Questions tagged [configuration]
Configuration is a general term that can refer to the arrangement of functional units according to their nature and characteristics. Also, it can refer to software configuration which more suitable for server-related topics.
2,707
questions
1
vote
1
answer
25
views
What does `static:rest` in the Postfix configuration mean?
In the Postfix configuration line (main.cf)
smtp_sasl_mechanism_filter = !ntlm, static:rest
what is the meaning of “static:rest”? While static: is explained in Postfix’ documentation as yielding the ...
- 288
0
votes
0
answers
45
views
Sudo validates command line arguments via regular expression incorrectly
Let's say we have two users: alex and alexa. We want to allow alex to execute htop as root in order to see disk usage stats, but we do not want them to see other users' processes which root can do. ...
- 1
1
vote
0
answers
23
views
Docker Postfix Admin bulk aliases, custom maps, and custom config files
I'm in the process migrating my bare metal postfix implementation over to docker to essentially upgrade my old box to a more docker/vm-centric server and hopefully add virtual domain support. I'm ...
- 11
0
votes
0
answers
71
views
Config Wizard error in Rspamd on dkim step in Debian Bullseye
Using fresh Debian 11.7 installation I’m trying to setup RSpamd using configwizard, but in the last step of building the private key I got the following error:
Do you want to create privkey /var/lib/...
- 101
0
votes
1
answer
38
views
Aide Does not Write aide.db After Successful Scan
I have installed aide on Ubuntu 22.04 and left the default configuration.
After it ran, I got an email report that indicates that everything went smooth. See the report below.
The /var/lib/aide/aide....
0
votes
1
answer
67
views
host not found in "$server_listen_port" of the "listen" directive
With the following nginx config excerpt:
map $server_name $server_listen_port {
default 443;
localhost. 80;
localhost 80;
}
server {
server_name "${ENVIRONMENT_SERVER_NAME}.&...
0
votes
0
answers
68
views
One nginx config for both local dev and production
I have a website with the following architecture:
Many services running as part of a docker stack
Fronted by single nginx as reverse proxy
nginx does HTTPS termination with certbot
Developed locally ...
0
votes
1
answer
94
views
Disable TLSv1.0 and TLSv1.1 when generating certificates using openssl 1.1.1
I am struggling to implement a feature for my certificates. I am generating my certificates with OPENSSL 1.1.1.
I want to allow only TLSv1.2 and TLSv1.3. The other protocols should not be possible (...
0
votes
0
answers
50
views
In NGINX, is there a directive to limit the time it takes to establish new client connections?
In Nginx there's the client_header_timeout directive that sets a timeout for receiving the complete headers of an http request from a client. In the docs it is not specified if this timeout includes ...
- 121
0
votes
1
answer
48
views
BIND "notify" packages over NATted networks possible?
I got a very specific issue: We got two DNS servers with networks being NATted to each other. Example: DNS master has 192.168.1.1 and it's NATted to another subnet 192.168.2.x using the gateway 192....
- 1
0
votes
0
answers
33
views
Postfix - how can I post incoming email in a different inbox
I have successfully created 3 instances of postfix in kubernetes. Each instance checks if the user exists, passes the mail on to dovecot through the LMTP(rotocol) and dovecot saves the email in the ...
- 71
0
votes
1
answer
56
views
Apache2 returns 403 for static file request on root
On my new Apache/2.4.52 (Ubuntu) Server installation, the SSL configuration in general runs well, having Tomcat apps proxied and working.
Still, the static file configuration for root does not work. ...
- 101
1
vote
1
answer
60
views
How to configure fcgid.conf for Wt (Witty) C++ Web Application?
I am trying to configure fcgid.conf file for Wt (witty-web toolkit) for apache2 2.4 on Ubuntu 23. I found a config file for FastCGI (not fcgid) and convert commands to fcgid ones using apache2 web ...
- 13
0
votes
1
answer
184
views
Reverse proxy returning 307 (redirect) when it shouldn't be
I'm trying to setup a reverse proxy to an application that I'm building. The application is split into two docker images. First is a web UI, which can be reached via https://example.com/
The second ...
- 103
0
votes
1
answer
217
views
Make nginx accept requests only from a specific server
I want to configure an nginx server to accept HTTP requests only from a specific server.
I am not sure if this should be accomplished through the listen directive, or by using allow/deny rules in ...
- 103
1
vote
1
answer
190
views
What is the INPUT_direct chain in firewalld?
In many firewalld config examples I see mention of the normal INPUT iptables chain, as well as one named INPUT_direct.
e.g.
