[BlueOnyx:23268] Re: redirect to https

2019-09-24 Thread Brent Epp

Ah - thanks for the correction, no more editing include files!

 - Brent

On 2019-09-24 13:57, Michael Stauber wrote:

Hi Meaulnes,


yeah I tried several .htaccess configurations, but always got the 500
Internal Server Error error...

In order to allow these kind of .htaccess stuff you need to tweak Apache
a little, but you can do so via the GUI:

Under "Server Management" / "Network Services" / "Web" tick everything
but "SymLinksIfOwnerMatch" under "Options" and under "AllowOverride"
tick everything.

Save the changes and the .htaccess should work, provided it has no
errors in it.



___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23267] Re: redirect to https

2019-09-24 Thread Michael Stauber
Hi Meaulnes,

> yeah I tried several .htaccess configurations, but always got the 500
> Internal Server Error error...

In order to allow these kind of .htaccess stuff you need to tweak Apache
a little, but you can do so via the GUI:

Under "Server Management" / "Network Services" / "Web" tick everything
but "SymLinksIfOwnerMatch" under "Options" and under "AllowOverride"
tick everything.

Save the changes and the .htaccess should work, provided it has no
errors in it.

-- 
With best regards

Michael Stauber
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23266] Re: redirect to https

2019-09-24 Thread Brent Epp

There's no option in the GUI, unfortunately.

I'm not sure if it's a default from Apache or BX, but you need to add 
this to the site's .include file (/etc/httpd/conf/vhosts/siteX.include)



AllowOverride All
Options All


Do `ls -l /home/sites | grep www.yourdomain.com` to get the 
corresponding numbers for XXX and Y.


You could further limit the AllowOverride and Options directives you 
need, but this is what works for me since I'm the only siteadmin on my 
vhosts.


After this, you'll need to restart apache to put it into effect: 
`systemctl restart httpd`


Then you should be able to add rewrites (and more) in .htaccess

 - Brent

On 2019-09-24 12:15, Meaulnes Legler @ MailList wrote:

thanks Brent!

yeah I tried several .htaccess configurations, but always got the 500 
Internal Server Error error...


with your approch, /var/log/httpd/error_log reports:

/home/.sites//web/.htaccess: Options not allowed here

same with AllowOverride All, for instance.

I'm a bit scared to go into the site's Apache configuration in 
/etc/httpd/conf/vhosts...


Any other idea? I thought there is an option to click in the GUI?

Thank you and best regards

(ツ) Meaulnes Legler
Zurich, Switzerland.
+41¦0 44 260-1660

On 24.09.19 17:49, Brent Epp wrote:
You can achieve this quite simply with an .htaccess in the document 
root:


Options +FollowSymLinks
RewriteEngine on
RewriteBase /
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

This requires mod_rewrite for Apache, which I believe is standard 
with BlueOnyx.


 - Brent

On 2019-09-24 06:14, Meaulnes Legler @ MailList wrote:

hello

the Let's Encrypt feature is really cool and simple, 
https://mysite.tld comes up right away.


what I'm missing is the automatic redirect from http:// to 
https://... If one enters http://mysite.tld it stays in the insecure 
protocol instead of changing to https://mysite.tld


how can I achieve this?

Thank you and best regards

(ツ) Meaulnes Legler
Zurich, Switzerland.
+41¦0 44 260-1660




___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx




___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23265] Re: redirect to https

2019-09-24 Thread Meaulnes Legler @ MailList

thanks Brent!

yeah I tried several .htaccess configurations, but always got the 500 Internal 
Server Error error...

with your approch, /var/log/httpd/error_log reports:

/home/.sites//web/.htaccess: Options not allowed here

same with AllowOverride All, for instance.

I'm a bit scared to go into the site's Apache configuration in 
/etc/httpd/conf/vhosts...

Any other idea? I thought there is an option to click in the GUI?

Thank you and best regards

(ツ) Meaulnes Legler
Zurich, Switzerland.
+41¦0 44 260-1660

On 24.09.19 17:49, Brent Epp wrote:

You can achieve this quite simply with an .htaccess in the document root:

Options +FollowSymLinks
RewriteEngine on
RewriteBase /
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

This requires mod_rewrite for Apache, which I believe is standard with BlueOnyx.

