# 查看编译的静态模块
apachectl -l
# 或
httpd -l

# 查看所有加载的模块（静态+动态）
apachectl -M
# 或
httpd -M

# 输出示例：
# core_module (static)
# so_module (static)
# http_module (static)
# mpm_event_module (shared)
# ssl_module (shared)
# rewrite_module (shared)
# proxy_module (shared)

# 加载动态模块
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule proxy_module modules/mod_proxy.so

# 条件加载
<IfModule !mod_ssl.c>
    # SSL 模块未加载时的配置
</IfModule>

# 启用模块
sudo a2enmod rewrite
sudo a2enmod ssl
sudo a2enmod proxy
sudo a2enmod proxy_http

# 禁用模块
sudo a2dismod status
sudo a2dismod info

# 列出可用模块
ls /etc/apache2/mods-available/

# 列出已启用模块
ls /etc/apache2/mods-enabled/

# 重新加载配置
sudo systemctl reload apache2

# Debian/Ubuntu
sudo a2enmod rewrite
sudo systemctl reload apache2

# CentOS/RHEL
# 确保 httpd.conf 中有：
# LoadModule rewrite_module modules/mod_rewrite.so

# 启用重写引擎
RewriteEngine On

# 简单重定向
RewriteRule ^old-page\.html$ /new-page.html [R=301,L]

# 条件重写
RewriteCond %{HTTP_HOST} ^www\.example\.com$ [NC]
RewriteRule ^(.*)$ https://example.com/$1 [R=301,L]

# URL 路由
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?url=$1 [QSA,L]

# 强制 HTTPS
RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

# 移除 www
RewriteCond %{HTTP_HOST} ^www\.(.+)$ [NC]
RewriteRule ^(.*)$ http://%1/$1 [R=301,L]

# 添加 www
RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteRule ^(.*)$ http://www.%{HTTP_HOST}/$1 [R=301,L]

# 自定义 404 页面
ErrorDocument 404 /custom-404.html

# 禁止目录列表
Options -Indexes

# 禁止图片盗链
RewriteCond %{HTTP_REFERER} !^$
RewriteCond %{HTTP_REFERER} !^https://example.com [NC]
RewriteRule \.(jpg|jpeg|png|gif)$ - [F,NC]

# 启用必要的模块
sudo a2enmod proxy
sudo a2enmod proxy_http
sudo a2enmod proxy_balancer
sudo a2enmod lbmethod_byrequests
sudo systemctl reload apache2

# 简单反向代理
<VirtualHost *:80>
    ServerName app.example.com
    
    ProxyPreserveHost On
    ProxyPass / http://localhost:8080/
    ProxyPassReverse / http://localhost:8080/
</VirtualHost>

# 路径代理
<VirtualHost *:80>
    ServerName www.example.com
    
    # 主站
    DocumentRoot /var/www/html
    
    # API 代理
    ProxyPass /api http://localhost:3000/api
    ProxyPassReverse /api http://localhost:3000/api
    
    # 管理后台代理
    ProxyPass /admin http://localhost:8080/admin
    ProxyPassReverse /admin http://localhost:8080/admin
</VirtualHost>

# 负载均衡配置
<Proxy balancer://mycluster>
    BalancerMember http://192.168.1.101:8080 loadfactor=1
    BalancerMember http://192.168.1.102:8080 loadfactor=2
    BalancerMember http://192.168.1.103:8080 loadfactor=1
    
    # 均衡算法
    ProxySet lbmethod=byrequests
    # byrequests - 按请求数
    # bytraffic - 按流量
    # bybusyness - 按繁忙度
</Proxy>

<VirtualHost *:80>
    ServerName www.example.com
    
    ProxyPass / balancer://mycluster/
    ProxyPassReverse / balancer://mycluster/
    
    # 负载均衡管理界面
    <Location /balancer-manager>
        SetHandler balancer-manager
        Require ip 127.0.0.1
    </Location>
</VirtualHost>

