<?xml version="1.0" encoding="utf-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
	<channel>
		<atom:link href="https://dev1galaxy.org/extern.php?action=feed&amp;tid=5440&amp;type=rss" rel="self" type="application/rss+xml" />
		<title><![CDATA[Dev1 Galaxy Forum / [SOLVED] Good nginx ssl instructions]]></title>
		<link>https://dev1galaxy.org/viewtopic.php?id=5440</link>
		<description><![CDATA[The most recent posts in [SOLVED] Good nginx ssl instructions.]]></description>
		<lastBuildDate>Wed, 04 Jan 2023 21:34:58 +0000</lastBuildDate>
		<generator>FluxBB</generator>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=40001#p40001</link>
			<description><![CDATA[<div class="quotebox"><cite>golinux wrote:</cite><blockquote><div><p><strong>CONGRATS</strong> . . . and you figured it out while rrq was ZZZZzzzzz!! <img src="https://dev1galaxy.org/img/smilies/big_smile.png" width="15" height="15" alt="big_smile" /></p></div></blockquote></div><p>I&#039;m sure that he&#039;ll be relieved to awaken and not have it still out there.</p><p>I&#039;m grateful that he encouraged me not to wipe everything and start clean ...</p><p>I&#039;ll ask a couple of people to White Hat it and suggest security adjustments.</p><p>Next, maybe, I may as well go ahead and get mail working.</p>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 21:34:58 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=40001#p40001</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=40000#p40000</link>
			<description><![CDATA[<p><strong>CONGRATS</strong> . . . and you figured it out while rrq was ZZZZzzzzz!! <img src="https://dev1galaxy.org/img/smilies/big_smile.png" width="15" height="15" alt="big_smile" /></p>]]></description>
			<author><![CDATA[dummy@example.com (golinux)]]></author>
			<pubDate>Wed, 04 Jan 2023 20:30:42 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=40000#p40000</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39998#p39998</link>
			<description><![CDATA[<p><strong><em>It&#039;s working, it&#039;s working, it&#039;s working!</em></strong></p><p>Something had wiped the contents of index.html</p><p>BOTH http and https are responding and displaying.</p><p>Can someone check the security of the site - any obvious gaps that need to be addressed, please?</p><p>If so I&#039;ll start a new thread for that but this one seems to ... finally ... be <strong>SOLVED!</strong>&#160; :-)</p>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 20:10:54 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39998#p39998</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39996#p39996</link>
			<description><![CDATA[<p>OK, it&#039;s now appearing to permit access to both <span class="bbc">https://realupnow.com</span> and <span class="bbc">http://realupnow.com</span> but it displays nothing.</p><p>It still doesn&#039;t appear to be listening ...</p><div class="codebox"><pre><code>root@devuan1:/etc/nginx# netstat -anp : grep -w LISTEN
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
raw6       0      0 :::58                   :::*                    7           1472/NetworkManager 
root@devuan1:/etc/nginx# chown www-data:www-data /etc/nginx/sites-available/realupnow.com.conf</code></pre></div><p>Well ... maybe it is?</p><div class="codebox"><pre><code>root@devuan1:/etc/nginx# wget -H -O/dev/null http://realupnow.com/
--2023-01-04 14:22:52--  http://realupnow.com/
Resolving realupnow.com (realupnow.com)... 127.0.0.1
Connecting to realupnow.com (realupnow.com)|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://realupnow.com/ [following]
--2023-01-04 14:22:52--  https://realupnow.com/
Connecting to realupnow.com (realupnow.com)|127.0.0.1|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1 [text/html]
Saving to: ‘/dev/null’

/dev/null                           100%[=================================================================&gt;]       1  --.-KB/s    in 0s      

