树莓派Apache 2.4.10服务器403权限拒绝及公网访问求助

Hey there, let's work through your Apache issues step by step—first fixing the local "Forbidden No Permission" error, then getting your server accessible to the whole internet.

This usually boils down to incorrect file/directory permissions or Apache configuration missteps. Here's what to check:

• Set correct ownership for your web root
  Apache runs as the www-data user by default, so it needs proper access to your website files. Run these commands to update ownership and permissions:

  sudo chown -R www-data:www-data /var/www/html
  sudo chmod -R 755 /var/www/html
  

  The 755 permission lets the owner read/write/execute, while other users can read/execute—perfect for Apache to serve files without exposing unnecessary write access.

• Verify Apache's directory configuration
  Open your default site config file:

  sudo nano /etc/apache2/sites-available/000-default.conf
  

  Look for the <Directory> block that matches your DocumentRoot (usually /var/www/html). Make sure it includes these lines:

  <Directory /var/www/html>
      Options Indexes FollowSymLinks MultiViews
      AllowOverride All
      Require all granted
  </Directory>
  

  Save the file (Ctrl+O, press Enter, then Ctrl+X) and restart Apache to apply changes:

  sudo systemctl restart apache2
  

• Check for restrictive .htaccess rules
  If you have a .htaccess file in your web root, open it and ensure there's no line like Deny from all or other rules that block access. If you don't need .htaccess, you can safely delete it (or comment out restrictive lines with a # at the start).

Getting your site reachable from outside your local network takes a few more steps:

• Open port 80 on your Raspberry Pi's firewall
  If you're using ufw (the default firewall on Raspberry Pi OS), allow incoming traffic on port 80 (Apache's default port):

  sudo ufw allow 80/tcp
  sudo ufw enable  # Only run this if ufw isn't already active
  

  Verify the rule is active with sudo ufw status.

• Set up port forwarding on your router
  Your router acts as a gateway between your local network and the internet, so you need to tell it to send incoming port 80 traffic to your Raspberry Pi. Here's the general process:

  1. Find your Raspberry Pi's local IP address (run hostname -I to get it).
  2. Log into your router's admin panel (usually via 192.168.1.1 or 192.168.0.1—check your router's manual if unsure).
  3. Look for a section called "Port Forwarding", "Virtual Servers", or "NAT Rules".
  4. Create a new rule: forward external port 80 to your Pi's local IP and port 80. Save the changes.

• Handle dynamic public IP (most home networks)
  Most home ISPs assign dynamic public IPs that change periodically. To let users access your site consistently, use a Dynamic DNS (DDNS) service:

  • Raspberry Pi OS has built-in support for some DDNS providers (check the "Preferences" menu for "Dynamic DNS").
  • Alternatively, use a third-party DDNS service and set up a cron job on your Pi to update your IP automatically if it changes.

• Work around ISP port blocking
  Some ISPs block port 80 to prevent home servers. If this is the case:

  1. Change Apache's listening port in /etc/apache2/ports.conf (replace Listen 80 with Listen 8080).
  2. Update your site config to use the new port, then restart Apache.
  3. Update your router's port forwarding rule to forward external port 8080 to your Pi's port 8080.
  4. Users will access your site via your-ddns-domain:8080.

内容的提问来源于stack exchange，提问作者Benjamin Sommer