Re: error log truncates important infos

2016-06-15 Thread philipp
Hmm I understand that limitation. But an attacker or a bad application can hide the important information which we need to identify the source of the problem. What about limiting the fastcgi output to 1024 bytes and appending this info with max 1024 bytes. client: 127.0.0.1, server: example.com, u

error log truncates important infos

2016-06-14 Thread philipp
We have error logs like this: 2016/06/14 12:47:45 [error] 21036#21036: *378143 FastCGI sent in stderr: "PHP message: PHP Notice: Undefined index: model_name in /data/example.com/module/SalesFloor/view/partial/flyout/product.phtml on line 20 PHP message: PHP Notice: Undefined index: model_name in

Re: android apk in mime.types

2015-09-07 Thread Philipp
Am 07.09.2015 09:19 schrieb itpp2012: Firefox/IE sometimes gets an android apk as text, this forces octet, anyone see any issues? conf/mime.types line 64: application/octet-stream iso img; -application/octet-stream msi msp msm; + application/octet-stream

rewrite URL

2015-07-04 Thread Philipp Kraus
Hello, I try to use Nginx as a proxy (for SSL) on a Jetty server. The Jetty application should be accessed by a subdirectory of my Nginx. I have setup this location configuration: location /myapp { proxy_pass http://localhost:8112; proxy_set_headerX-Forwarded-Host

Re: sending 404 responses for epty objects.

2015-05-04 Thread philipp
Thanks for your help, removing the bypass solved this issue for me. This feature request would simplify such configurations: http://forum.nginx.org/read.php?2,258604 Posted at Nginx Forum: http://forum.nginx.org/read.php?2,255421,258617#msg-258617 ___

Feature Request proxy_cache_min_size and proxy_cache_max_size

2015-05-04 Thread philipp
In order to solve this issue http://forum.nginx.org/read.php?2,255421,255438#msg-255438 two additional features would be cool: proxy_cache_min_size Syntax: proxy_cache_min_size number; Default:proxy_cache_min_size 1; Context:http, server, location Sets the minimal size i

Re: sending 404 responses for epty objects.

2015-05-04 Thread philipp
Hi Maxim, should this solution work? http://syshero.org/post/49594172838/avoid-caching-0-byte-files-on-nginx I have created a simple test setup like: map $upstream_http_content_length $flag_cache_empty { default 0; 0 1; } server { listen 127.0.0.1:80; server_name local;

Re: Require a password for everything except one folder?

2014-11-05 Thread Philipp
Am 06.11.2014 02:46 schrieb nrahl: I'm also trying to add an exception, where any path starting with /Public is allowed by anyone with no password. location ~* ^/Public { satisfy any; allow all; } location /Public { auth_basic off; } _

Re: How to cache phpsessid?

2014-10-26 Thread Philipp
Am 26.10.2014 10:51 schrieb photographer: Thank you for answer. I.e. Nginx cannot store to cache a page with phpsessid cookie? What caching means? If you talk about proxy_cache; you might want to check: http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_cache_key Setting that for

Re: Using default CA path from openssl

2014-09-10 Thread Philipp
Am 11.09.2014 00:56 schrieb Michal Cichra: What I propose is a configuration flag, to set `SSL_CTX_set_default_verify_paths`. Careful what you wish for.. I didnt check the surrounding code, but above call and CAfile/CApath sets (if cmd-line or via API wont matter) has "funny" error condition

Re: location for php except

2014-06-01 Thread Philipp Kraus
Am 01.06.2014 um 20:16 schrieb Francis Daly : > Strictly, it's that this location is the one that best matches the > request. ("first" doesn't really apply.) > > See http://nginx.org/r/location for details. okay, I have try to swap both location, imho I have translate "best location" with "fir

location for php except

2014-06-01 Thread Philipp Kraus
Hello, I'm using nginx with Gitlab, so in the Gitlab some PHP projects are hosted and on other directory there exists some PHP scripts. For the PHP files I use: location ~ \.php$ { fastcgi_split_path_info ^(.+?\.php)(/.*)$; if (!-f $document_root$fastcgi_script_name)

