Re: Installing dynamic modules when Nginx itself is installed via yum/dnf (Linux)

2021-01-06 Thread steve
nginx -T will provide you with the config that is used for the delivered version of nginx 1.18.0 under fedora. That's a good starting point. Steve January 7, 2021 4:47 PM, "Phoenix Kiula" mailto:phoenix.ki...@gmail.com?to=%22Phoenix%20Kiula%22%20)> wrote: Thank you Thoma

Re: rewriting $arg into request.

2020-01-31 Thread Steve Wilson
ional redirect. Steve. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: rewriting $arg into request.

2020-01-31 Thread Steve Wilson
uot;^p=(\d+)") {     set $page $1;     set $args "";     rewrite ^.*$ /p/$page last;     break;     } I knew there'd be a simpler way and I due to the time of night I was struggling. Steve On 31/01/

rewriting $arg into request.

2020-01-30 Thread Steve Wilson
uot; to "/1234/", "/p=1234/" or even "/p1234/" but can't figure it out. Anyone got an easy way to do this, or a better way? Regards Steve. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Resolver not working as expected

2018-08-28 Thread Steve Wilson
On 27/08/2018 14:30, Maxim Dounin wrote: Hello! On Mon, Aug 27, 2018 at 06:56:01PM +0530, Sharan J wrote: Hi, Sample conf: http{ resolver x.x.x.x; server { server_name _; location / { proxy_pass http://somedomain.com; } } I have nameservers configured in my r

Re: dual stack binding

2018-06-21 Thread Steve Wilson
I've no problem with IPv6 on my server using specific v4 and v6 listen statements. Is the IP you're trying to use actually configured on an interface? Steve. On 21/06/2018 21:37, abatie wrote: I have nginx binding to a variety of addresses for ssl and target selection reasons

Re: E3-1240 with 32GB Ram - Unable to set the optimal value for the server

2017-10-18 Thread steve
You can't say that. Which fpm model are you using? dynamic, ondemand? Makes a huge difference. If you have a memory leak, ensure your workers are killed on a regular basis. Don't want you near my servers for sure! Steve October 18, 2017 1:17 PM, "Peter Booth" wrot

Re: add_header

2017-06-21 Thread steve
That'll be it then. I'd added cache control headers. Thanks for the swift reply. Mass edit coming up! Steve On 22/06/17 08:34, Reinis Rozitis wrote: The solution was to also add that header to the location{} block that I use to manage the relevant static resources. This se

add_header

2017-06-21 Thread steve
the font wasn't loaded. The solution was to also add that header to the location{} block that I use to manage the relevant static resources. This seems rather strange. Is it supposed to work this way? Cheers, Steve -- Steve Holdoway BSc(Hons) MIITP https://www.greengecko.co.nz/ Lin

Re: Rewrite to a different host (round robin)

2017-05-28 Thread steve
man.nginx.org/mailman/listinfo/nginx> ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx -- Steve Holdoway BSc(Hons) MIITP https://www.greengecko.co.nz/ Linkedin: https://www.linkedin.com/in/steveholdoway Skype: sholdowa ___

Re: Last roadblock changing from Apache: SSL & PHP

2017-05-14 Thread Steve Wilson
sure that php files are processed by php. Steve On 14/05/2017 23:43, Philip Rhoades wrote: > People, > > If I can solve this last problem (that I have just spent all night on), > I can completely replace Apache with Nginx. I am using RoundCubeMail as > my Webmail client - it is wr

Re: Too many define location directive

2017-04-23 Thread steve
fig file. So, if there are v4, v5, etc are exists in /var/www/api.domain.tld, the configuration won't change. Any helps are appreciate. Thanks. use a map?? -- Steve Holdoway BSc(Hons) MIITP https://www.greengecko.co.nz/ Linkedin: https://www.linkedin.com/in/st

Re: How to encrypt proxy cache

2017-04-03 Thread Steve Wilson
data by identifying common request data (paths/cookies etc) and excluding from the cache. Alternatively, as Maxim has said, review and restrict access to the server. Steve. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Balancing NGINX reverse proxy

2017-03-05 Thread steve
fashion. Alternatively ( bind again ) you can set up a split horizon DNS to deliver as a function of source ip address. Maybe the TTL hadn't expired on existing lookups, or the client is doing something strange? Steve -- Steve Holdoway BSc(Hons) MIITP https://www.greengecko.co.nz/ Lin

Re: nginx cache mounted on tmpf getting fulled

2017-01-16 Thread steve
id,noatime,async,size=xxxM,mode=0755,uid=xx,gid=xx To answer this poster... memory is even faster! Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___

Re: SNI and certs.

