OpenLiteSpeed Installation on Debian 12 by Abraham Dahunsi OpenLiteSpeed Installation on Debian 12 by Abraham Dahunsi

OpenLiteSpeed Installation on Debian 12

Abraham Dahunsi

Researcher

Technical Writer

Linux

Computer Software

Introduction

OpenLiteSpeed is a lightweight, high-performance, open-source webserver that delivers web applications using modern web technologies. The webserver supports built-in caching, HTTP/3, and a graphical web console for simplified server management.

In this article, you'll install the OpenLiteSpeed webserver on Debian 12, access the web console, and create virtual hosts to serve web applications.

Prerequisites

Before you begin:

Deploy a Debian 12 instance on Vultr.

Access the instance using SSH as a non-root user with sudo privileges.

Set up a new domain A record pointing to the instance's public IP address.

Update the instance.

Install OpenLiteSpeed

OpenLiteSpeed is not available in the default package repositories on Debian 12. Follow the steps below to download the latest OpenLiteSpeed repository information script and install the application.

Download and run the OpenLiteSpeed repository setup script.

console

$ wget -O - https://repo.litespeed.sh | sudo bash

Output:

LiteSpeed repository has been setup!

Install the OpenLiteSpeed package.

console

$ sudo apt install openlitespeed -y

View the installed OpenLiteSpeed version.

console

$ cat /usr/local/lsws/VERSION

Output:

1.7.19

Manage the OpenLiteSpeed System Service

OpenLiteSpeed uses the lsws system service to run on the server and manage the application processes. Follow the steps below to enable the OpenLiteSpeed system service to start at boot time and manage the webserver processes.

Enable OpenLiteSpeed to automatically start at boot.

console

$ sudo systemctl enable lsws

Start the OpenLiteSpeed service.

console

$ sudo systemctl start lsws

View the OpenLiteSpeed service status and verify that it's running.

console

$ sudo systemctl status lsws

Output:

● lsws.service - LSB: lshttpd
     Loaded: loaded (/etc/init.d/lsws; generated)
     Active: active (running) since Wed 2024-08-14 21:43:25 UTC; 2min 48s ago
       Docs: man:systemd-sysv-generator(8)
      Tasks: 3 (limit: 2224)
     Memory: 6.4M
        CPU: 462ms
     CGroup: /system.slice/lsws.service
             ├─2314 openlitespeed (lshttpd - main)
             ├─2323 openlitespeed (lscgid)
             └─2352 openlitespeed (lshttpd - #01)

Stop OpenLiteSpeed.

console

$ sudo systemctl stop lsws

Restart OpenLiteSpeed.

console

$ sudo systemctl reload lsws

Configure OpenLiteSpeed

OpenLiteSpeed includes an administrator setup script that lets you create administrative users to manage the webserver using the web console interface. Follow the steps below to create a new user and configure OpenLiteSpeed to listen for web application requests on the HTTP port 80.

Run the OpenLiteSpeed administrator script to create a new user account.

console

$ sudo bash /usr/local/lsws/admin/misc/admpass.sh

Enter a new administrative username and a strong password.

Output:

Administrator's username/password is updated successfully!

Allow incoming connections to the OpenLiteSpeed web console port 7080 through the firewall.

console

$ sudo ufw allow 7080/tcp

Reload the firewall to apply the new connection rules.

console

$ sudo ufw reload

Access the OpenLiteSpeed web console on port 7080 using your server IP in a web browser such as Chrome.

http://SERVER-IP:7080

Accept the insecure certificate warning.

Accept the Insecure Certificate Warning

Enter the Administrator Username and Password

Click Listeners on the left navigation menu.

Click Listeners on the Left Navigation Menu

Click View within the Actions section of the Default listener.

Click View within the Actions Section

Click Edit within the Address Settings section.

Change the Port value from 8088 to 80.

Chnage Port Value from 8088 to 80

Click Save to apply the listening address changes.

Click Graceful Restart to apply the webserver configuration changes.

Click Graceful-Restart to Apply the Changes

Create a New OpenLiteSpeed Virtual Host

OpenLiteSpeeds supports multiple virtual hosts that use a unique domain, document root, and delivery directives. Follow the steps below to create a new OpenLiteSpeed virtual host for the app.example.com domain.

Create a web directory for your virtual host.

console

$ sudo mkdir /usr/local/lsws/app.example.com

Create the OpenLiteSpeed data sub-directories.

console

$ sudo mkdir /usr/local/lsws/app.example.com/{html,logs,conf} -p

The above command creates the following sub-directories in your web root directory:

html: Contains the web application files served by OpenLiteSpeed.

logs: Stores the virtual host's access and error logs.

conf: Stores site-specific OpenLiteSpeed configurations.

Grant the lsadm OpenLiteSpeed user and group ownership privileges to the directory.

console

$ sudo chown lsadm:lsadm -R /usr/local/app.example.com

Access the OpenLiteSpeed web console in a new web browser window.

http://SERVER-IP:7080

Click Virtual Hosts on the left navigation menu.

Click Virtual Hosts on the Left Menu

Click Add + to create a new virtual host with the following information:

Virtual Host Name: app.example.com

Virtual Host Root: $SERVER_ROOT/app.example.com/

Config File: $SERVER_ROOT/conf/vhosts/$VH_NAME/vhconf.conf

Follow Symbolic Link: Yes

Enable Scripts/ExtApps: Yes

Restrained: Yes

External App Set UID Mode: Server UID

Click Save to create the new virtual host.

Click Save to Create the New Virtual Host

Click CLICK TO CREATE when prompted to create the new virtual host configuration file usr/local/lsws/conf/vhosts/app.example.com/vhconf.conf.