 - Brent

On 2019-09-24 06:14, Meaulnes Legler @ MailList wrote:

hello

the Let's Encrypt feature is really cool and simple, https://mysite.tld comes 
up right away.

what I'm missing is the automatic redirect from http:// to https://... If one 
enters http://mysite.tld it stays in the insecure protocol instead of changing 
to https://mysite.tld

how can I achieve this?

Thank you and best regards

(ツ) Meaulnes Legler
Zurich, Switzerland.
+41¦0 44 260-1660




___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx




___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23264] Re: CentOS 8 is available for download

2019-09-24 Thread Michael Stauber
Hi Dirk,

> Michael, can you do the final work for the launch of 5210R now?

Yeah, I started last night. Am currently in the process of creating a
build environment for 5210R.

-- 
With best regards

Michael Stauber
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23263] CentOS 8 is available for download

2019-09-24 Thread Dirk Estenfeld
Hello,

CentOS8 is available now:
http://isoredirect.centos.org/centos/8/isos/x86_64/CentOS-8-x86_64-1905-dvd1
.iso

Michael, can you do the final work for the launch of 5210R now?

Best regards,
Dirk

 
blackpoint GmbH – Friedberger Straße 106b – 61118 Bad Vilbel 



smime.p7s
Description: S/MIME cryptographic signature
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23262] Re: redirect to https

2019-09-24 Thread Brent Epp

You can achieve this quite simply with an .htaccess in the document root:

Options +FollowSymLinks
RewriteEngine on
RewriteBase /
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

This requires mod_rewrite for Apache, which I believe is standard with 
BlueOnyx.


 - Brent

On 2019-09-24 06:14, Meaulnes Legler @ MailList wrote:

hello

the Let's Encrypt feature is really cool and simple, 
https://mysite.tld comes up right away.


what I'm missing is the automatic redirect from http:// to https://... 
If one enters http://mysite.tld it stays in the insecure protocol 
instead of changing to https://mysite.tld


how can I achieve this?

Thank you and best regards

(ツ) Meaulnes Legler
Zurich, Switzerland.
+41¦0 44 260-1660




___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23261] redirect to https

2019-09-24 Thread Meaulnes Legler @ MailList

hello

the Let's Encrypt feature is really cool and simple, https://mysite.tld comes 
up right away.

what I'm missing is the automatic redirect from http:// to https://... If one 
enters http://mysite.tld it stays in the insecure protocol instead of changing 
to https://mysite.tld

how can I achieve this?

Thank you and best regards

(ツ) Meaulnes Legler
Zurich, Switzerland.
+41¦0 44 260-1660




___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23260] Re: Bug in todays update of base-ssl-glue

2019-09-24 Thread Michael Stauber
Hi Tobias,

> "Syntax error on line 7 of /etc/httpd/conf.d/acme_sh.conf:
> 
> Invalid command ' not included in the server configuration".
> 
> As there is an apache 2.2 installed on the system (5208R) I commented
> out the lines not needed and started apache again.

I just checked and although base-ssl was updated three days ago that
change didn't make any modifications to acme_sh.conf. In fact that file
has been unchanged for the last eight months:

https://devel.blueonyx.it/trac/browser/BlueOnyx/5207R/ui/base-ssl.mod/glue/httpd/acme_sh.conf

However: The IfVersion checks are indeed a bit problematic on Apache 2.2
and I've recently run into cases where certain Apache configurations
would not run with it at all.

To play it safe I just rolled up and published another base-ssl for
5207R/5208R which removes the IfVersion checks and just uses Apache 2.2
provisions.

-- 
With best regards

Michael Stauber
___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx


[BlueOnyx:23259] Re: MX records to point to another server.

2019-09-24 Thread Steve Howes

On 2019-09-24 06:27, Fungal Style wrote:

I was selecting to disable here:
Site Management>(vsite)>Services>Email

So not sure where I am going wrong...


If you disable it you're actively rejecting mail to those domains. Just 
leave it enabled, but empty the list of domains, it'll just relay then.

___
Blueonyx mailing list
Blueonyx@mail.blueonyx.it
http://mail.blueonyx.it/mailman/listinfo/blueonyx