2016-11-30 Thread steve
ty then an oldschool $10 cert from Comodo is far better. Sure LE is a solution, but multiple SSL cert providers is getting a bit complex really. ( plus LE have already been hacked themselves ) On Nov 28, 2016, at 2:37 PM, steve wrote: It seems that search engines are probing https: even for s

Re: AW: AW: AW: SNI and certs.

2016-11-29 Thread steve
thing, and if my knowledge is deficient in this field, please show me where, or point me to where I can research further. lukas Time to stop feeding the troll I think. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway

Re: AW: AW: SNI and certs.

2016-11-29 Thread steve
losophical debate on the matter. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: AW: SNI and certs.

2016-11-28 Thread steve
ght it's a configuration shortfall / cockup, but it didn't occur to me that search engines would be attempting to force https. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___

SNI and certs.

2016-11-28 Thread steve
ate one IP address to SNI / https sites, and one to http: only - purchase a SSL cert for all sites, even if only used to forward https to http. Doesn anyone have a better solution ( nginx of course! ) Cheers, Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Link

Re: Speed up initial connection

2016-09-25 Thread steve
Hi, On 25/09/16 14:10, Grant wrote: Is there anything I can do to speed up the initial connection? It seems like the first page of my site I hit is consistently slower to respond than all subsequent requests. This is the case even when my backend session is still valid and unexpired for that i

Re: Start nginx worker process with same user as master process

2016-09-21 Thread steve
which it was installed and is that why these folder permissions are changing? You need to restart nginx, not reload it. -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa

Re: Nginx Perl / Cgi Permission Problem

2016-09-19 Thread steve
et to 0002 from 0022. This does mean that all files generated by the script will have group write permissions, so it's not perfect, but it's a start. Hopefully group write permissions to www-data aren't too bad. hth, Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.n

rewrites...

2016-09-19 Thread steve
ng wrong please? Cheers, Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx-http-concat module

2016-08-25 Thread steve
Gah... On 08/26/2016 01:31 PM, steve wrote: I know this is a bit off topic, but has anyone got this module to work? I have added concat_typestext/css application/x-javascript application/javascript; to nginx.conf, scope http added location /css/ { concat on; concat_max_files

nginx-http-concat module

2016-08-25 Thread steve
,nz/public.css,nz/public/buttons.css,nz/responsive.css,1469496475.css> I've also tried every vairation of ?? and /css/ that I can think of, all to no avail. files are in /css as seen from the docroot. Pointers gratefully received. Total hair loss imminent! Cheers, Steve -- Steve H

Re: NGINX http-secure-link iphone issue !!

2016-08-10 Thread Steve Wilson
My initial thoughts here are that you're potentially putting private information in the public hands. iirc to use http_secure_link you need some "private" information to generate the md5sum. This data should not be part of a mobile application. Personally I'd look at a way to get the full url from

Re: map directive using $default as origin

2016-08-09 Thread steve
le(s)? So the nginx didn't process png/gif into jpg if using firefox. And will process anything into webp if using Opera/Google Chrome. Many helps are appreciated. Thank you :) try using default instead of $default -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz

transferring site from apache....

2016-08-01 Thread steve
idea how to address it to get it working?? Unsurprisingly I'm getting a 404 at the moment Cheers, Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ n

Query re: upstreams and two protocols

2016-06-28 Thread Steve Howe
rects to a local nginx server definition that's designed to just forward off to another upstream with an https proxy_pass command, with the second upstream holding the remote datacentre server definition but it seems a bit kludgy. Thanks for any

Re: SSL handshake failed with mutual TLS

2016-06-21 Thread steve
sing the Qualys site ( https://www.ssllabs.com/ssltest/ ) to check and fine tune your SSL setup. They keep very current on all the vulns too, which is just sooo helpful. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/stevehold

Re: Redirection 301 create "Redirection loop" while using wordpress site.

