We’re rewarding the question askers & reputations are being recalculated! Read more.

# Tag Info

7

Debian Buster = TLSv1.3 supported In Debian Buster (currently in testing), the TLSv1.3 is supported already. The following information is dated to: # date -I 2019-02-24 Apache2 version: # apache2 -v Server version: Apache/2.4.38 (Debian) Server built: 2019-01-31T20:54:05 Where to enable Globally in: /etc/apache2/mods-enabled/ssl.conf Locally in: ...

5

In fact, Debian installs the majority of PMA into /usr/share/phpmyadmin which is the LSB standard correct location for it. But that's a detail that's not terribly relevant to the premise of your question. What Debian's PMA package also does is drop a config file in /etc/apache2/conf-available/phpmyadmin.conf that sets up the specifics PMA needs to run ...

5

4

Since you’re using Ansible, you should specify that you want a www-data user to be present, using the user module with state=present and whatever other attributes are appropriate (e.g. system=yes). That will create the user if necessary, and won’t if one is already present. That’s a general principle of configuration management — describe the situation you ...

4

Whether to use a Galaxy-provided role is a decision you need to evaluate in your specific context (for every role you’re considering). Good roles on Galaxy will often handle many more situations than your specific role (look at the contents of tasks here, compared to your playbook), but those capabilities come at a cost: you’re adding an external dependency ...

4

What you are looking for if you want random distribution of the content you need something like this in your config file: director cl1 random { { .backend = [Backend0]; .weight = 1; } { .backend = [Backend1]; .weight = 1; } } More information about how Varnish backends work can be found here. I found the above snippet from this blog. You can also do ...

4

Just improve the source code of your application (maybe Apache2 in your case, which is open source) to call setrlimit(2) after the successful call to fork(2), but before the call to execve(2). Because you really want to have the setrlimit system call done after the fork (what you have then set remains till some further call to setrlimit, perhaps by the ...

4

Could you try to add an additional slash at the end of you ProxyPass, like: ProxyPass http://127.0.0.1:8080/ ?

3

The platform independent way would in general be an adding of the according LoadModule directives to your Apache configuration. What a2enmod does, is linking files with such directives (.load files, plus additional .conf files, if needed) from /etc/apache2/mods-available to /etc/apache2/mods-enabled

3

The existing answers are correct, but not everyone may be clear (I wasn't) about what is going on, especially after reading the official certbot docs on the subject. First you'll want to list your existing certificates, just to be clear on what you have already: sudo certbot certificates You'll notice each certificate has a "name". Let's say you have a ...

3

If wget -O - http://localhost fails, then it must be coming from the browser cache.

3

Since CentOS 6 is a bit on the old side, in my opinion, the best course of action is upgrading it to CentOS 7. You seem to be suffering of using Apache 2.2 tools with Apache 2.4. Addressing several concerns on your question: If you are using CentOS 6, I would advise upgrading it to 7; As for mod_evasive, there are packages for that; About mod_security, the ...

3

You could use the following to install the current versions of all the PHP packages provided provided by php-defaults: apt install $(grep-aptavail -S php-defaults -s Package -n) (You’ll need to install dctrl-tools first.) This uses two commands: grep-aptavail -S php-defaults -s Package -n searches the packages apt knows about, looking for a source ... 3 I believe the easiest way that will not suggest inventing a bycicle is going to be sudo. You still can provide user with limited number of commands, namely the systemctl restart httpd by using visudo # visudo add line like this: nonprivuser ALL=(ALL) NOPASSWD: /bin/systemctl restart httpd save file and test it: # su - nonprivuser$ sudo /bin/systemctl ...

3

Apache will pre-create worker processes so, when a load spike comes in, the processes can pick up the requests immediately, instead of waiting for the master to spawn enough of them. Check your httpd.conf for MinSpareServers, MaxSpareServers and ServerLimit. Source

2

meta contains meta-data used for the Galaxy registry. .travis.yml contains configuration for Travis CI, which ensures that the project is continuously integrated. The other directories embody the typical structure of an Ansible role: defaults contains the default settings, tasks contains the playbooks, and templates contains the templates for generated files....

