Re: Using Yubikey/PKCS11 for Upstream Client Certificates

2020-02-05 Thread erik
According to the documentation (http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_ssl_certificate_key), proxy_ssl_certificate_key supports syntax for ssl-engine specific backends: > The value engine:name:id can be specified instead of the file (1.7.9), which loads a secret key with a

Re: Nginx Valid Referer - Access Control - Help Wanted

2020-02-05 Thread J.R.
> I found various code examples to add to the conf file and coupled this > together and added it to the end of the conf file, but it doesn't work, > entering a URL directly into the browser serves it > server { >location /radio/ { >valid_referers none blocked server_names ~\.mysite\.;

Nginx Valid Referer - Access Control - Help Wanted

2020-02-05 Thread AshleyinSpain
I want to use nginx referer module to restrict access to a URL containing a directory /radio/ Only allowing access to it from a link with http referer *.mysite.* (anysubdomain.mysite.anytld) otherwise redirect to 403 Is the referer module already loaded in nginx if not how do I load it I found v

RE: Adjust ajax urls

2020-02-05 Thread Reinis Rozitis
> While the AJAX request does not know anything about the NGINX Proxy, they > does not know anything about the “webui” path. So I need to find a solution > to manipulate these javascript code: If the javascript files are proxied the same way (from origin server) as the application you can use t

Adjust ajax urls

2020-02-05 Thread s.schabbach
Dear, I just have a server where multiple web applications are running. The web applications are running on several ports and are distinguished by a virtual path. For example, the web application for our scenario is running using the virtual path “/webui”. Each virtual path passed the

Re: error code 494

2020-02-05 Thread Maxim Dounin
Hello! On Tue, Feb 04, 2020 at 10:03:23AM -0800, Frank Liu wrote: > Thanks Maxim for the quick fix! > Based on https://tools.ietf.org/html/rfc6585#section-5 , shall we by > default return 431 instead of 400? That's a separate question (and I don't think changing the code from 494/400 to 431 act

Nginx's sub_filter does not replace paths in CSS and JS

2020-02-05 Thread !QVAS!
I have two nginx servers, let's call them nginx1 and nginx2. Nginx1 is located in a separate infrastructure and processes requests, and also provides static files for examplesite.com. Nginx2 is in a different infrastructure and processes requests, and also gives static files on request 172.22.3.15.

Re: Using Yubikey/PKCS11 for Upstream Client Certificates

2020-02-05 Thread Konstantin Pavlov
Hi Erik, I've been enable to use an yubikey neo to store a server key and utilize them via pkcs11 engine in nginx some time ago. I didnt check the upstream connection, since I only cared about front-end. And as I only had a yubikey neo instead of a proper HSM, it turned out to be a crypto deccele

Using nginx upload module and nginx lua together

2020-02-05 Thread myxingkong
I am using nginx upload module for uplaoding files to server. But I wanted nginx to upload to different paths, not to a path mentioned in upload_store. So I am taking help of nginx-lua module to change the upload_store value on each request like below. location /umtest { upload_pas