$ sudo firewall-cmd --direct --add-rule ipv4 filter INPUT_direct 0 \
# etc....
- 898
0
votes
0
answers
10
views
firewalld config without interface declaration
In my custom firewalld zone file, I defined various ports, and this:
<interface name="eth0"/>
The firewall works as expected, whether I include that or not.
Is it strictly necessary? ...
- 898
0
votes
0
answers
241
views
DNS Suffix List is getting weird on Windows Server 2022
I had a look on my Windows Server 2022 template and figure out the following things:
If I run ipconfig /all, i can see there's 'test.local' as Global Suffix Search List and there's gael-test.net as ...
- 343
0
votes
2
answers
345
views
Redis Stack Server - Cannot Change Data Dir (Docker/Kubernetes)
I am trying to get redis up and running in a Kubernetes environment. I’ve done many tutorials, read the documentation, etc. etc. I need to have the .rdb file and the .aof file(s) saved in a Persistent ...
- 31
2
votes
2
answers
248
views
How do I configure a virtual server in nginx to listen only on IPv6
For my website I need effectively 3 domains:
example.domain: accessible via both IPv4 & IPv6
ipv4.example.domain: accessible via IPv4 only
ipv6.example.domain: accessible via IPv6 only
I tried ...
- 292
0
votes
1
answer
70
views
Match different subpath in SSH config
I need to set a configuration for SSH keys related to the same domain but different subpath.
I'd like to have something like:
Host domain.com/sub1
Hostname domain.com/sub1
...
- 101
0
votes
0
answers
75
views
Apache Server Config Set Headers Conditionally
I am trying to set cache age for 200 responses and no cache for rest of the calls.
I tried below config, which works fine when 200 OK response comes up and I can see max-age=800 in headers
But for ...
- 101
0
votes
0
answers
16
views
Reordering Apache Output Filters
Is there a way to reorder the output filters for Apache 2.4? I am forced to use something like this because DEFLATE runs before SUBSTITUTE:
AddOutputFilterByType INFLATE;SUBSTITUTE;DEFLATE text/html
(...
- 111
0
votes
2
answers
117
views
How to tell opendmarc to stop using opendmarc-import?
I'm running opendmarc with postfix under Debian linux. I did the standard Debian apt-based install of opendmarc, but later, I realized that it is apparenly configured by default to make use of ...
- 222
0
votes
0
answers
86
views
Nginx Server Block Not Redirecting Properly
I've just recently swapped over to nginx from apache2, and it seems to be handling load times much better. However, I've now lost access to my forum subdomain. Whenever I goto my forum's subdomain, it ...
0
votes
0
answers
196
views
Apache Redirect HTTP To HTTPS Not Working
I am trying to force redirecting all HTTP traffic to HTTPS using my httpd.conf file on my Apache server.
Expected behaviour: When users visit http://example.com, they should get redirected to https://...
- 11
0
votes
0
answers
247
views
Stuck at Verify kubectl configuration
I'm using Mac Terminal and I'm stuck at the "Verify kubectl configuration", whereas when I run this command --> kubectl cluster-info as the result:-
E0331 23:39:48.601633 27402 memcache....
- 1
0
votes
0
answers
312
views
Unable to connect to local Fedora Samba share. What am I doing wrong?
New to networking. Created a samba share in Fedora Server. This samba share is supposed to connect to a raid0 pool (2x4TB WD Red) that I created. The mount point of the raid0 pool is /raid0pool.
The ...
1
vote
1
answer
401
views
Not getting StrongSwan IPsec to run: received netlink error: Network is unreachable / unable to install source route for [...]. Getting nuts already
I am trying to set up an ipsec tunnel with strongswan, used some tutorials for that and all went so far but there is no actually communication going trough the tunnel. The tunnel is established, but ...
- 111
0
votes
0
answers
139
views
Using spamassassin + dovecot/postfix, how do you block messages from a blacklisted address instead of route to junk folder?
I have set up an email server using a wizard tool, although I was hoping to alter the default behavior configuration such that when I receive emails from addresses I explicitly blacklist, those ...
- 113
0
votes
0
answers
168
views
pread() returned only xxx bytes instead of yyy in config file [SOLVED]
I have a little question. I already found a solution, but I want to know the reason for the error.
So, I have a main config file (nginx.conf) that includes vhost configs.
Example hierarchical tree:
├──...
0
votes
1
answer
178
views
lighttpd: ajax request prints the content of cgi script instead of running it
I am using lighttpd version 1.4.55 within an ARM environment. I created an HTML pages in which there is a button used to download some json data. This button trigger a submit form that calls a cgi ...
- 1
0
votes
1
answer
112
views
How to make a mail server spam "proof"
I work for a German company that sends several thousand emails to our customers every day. Our employees send their emails via Microsoft 356, but the system does not use a mail server and sends emails ...