# Debian/Ubuntu
sudo a2enmod ssl
sudo systemctl reload apache2

# 生成自签名证书（测试用）
sudo openssl req -x509 -nodes -days 365 \
    -newkey rsa:2048 \
    -keyout /etc/ssl/private/selfsigned.key \
    -out /etc/ssl/certs/selfsigned.crt \
    -subj "/C=CN/ST=Beijing/L=Beijing/O=Test/CN=localhost"

<VirtualHost *:443>
    ServerName www.example.com
    DocumentRoot /var/www/html
    
    SSLEngine on
    SSLCertificateFile /etc/ssl/certs/www.example.com.crt
    SSLCertificateKeyFile /etc/ssl/private/www.example.com.key
    SSLCertificateChainFile /etc/ssl/certs/chain.pem
    
    # 安全协议
    SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1
    
    # 密码套件
    SSLCipherSuite ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256
    SSLHonorCipherOrder on
    
    # HSTS
    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
</VirtualHost>

/* mod_example.c */
#include "httpd.h"
#include "http_config.h"
#include "http_protocol.h"

/* 模块声明 */
module AP_MODULE_DECLARE_DATA example_module;

/* 处理函数 */
static int example_handler(request_rec *r) {
    if (strcmp(r->handler, "example")) {
        return DECLINED;
    }
    
    ap_set_content_type(r, "text/html");
    ap_rprintf(r, "<h1>Hello from mod_example!</h1>");
    ap_rprintf(r, "<p>URI: %s</p>", r->uri);
    
    return OK;
}

/* 注册钩子 */
static void register_hooks(apr_pool_t *p) {
    ap_hook_handler(example_handler, NULL, NULL, APR_HOOK_MIDDLE);
}

/* 模块定义 */
module AP_MODULE_DECLARE_DATA example_module = {
    STANDARD20_MODULE_STUFF,
    NULL,                  /* create per-dir config */
    NULL,                  /* merge per-dir config */
    NULL,                  /* create per-server config */
    NULL,                  /* merge per-server config */
    NULL,                  /* command apr_table_t */
    register_hooks         /* register hooks */
};

# 使用 apxs 编译
apxs -cia mod_example.c

# 手动编译
apxs -c mod_example.c
sudo apxs -i mod_example.c

# 添加到配置
echo "LoadModule example_module modules/mod_example.so" | \
    sudo tee /etc/apache2/mods-available/example.load

# 启用模块
sudo a2enmod example
sudo systemctl restart apache2

# 配置使用模块
<Location "/example">
    SetHandler example
</Location>

# 测试访问
curl http://localhost/example
# <h1>Hello from mod_example!</h1>
# <p>URI: /example</p>

# 只加载必要的模块
# 注释掉不需要的模块

# 通常需要的模块
LoadModule mpm_event_module modules/mod_mpm_event.so
LoadModule authz_core_module modules/mod_authz_core.so
LoadModule dir_module modules/mod_dir.so
LoadModule mime_module modules/mod_mime.so
LoadModule log_config_module modules/mod_log_config.so
LoadModule rewrite_module modules/mod_rewrite.so
LoadModule ssl_module modules/mod_ssl.so
LoadModule headers_module modules/mod_headers.so

# 按需加载
#LoadModule info_module modules/mod_info.so
#LoadModule status_module modules/mod_status.so

# 查看模块版本
apachectl -M 2>&1 | grep module_name

# 检查模块依赖
ldd /usr/lib/apache2/modules/mod_ssl.so

# 更新模块
sudo apt update
sudo apt upgrade libapache2-mod-*

# 禁用危险模块功能
<IfModule mod_status.c>
    # 只允许内部访问
    <Location "/server-status">
        SetHandler server-status
        Require ip 127.0.0.1
        Require ip ::1
    </Location>
</IfModule>

<IfModule mod_info.c>
    <Location "/server-info">
        SetHandler server-info
        Require ip 127.0.0.1
    </Location>
</IfModule>