Tag: WebDev

I've been hosting a static site via github for a few years on the domain shown. Recently I added a number of sub domains to reserved IPs on my network. s01.pixeloven.com d01.pixeloven.com w01.pixeloven.com (inactive) w02.pixeloven.com (inactive) On s01 and d01 are a few docker services I host. s01 is my primary server which hosts a few permanent services. All of this resolved fine up until yesterday. ping pixeloven.com PING pixeloven.com (172.67.186.123) 56(84) bytes of data. 64 bytes from 172.67.186.123: icmp_seq=1 ttl=54 time=6.77 ms 64 bytes from 172.67.186.123: icmp_seq=2 ttl=54 time=7.37 ms --- pixeloven.com ping statistics --- 2 packets transmitted, 2 received, 0% packet loss, time 1002ms rtt min/avg/max/mdev = 6.773/7.071/7.369/0.298 ms ping s01.pixeloven.com ping: s01.pixeloven.com: No address associated with hostname Here's my current DNS configuration. I haven't changed anything recent on the DNS side bu

I recently moved a PHP application to a new server. I have multiple virtual hosts, and want to keep separate error logs for each domain. For this reason, on the old server I used the ErrorLog directive in the Apache conf for each site, e.g., my virtual hosts all resemble this basic template: <VirtualHost *:80> ServerName somedomain.com ServerAlias www.somedomain.com DocumentRoot /var/www/sites/somedomain/html ErrorLog /var/log/httpd/somedomain_error_log CustomLog /var/log/httpd/somedomain_access_log combined ScriptAlias /cgi-bin/ /var/www/sites/somedomain/cgi-bin/ DirectoryIndex index.html index.htm index.php <Directory /var/www/sites/somedomain/html> Options -Indexes +IncludesNOEXEC +FollowSymLinks Require all granted AllowOverride All </Directory> <Directory /var/www/sites/somedomain/cgi-bin> Require all granted Options +ExecCGI AcceptPathIn

I've recently migrated an existing Apache2 webserver config from a "traditional" Debian-based linux machine to an AWS EKS environment using the hub.docker Httpd Docker official image instead. The primary behaviour of this server is to act as a reverse proxy for several backend HTTP and HTTPS sites, with AWS handling the public-facing HTTPS (inc SSL cert) for the frontend in CloudFront. The internal AWS traffic inbound to the server uses HTTP. The previous config, on Debian, directly handled HTTPS for both inbound and backend traffic in Apache. I've tried to remove the redundant modules and config from the server, but I'm not sure what parts of the SSL config should be kept. The SSL module is required for the HTTPS backend, but the default .conf file provided in the Docker image includes config for both frontend and backend usage. My primary concern is whether I should retain the

I'm trying to set up CDP and AIA on a Windows Server certificate authority. It works fine with HTTP and LDAP locations, but I can't get it to obtain CRLs from local path like \\<server name>\CRL$\<...>.crl - pkiview displays an error ("unable to download"). If I copy the URL and paste it into Explorer/browser, it opens fine. The folder is shared, and Everyone group has full access permissions. I tried reissuing basic CRL, restarting certificate services and restarting a controller, but to no avail.

I am configuring Windows Server 2019 Core to allow only one simultaneous RDP session (regardless of the user), and I would like to know if this can be done through a policy or registry change, and if so, how. Thank you in advance. I tried using the following, but it didn't work: Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server" -Name "MaxInstanceCount" -Value 1 -Type DWORD Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" -Name "fSingleSessionPerUser" -Value 1 -Type DWORD

I have a Java application in a pod that is spitting out logs straight to stdout. These logs are fetched by the log-operator which runs a combination of fluent bit 3.1.8 and fluentd 1.16.1. The operator is kube-logging v 4.10 (https://kube-logging.dev/search/). If I run an output crd to splunk all log entries come in single lines. also stack traces. if I add the following filters filters: - parser: key_name: event parse: type: json remove_key_name_field: true reserve_data: true - grep: exclude: - key: message pattern: ^$ - concat: flush_interval: 30 key: message multiline_start_regexp: /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}/ stream_identity_key: kubernetes.pod_name first one parses the event to an actual json blob from this { "hos

I want to reverse proxy multiple services on the same machine (bare metal macOS), over HTTPS and Tailscale, without a custom domain (i.e. just using machine.tailnet.ts.net). I don't care if the services are on subdomains or paths; I just want to be able to type copyparty somewhere in the URL instead of :3923. I want Caddy & Tailscale to do their thing where Caddy will supposedly automatically enlist Tailscale to get Let's Encrypt certs for any .ts.net URL. I have tried a hundred different permutations of Caddyfile but I can't hack it. Supposedly, I should be able to do just this to get it working: machine-name.tailnet-name.ts.net { reverse_proxy localhost:3923 } Though that would only do for one service. Mostly, when testing it with curl, I will get "Connection reset by peer" immedi

I have a local network behind a Ubuntu server doing NAT, iptables, OpenVPN, and VirtualBox, all IPV4. I need VPN clients to access machines in local network. Local net is 192.168.1.0/24 and VPN net is 192.168.2.0/24. In iptables I added a forward rule, from VPN net to local net INTNET="192.168.1.0/24" INTIF="eth1" VPNIF="tun0" VPNNET="192.168.2.0/24" iptables -A FORWARD -i $VPNIF -s $VPNNET -d $INTNET -j ACCEPT iptables -A FORWARD -i $INTIF ! -s $VPNNET -d $VPNNET -m state --state RELATED,ESTABLISHED -j ACCEPT And here is the routing table Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0 10.0.24.36 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0 192.168.1.0 0.0.0.0 255.255.255.0 U 100 0 0 eth1 192.168.2.0

We have a lot of event id 4624 type 3, 4627 and 4634 on a file server for a specific user and workstation. This started after a specific date and is continuous. Prior to that the event viewer logs seem ok. I understand that 4624 is successful logon and type 3 is a network logon. What could cause this volume of 4624, 4627,and 4634 events on the file server?

I have four VLANs at the following interfaces on my Orange pi 5 running armbian: 192.168.2.200/24 at eth0 the base network from my provider, gateway at 192.168.2.254 192.168.200.1/24 at wifi for wifi 192.168.100.1/24 at iot for my iot devices 10.13.13.1/24 at wg0 for wireguard All traffic from wifi, iot and wg0 is NAT'ed to eth0 using /sbin/iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE /sbin/iptables -A FORWARD -i [IFACE] -o eth0 -j ACCEPT Now I want to access the devices on the iot network from wifi and wireguard (but not vice versa). I am at a loss on what I need to NAT all traffic from wifi destined to the iot. My latest attempt w