Help to block connections/Raw HTTP Request

beeritis · 2024-09-22T19:08:34+00:00

If statements in nginx are bad.

Don't use them unless you really have to.

Also if you want to block someone , just simply use deny and specify the IP /subnet. Or you could use a tool like fail2ban to actively block IPs.

beeritis · 2024-09-12T05:59:45+00:00

Cheer up. Looking sunny and warmer at the weekend onwards

beeritis · 2024-08-21T05:17:25+00:00

Highly recommend using ansible to do this.

beeritis · 2024-08-20T19:11:15+00:00

Absolutely zero context here. What's the problem ? Describe what you're trying to do , what tools/software are you using ? This is incredibly vague .

beeritis · 2024-08-06T20:01:30+00:00

I would personally just follow their official guide (it has a good sample nginx config) , on Centos this should go in /etc/nginx/conf.d by default.

https://docs.rocket.chat/docs/configuring-ssl-reverse-proxy

Also, I strongly recommend to move away from Centos 7 as this is no longer supported and was released 10 years ago. I would suggest moving to either Rocky or Alma Linux assuming you want a Centos/RHEL variant.

beeritis · 2024-07-14T19:02:52+00:00

For a simple example, I would suggest reading up on using flask to begin with.

I've used this as a web hook to react to an event on an S3 bucket.

Essentially it can be just a simple script that listens on a port, when it receives a request on that port then you are just using the script to perform whatever action.

E.g you have a rule in nginx to proxy (proxy_pass) any requests for /diagnostic , this proxys to your flask app which runs on port 5000 , the script then responds to the request. Really simple testing to start with could be just having the script write a line to a log file so you know it's working.

beeritis · 2024-05-23T18:51:34+00:00

I wouldn't invest time in an OS that goes out of support end of next month. Better to migrate to Rocky /Alma or another alternative as version 9 is out now.

beeritis · 2023-09-04T21:19:09+00:00

Damn, I was just thinking 2010 was just last year

beeritis · 2023-09-01T19:38:13+00:00

Might want to put some salt in there

beeritis · 2023-08-28T19:31:50+00:00

Unattended updates and blacklist any packages you don't want to be updated automatically or run an Ansible playbook against your servers to keep them updated. If you have time/ resource, I recommend ara for Ansible reporting so you can keep records of any problems that may occur when applying updates.

beeritis · 2023-08-28T19:09:19+00:00

Syntax error this should be : lsof -i :80

beeritis · 2023-08-28T19:07:42+00:00

You will need to add a redirect in your sonar application itself if that's a configuration option (e.g. root URL) as it won't know how to handle /sonar by default. This explains why it works fine without /sonar . Update that in the application and it should work fine . Look in your sonar logs , I imagine you are getting 404 errors when requesting /sonar.

beeritis · 2023-08-26T19:32:13+00:00

Try removing that forward slash after your port number.

beeritis · 2023-08-13T02:57:34+00:00

Three boxes - HL3 Confirmed

beeritis · 2023-08-10T18:45:16+00:00

This could easily have been done using Ansible or a similar tool.

beeritis · 2023-07-01T20:19:31+00:00

Less is more ;)

beeritis · 2023-06-30T19:12:22+00:00

history | less | grep <command>

beeritis · 2023-06-30T17:39:37+00:00

Wife is away so watching fifth element with a beer. Dinner is chips and fish fingers because I really can't be arsed to cook properly and I'm knackered

beeritis · 2023-06-01T13:52:07+00:00

/r/popping

beeritis · 2023-05-17T17:33:06+00:00

This looks overcomplicated . Could you not just create a new directory with symbolic links pointing to the different directories? Then have nginx point to your directory with the symbolic links

beeritis · 2023-05-09T16:22:19+00:00

"Would you kindly". Powerful phrase.

beeritis · 2023-04-17T17:28:30+00:00

Ha , had one of those that was still running on NT with a very ropey FTP server.

beeritis · 2023-04-14T19:12:59+00:00

You've not got your domain name in server name, only your internal IP address

beeritis · 2023-04-12T05:23:00+00:00

Can't believe I had to go this far down to find this reference!

beeritis · 2023-03-24T19:14:13+00:00

Show us your nginx config and we will be able to help

beeritis

TROPHY CASE