2016-04-12 Thread Steve Wilson
It sounds to me like wordpress believes that www is required and nginx doesn't want it. I'd try commenting out the redirect server{} block and add the server_name to the xxx.com one and see what you end up with in your browser, then have a look through the wordpress settings to see what it's want

Re: HTTP/2 and HTTPS

2016-03-15 Thread steve
greengecko.co.nz&s=101.0.108.116&latest Works fine for me... nginx 1.9.12 + openssl 1.0.2g. ( note g, not d is current ). Built from source. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa

Re: TCP Connection

2016-03-04 Thread steve
t nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)

2016-02-14 Thread steve
estart of Nginx from user other than root? Posted at Nginx Forum: https://forum.nginx.org/read.php?2,264319,264498#msg-264498 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx -- Steve Holdoway BSc(H

Re: problems with building nginx 1.9.11 ( with pagespeed )

2016-02-11 Thread steve
Sorry! On 02/12/2016 12:04 PM, steve wrote: Server debian jessie, and I'm using the same build script ( which does include 3rd party stuff ) a 1.9.10 which built flawlessly To get it to build at all, I had to add the option ' -Wno-write-strings' to the CFLAGS in objs/Ma

problems with building nginx 1.9.11 ( with pagespeed )

2016-02-11 Thread steve
inx-module \ --add-module=../ngx_pagespeed-release-1.10.33.4-beta \ '--with-cc-opt=-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic ' -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.c

1.9.11 does not build

2016-02-10 Thread Steve
Hello all,   when I build 1.9.11 then somehow ngx_http_gzip_module is missing. Does anyone else have this issue as well?   // Steve ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Restart Nginx than root user?

2016-01-24 Thread steve
n debian wheezy... I just provide them access to the standard System V init scripts via the service command # cat /etc/sudoers.d/alchemy alchemyALL = NOPASSWD: /usr/sbin/service apache2 * Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/i

Re: http2 problem??

2015-11-03 Thread steve
well. -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: http2 problem??

2015-11-03 Thread steve
v 3, 2015 at 8:05 PM, steve <mailto:st...@greengecko.co.nz>> wrote: Hi folks, I'm having a problem with the configuration of my site... basically, I use a default server config to redirect traffic to my www. site under https, but the http: redirection doesn'

http2 problem??

2015-11-03 Thread steve
anyone shed any light onto this? Cheers, Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: different centos version + different nginx version make different performance

2015-11-02 Thread steve
per cpu. nginx doesn't really use much cpu at all, but server-side programming languages ( PHP especially from experience ) do. It would probably be worth installing a monitoring package such as munin or cacti to get a better picture of what's going on. hth, Steve -- Steve Hold

Re: SEO gone mad...

2015-10-13 Thread steve
On 10/14/2015 09:03 AM, nanaya wrote: On Wed, Oct 14, 2015, at 04:58 AM, steve wrote: As can be seen from the google article, it's apparently a bad thing(tm) to duplicate content for example.com/ and example.com. Apparently some .htaccess tweak can do a 301 redirect from one to the

Re: SEO gone mad...

2015-10-13 Thread steve
On 10/14/2015 08:47 AM, nanaya wrote: On Wed, Oct 14, 2015, at 04:39 AM, steve wrote: As can be seen from the google article, it's apparently a bad thing(tm) to duplicate content for example.com/ and example.com. Apparently some .htaccess tweak can do a 301 redirect from one to the

Re: SEO gone mad...

2015-10-13 Thread steve
Thanks for all the replies - I've not been ignoring you, I'm just in a different timezone! On 10/14/2015 03:16 AM, Patrick Nommensen wrote: On Tue, Oct 13, 2015 at 6:09 AM, Andrew Hutchings mailto:ahutchi...@nginx.com>> wrote: Hi! On Tuesday 13 October 2015 08:5

Re: SEO gone mad...

2015-10-12 Thread steve
On 10/13/2015 10:28 AM, Fireye00 wrote: Howdy Steve, I have a requirement from a customer that the terminal slash be rewritten when accessing the homepage - eg example.com/ is a 301 to example.com I've tried a simple rewrite of ^/$ but that just loops. In the given example re

SEO gone mad...

