Re: proxy_cache_valid depending on $host

2021-01-25 Thread Maxim Dounin
Hello! On Mon, Jan 25, 2021 at 04:26:49PM +, Phil Endecott wrote: > Dear Experts, > > I wanted to write this: > > proxy_cache_valid 200 5m; > if ($host ~ foo) { >proxy_cache_valid 200 30d; > } > > but proxy_cache_valid is not allowed in "if" blocks. > Is there some work-around to have

Re: Why does the nginx.org main site not supporting TLS v1.3?

2021-01-25 Thread Maxim Dounin
Hello! On Fri, Jan 22, 2021 at 10:19:55AM +, David Hu wrote: > OK. Thank you. But what about the HTTP/1.1 and HTTP/2 problem? > As I mentioned before, I neogotiated with the server for H2 in > the early ALPN. However the server only accepts HTTP/1.1 and why > is that? My cURL has explicitl

proxy_cache_valid depending on $host

2021-01-25 Thread Phil Endecott
Dear Experts, I wanted to write this: proxy_cache_valid 200 5m; if ($host ~ foo) { proxy_cache_valid 200 30d; } but proxy_cache_valid is not allowed in "if" blocks. Is there some work-around to have different cache validity times for different hosts, in a caching proxy? Thanks, Phil. __

Re: Can't get a simple proxy to cache anything

2021-01-25 Thread Maxim Dounin
Hello! On Sun, Jan 24, 2021 at 12:56:35PM +, Phil Endecott wrote: > Maxim Dounin wrote: > > You haven't configured any proxy_cache_valid directives (see > > http://nginx.org/r/proxy_cache_valid for details), and the > > response doesn't have any cache validity headers, such as > > "Expires

Re: How to use NGINX as LDAP -> LDAPS forward proxy

2021-01-25 Thread Sergey A. Osokin
Hi Bob, hope you're doing well these days. On Mon, Jan 25, 2021 at 08:35:49AM +, Bob Brown wrote: > I have a collection of smallish internal-facing apps sitting on a server. > > I have been asked to 'secure' these apps. > > The apps currently: > + provide HTTP service to clients > + make us

How to use NGINX as LDAP -> LDAPS forward proxy

2021-01-25 Thread Bob Brown
I have a collection of smallish internal-facing apps sitting on a server. I have been asked to 'secure' these apps. The apps currently: + provide HTTP service to clients + make use of a number of internal SOAP services + use LDAP (Active Directory) for user authentication The various apps are wr