Default-Start:     2 3 4 5
# Default-Stop:      0 1 6
# Short-Description: noip.com client service
### END INIT INFO

# . /lib/lsb/init-functions
case "$1" in
    start)
        echo "Starting noip2."
        /usr/local/bin/noip2
    ;;
    stop)
        echo "Shutting down noip2."
        killall noip2
        #killproc /usr/local/bin/noip2
    ;;
    *)
        echo "Usage: $0 {start|stop}"
        exit 1
esac

exit 0

We will now need to make the script executable by changing its permissions and update the rc.d scripts by entering :

sudo chmod +x /etc/init.d/noipscript
sudo update-rc.d noipscript defaults

Now the Dynamic Update Client of No-ip should start everytime your Pi starts up and update your IP address.

STEP 5 : Configuring your Router to point port 80 to the Pi.

You need to enter your Router’s setup, goto port forwarding and forward port 80 to the static IP address of your Pi.

Your webserver should now be serving its website to the world. 

Security Footnote :

1. At the very least, It is advisable to consider the following :
2. SSH : Disable SSH access. If need SSH, you will need to follow “SSH Hardening” protocols.  Askubuntu.com has a great forum on this topic.
3. Change ALL PASSWORDS from their defaults.
4. Use SSL certificates. If you are using this for a SOHO environment, use commercial SSLs.
5. Have a firewall like ufw running.
6. Create a new user and password. Disable the default user.
7. Update the system regularly.