Tag Info

New answers tagged

0

Every Directive lists the context in which it is valid. In other words where it is allowed to be used. The context can be any combination of: s - server config This means that the directive may be used in the server configuration files (e.g., httpd.conf), but not within any <VirtualHost> or <Directory> containers. It is not allowed in ...


0

Notwithstanding your point about security, the more I think about it, the more convinced I am you can't wait until later. The risk, if you do, is that someone will brick your router with the latest zero-day. Add to your list: Change the router password before you plug it in to the network. Use as long a password as the router will take. Check the CVE ...


3

There is -G option in recent openssh, which behaves in similar way as -T on server side. -G Causes ssh to print its configuration after evaluating Host and Match blocks and exit. By calling ssh -G host you will get options used for connecting to specific host, which can be helpful for debugging conditional matches in ssh_config. Also setting more ...


1

Change the first part: ".*\?(.*)$" => "/index.php?$1", to "^/(?!api[/]).*\?(.*)$" or "^/(?!api(?:$|/)).*\?(.*)$"


0

I've figured it out and I feel a little bit silly for not picking this up sooner. So for anyone that uses AWS::CloudFormation::Authentication path, the solution of course is: Make sure your BUCKET policy allows your aws-elasticbeanstalk-ec2-role. DOH!! It should look something like this: { "Id": "Policy1111Blah", "Version": "2012-10-17", ...


2

You are doing it wrong. How it should be: server { listen 192.168.200.173; # public IP address of your server server_name example.net location / { proxy_pass http://example.net; proxy_connect_timeout 900; proxy_send_timeout 900; proxy_read_timeout 900; ...


0

So I asked the folks on the Freenode #nixos IRC channel, and they led me to this answer. I need to create a ~/.nixpkgs/config.nix file. In that file, I need to create a package collection using the buildEnv function and install it with nix-env. Installing ad-hoc packages using nix-env does not update ~/.nixpkgs/config.nix, so for my use case I would want ...


2

Normally you would have a separate file for each zone but if you specifically want to ensure you have the exact same set of records in multiple zones it is, under certain conditions, possible to have multiple zones backed from the same file. The zone files must only be accessed in a read-only fashion by named (no dynamically updated zones, no slave zones, ...


2

In named.conf.local, one line per hostname zone "test.com" { type master; file "/etc/bind/zones/test.com.db"; }; zone "test.info" { type master; file "/etc/bind/zones/test.info.db"; }; then, create one .db file per new hostname (domain) with all the DNS records in it for that particular hostname.


2

It depends on your os. On my fedora 21 the man page for exportfs says it also reads all files in directory /etc/exports.d/.


0

I'm unsure if this 100% correct, since I never found the documentation describing this feature being limited to local users, but apparently vsftpd doesn't allow anonymous users to write in their chroot directory with the allow_writeable_chroot=YES directive. You have to either create a sub-folder with write permissions for anonymous users or allow local ...


1

As far as I understand the way it works, the config scope is global and the contents of a given section (input, filter, output) are all basically joined together in the "final" configuration. So in your example, yes, the two pipelines above would equate to the simplified config below, with the only difference that you'd have two elasticsearch outputs, and ...


1

You can see your main problem here: [--] Total buffers: 208.0M global + 4.5M per thread (400 max threads) As per your configuration, every thread can take up to 4.5 MB RAM and there's a maximum of 400 threads: max_connections = 400 Put your max_connections down to 100 or below to lower your maximum memory usage.


0

What are you trying to achieve? Where SQL is concerned you should give it as much RAM as you can, it will use it for caching indexes, and in the case of InnoDB, the data pages as well which means better performance all round and less read from disk for repeat queries. I am not 100% sure on this but I think the MyISAM engine only caches indexes to memory, ...


1

Use your firewall to reject (not drop) UDP packets from squid. It'll soon get the message. I do wonder why on earth you'd want to do this, though.


0

Remember that if you are using NetworkManager (you almost certainly are) then the network configuration for each interface will override the firewalld configuration. To set the firewall zone for an interface in this circumstance, be sure to add it to, e.g., /etc/sysconfig/network-scripts/ifcfg-eno1. ZONE="external"


1

In versions prior openssh-6.8 there is no way except -Q option, which is available only for [-Q cipher | cipher-auth | mac | kex | key]. You can get only some basic information about parsing ssh config during login with -v switch. In openssh-6.8 and newer, there is switch for ssh, -G, which does the same as -T for sshd.


1

Why use try_files if you never have any files you want to try and you always want to pass to your WSGI handler? Did you try simply making uwsgi_pass the root location? location / { include uwsgi_params; uwsgi_pass unix:$document_root/myapp.sock; } You can combine it with a static location/static server name that serves files out of a regular ...


0

Well, the results for a search for inurl:"httpd/CHANGES_2.2" look like CHANGES_2.2 for the Apache web server made its way to some other sites: http://supergsego.com/apache/httpd/CHANGES_2.2 It looks like most of these changes fix bugs, add new directives, or remove security problems. The changes that are not bugfixes or security patches from Apache ...


0

I was using a virtual machine to test the vpn, that was a mistake, since my modem had no physical interface for the virtual machine, it assumed it was on port 2 and gave dmz access to port 2 while my physical computer containing the virtual machine was on port 1, after wrtitting my virtual machine to a physical unit, and configuring DMZ the vpn started ...


1

From your comments it sounds like you are running two copies of nginx. Here's how you can troubleshoot: service nginx stop ps auxwww|grep nginx # is it still running? Once you have successfully stopped nginx, try checking locally using curl instead of using Chrome or Safari. This will bypass any caches/proxies and give you a better low level insight into ...


0

These commands should fix the permission problem: chown $USER ~/.ssh/config chmod 644 ~/.ssh/config Prefix with sudo if the files are owned by different user (or you don't have access to them). If more files are affected, replace config with *. In man ssh we can read: Because of the potential for abuse, this file must have strict permissions: ...



Top 50 recent answers are included