2015-10-12 Thread steve
Hi folks, I have a requirement from a customer that the terminal slash be rewritten when accessing the homepage - eg example.com/ is a 301 to example.com I've tried a simple rewrite of ^/$ but that just loops. Any ideas? Cheers, Steve -- Steve Holdoway BSc(Hons) MIITP

Re: Http2 not getting enable

2015-10-03 Thread Steve Wilson
I've not felt like digging that deep yet. Hopefully someone will know a site that does some real reporting for this test which will become like ssllabs is for ssl checking. Steve. On 03/10/2015 05:42, khav wrote: > None of the only http2 indicators are able to detect http2 although i have

Re: reverse proxy + basic authentication

2015-09-16 Thread Steve Wilson
Adding the below should remove any authentication headers in the request to the backend server(s). proxy_set_header "Authorization" ""; Steve. On 15/09/2015 14:33, derp14 wrote: Hello, Please excuse me if this has been asked/solved before. I've searched an answe

Re: nginx IETF RFC21266 Compliance - 'Proxy-Connection'

2015-09-16 Thread Steve Wilson
At risk of repeating previous advice, see below ... Original Message Subject: Re: nginx RFC21266 Compliance - 'Proxy-Connection' Date: 25/08/2015 21:21 From: Steve Wilson To: nginx@nginx.org Reply-To: nginx@nginx.org Looking at https://en.wikipedi

Re: Update on: nginx makes mysqld die all the time

2015-08-25 Thread Steve Wilson
are the spec of the server and how busy php is, there may be some way to monitor the running number of children to fine tune later but may cause problems if there's a sudden surge in requests. The php manual has some information on each of these settings at <http://php.net/manual/en/install.fpm.configuration.php#pm> Steve. ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: nginx RFC21266 Compliance - 'Proxy-Connection'

2015-08-25 Thread Steve Wilson
rver to ignore invalid request headers rather than bork on the request. Steve. On 25/08/2015 21:03, Tyarko Leander Rodney wrote: > Hi, > > I’ve posted this question on the IRC before but had no luck. I have the > following problem: > > I’d like to disable the ‘Proxy-Connection’

Re: nginx makes mysqld die all the time

2015-08-19 Thread Steve Wilson
oup of nginx+php-fpm servers running for wordpress and drupal (2 each) but your activity may be considerably higher than what I've got. The key parts here are the "pm." options so you'll probably want to investigate each setting and tune to your requirements. Steve. On

Re: nginx makes mysqld die all the time

2015-08-18 Thread Steve Wilson
Hi, When I migrated from apache+mod_php to nginx+php-fpm I found I had a few websites using persistent mysql connections which never closed. I had to disable this in the php.ini so all the sites fell back to using non-persistent connections. I don't know if this will help as it was mysql not m

Re: Health Monitoring

2015-07-16 Thread steve
? Posted at Nginx Forum: http://forum.nginx.org/read.php?2,260371,260371#msg-260371 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http

Re: Nginx Magento multistore configuration

2015-07-13 Thread steve
c/nginx/fastcgi_params; fastcgi_param SERVER_PORT 80; fastcgi_param HTTPS $fastcgi_https; } } Posted at Nginx Forum: http://forum.nginx.org/read.php?2,260265,260265#msg-260265 ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/lis

Re: Redirect on specific threshold !!

2015-06-14 Thread steve
his, it's normally the bandwidth of the network that becones the bottleneck. Maybe a bit of round-robin DNS would help with this? Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa __

Re: A bit confused...

2015-06-12 Thread Steve Holdoway
Hi, On 12/06/15 18:59, Francis Daly wrote: On Fri, Jun 12, 2015 at 01:50:15PM +1200, steve wrote: Hi there, I'm tryiong to make some sense out of this and am left a bit cold! What could cause this: Both requests are invalid - "space" may not appear in a url. Encode it as %20

Re: A bit confused...

2015-06-11 Thread steve
Hmm... On 12/06/15 14:31, steve wrote: A bit more into... On 12/06/15 14:15, Miguel Clara wrote: BTW, I test a few more URLS, and all others give 404, but anything with "http://backend.right.bike/images/models/Lapierre/Overvolt\ H***" fails with 400 not that only "Overvolt\ H

Re: A bit confused...

2015-06-11 Thread steve
ot;Overvolt\ h" or "Overvolt h" I just have no clue why, maybe something in the config Melhores Cumprimentos // Best Regards --- Miguel Clara IT - Sys Admin & Developer It seems to be objecting to the string '

Re: A bit confused...