2023-01-04 14:22:52 (3.11 MB/s) - ‘/dev/null’ saved [1/1]

root@devuan1:/etc/nginx# </code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 19:24:26 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39996#p39996</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39992#p39992</link>
			<description><![CDATA[<p>So, now I see that the purpose of &quot;location&quot; is to call a &quot;module&quot;. (Source: <span class="bbc">https://www.educba.com/nginx-modules/</span>)</p><p>Code:</p><div class="codebox"><pre><code>git clone https://github.com/module_name.git</code></pre></div><p>Output:</p><div class="codebox"><pre><code>git clone https://github.com/perusio/nginx-hello-world-module.git</code></pre></div><p>Code:</p><div class="codebox"><pre><code>./configure --with-compat --add-dynamic-module=../module_name
make modules</code></pre></div><p>Code: </p><div class="codebox"><pre><code>load_module modules/module_name.so;</code></pre></div><p>Code:</p><div class="codebox"><pre><code>server {
 listen 80;
 location / {
  module_name;
 }
}</code></pre></div><p>Output:</p><div class="codebox"><pre><code>server {
	listen 80;
	
	location / {
		hello_world
	}
}</code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 17:53:05 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39992#p39992</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39988#p39988</link>
			<description><![CDATA[<div class="codebox"><pre><code>root@devuan1:/var/www/realupnow.com# nginx -V 2&gt;&amp;1 | tr -- - &#039;\n&#039; | grep _module
http_ssl_module 
http_stub_status_module 
http_realip_module 
http_auth_request_module 
http_v2_module 
http_dav_module 
http_slice_module 
http_addition_module 
http_flv_module 
http_geoip_module=dynamic 
http_gunzip_module 
http_gzip_static_module 
http_image_filter_module=dynamic 
http_mp4_module 
http_perl_module=dynamic 
http_random_index_module 
http_secure_link_module 
http_sub_module 
http_xslt_module=dynamic 
mail_ssl_module 
stream_geoip_module=dynamic 
stream_ssl_module 
stream_ssl_preread_module 
root@devuan1:/var/www/realupnow.com# </code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 15:57:11 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39988#p39988</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39982#p39982</link>
			<description><![CDATA[<p>Shouldn&#039;t the privileges here <span class="bbc">-rw-r--r-- 1 root root&#160; 953 Jan&#160; 4 08:40 realupnow.com.conf</span></p><p>... be the same here? <span class="bbc">lrwxrwxrwx 1 root root 45 Jan&#160; 1 21:47 realupnow.com.conf -&gt; /etc/nginx/sites-available/realupnow.com.conf</span></p>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 13:46:25 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39982#p39982</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39981#p39981</link>
			<description><![CDATA[<p>Question:</p><p><span class="bbc">/etc/nginx/modules-available</span> is empty but in <span class="bbc">/etc/nginx/modules-enabled</span> are 21 symlinked modules.</p><p>Is that expected?</p>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 13:32:06 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39981#p39981</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39980#p39980</link>
			<description><![CDATA[<div class="codebox"><pre class="vscroll"><code>root@devuan1:/var/www/realupnow.com# nginx -t
nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
nginx: configuration file /etc/nginx/nginx.conf test is successful
root@devuan1:/var/www/realupnow.com# wget -H -O/dev/null http://realupnow.com/
--2023-01-04 08:13:23--  http://realupnow.com/
Resolving realupnow.com (realupnow.com)... 127.0.0.1
Connecting to realupnow.com (realupnow.com)|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://realupnow.com/ [following]
--2023-01-04 08:13:23--  https://realupnow.com/
Connecting to realupnow.com (realupnow.com)|127.0.0.1|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1 [text/html]
Saving to: ‘/dev/null’

/dev/null                           100%[=================================================================&gt;]       1  --.-KB/s    in 0s      

