Re: SEO gone mad...

2015-10-13 Thread Gena Makhomed
On 13.10.2015 1:14, steve wrote: It's not me that wants this idiocy... it's the Snake Oil salesmen! I'm apparently trying to do something that apache can, but so far, nothing has worked - everything just ends in a loop. info from Google: http://googlewebmastercentral.blogspot.fr/2010/04/to-s

Scaleable NGINX Configuration

2015-04-01 Thread Gena Makhomed
On 02.04.2015 0:12, Daniel Miller wrote: I have a "standard" location block for my php directives... # Pass all .php files onto a php-fpm/php-fcgi server. location ~ \.php$ { try_files $uri =404; fastcgi_split_path_info ^(.+\.php)(/.+)$; include fastcgi_params; fastcgi_index index.p

Re: Preferred method for location blocks

2015-04-01 Thread Gena Makhomed
On 01.04.2015 23:55, Daniel Miller wrote: What is the difference between: location /admin { } vs. location ~ /admin(/.*) { } The first seems cleaner, and I assume runs faster - but do they process differently? Yes, they process differently. http://nginx.org/en/docs/http/ngx_http_core_mod

Re: proper way to redirect from http to https w/query string notifier

2015-03-24 Thread Gena Makhomed
On 24.03.2015 17:33, Jonathan Vanasco wrote: i need to redirecting from http to https, and append a "source" attribute for tracking (we're trying to figure out how the wrong requests are coming in) Probably you can do such tracking just looking at Referer request header this seems to work:

Re: Default value of gzip_proxied

2015-03-21 Thread Gena Makhomed
On 22.03.2015 3:31, Maxim Dounin wrote: - You assume that the behaviour in question is only needed for HTTP/1.0 clients. That's, again, not true, as using "Vary: Accept-Encoding" isn't a good idea either. As already mentioned, even if correctly supported it will cause cache data dupli

Re: enable memcache with nginx

2015-03-20 Thread Gena Makhomed
On 20.03.2015 21:36, Mohammad Tokallo wrote: i have tried to configure memcache with nginx but still couldn't configure it anybody have experience to configure memcache with nginx please send your configuration file You can find example configuration in module documentation: http://nginx.org/e

Re: stripping www and forcing ssl

2015-03-20 Thread Gena Makhomed
On 20.03.2015 20:35, B.R. wrote: You have a duplicate listen directive with same IP address and same port in both server blocks. I doubt that is a valid configuration. Yes, this is valid configuration. See http://nginx.org/en/docs/http/request_processing.html http://nginx.org/en/docs/http/ser

Re: stripping www and forcing ssl

2015-03-20 Thread Gena Makhomed
On 20.03.2015 20:01, David Benfell wrote: I am attempting to strip www. and force SSL. Here are the blocks I'm using: server { listen 50.250.218.168:80; listen 50.250.218.168:443 ssl; listen [2001:470:67:2b5::10]:80; l

Re: https to http error "too many redirects"

2015-03-20 Thread Gena Makhomed
On 20.03.2015 13:13, Daniël Mostertman wrote: You'll _never_ reach http request since you set HSTS configuration :) If you still want some http request on your web server, disable your HSTS directive. (see Daniel statement on previous email). 1. HSTS enabled only on domain name www.example.com

Re: https to http error "too many redirects"

2015-03-20 Thread Gena Makhomed
On 20.03.2015 12:36, Dewangga Bachrul Alam wrote: You'll _never_ reach http request since you set HSTS configuration :) If you still want some http request on your web server, disable your HSTS directive. (see Daniel statement on previous email). 1. HSTS enabled only on domain name www.example

Re: https to http error "too many redirects"

2015-03-20 Thread Gena Makhomed
On 20.03.2015 11:35, Daniël Mostertman wrote: You said that in your configuration, you have the following line: # HSTS (ngx_http_headers_module is required) (15768000 seconds = 6 months) add_header Strict-Transport-Security max-age=15768000; This makes nginx send a HSTS header to browsers that

Re: Fake video sharing Android App !!

