Show all posts by user

Re: Can't access website after configuring SSL - 7 years ago

robertf57 Wrote: ------------------------------------------------------- > server { > #listen 80; > listen 443 ssl; > server_name web01.mysite.com; [...] > # Redirect all HTTP requests to HTTPS > rewrite ^ https://$server_name$request_uri permanent; Your looping back on yourself.

by itpp2012 - Nginx Mailing List - English

Re: Make Nginx not process If-Match header - 7 years ago

Looks like the 412 is coming from your backend (apache) and not nginx.

by itpp2012 - How to...

Re: Is it possible to reference a named variable in the ssl_certificate directive? - 7 years ago

Just create a temporary exception.

by itpp2012 - How to...

Re: Is it possible to reference a named variable in the ssl_certificate directive? - 7 years ago

https://www.google.nl/#q=lua+dynamic+ssl+certificate ea: https://litespeed.io/dynamic-tls-certificates-with-openresty-and-ssl_certificate_by_lua/

by itpp2012 - How to...

Re: php-fpm 7.1 child exited with code 70 - 7 years ago

https://support.sysally.net/boards/1/topics/335

by itpp2012 - Php-fpm Mailing List - English

Re: need help reverse-proxy config - 7 years ago

stream { limit_conn_zone $binary_remote_addr zone=straddr:10m; upstream backendsmtp { server smtp1.local:25; server smtp2.local:25; } server { listen 2025 ssl; error_log /logging/stream_local_smtp.log debug; ssl_certificate /nginx/crts/sdom.cert; ssl_certificate_key /nginx/crts/sdom.key; include /nginx/conf/sslciphers.conf; ssl_session_timeo

by itpp2012 - Nginx Mailing List - English

Re: Redirect with HTTPS with basic auth - 7 years ago

The only other way is to use a parser which reads in your combined config and splits it out into http/https blocks. ea. http://stackoverflow.com/questions/15277453/any-good-way-to-programmatically-change-nginx-config-file-from-python

by itpp2012 - How to...

Re: Redirect with HTTPS with basic auth - 7 years ago

You could try something like: server { listen 80; listen 443 ssl; server_name mydomain.com; if ($scheme = 'http') { rewrite ^ https://$http_host$request_uri? permanent; } location / { bla.....; } } ea. keep the 'if' outside the location blocks.

by itpp2012 - How to...

Re: Redirect with HTTPS with basic auth - 7 years ago

You call this high-maintenance: ?? server { listen 80; server_name mydomain.com; location / { rewrite ^ https://$http_host$request_uri? permanent; } }

by itpp2012 - How to...

Re: Redirect with HTTPS with basic auth - 7 years ago

Make 2 server blocks, you can't do this with 1 block where http and https are combined.

by itpp2012 - How to...

Re: nginx ifttt maker - 7 years ago

noesberger Wrote: ------------------------------------------------------- > location /ifttt/ { > proxy_pass http://192.168.1.214:1880/ifttt; > } location /ifttt/ { proxy_pass http://192.168.1.214:1880; }

by itpp2012 - How to...

Re: AW: AW: AW: AW: SNI and certs. - 7 years ago

Lukas Tribus Wrote: ------------------------------------------------------- > As I said, the best way would be to drop the TLS handshake, but nginx > doesn't support this afaik. If you mind the overhead, ssl_preread_server_name could be used for this.

by itpp2012 - Nginx Mailing List - English

Re: NGINX and WebServices WSDL Reverse Proxy - 7 years ago

It looks like tomcat is adding this as a reply to the clients and should be a setting. Or your subfilter is doing this.

by itpp2012 - How to...

Re: NGINX and WebServices WSDL Reverse Proxy - 7 years ago

You need to adjust the tomcat application (configuration) with proxy settings. https://www.mkyong.com/nginx/nginx-apache-tomcat-configuration-example/ http://webapp.org.ua/sysadmin/setting-up-nginx-ssl-reverse-proxy-for-tomcat/

by itpp2012 - How to...