- 3
0
votes
0
answers
216
views
wireguard VPN configuration
I have a wireguard vpn configuration on my router, the ports are open and the server configuration I think is correct.
however when I want to connect a client, it only shows me this error:
[TUN] [...
- 1
0
votes
4
answers
668
views
rspamd Whitelis/Blacklist per domain before filtering
since I'm sadly not getting any responses in rspamd's GitHub discussion board, maybe someone here has experience with rspamd prefilter mode.
I'm trying to get rspamd to accept any mail coming from a ...
- 111
1
vote
1
answer
3k
views
AH01114: HTTP: failed to make connection to backend: localhost
I know some of you might think that its a little bit off topic here, but am not sure whether its fault of server OR fault of my config file, so...
I made React.js project , but it needs server side ...
0
votes
0
answers
171
views
How to enable sudo and disbale sudo su on ubuntu 20.04
We need to capture user commands, on logs now the user has Sudo access. we have planned to disable sudo and they need to use sudo before the command. How to enable sudo and disable sudo su on ubuntu ...
- 1
0
votes
0
answers
143
views
selinux file context precendence, logrotate and httpd
UPDATE:
figured out the issue, its with my fcontext path expression
I have to use
semanage fcontext -a -t logrotate_tmp_t "/etc/httpd/logs(./*)?"
instead of
semanage fcontext -a -t ...
0
votes
1
answer
98
views
What is the proper way to configure Tripwire to handle automatic log rotations?
I installed tripwire by following this online documentation on a fresh ubuntu 22.x server. I followed the above documentation exactly and did not add any custom mods to either the cfg or the pol ...
0
votes
1
answer
514
views
"server" directive is not allowed here in /etc/nginx/nginx.conf:1
I have an NGINX docker container with a an nginx.conf file i copy into /etc/nginx/nginx.conf. When i start the container/server, i get the following error:
2023/02/15 16:24:10 [emerg] 1#1: "...
- 101
0
votes
1
answer
462
views
How to confirm openssl is reading its config file
Is there a simple way of changing the openssl config file and confirming with openssl command line parameters to confirm that it is reading the configuration file? (I'm trying to confirm that the ...
- 1
0
votes
0
answers
114
views
Apache2 won't start even with unit file update post reboot
Issue : after server reboot apache2 won't automatically start (have to manually ssh and start via systemctl which starts without any issue)
Error message:
Feb 08 05:53:46 domain1_test.com systemd[1]: ...
- 1
3
votes
2
answers
856
views
Nginx is not handling auth_request before if statement
It's probably easiest to just show by example where I'm hitting issues, so I'll jump right in...
This snippet will work as-is for Nginx with rewrite/auth modules enabled. So hopefully this issue is ...
- 531
0
votes
2
answers
195
views
Where is Defender CSP in Windows configuration designer?
I'm trying to create a provisioning package for test PCs and I'm having hard time finding Defender CSP in Windows Configuration Designer.
at first I downloaded Windows Configuration designer from ...
user995120
0
votes
1
answer
115
views
Apache2 Default HTTPS 443 Vhost
I'm currently trying to make a default vhost for HTTPS to block traffic from unauthorized domains. However, when I define a default 443 vhost, ALL other HTTPS vhosts inherit this as well and prevents ...
1
vote
0
answers
103
views
2 Samba Configs: "config file" Parameter Fails
I am attempting to create 2 separate shares using 2 very different configs. I can get both going individually from the same system, but not together. Regretfully, I still have some legacy systems ...
- 23
0
votes
1
answer
154
views
Can I specify an alternate port when importing a Data Protector Client
I want to import a Windows Data Protector client that uses (legacy) port 5555 into a Cell Server running 11.02.
When I try it, I'm offered the certificate to accept, but the I get an [12:1625] Import ...
- 366
0
votes
0
answers
24
views
Prometheus Metrics - Multiple boxes in one file
My existing custom exporter for Prometheus generates:
this_metric_one 10.3
this_metric_two 11.4
Currently this is running on two boxes, Box_A and Box_B. INSTEAD, I want to have Box_C query both (...
- 101
1
vote
1
answer
328
views
How to add nginx configurator group?
I want o create a user group that has permissions to create/edit/view nginx configs without sudo permissions, but I heve no idea how.
Creating a normal user group and setting owner:group to same-owner:...
0
votes
0
answers
10
views
How to add "Kind" settings to "/.kube/config" file?
I have installed kubeadm previously and configured it using kubeadm --init and the configs are inside /.kube/config file by now. I recently installed kind and want to know how should I configure it?
...
- 377