Re: Cache POST requests

2018-09-25 Thread Daniël Mostertman via nginx
   http_503;     proxy_cache_background_update   on;     ## End - FastCGI caching         proxy_pass http://[::1]:8553;     }     } } Kind regards, Daniël Mostertman smime.p7s Description: S/M

Re: Keeping your Nginx limit_* Anti-DDoS behind CloudFlare's servers

2016-09-14 Thread Daniël Mostertman
On 2016-09-14 02:02, c0nw0nk wrote: > I take it the module is a part of the Nginx.exe build and not > Nginx_basic.exe The fact that nginx comes with the module, and that it is available at build-time, does not mean it's built along. Parameter --with-http_realip_module must be passed to configure,

Re: No HTTPS on nginx.org by default

2016-08-23 Thread Daniël Mostertman
On 2016-08-23 15:31, Maxim Konovalov wrote: Let me repeat: nginx.org supports HTTPS. I don't think it adds any measurable security here but it's matter of religion but you can use it for free if you think it does. +1 Although it would be chique if nginx.org would advertise a HSTS-header so tha

Re: Dynamic Cert/Key Lookup

2016-06-23 Thread Daniël Mostertman
On 2016-06-23 09:39, Moritz Machner wrote: Hello, is it possible to dynamical get an cert/key from an database or an script for SNI? I want to dynamical add new domains with certs for an web app without changing the config oder restarting nginx: 1. get SNI request for domain example342343.

Re: nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied)

2016-02-04 Thread Daniël Mostertman
Hi Maddy, Op 4-2-2016 om 13:31 schreef smsmaddy1981: > [gvp@alt-cti03 (TEST1) /var/gvp/Nginx/nginx-1.8.0/sbin] ./nginx > nginx: [emerg] bind() to 0.0.0.0:80 failed (13: Permission denied) You edited the sudoers file to allow gvp to run programs as root. In order to do so, you have to put "sudo" in

Optional SSL on same port, or access control/log with stream protocol.

2015-12-07 Thread Daniël Mostertman
f the incoming connection are certainly known, and could therefore be logged? Kind regards, Daniël Mostertman ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Linux package for Debian "jessie" (8.x)

2015-04-09 Thread Daniël Mostertman
odifications, at least not for the mainline version. Currently I'm just using the wheezy line on jessie: deb http://nginx.org/packages/mainline/debian/ wheezy nginx Kind regards, Daniël Mostertman ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Linux package for Debian "jessie" (8.x)

2015-04-09 Thread Daniël Mostertman
odifications, at least not for the mainline version. Currently I'm just using the wheezy line on jessie: deb http://nginx.org/packages/mainline/debian/ wheezy nginx Kind regards, Daniël Mostertman ___ nginx mailing list nginx@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx

Re: https to http error "too many redirects"

2015-03-20 Thread Daniël Mostertman
Gena Makhomed schreef op 20-3-2015 om 12:05: On 20.03.2015 12:36, Dewangga Bachrul Alam wrote: You'll _never_ reach http request since you set HSTS configuration :) If you still want some http request on your web server, disable your HSTS directive. (see Daniel statement on previous email). 1

Re: https to http error "too many redirects"

2015-03-20 Thread Daniël Mostertman
You said that in your configuration, you have the following line: # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months) add_header Strict-Transport-Security max-age=15768000; This makes nginx send a HSTS header to browsers that visit the website. With this, you tell the bro

Re: Nginx configuration recovery

2015-03-17 Thread Daniël Mostertman
Styopa Semenukha schreef op 17-3-2015 om 20:35: On Tuesday, March 17, 2015 01:24:52 PM vinay bhargav wrote: Hi, Sorry for spamming but I'm in deep trouble. I've accidentally overwritten /etc/nginx/site-availabe/default with some xyz file. I'm using Ubuntu 14.04. The server is still running. Is

Re: Google dumps SPDY in favour of HTTP/2, any plans for nginx?

2015-03-17 Thread Daniël Mostertman
Maxim Dounin schreef op 17-3-2015 om 14:49: Hello! On Tue, Mar 17, 2015 at 09:49:04AM -0400, alexandru.eftimie wrote: Will there be support for http/2 for upstream connections? I can't seem to find anything about this online ( either SPDY or HTTP/2 for upstream connections ) No, and there are

Re: NGINX and mod_log_sql

2015-03-10 Thread Daniël Mostertman
Hi Fabián, You most likely put nginx in front of Apache. If that's the case, then chances are that you see the address in your logs that nginx contacts Apache from, instead of the user connecting to nginx. You might want to look into passing the IP of the visitor to your backend (Apache). A

Re: 'add_header' no longer allowed inside 'if', even though document says it is?

2015-02-18 Thread Daniël Mostertman
Hi again, And ugh, yet again realising what I did wrong right after hitting "send": Daniël Mostertman schreef op 18-2-2015 om 17:57: tl;dr: I want do have an add_header inside an if {}. nginx 1.7.10 won't let me. Because I didn't put the if inside a location. Ac

'add_header' no longer allowed inside 'if', even though document says it is?

2015-02-18 Thread Daniël Mostertman
Hi! I'm currently running 1.7.10 mainline straight from the nginx.org repository. We are hosting an application that needs to be accessible to Internet Explorer users, in addition to all other *normal* browsers. tl;dr: I want do have an add_header inside an if {}. nginx 1.7.10 won't let me.

Re: Debian repository Package list mismatch?

2015-02-05 Thread Daniël Mostertman
Hello again, With shame on my face I have to admit that I was looking at http://nginx.org/packages/mainline/debian/ and used the stable one instead in the sources.list. My sincerest apologies for bothering you all :) Daniël Daniël Mostertman schreef op 5-2-2015 om 16:29: Hi! We're

Debian repository Package list mismatch?

2015-02-05 Thread Daniël Mostertman
:Package: nginx nginx.org_packages_debian_dists_wheezy_nginx_source_Sources-Format: 3.0 (quilt) root@webtv4:/var/lib/apt/lists# Could you please update the package listing of the Debian repository so that we may enjoy the latest version with all of its wonderful features? :) Kind regards, Da