2

I manage to find out that this issue is related to the integrated Ethernet and known issues with the RK3399 CPU. With an USB 3 to Ethernet adapter this issue won't happen. The boards like RK3399 need TCP/UDP offloading disabled to avoid the retransmissions and reset errors. This was already implemented by Ayufan on Rock64 and RockPro64 Rootfs and ...

2

Generally speaking, the hosts file should be used only to bootstrap a system until it has DNS running. Particularly as you say this is a production system. To that end the only entries that should be in your hosts file are the loopback ones: 127.0.0.1 localhost ::1 localhost ip6-localhost ip6-loopback ff02::1 ip6-allnodes ff02::2 ...

2

Here's one idea, since I found no evidence of an environment variable -- just default configurations in the various distributions: case $(lsb_release -i) in (*Debian) conf=/etc/apache2/sites-available/000-default.conf;; (*Arch) conf=/etc/httpd/conf/httpd.conf;; esac awk '/^[^#]*DocumentRoot/ { print "export drt=\""$2"\"" ORS ...

2

In HTTPS, the order of operations at the beginning of a connection is... less than ideal. This is because HTTP was initially designed separate from SSL/TLS, and the two technologies did not fit perfectly together. When the server accepts any incoming HTTPS connection, the first step is the SSL/TLS negotiation. This happens before any other data is passed ...

2

So first you need to add repository for PHP 5.6, "here are packages directly from a maintainer of Debian's PHP packages, Ondřej Surý." $apt-get install apt-transport-https$ curl https://packages.sury.org/php/apt.gpg | apt-key add - $echo 'deb https://packages.sury.org/php/ stretch main' > /etc/apt/sources.list.d/deb.sury.org.list$ apt-get update Now ...

2

apache is the package name, and short for "Apache HTTP Server", the official name of the software. httpd is the "HTTP server daemon" itself, which is provided by this package. This is what the Apache Software Foundation chose to name the daemon and related files. Confusingly, the Apache Software Foundation themselves also use "httpd" as a short form of the ...

2

On Red Hat distributions and derivatives, typically the package installer has a "create user" command inside the pre-install script. So, on CentOS 7, via the rpm -q --scripts httpd we can see preinstall scriptlet (using /bin/sh): # Add the "apache" group and user /usr/sbin/groupadd -g 48 -r apache 2> /dev/null || : /usr/sbin/useradd -c "Apache" -u 48 -g ...

2

Most programs read the timezone settings once at start-up and won't expect them to change while the program is running. So, you'll need to restart any programs with incorrect timezone: root@debian:~: systemctl restart rsyslog root@debian:~: systemctl restart apache2 You should also update the initramfs file, so that the correct timezone will be set as ...

2

You are making several simple mistakes. Firstly, the port service name for the HTTP/HTTPS services is named http or https and not apache. For checking the service name: \$ grep http /etc/services http 80/tcp www # WorldWideWeb HTTP https 443/tcp # http protocol over TLS/SSL http-alt 8080/tcp webcache # WWW ...

2

apt-get install apt-cache search php- | grep ^php- | cut '-d ' -f1 The result may not be pretty: on my debian + deb-multimedia system this finds 408 packages.

2

I have used a certificate built on another context, restarted Apache, the errors were not showing. That means the error must be with the certificate. Given that, I re-watched carefully the procedure that I have used to build the CA (I'll add the procedure at the bottom of this answer) and found the error. I was using the "temporary" certificate instead of ...

2

Is the page really empty? What do the logs say? On a hunch, I saw you used the deprecated short tag form <?. Try using the full form <?php instead: <?php phpinfo(); ?>

2

MathJax provides a javascript application that makes writing LaTeX similar to Math StackExchange. https://www.mathjax.org/

2

First, check that httpd is running with sudo systemctl httpd status. Before we accidentally add a duplicate rule, let's check the iptables rules with iptables -L To be sure we accept all incoming http let's add an ACCEPT to our table sudo iptables -A INPUT -p tcp --dport 80 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT if this doesn't solve the issue, ...

Only top voted, non community-wiki answers of a minimum length are eligible