2015-06-11 Thread steve
ntos // Best Regards --- Miguel Clara IT - Sys Admin & Developer On Fri, Jun 12, 2015 at 2:52 AM, steve wrote: Just a quick addition... I've tried it from this office, which is IPv4, and from IPv6 enabled locations. This makes no difference. On 12/06/15 13:50, steve wrote: I'm tryi

Re: A bit confused...

2015-06-11 Thread steve
Just a quick addition... I've tried it from this office, which is IPv4, and from IPv6 enabled locations. This makes no difference. On 12/06/15 13:50, steve wrote: I'm tryiong to make some sense out of this and am left a bit cold! What could cause this: ( I've left out

A bit confused...

2015-06-11 Thread steve
/1.1 400 Bad Request Server: nginx/1.9.1 Date: Fri, 12 Jun 2015 01:47:05 GMT Content-Type: text/html Content-Length: 172 Connection: close The second one shows no entry at all in the access log but I can't find any reason why they're processed differently at all. Suggestions please! --

Re: problem : nginx with magento

2015-06-09 Thread steve
, 2015 at 1:14 PM, Francis Daly <mailto:fran...@daoine.org>> wrote: On Tue, Jun 09, 2015 at 07:30:13AM +0530, Prameswar Lal wrote: Hi there, > i am sending current access log after changing according to steve block . The config you showed does not write to access.

Re: problem : nginx with magento

2015-06-08 Thread steve
On 09/06/15 14:00, Prameswar Lal wrote: Hi , i am sending current access log after changing according to steve block . Not problem with index.php . it has problem with all page of .php in magento tool . i am using magento tool so this is file of magento . not written by me . magento use

Re: problem : nginx with magento

2015-06-08 Thread steve
Hi On 09/06/15 13:46, Prameswar Lal wrote: Hi steve , i have checked with your setting also . its not working . On Tue, Jun 9, 2015 at 5:52 AM, steve <mailto:st...@greengecko.co.nz>> wrote: Hi, On 09/06/15 01:34, Prameswar Lal wrote: hi i am using nginx with magento

Re: problem : nginx with magento

2015-06-08 Thread steve
arams; fastcgi_index index.php; fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name; fastcgi_pass backend; } which will work with just about every PHP based CMS out there... well enough to get you started.... Steve -- Steve Holdoway BSc(Hons) MIITP

Re: mail proxying

2015-06-01 Thread steve
HI On 01/06/15 23:51, dethegeek wrote: Hi Steve, thank you for your reply. I already read the page you mentionned, and as I understand it, either this feature is missing, either it is not documented. Andrew said TLS is not implemented, so I'll follow his advice to properly workaround

Re: mail proxying

2015-05-31 Thread steve
ttp://wiki.nginx.org/ImapProxyExample -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: 2 maps for one 1 variable?

2015-04-01 Thread Steve Holdoway
leaving out the default > value in the second map. > > — > Cole You can link 2 maps together by setting the default value for the second map as the result from the first map. Unique names will be required though. Does that fit with what you're trying to do?? -- Ste

Re: Nginx with Mailman

2015-03-26 Thread Steve Wilson
There seems to be a naming issue for the socket. nginx is configured to use /run/lists.sock yet your ls shows lists.sock-1 Steve. On 26/03/2015 13:15, Silvio Siefke wrote: > Hello, > > i try to run mailman on nginx over fcgiwrap. The sock is present on > system and has correct right

Re: disable file uploads

2015-03-24 Thread Steve Holdoway
On Tue, 2015-03-24 at 16:15 +1300, Steve Holdoway wrote: > On Mon, 2015-03-23 at 19:57 -0700, Robert Paprocki wrote: > > Sounds like you either have a vulnerable web application or hole in your > > systems security. If the root of your problem is that your having content >

Re: disable file uploads

2015-03-23 Thread Steve Holdoway
ng to mate that with a 'simple to maintain' methodology. So, yes I'd like to do both, but without being heavy-handed on the website owners. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa _

Re: disable file uploads

2015-03-23 Thread Steve Holdoway
On Tue, 2015-03-24 at 00:00 +, Francis Daly wrote: > On Tue, Mar 24, 2015 at 12:47:38PM +1300, Steve Holdoway wrote: > > On Mon, 2015-03-23 at 22:52 +, Francis Daly wrote: > > > On Tue, Mar 24, 2015 at 09:13:50AM +1300, Steve Holdoway wrote: > > Hi there, >