2023-01-04 08:13:23 (2.99 MB/s) - ‘/dev/null’ saved [1/1]

root@devuan1:/var/www/realupnow.com# netstat -anp : grep -w LISTEN
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
raw6       0      0 :::58                   :::*                    7           1527/NetworkManager 
root@devuan1:/var/www/realupnow.com# sudo service nginx stop
Stopping nginx: nginx.
root@devuan1:/var/www/realupnow.com# sudo service nginx start
Starting nginx: nginx.
root@devuan1:/var/www/realupnow.com# netstat -anp : grep -w LISTEN
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
raw6       0      0 :::58                   :::*                    7           1527/NetworkManager 
root@devuan1:/var/www/realupnow.com# </code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 13:29:59 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39980#p39980</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39976#p39976</link>
			<description><![CDATA[<p>Or you may need something like</p><div class="codebox"><pre><code>        ip protocol icmp accept
        ip6 nexthdr ipv6-icmp accept
        ip protocol igmp accept</code></pre></div><p>in the output filtering as well for ping responses.</p>]]></description>
			<author><![CDATA[dummy@example.com (ralph.ronnquist)]]></author>
			<pubDate>Wed, 04 Jan 2023 05:33:17 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39976#p39976</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39975#p39975</link>
			<description><![CDATA[<p>That doesn&#039;t look ok. Not that I really know nft syntax but by the looks of it ports 80 and 443 are now blocked, and it no longer responds to ping either. Do you need all that...</p><p>I think you&#039;ll need </p><div class="codebox"><pre><code>tcp dport {22, 80, 443} accept</code></pre></div><p> in the input filtering..</p><p>and do you really need to filter output at all? though it looks like it wold work...</p>]]></description>
			<author><![CDATA[dummy@example.com (ralph.ronnquist)]]></author>
			<pubDate>Wed, 04 Jan 2023 05:27:01 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39975#p39975</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39974#p39974</link>
			<description><![CDATA[<p>I guess I need to quit for the night.</p><p>I&#039;ll reboot and look at things in the morning - unless you recommend against that.</p><p>Or, I&#039;ll try whatever you recommend, instead.</p><p>This sure has proved a wild ride so far ...</p><p>Sigh.</p>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 05:19:51 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39974#p39974</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39973#p39973</link>
			<description><![CDATA[<div class="codebox"><pre><code>root@devuan1:/var/www/realupnow.com# wget -H -O/dev/null http://realupnow.com/
--2023-01-04 00:14:56--  http://realupnow.com/
Resolving realupnow.com (realupnow.com)... 127.0.0.1
Connecting to realupnow.com (realupnow.com)|127.0.0.1|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: https://realupnow.com/ [following]
--2023-01-04 00:14:56--  https://realupnow.com/
Connecting to realupnow.com (realupnow.com)|127.0.0.1|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 1 [text/html]
Saving to: ‘/dev/null’

/dev/null                           100%[=================================================================&gt;]       1  --.-KB/s    in 0s      

2023-01-04 00:14:56 (3.10 MB/s) - ‘/dev/null’ saved [1/1]

root@devuan1:/var/www/realupnow.com# </code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 05:15:41 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39973#p39973</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39972#p39972</link>
			<description><![CDATA[<p>I stopped and started nginx but the output of netstat remained the same.</p><p>Might it be good for me to restart the server to clear out buffers, etc?</p>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 05:01:20 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39972#p39972</guid>
		</item>
		<item>
			<title><![CDATA[Re: [SOLVED] Good nginx ssl instructions]]></title>
			<link>https://dev1galaxy.org/viewtopic.php?pid=39971#p39971</link>
			<description><![CDATA[<div class="codebox"><pre><code>root@devuan1:/var/www/realupnow.com# netstat -anp : grep -w LISTEN
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name    
raw6       0      0 :::58                   :::*                    7           1527/NetworkManager 
root@devuan1:/var/www/realupnow.com# </code></pre></div>]]></description>
			<author><![CDATA[dummy@example.com (dcolburn)]]></author>
			<pubDate>Wed, 04 Jan 2023 04:59:01 +0000</pubDate>
			<guid>https://dev1galaxy.org/viewtopic.php?pid=39971#p39971</guid>
		</item>
	</channel>
</rss>