Re: OpenSSL leaks server-Keys / The Heartbleed Bug

2014-04-11 Thread Philipp
Am 11.04.2014 18:34 schrieb Jim Ohlstein: Thanks for the link. On a quick read it seems their conclusion is that while it is *extremely* unlikely that your private key(s) was/were stolen using nginx, you should still re-key and revoke. While comforting, not really of any great practical help. A

Re: rewrite except one directory

2014-02-16 Thread Philipp Kraus
Hi, Am 16.02.2014 um 21:38 schrieb Jim Ohlstein : > With a nested location, or, if all the contents of /home/www/content/scripts > are PHP scripts, use a fastcgi_pass. > > Remember, all requests are handed by one location, and one location only. > Writing instructions for how to handle PHP scr

Re: rewrite except one directory

2014-02-16 Thread Philipp Kraus
Hi thanks for your answer, seems to be working > == > location ^~ /scripts/ { > # do your /scripts/ stuff > } > location / { > # do everything else > } > == I have defined my script location with: location ~ \.php$ { fastcgi_pass 127.0.0.1:9000; include /etc/nginx/fastcgi

HTTP-Post data with Tomcat

2014-02-15 Thread Philipp Kraus
Hello, I'm using Nginx as proxy for a Tomcat 7. My configuration shows: upstream tomcat { server 127.0.0.1:9090 fail_timeout=0; } location /jenkins { proxy_set_headerHost $http_host; proxy_set_headerX-Real-IP $remote_addr; proxy_set_headerX-For

rewrite except one directory

2014-02-15 Thread Philipp Kraus
Hello, I'm using the following rewrite options { try_files $uri @pico; } location @pico { rewrite ^(.*)$ /index.php; } So I would like to disable the rewrite for one subfolder. I have some PHP scripts with should not use the rewrite call e

Re: location problem with static content

2013-10-30 Thread Philipp Kraus
Am 29.10.2013 um 21:30 schrieb Francis Daly : > On Tue, Oct 29, 2013 at 07:34:15PM +0100, Philipp Kraus wrote: > > Hi there, > >>location /gitlab { >>root /home/gitlab/gitlab/public; >>try_files $uri $uri/index.html $uri.html @gitlab;

location problem with static content

2013-10-29 Thread Philipp Kraus
Hello, I have created for my GitLab installation this entries in the configuration: location /gitlab { root /home/gitlab/gitlab/public; try_files $uri $uri/index.html $uri.html @gitlab; } location @gitlab { proxy_read_timeout 300; proxy_connect_ti

Re: proxy pass with rewrite

2013-10-25 Thread Philipp Kraus
Hi, Am 25.10.2013 um 10:01 schrieb Francis Daly : > https://wiki.jenkins-ci.org/display/JENKINS/Jenkins+behind+an+NGinX+reverse+proxy > looks like it may have useful information. I have used this how to, but I cannot create a working solution > Fix jenkins so that it knows it is below /jenkins/,

proxy pass with rewrite

2013-10-24 Thread Philipp Kraus
Hello, I would like to configure ngix with jenkins, nginx should be a proxy for the jenkins instance. I have configuration the proxy pass options in this way: location /jenkins { proxy_pass http://localhost:8080/; proxy_redirect off; proxy_set_header Ho

duplicate Vary: Accept-Encoding header

2013-06-24 Thread philipp
I use nginx 1.4.1 with gunzip = on and gzip_vary = on. This leads to a duplicate Vary Header. gzip_vary should do nothing if the header is already present: user@aladin:~$ curl -I -A test http://192.168.56.249/ HTTP/1.1 302 Found Server: nginx Date: Tue, 25 Jun 2013 06:45:12 GMT Content-Type: text

inconsistent upstream_addr log

2013-04-05 Thread philipp
My log format looks like this log_format vcombined '$host $remote_addr - $remote_user [$time_local] "$request" ' '$status $body_bytes_sent "$http_referer" ' '"$http_user_agent" "$http_x_forwarded_for" ' '$ssl_cipher $reques

limit proxy_next_upstream

2013-04-05 Thread philipp
Is it possible to limit the amount of upstreams asked? I have four upstreams defined and it makes no sense to ask all of them. If two of them timeout or error there is possible something wrong with the request and asking another node doesn't help. Posted at Nginx Forum: http://forum.nginx.org/rea