Install Apache Tomcat 10 on Ubuntu 22.04 with Nginx. Apache Tomcat is an open source web server and a servlet container which is mainly used to server Java based applications.
In this guide you are going to learn how to install Apache Tomcat 10 on Ubuntu 22.04 and secure the setup with Nginx and Let’s Encrypt SSL.
Prerequisites
- A server with Ubuntu 22.04 OS
- A user with sudo privileges.
Initial Setup
Start by updating the server packages to the latest version available.
sudo apt update
sudo apt dist-upgrade -yCreate New User for Tomcat
It would be better if Tomcat runs as it’s own unprivileged user. Execute the following command to create a new user with required privileges for Tomcat. This user wont be allowed to be logged in to SSH.
sudo useradd -m -d /opt/tomcat -U -s /bin/false tomcatInstall Java
Install default JDK using the below command. Check here for more detailed guide to install Java.
sudo apt install default-jdkOnce the installation is completed, check the version using the following command.
java -versionYour output should be similar to the one below.
openjdk version "11.0.15" 2022-04-19
OpenJDK Runtime Environment (build 11.0.15+10-Ubuntu-0ubuntu0.22.04.1)
OpenJDK 64-Bit Server VM (build 11.0.15+10-Ubuntu-0ubuntu0.22.04.1, mixed mode, sharing)Install Apache Tomcat
Download the latest version of Tomcat from their official downloads page. Choose the tar.gz under the core section.
Download the archive using wget.
cd ~/
wget https://dlcdn.apache.org/tomcat/tomcat-10/v10.0.21/bin/apache-tomcat-10.0.21.tar.gzExtract the contents to /opt/tomcat directory.
sudo tar xzvf apache-tomcat-10*tar.gz -C /opt/tomcat --strip-components=1Configure correct permissions for Tomcat files.
sudo chown -R tomcat:tomcat /opt/tomcat/
sudo chmod -R u+x /opt/tomcat/binConfigure Admin Users
Now we need to setup users who can access the Host manager and the Manager pages in Tomcat.
Add the users with passwords in /opt/tomcat/conf/tomcat-users.xml
sudo nano /opt/tomcat/conf/tomcat-users.xmlAdd the following lines before the end tag.
<role rolename="manager-gui" />
<user username="manager" password="secure_password" roles="manager-gui" />
<role rolename="admin-gui" />
<user username="admin" password="secure_password" roles="manager-gui,admin-gui" />Now we have 2 users who can access the Manager and the Host manager pages.
Configure Tomcat as a Service
Here we will configure a systemd service to manage Tomcat to start, stop and restart automatically.
Note the Java location.
sudo update-java-alternatives -lOutput
java-1.11.0-openjdk-amd64 1111 /usr/lib/jvm/java-1.11.0-openjdk-amd64Create a systemd file.
sudo nano /etc/systemd/system/tomcat.serviceAdd the following contents to the file.
[Unit]
Description=Tomcat
After=network.target
[Service]
Type=forking
User=tomcat
Group=tomcat
Environment="JAVA_HOME=/usr/lib/jvm/java-1.11.0-openjdk-amd64"
Environment="JAVA_OPTS=-Djava.security.egd=file:///dev/urandom"
Environment="CATALINA_BASE=/opt/tomcat"
Environment="CATALINA_HOME=/opt/tomcat"
Environment="CATALINA_PID=/opt/tomcat/temp/tomcat.pid"
Environment="CATALINA_OPTS=-Xms512M -Xmx1024M -server -XX:+UseParallelGC"
ExecStart=/opt/tomcat/bin/startup.sh
ExecStop=/opt/tomcat/bin/shutdown.sh
RestartSec=10
Restart=always
[Install]
WantedBy=multi-user.targetReplace JAVA_HOME variable with the one you noted before.
Reload systemd daemon for the changes to take effect.
sudo systemctl daemon-reloadStart Tomcat.
sudo systemctl start tomcatEnable Tomcat to start at system boot.
sudo systemctl enable tomcatCheck Tomcat status.
sudo systemctl status tomcatOutput
● tomcat.service - Tomcat
Loaded: loaded (/etc/systemd/system/tomcat.service; disabled; vendor preset: enabled)
Active: active (running) since Wed 2022-05-25 06:41:36 UTC; 6s ago
Process: 5155 ExecStart=/opt/tomcat/bin/startup.sh (code=exited, status=0/SUCCESS)
Main PID: 5302 (java)
Tasks: 29 (limit: 1151)
Memory: 132.7M
CGroup: /system.slice/tomcat.serviceInstall Nginx
Install Nginx using the following command.
sudo apt install nginxRemove default configurations
sudo rm /etc/nginx/sites-available/default
sudo rm /etc/nginx/sites-enabled/defaultConfigure Nginx Proxy for Tomcat
Create new Nginx configuration
sudo nano /etc/nginx/sites-available/yourdomainname.confPaste the following
server {
listen [::]:80;
listen 80;
server_name yourdomainname.com www.yourdomainname.com;
location / {
proxy_pass http://localhost:8080;
proxy_http_version 1.1;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection 'upgrade';
proxy_set_header Host $host;
proxy_cache_bypass $http_upgrade;
}
}Save and exit the file.
Enable your configuration by creating a symbolic link.
sudo ln -s /etc/nginx/sites-available/yourdomainname.conf /etc/nginx/sites-enabled/yourdomainname.confInstall Let’s Encrypt SSL with Certbot
Install Certbot package.
sudo apt install python3-certbot-nginxInstall SSL certificate using the below command.
sudo certbot --nginx --redirect --no-eff-email --agree-tos -m yo[email protected] -d yourdomainname.com -d www.yourdomainname.comIf your domain is pointed to the server the free SSL certificate will get installed and HTTP to HTTPS redirection will get configured automatically and Nginx will get restarted by itself for the changes to take effect.
If you want to restart you can check your Nginx configuration and restart it.
sudo nginx -t
sudo service nginx restartPrepare yourself for a role working as an Information Technology Professional with Linux operating system
Verify Tomcat Installation
Now check your domain in your browser.
Click Manager App, you will be prompted to enter username and password. Use the one we have configured in the Tomcat users section.
You can also take a look on the Host Manager page.
You can also view the server status.
Conclusion
Now you have learned how to install Apache Tomcat on Ubuntu 22.04 and secure with Nginx and Let’s Encrypt SSL..
Thanks for your time. If you face any problem or any feedback, please leave a comment below.