Re: disable file uploads

2015-03-23 Thread Steve Holdoway
On Mon, 2015-03-23 at 22:52 +, Francis Daly wrote: > On Tue, Mar 24, 2015 at 09:13:50AM +1300, Steve Holdoway wrote: > > Hi there, > > > Is there any way to stop / disable random file uploads... for example, > > I'm having 'fun' with mail relay

disable file uploads

2015-03-23 Thread Steve Holdoway
Is there any way to stop / disable random file uploads... for example, I'm having 'fun' with mail relays being uploaded to the cache area of a wordpress site? Can't think of anything off the top of my head that would do it. Cheers, Steve -- Steve Holdoway

Re: How to $POST variables to php-fpm with nginx

2015-02-22 Thread Steve Holdoway
rl_setopt ( $Request, CURLOPT_POST, true ); $options ["var1"] = "value"; ... curl_setopt ( $Request, CURLOPT_POSTFIELDS, $options ); $Result = curl_exec ( $Request ); curl_close ( $Request ); Should be an ( untested ! ) starting point. Steve

Re: Intermittent 500 errors with Nginx reverse proxy for Apache PHP FPM

2015-02-11 Thread Steve Holdoway
If the apache access logs are showing a 500, then it's pointing to a PHP problem isn't it??? What's in the php-fpm logs? BTW if you're running php as fpm, why are you using apache at all? I certainly don't. Cheers, Steve On Wed, 2015-02-11 at 16:07 -0800, neubyr wr

Re: G-WAN assumptions: Part of truth/lies?

2015-02-08 Thread Steve Holdoway
ng resources > on-the-fly, as G-WAN seems to be doing it. (cf. 'The (long) > story of Nginx's "wrk"' section) > - Why is wrk (in G-WAN's opinion) 'too slow under 10,000 > simultaneous connections'? (cf. &#x

Re: Need help to configure nginx-varnish-php s

2015-02-03 Thread Steve Holdoway
eam definition that connects to them all in a load balanced manner? ) I would also put as many of those fastcgi_params into an include file as possible - makes the config easier to understand. Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skype: sholdowa ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: Will this work, is it the best way?

2015-01-31 Thread Steve Wilson
ss http://$subdomain;' Steve. On 31/01/15 16:21, Lloyd Chang wrote: > Hello Steve, > > • Best answer is try and see if it meets your expectations; thanks > > • While reading your snippet, my initial questions are — Why 2 > servers? Why not simplify? > > • In your proposal:

Will this work, is it the best way?

2015-01-30 Thread Steve Wilson
#x27;s dns stuff etc but that's out of scope for this list and I can deal with that. Does this seem sound? It's not going to see major usage but hopefully this will reduce work when adding new upstreams. If you've a better way to achieve this p

Re: Problem with wildcard of domain in nginx and in https

2015-01-14 Thread Steve Wilson
7;re not actually trying domainS.com with domain.com configured. Does domain.com resolve the same as www.domain.com? When you ping domain.com does it return the same IP as when pinging www.domain.com, the ping actually working doesn't matter this it testing that b

Re: NGINX Access Logs

2015-01-10 Thread Steve Holdoway
'"$http_user_agent" "$http_x_forwarded_for"'; access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; ( sorry for the wrap ) Which itemises the fields. Obviously yours is different, but it'll give you the

Re: Redirect to domain TTFB very slow

2014-12-30 Thread Steve Holdoway
On Tue, 2014-12-30 at 20:20 -0500, ASTRAPI wrote: > http://i59.tinypic.com/20jlrpv.jpg > Looks like it's server side processing problems then. -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/steveholdoway Skyp

Re: Redirect to domain TTFB very slow

2014-12-30 Thread Steve Holdoway
em often is better than both ( on a single server platform ). Temporarily using something like new relic may also help you pinpoint your bottlenecks. If I've misunderstood, then maybe it's a DNS problem? Try ensuring all domain names are set in /etc/hosts ( and maybe set them to som