Re: How to disable https for specific URL? - 7 years ago

Example from nginx for Windows documentation, chapter 9. http { map $request_uri $requri { default 1; / 0; } …………………… server { listen 80; server_name www.mydomain.eu; root '/webroot/www.mydomain.eu’; if ($requri) { return 301 https://www.mydomain.eu$request_uri; }

by itpp2012 - Migration from Other Servers

Re: Help with securing "route" cookie - 7 years ago

Some workarounds: http://serverfault.com/questions/496749/in-nginx-reverse-proxy-how-to-set-the-secure-flag-for-cookies https://maximilian-boehm.com/hp2134/NGINX-as-Proxy-Rewrite-Set-Cookie-to-Secure-and-HttpOnly.htm

by itpp2012 - Nginx Mailing List - English

Re: Help with securing "route" cookie - 7 years ago

The 'secure' option is not working?

by itpp2012 - Nginx Mailing List - English

Re: When will NginX support Joomla SEF natively and automatically? - 7 years ago

https://docs.joomla.org/Enabling_Search_Engine_Friendly_(SEF)_URLs_on_Nginx

by itpp2012 - Ideas and Feature Requests

Re: When will NginX support Joomla SEF natively and automatically? - 7 years ago

You can do this already with try_files and some Lua code but all in all it's not recommended to do this because this will kill performance eventually due to the fact each access request also means a file access request which on its own is a blocking operation.

by itpp2012 - Ideas and Feature Requests

Re: Not able to stream more than 5 downloads at once. - 7 years ago

That should work, testing is the only way to find out.

by itpp2012 - How to...

Re: Nginx as a Reverse Proxy for OpenVPN (TCP 443) - 7 years ago

tmtben Wrote: ------------------------------------------------------- > I'm still trying to access several vpn servers by hostname using the > same port on the same host. > > I looked at the \conf\nginx-sslh-v1.0.conf file for Windows version > and here: > http://stackoverflow.com/questions/34741571/nginx-tcp-forwarding-based > -on-hostname/40135151 > > But I

by itpp2012 - How to...

Re: Not able to stream more than 5 downloads at once. - 7 years ago

The problem must be located in the backend (proxypass/fastcgi) where it limits the amount of clients.

by itpp2012 - How to...

Re: Nginx as a Reverse Proxy for OpenVPN (TCP 443) - 7 years ago

inzanez Wrote: ------------------------------------------------------- > Does SSLH support some sort of SNI then? Yes (ssl_preread)

by itpp2012 - How to...

Re: Nginx as a Reverse Proxy for OpenVPN (TCP 443) - 7 years ago

Sure, get our Windows version and look at \conf\nginx-sslh-v1.0.conf

by itpp2012 - How to...

Re: T3(Oracle) Over HTTP using Nginx - 7 years ago

Stream uses its own block: http { ......... } stream { ........ }

by itpp2012 - How to...

Re: Handing 15,000+ SSL certs and nginx configuration - 7 years ago

Your best bet is to go for Lua, reloading nginx conf is an option but can lead to problems when done too many times.

by itpp2012 - How to...

Re: NGINX directed logging - 7 years ago

This will work when used with Map but it won't work for what you're trying to do, the If applies to one logfile only. And you wanted to associate url's to logfiles which is what the documentation url I send shows.

by itpp2012 - Other discussion

Re: NGINX directed logging - 7 years ago

http://nginx.org/en/docs/http/ngx_http_log_module.html#access_log

by itpp2012 - Other discussion

Re: T3(Oracle) Over HTTP using Nginx - 7 years ago

You could use 'stream' or venture in to a Lua solution (openresty).

by itpp2012 - How to...

Re: Rewrite Vary header before stored in proxy_cache - 7 years ago

Lucas Rolff Wrote: ------------------------------------------------------- > > When using purge as availalbe in nginx-plus > (http://nginx.org/r/proxy_cache_purge), it takes care of removing all > cached variants, much like it does for wildcard purge requests. > Ahh cool! Nice one - maybe we'll be lucky that it gets to the open > source version one day ;) https://github

by itpp2012 - Nginx Mailing List - English