2015-03-16 Thread Gena Makhomed
On 16.03.2015 13:09, shahzaib shahzaib wrote: Guys, someone cloned our videosharing website and created a FAKE android application using same name as our website and people considering it as our app, which is not. The main problem we're facing is, the videos being served from this android applic

Re: [security advisory] $http_host vs $host

2015-03-10 Thread Gena Makhomed
On 10.03.2015 23:09, Francis Daly wrote: server { listen 443 ssl; server_name private.example.com; location / { auth_basic "closed site"; auth_basic_user_file conf/htpasswd; proxy_set_header Host $http_host; proxy_pass http://backend; } } server { li

Re: [security advisory] http://wiki.nginx.org/Redmine

2015-03-09 Thread Gena Makhomed
On 10.03.2015 0:50, Francis Daly wrote: even more, redmine documentation: http://www.redmine.org/projects/redmine/wiki/HowTo_install_Redmine_on_CentOS_5 RECOMMENDS to install redmine into /var/www/redmine see: "Configure /var/www/redmine/config/database.yml" Yes, that url shows redmine install

[security advisory] $http_host vs $host

2015-03-09 Thread Gena Makhomed
On 09.03.2015 19:25, Francis Daly wrote: Unsafe variable $http_host was used instead of safe one $host I'm not sure how $http_host is less safe than $host. It is proxy_pass'ed to the "real" redmine server as the Host header. That server must be able to handle it safely anyway, no? Such confi

Re: [security advisory] http://wiki.nginx.org/Redmine

2015-03-09 Thread Gena Makhomed
On 09.03.2015 19:25, Francis Daly wrote: From reading the redmine docs, it looks like the contents of the "root" directive directory should be whatever is in the distributed redmine public/ directory; not the entire installation including configuration. I am talk about configuration recommende

Re: [security advisory] http://wiki.nginx.org/Redmine

2015-03-09 Thread Gena Makhomed
On 09.03.2015 16:48, Edho Arief wrote: From reading the redmine docs, it looks like the contents of the "root" directive directory should be whatever is in the distributed redmine public/ directory; not the entire installation including configuration. It's a public wiki, not some official doc

Re: [security advisory] http://wiki.nginx.org/Redmine

2015-03-09 Thread Gena Makhomed
On 08.03.2015 22:50, Francis Daly wrote: webpage http://wiki.nginx.org/Redmine has some security problems: 1. All redmine config files are available for anybody in internet, for example: https://redmine.example.com/config/database.yml contains in plain text login and password for database conne

[security advisory] http://wiki.nginx.org/Redmine

2015-03-08 Thread Gena Makhomed
Hello, webpage http://wiki.nginx.org/Redmine has some security problems: 1. All redmine config files are available for anybody in internet, for example: https://redmine.example.com/config/database.yml contains in plain text login and password for database connection. 2. wiki.nginx.org use nginx

Re: upstream_response_time

2014-02-11 Thread Gena Makhomed
On 11.02.2014 11:04, Ruslan Ermilov wrote: I am using add_header x-responsetime $upstream_response_time; to report response times of the back-end to the client. I was expecting to see the back-end response time (e.g. 0.500 for half a second), however the headers that I am getting contain

Re: Setting a header inside an if block

2014-02-05 Thread Gena Makhomed
On 05.02.2014 19:31, justink101 wrote: I currently have: server{ ... if ($remote_user = "") { return 401; } ... } But what I really want is: server{ ... if ($remote_user = "") { add_header WWW-Authenticate 'Basic realm="mydomainhere.com"';

Re: Getting forward secrecy enabled

2013-10-03 Thread Gena Makhomed
On 03.10.2013 15:36, Sergey Budnevitch wrote: nginx itself has no ciphers support, it depend on openssl. RHEL/CentOS version of openssl lacks elliptic curve ciphers, it is explicitly striped from rpm (https://bugzilla.redhat.com/show_bug.cgi?id=319901), and ECDHE is unavailable on RHEL/CentOS w