All Questions(server)

I have a Synology NAS with WAN access using an Nginx reverse proxy. Since the subdomain cloud.domain.com is routed to the Synology, all subfolder pathing is managed by the Synology application.

screenshot of Synology interface where /files is assigned

To access the File Manager, I'd use the following URL:

https://cloud.example.org/files

I have a shared folder in File Manager which uses a tinyURL style link for direct access. I'd like to build a redirect that would point directly this shared folder with a custom URL, such as the following:

https://cloud.example.org/public_downloads

In other words, I need to use https://cloud.example.org/public_downloads to access https://tiny.url/abcd123. Is there a way to override a specific subfolder path without breaking the Synology-managed ones like /files?

I've reviewed a similar question nginx Redirect specific subdomain and path but after looking at the linked documentation, I'm not seeing how I can configure it for the / pathing rather than the subdomain. I suspect the key lies in manipulating the location section of the Nginx config for my cloud.example.org server.

My Nginx config for the Synology

## CLOUD HTTPS ##
server {
        listen [::]:443 ssl http2;
        listen 443 ssl http2;
        server_name cloud.domain.com;

                ssl_session_timeout 30m;
                ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
                ssl_certificate      /usr/share/nginx/ssl/example.org-chain.pem;
                ssl_certificate_key  /usr/share/nginx/ssl/example.org-key.pem;
                ssl_session_cache shared:SSL:10m;

                        add_header X-Xss-Protection "1; mode=block" always;
                        add_header X-Content-Type-Options "nosniff" always;
                        add_header Strict-Transport-Security "max-age=2592000; includeSubdomains" always;
                        add_header X-Frame-Options "SAMEORIGIN" always;
                        proxy_hide_header X-Powered-By;
                        add_header 'Referrer-Policy' 'no-referrer';
                        add_header Content-Security-Policy "frame-ancestors example.org app.example.org;";

                location / {
                proxy_pass http://10.1.2.3:5000;
                proxy_set_header Host $host;
                proxy_set_header X-Forwarded-Host $server_name;
                proxy_set_header X-Real-IP $remote_addr;
                proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                proxy_set_header X-Forwarded-Ssl on;
                proxy_set_header X-Forwarded-Proto $scheme;
                proxy_read_timeout  90;
                proxy_redirect http://synologyhostname:5000 https://$host/:5001;
        }
}
## END CLOUD HTTPS ##

I recently was tasked with managing a a few servers and one is particularly turning out to be difficult. I'm relatively new to managing server on Hyper-V and so I'm careful not to mess anything up. I have a Hyper-V VM and here are the properties

When I access the Virtual Hard Disks folder inside I see these:

My biggest problem is the host disk is full hence pauses the VM with the warning "Disk out of Space" but inside the VM I can see there;s plenty of space as below:

My thinking was, I take some space from the VM hard Disk and get it back to the Host. But the VM has checkpoints and when I access the Checkpoints tab to try and delete them, it tells me it cant because of multiple checkpoints.

Please help me figure out how I can approach this, while also shedding some more light on the matter.

I'm using Terraform to manage a Github organization. We have a standard "common repository" module that we use to ensure our repositories share a common configuration. I would like to add support for configuring GitHub pages, which requires support for the pages element, which looks like this:

  pages {
    build_type = "legacy"
    cname = "example.com"
    source {
      branch = "master"
      path   = "/docs"
    }
  }

Everything is optional. In particular, source is only required if build_type == "legacy" || build_type == null, and the entire pages block can be omitted. I couldn't figure out how to make source conditional, so I ended up splitting this into two dynamic blocks like this:

  # There are two `dynamic "pages"` blocks here to account for the fact that `source` is only required
  # if `build_type` is "legacy". The `for_each` at the top of each block will only enable the block when
  # the necessary conditions are met.
  dynamic "pages" {

    # enable this block if `pages` is not null and `build_type` is "legacy" (or null)
    for_each = var.pages == null ? [] : var.pages.build_type == "legacy" || var.pages.build_type == null ? ["enabled"] : []

    content {
      source {
        branch = var.pages.source.branch
        path   = var.pages.source.path
      }

      cname      = var.pages.cname
      build_type = var.pages.build_type
    }
  }

  dynamic "pages" {

    # enable this block if `pages` is not null and `build_type` is "workflow"
    for_each = var.pages == null ? [] : var.pages.build_type == "workflow" ? ["enabled"] : []

    content {
      cname      = var.pages.cname
      build_type = var.pages.build_type
    }
  }

Where I've defined the pages variable in the module like this:

variable "pages" {
  description = "Configuration for github pages"
  type = object({
    source = optional(object({
      branch = string
      path   = string
    }))
    build_type = optional(string, "legacy")
    cname      = optional(string)
  })
  default = null
}

Is there a better way to approach this?

I am trying to configure Windows Hellow for Business (WHfB) so that when I log into my on prem hybrid joined Windows server I can use my Entra joined admin User with an MFA prompt to log in. To accomplish this I edited the GPO affecting the server. I've enabled it as such:

The issue I'm running into is that I cannot log in. I do not know what's missing for me to be able to log in using my Entra username + password. I feel like I'm missing a required setting that I'm unaware of. I have tried the following logins:

• domain
• user
• [email protected]
• [email protected]

None of the Logins work and I alway get this message: "You must use Windows Hello or a smart card to sign in."

Apaches %r log format outputs: "GET /server?id=1 HTTP/2.0".

I need to have only the exact same query parameter value ?id=1 as separate field in my logs.

Thus i tried the %q option, which unfortunately outputs for the same request:

?ReturnUrl=Example.aspx?id=1

For sure there is a rewrite involved, but there must be a way to get exactly what the client send, right? How?

• See Apache Custom Log Formats