Show all posts by user
Page 1 of 44
Pages: 12345
Results 1 - 30 of 1297
Your taking the wrong approach, the nginx process should not have any write/modify rights anywhere other than log location(s), the same for php. Both should be process separated.
by
itpp2012
-
Nginx Mailing List - English
https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094
This may become a backdoor targeting nginx instances.
by
itpp2012
-
Nginx Mailing List - English
Use root set abs path, anything else will be relative to abs.
https://nginx.org/en/docs/http/ngx_http_core_module.html#root
by
itpp2012
-
How to...
server {
listen ....;
[...]
root 'h:/websites/www.yoursite.com';
location /items/ { # adds to root setting
try_files $uri $uri/ =404;
[...]
}
}
In php.ini you have stuff like,
open_basedir = H:/Websites/www.yoursite.com
doc_root = H:/Websites/www.yoursite.com
by
itpp2012
-
How to...
BMX Wrote:
-------------------------------------------------------
> The initial idea was this: MySQL client initiates SSL connection.
> Instead of direct connection with MySQL server, it connects to Nginx
> stream proxy with SSL and then Nginx redirects plain MySQL protocol to
> MySQL server. This works for other services like MQTT, etc.
If SSL from MySQL client <> how n
by
itpp2012
-
How to...
BMX Wrote:
-------------------------------------------------------
> OK, but this does not work. It seems that start of MySQL SSL handshake
> is not standard and cannot be replaced by nginx SSL session.
From the client side you access 127.0.0.1:3306 which is captured by something like stunnel, stunnel connects to your SSL terminating nginx (port forwarding mysql traffic), nxing passes
by
itpp2012
-
How to...
ssl_protocols TLSv1.2 TLSv1.3;
and all ssl_* settings should be part of your server {} blocks, not at http {} block level.
by
itpp2012
-
Other discussion
map $http_user_agent $browser_id {
default 1;
~Mozilla/.*Chrome/ 0;
~Mozilla/.*Safari/ 0;
~Mozilla/.*Edg/ 0;
}
[...]
location / {
if ($browser_id) { return 403; }
by
itpp2012
-
Nginx Mailing List - English
dimasites Wrote:
-------------------------------------------------------
> Hi all!
>
> We're laggards now! Crome removed HTTP/2 Server Push support and we
> lost about 30% page load time!
> Pruflink: https://developer.chrome.com/blog/removing-push/
>
> We need 103 Early Hints emergency!
Loosing loadtime without Push or EH indicates a serious issue with your websit
by
itpp2012
-
Ideas and Feature Requests
If this 'default http://XYZ.cloudfront.net;' is also for EN, add such line explicitly,
~en http://XYZ.wpengine.com/;
by
itpp2012
-
How to...
No, HTTP is not the same as Stream (raw).
by
itpp2012
-
How to...
Only with the Stream module:
http://nginx.org/en/docs/stream/ngx_stream_core_module.html
by
itpp2012
-
How to...
Roman Arutyunyan Wrote:
-------------------------------------------------------
> We are open for feedback about QUIC in Stream, application protocols
> and the features you expect in Stream.
Hi Roman,
Maybe a dead mouse but I would expect this to work in a QUIC tls stream:
map $ssl_preread_server_name $sslhservice {}
by
itpp2012
-
Nginx Mailing List - English
server {
[...]
location / {
auth_basic "User/Pass needed";
auth_basic_user_file access.txt;
proxy_pass http://127.0.0.1:8080;
}
[...]
by
itpp2012
-
How to...
An easy Lua based solution designed 7 years ago and still works today for any OS
https://forum.nginx.org/read.php?2,257019,257019#msg-257019
https://github.com/bedowi/nginx/tree/master/conf/EBLB
by
itpp2012
-
Nginx Development
>> proxy_pass http://0.0.0.0:2300;
by
itpp2012
-
How to...
@Igor Sysoev, thanks for all your work and a wonderful product, we all hope you enjoy whatever you do next.
by
itpp2012
-
Nginx Mailing List - English
https://stackoverflow.com/questions/65716736/how-to-get-a-part-of-url-nginx-rewrite-lua
by
itpp2012
-
Other discussion
Ssh does not pass SNI, and thats the only difference with https, after (or before) you could split for http but clients will get confused.
Ea. you have to use a mix of $ssl_preread_protocol and $ssl_preread_server_name to get all 3 working.
by
itpp2012
-
How to...
Technically that should work, but you are mixing 2 different types of traffic on a none standard port and you don't have a ssh redirect.
by
itpp2012
-
How to...
alen.loncaric Wrote:
-------------------------------------------------------
> But i don't know how to combine SSH, HTTPS(TLS) and HTTP on same port?
> Is this even possible ? So I have one "service port" for serving iot
Possible but not going to work as http is not encrypted.
by
itpp2012
-
How to...
Your google keywords for today are: Lua, Redis, Openresty.
by
itpp2012
-
How to...
Within the location block you will see:
index index.html index.htm;
There you can edit/add whatever you like.
by
itpp2012
-
Other discussion
Not possible with stock nginx but you can with Lua (openresty), here we use it to map any.dom.com where 'any' has aliases stored in a cached database which gets refreshed daily.
by
itpp2012
-
How to...
Page 1 of 44
Pages: 12345