{"id":25684,"date":"2024-02-28T12:58:29","date_gmt":"2024-02-28T10:58:29","guid":{"rendered":"https:\/\/hostkoss.com\/b\/?p=25684"},"modified":"2024-07-10T11:15:22","modified_gmt":"2024-07-10T08:15:22","slug":"http-2-nginx-ubuntu","status":"publish","type":"post","link":"https:\/\/hostkoss.com\/b\/cs\/http-2-nginx-ubuntu\/","title":{"rendered":"Konfigurace podpory HTTP\/2 v Nginxu v Ubuntu 18.04"},"content":{"rendered":"\n

Nginx <\/strong> je webov\u00fd server s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem, kter\u00fd si z\u00edskal srdce mnoha spr\u00e1vc\u016f a v\u00fdvoj\u00e1\u0159\u016f d\u00edky sv\u00e9mu efektivn\u00edmu v\u00fdkonu, n\u00edzk\u00e9 spot\u0159eb\u011b pam\u011bti a v\u00fdkonn\u00e9 podpo\u0159e r\u016fzn\u00fdch protokol\u016f. Dnes si pov\u00edme n\u011bco o konfiguraci podpory HTTP\/2 v syst\u00e9mu Nginx.<\/p>\n\n\n\n

HTTP\/2<\/strong> je v\u00fdvoj protokolu HTTP, kter\u00fd zlep\u0161uje p\u0159enos dat mezi serverem a u\u017eivatelem. Nahrazuje protokol HTTP 1.1, kter\u00fd omezoval po\u010det sou\u010dasn\u00fdch p\u0159ipojen\u00ed, a proto zpomaloval na\u010d\u00edt\u00e1n\u00ed n\u00e1ro\u010dn\u00fdch str\u00e1nek. HTTP\/2 tento probl\u00e9m \u0159e\u0161\u00ed t\u00edm, \u017ee umo\u017e\u0148uje paraleln\u00ed na\u010d\u00edt\u00e1n\u00ed dat a kompresi hlavi\u010dek HTTP.<\/p>\n\n\n\n

Pro\u010d je p\u0159echod na HTTP\/2 d\u016fle\u017eit\u00fd?<\/h2>\n\n\n\n

P\u0159echod na protokol HTTP\/2 nejen u<\/strong> rychluje na\u010d\u00edt\u00e1n\u00ed webov\u00fdch str\u00e1nek, ale tak\u00e9 zvy\u0161uje bezpe\u010dnost p\u0159enosu dat. V\u0161echny modern\u00ed prohl\u00ed\u017ee\u010de vy\u017eaduj\u00ed, aby webov\u00e9 str\u00e1nky pou\u017e\u00edvaly protokol HTTPS podporuj\u00edc\u00ed protokol HTTP\/2, kter\u00fd zvy\u0161uje bezpe\u010dnost p\u0159enosu dat mezi serverem a n\u00e1v\u0161t\u011bvn\u00edky.<\/p>\n\n\n\n

Proces p\u0159echodu na HTTP\/2<\/h2>\n\n\n\n

Ne\u017e za\u010dnete nastavovat HTTP\/2 <\/strong>, mus\u00edte m\u00edt nainstalovan\u00fd server s Ubuntu 18.04 a Nginx. Na server mus\u00ed b\u00fdt tak\u00e9 nasm\u011brov\u00e1n n\u00e1zev va\u0161\u00ed dom\u00e9ny a pro tuto dom\u00e9nu mus\u00ed b\u00fdt nainstalov\u00e1n certifik\u00e1t SSL (nap\u0159\u00edklad Let’s Encrypt).<\/p>\n\n\n\n

1. Nastaven\u00ed serveru<\/h2>\n\n\n\n

Otev\u0159ete konfigura\u010dn\u00ed soubor dom\u00e9ny:<\/p>\n\n\n\n

vim \/etc\/nginx\/sites-available\/your_domain<\/code><\/pre>\n\n\n\n
P\u0159id\u00e1n\u00ed podpory HTTP\/2 pro p\u0159ipojen\u00ed IPv6 a IPv4:<\/p>\n\n\n\n
listen [::]:443 ssl hp2 ipv6only=on;\nlisten 443 ssl http2;<\/code><\/pre>\n\n\n\n
Ulo\u017ete zm\u011bny a zkontrolujte syntaxi:<\/p>\n\n\n\n
nginx -t<\/code><\/pre>\n\n\n\n
2. Zlep\u0161en\u00e1 bezpe\u010dnost<\/h2>\n\n\n\n
Chcete-li zv\u00fd\u0161it zabezpe\u010den\u00ed<\/strong>, vylou\u010dte nezabezpe\u010den\u00e9 \u0161ifry. V konfigura\u010dn\u00edm souboru dom\u00e9ny zm\u011b\u0148te volbu ssl_ciphers:<\/p>\n\n\n\n
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;<\/code><\/pre>\n\n\n\n
Zkontrolujte syntaxi a restartujte server:<\/p>\n\n\n\n
nginx -t\nsystemctl restart nginx.service<\/code><\/pre>\n\n\n\n
3. P\u0159id\u00e1n\u00ed protokolu HTTP Strict Transport Security (HSTS)<\/h2>\n\n\n\n
Pro je\u0161t\u011b v\u011bt\u0161\u00ed zabezpe\u010den\u00ed<\/strong> p\u0159idejte do konfigura\u010dn\u00edho souboru Nginx hlavi\u010dku HTTP Strict Transport Security. Tato hlavi\u010dka zajist\u00ed, \u017ee prohl\u00ed\u017ee\u010de budou pou\u017e\u00edvat pouze p\u0159ipojen\u00ed HTTPS.<\/p>\n\n\n\n
V konfigura\u010dn\u00edm souboru Nginx:<\/p>\n\n\n\n
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains" v\u017edy;<\/code><\/pre>\n\n\n\n
Zkontrolujte syntaxi<\/strong> a restartujte server.<\/p>\n\n\n\n
4. Kontrola spr\u00e1vn\u00e9ho fungov\u00e1n\u00ed protokolu HTTP\/2.<\/h2>\n\n\n\n
Protokol HTTP\/2 m\u016f\u017eete otestovat pomoc\u00ed p\u0159\u00edkazu curl:<\/p>\n\n\n\n
curl -I -L https:\/\/\u0432\u0430\u0448_\u0434\u043e\u043c\u0435\u043d<\/code><\/pre>\n\n\n\n
V odpov\u011bdi serveru mus\u00ed b\u00fdt uvedeno HTTP\/2.<\/strong><\/p>\n\n\n\n
Podporu HTTP\/2 m\u016f\u017eete zkontrolovat tak\u00e9 pomoc\u00ed prohl\u00ed\u017ee\u010de Google Chrome a n\u00e1stroj\u016f pro v\u00fdvoj\u00e1\u0159e.<\/p>\n\n\n\n
Nyn\u00ed je v\u00e1\u0161 web p\u0159ipraven na pr\u00e1ci s HTTP\/2<\/strong> – rychlej\u0161\u00ed a bezpe\u010dn\u011bj\u0161\u00ed verz\u00ed protokolu HTTP \ud83d\ude80.<\/p>\n\n\n\n
\n
Nezapome\u0148te sv\u016fj server v\u017edy<\/strong> aktualizovat a zabezpe\u010dit. Hodn\u011b \u0161t\u011bst\u00ed!!!!<\/p>\n<\/blockquote>\n\n\n\n
<\/p>\n\n\n\n
P\u0159e\u010dt\u011bte si tak\u00e9:<\/strong><\/p>\n\n\n\n