Re: Serving files from a slow NFS storage

2014-12-30 Thread Steve Holdoway
e > file takes a long time. > > Thanks, > > Eran I'm a bit confused here. Are you saying that the CDN is pulling from NFS? If so, then surely the solution is under your control... deliver all this content from a single server. If the web servers never deliver it, then mount th

Re: Serving files from a slow NFS storage

2014-12-29 Thread Steve Holdoway
ill keep local copies of the remote files, so once filled, the problem should go away. There are also options to tune kernel and mount options that can help a bit. I would/do use this approach in preference to the (still too new IMO) alternatives like GlusterFS. In my experience, serving any volume o

Re: Having multiple Symfony2 apps on same domain

2014-12-28 Thread Steve Holdoway
UEST_URI" parameter, but with that the app.php generate wrong > URL without the subdirectory. > > So is their a way to achieve this configuration ? Thanks you ! > > Posted at Nginx Forum: > http://forum.nginx.org/read.php?2,255806,255806#msg-255806 Try using a map

Re: SPDY for http?

2014-12-19 Thread Steve Wilson
tes to various nginx servers with only a listen 80 directive. If I'm understanding your statement correctly, if varnish and the backend nginx supported plaintext spdy is it possible for a spdy connection all the way? Then I guess the real question becomes is there any advantage to this? Steve.

Re: serve content from a wget mirror

2014-11-25 Thread Steve Wilson
On 24/11/2014 12:36, Francis Daly wrote: > On Mon, Nov 24, 2014 at 11:05:10AM +0000, Steve Wilson wrote: > > Hi there, > >> I'm trying to create an archive based on a current site which is due to >> be taken down, I've used "wget -m" to mirror the

serve content from a wget mirror

2014-11-24 Thread Steve Wilson
ize 2048; include /etc/nginx/mime.types; default_type application/octet-stream; access_log /var/log/nginx/access.log; error_log /var/log/nginx/error.log; gzip on; gzip_disable "msie6"; } server { listen 80 default_server; listen [::]:80 default_server ipv6only=o

Re: too many redirects

2014-11-20 Thread Steve Holdoway
​ > > > > > ___ > nginx mailing list > nginx@nginx.org > http://mailman.nginx.org/mailman/listi

Re: nginx centos build only supports SSLv3 and ignores ssl_protocols

2014-10-01 Thread Steve Holdoway
lem. > - i am going to generate some different certs -- mine are insane -- 4096 key, > 4096 dh, sha512 sig -- perhaps the problem lies there. although, why would > apache work and not nginx? > > will report back tomorrow. > > thanks! > > m > I find that https:

password protect site except for one page

2014-09-16 Thread Steve Holdoway
off; ... } doesn't work for /demo due to static content, etc. The only way I can think of is to directly lock the other pages rather than / thoughts? Steve -- Steve Holdoway BSc(Hons) MIITP http://www.greengecko.co.nz Linkedin: http://www.linkedin.com/in/stevehold

Re: urgent need help ,ssl error ;

2014-09-06 Thread Steve Holdoway
nk & Regards > Vijay kr > vk1dadh...@gmail.com > > Posted at Nginx Forum: > http://forum.nginx.org/read.php?2,253088,253098#msg-253098 > > ___ > nginx mailing list > nginx@nginx.org > http://m

Re: Deny certain words

2014-09-03 Thread Steve Wilson
I've just thought of another angle for this. Is this hitting your default/only site? If it's got a host header you could create a site just for that that bins all requests off with a 444 and no logging. On 02/09/2014 12:08, Grozdan wrote: Hi, Somehow my server gets hit by torrent requests whi

Re: Deny certain words

2014-09-03 Thread Steve Wilson
On 02/09/2014 17:38, Grozdan wrote: On Tue, Sep 2, 2014 at 3:09 PM, Maxim Dounin wrote: Hello! On Tue, Sep 02, 2014 at 12:17:12PM +0100, Steve Wilson wrote: Torrent clients have their own user agent normally, I had a need a while back to block some which we used the magic 444 to kill it

Re: Deny certain words

2014-09-02 Thread Steve Wilson
Torrent clients have their own user agent normally, I had a need a while back to block some which we used the magic 444 to kill it. if ($http_user_agent ~* (uTorrent|Transmission) ) { return 444; break; } On 02/09/2014 12:08, Grozdan wrote: Hi, Somehow my server gets hit by torrent requests

  1   2   3   >