Switch to openlitespeed

[Luke1982]

Steps

• Remove apache
• wget -O - https://repo.litespeed.sh | sudo bash
• apt install openlitespeed
• apt-get install lsphp82 lsphp82-common lsphp82-curl lsphp82-mysql lsphp82-opcache lsphp82-imap lsphp82-opcache lsphp82-pear

Configuration

• Create an HTTPS listener (https://openlitespeed.org/kb/ssl-setup/)
  • How to make sure port 80 requests are all forwarded to port 443 equivalents?
• Make sure the user noboby is added to the www-data group (usermod -a -G www-data nobody).
• Make sure each user's home directory is set to www-data as groupowner, recursively
• Create a virtualhost for each old apache virtualhost
  • Don't forget to create the configuration file first
  • Set the External App Set UID Mode to Docroot UID to make sure PHP executes as the docroot directory owner
  • Take the HTTP to HTTPS rewrite rule for each virtual host and apply it in the Litespeed WebAdmin Console, in the Virtual Host, which has a Rewrite tab
• Set the adminEmails setting to own e-mail address
• Navigate to Server Configuration > General > Rewrite Control and make sure Auto Load from .htaccess is set to Yes

To research/test

• How does certbot work without the apache plugin?
  • We'll have to change to the webroot plugin (https://eff-certbot.readthedocs.io/en/stable/using.html#webroot)
  • Existing certificate configurations need to be updated using (https://eff-certbot.readthedocs.io/en/stable/using.html#modifying-the-renewal-configuration-of-existing-certificates), since renewing through apache is embedded in their current config.
  • The mail.domain.nl certificates need a virtual host (or alias) as well, since we no longer have the apache plugin, the ACME verification needs an entry to the webroot.
  • Reference document https://openlitespeed.org/kb/ssl-setup/