Click Save to apply the virtual host configuration.

Navigate to Virtual Hosts and select app.example.com.

Navigate to Virtual Hosts and Select your Domain

Navigate to the General tab and click Edit to modify the new virtual host configuration with the following information:

Document Root: $VH_ROOT/html/

Domain Name: app.example.com

Domain Aliases: app.example.com

Enable GZIP Compression: Yes

Enable Brotli Compression: Yes

Click Save to apply the new virtual host configurations.

Click Save to Apply the new Virtual Host

Navigate to the Log tab and click Edit in the Virtual Host Log section to update the following fields:

Use Server's Log: Yes

File Name: $VH_ROOT/logs/error.log

Log Level: ERROR

Rolling Size (bytes): 10M

Keep Days: 30

Click Save to apply the log changes.

Click Add within the Access Log section and modify the following fields:

Log Control: Own Log File

File Name: $VH_ROOT/logs/access.log

Rolling Size (bytes): 10M

Keep Days: 30

Click Save to apply the log configurations.

Click Save to Apply the Log Configurations

Navigate to the Rewrite tab, click Edit in the Rewrite Control section and update the following fields:

Enable Rewrite: Yes

Auto Load from .htaccess: Yes

Click Save to apply the rewrite configurations.

Rewrite the Configurations

Click Listeners on the left navigation menu and select Default > Virtual Host Mappings.

Click Add and map the app.example.com domain to the virtual host you created earlier with the following values:

Virtual Host: app.example.com

Domains: app.example.com

Click Save to apply the virtual host changes and click Graceful Restart in the top right corner to apply the webserver configurations.

Create a new index.html web application file in your virtual host's html directory.

console

$ sudo nano /usr/local/lsws/app.example.com/html/index.html

Add the following contents to the file.

html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Test Page</title>
    <style>
        body {
            display: flex;
            justify-content: center;
            align-items: center;
            height: 100vh;
            margin: 0;
        }
    </style>
</head>
<body>
    <h1>Hello World! Greetings from Vultr</h1>
</body>
</html>

Save and close the file.

The above HTML application displays a Hello World! Greetings from Vultr message when you access it using your virtual host domain.

Allow network connections to the HTTP port 80 through the firewall.

console

$ sudo ufw allow 80/tcp

Access your domain using a web browser such as Chrome.

http://app.example.com

Verify that OpenLiteSpeed serves your web application files.

Secure the OpenLiteSpeed Webserver

OpenLiteSpeed serves web content using the insecure HTTP port 80 by default, which allows plain text data transmission between HTTP clients and the webserver. To encrypt sensitive information on port 443, enable HTTPS using trusted SSL/TLS certificates. Follow the steps below to generate trusted SSL certificates and secure the OpenLiteSpeed webserver.

Install the Certbot Let's Encrypt client tool.

console

$ sudo apt install certbot

Generate a new SSL certificate for your domain. Replace app.example.com with your actual domain name and admin@example.com with your email address.

console

$ sudo certbot certonly --webroot -w /usr/local/lsws/app.example.com/html/ --staple-ocsp --preferred-challenges http -m admin@example.com -d app.example.com --agree-tos

Output:

Successfully received certificate.
Certificate is saved at: /etc/letsencrypt/live/app.example.com/fullchain.pem
Key is saved at:         /etc/letsencrypt/live/app.example.com/privkey.pem
This certificate expires on 2024-11-14.
These files will be updated when the certificate renews.
Certbot has set up a scheduled task to automatically renew this certificate in the background.

Access the OpenLiteSpeed web console.

http://SERVER-IP:7080

Click Listeners on the main navigation menu.

Click Add + to create a new listener and set the following values:

Listener Name: SSL Listener

IP Address: ANY IPv4

Port: 443

Secure: Yes

Click the Save to apply changes.

Click View within the Listeners section to modify the new SSL Listener.

Click Add to bind the listener to your existing virtual host in the Virtual Host Mappings section with the following values.

Virtual Host: app.example.com

Domains: app.example.com

Click Save to apply the configuration changes.

Navigate to the SSL tab within the SSL Listener settings.

Click Edit in the SSL Private Key & Certificate section and update the following fields with your Let's Encrypt certificate paths.

Private Key File: /etc/letsencrypt/live/app.example.com/privkey.pem

Certificate File: /etc/letsencrypt/live/app.example.com/fullchain.pem

Chained Certificate: Yes

Click Save to apply the SSL changes and select Graceful Restart in the top right corner to apply the webserver configurations.

Set Up Firewall Rules

OpenLiteSpeed web console runs on port 7080 and serves web applications on HTTP port 80 and HTTPS port 443. Follow the steps below to allow HTTP and HTTPS network connections through the firewall.

View the UFW status and verify that it's active.

console

$ sudo ufw status

Output:

Status: active

Allow HTTP connections on Port 80.

console

$ sudo ufw allow 80/tcp

Allow HTTPS connections on Port 443.

console

$ sudo ufw allow 443/tcp

View the UFW status and verify that the new rules are available.

console

$ sudo ufw status

Reload UFW to apply the firewall changes.

console

$ sudo ufw reload

Access your domain using a web browser and verify that your application displays correctly.

https://app.example.com

Conclusion

You have installed the OpenLiteSpeed webserver on Debian 12 and enabled access to the web console administration interface. OpenLiteSpeed supports multiple virtual hosts you can use to securely run web applications with different frameworks on your server. For more information, please visit the official OpenLiteSpeed documentation.

Tags:

OpenLiteSpeed Debian