środa, 20 stycznia 2021

Azure App Service + .well-known 404 error

 - create directory .well-known with dot

- create web.config inside of .well-known with

<?xml version="1.0"?>

<configuration>

  

  <system.web>

    <!-- Make directory public. Allow anonymous users access to everything in this directory. -->

    <authorization>

      <allow users="*"/>

    </authorization>

  </system.web>

  

  <system.webServer>

    <!-- Directory only contains plain text files. -->

    <staticContent>

      <mimeMap fileExtension=".*" mimeType="text/plain" />

    </staticContent>

    

    <!-- Only static files are allowed, so remove everything but the StaticFile handler. This also solves the issue with extensionless files returning a 404 Page Not Found. -->

    <handlers>

      <clear />

      <add name="StaticFile" path="*" verb="*" type="" modules="StaticFileModule,DefaultDocumentModule,DirectoryListingModule" scriptProcessor="" resourceType="Either" requireAccess="Read" allowPathInfo="false" preCondition="" responseBufferLimit="4194304" />

    </handlers>

  </system.webServer>

  

</configuration>

Ubuntu force dhcp

 systemctl enable systemd-networkd



cat /etc/systemd/network/20-dhcp.network

[Match]

Name=enp*


[Network]

DHCP=ipv4

wtorek, 14 lipca 2020

czwartek, 5 marca 2020

wtorek, 3 marca 2020

Lock python-requests and other bots in htaccess

Enable mod_version

## Automated HTTP libraries
RewriteCond %{HTTP_USER_AGENT} ^.*(dav.pm/v|libwww-perl|urllib|python-requests|python-httplib2|winhttp.winhttprequest|lwp-request|lwp-trivial|fasthttp|Go-http-client|Java|httplib|httpclient|Zend_Http_Client).*$ [NC]
RewriteRule .* - [F,L]

## Commonly seen in DDoS attacks
RewriteCond %{HTTP_USER_AGENT} ^.*(CtrlFunc|w00tw00t|Apachebench).*$ [NC]
RewriteRule .* - [F,L]

czwartek, 23 stycznia 2020

Sed: remove javascript from files

grep -Ril same.js | xargs sed -i "s/<script type='text\/javascript' src='https:\/\/localhost\/same.js'><\/script>//g"

czwartek, 7 listopada 2019

Sed: remove block of text

Example code:

var gdjfgjfgj235f = 1; var d=document;var s=d.createElement('script'); s.type='text/javascript';
(...)
d.getElementsByTagName('head')[0].appendChild(s);
}

Sed:

sed -i ‘/^var gdjfgjfgj235f/,/^}/d’ $file

sed -i ‘/^d.getElementsByTagName(.*head.*appendChild/,/^}/d’ $file

poniedziałek, 12 sierpnia 2019

cPanel: Failed at step NAMESPACE spawning /usr/bin/mysqld_pre_systemd: Cannot allocate memory

cPanel, mysql error, openvz container

Failed at step NAMESPACE spawning /usr/bin/mysqld_pre_systemd: Cannot allocate memory

error occurs when jailed Apache enabled

check /proc/mounts limits

wtorek, 6 sierpnia 2019

BORG backup: restrict client commands on remote SSH

Add on backup server to .ssh/authorized_keys:

command="borg serve --restrict-to-path /home/USER/REPO.borg",no-pty,no-agent-forwarding,no-port-forwarding,no-X11-forwarding,no-user-rc ssh-rsa KEY

cPanel DNS cluster - force sync zones to cPanel Slave Only from command line

1. Enable DNS cluster
2. Add cPanel Slave Only to MASTER as 'Synchronize changes'
3. Run from command line on master:

/usr/local/cpanel/scripts/dnscluster syncall --full

Check how many zones listed on slave:

[12:07:15 SLAVE root@XXXXXX ~]cPs# /usr/local/cpanel/whostmgr/bin/dnsadmin --action GETZONELIST --localonly|wc -l
1300