Natim's questions

I am using Nginx to proxy pass to my wsgi app served with Circus.

I want to allow the traffic to that app for some urls of the app only for some IP address.

For now it look like this:

server {
    listen   80;
    server_name  service.dev;
    access_log  /var/log/service.access.log;
    error_log  /var/log/service.error.log debug;

    location / {
        try_files $uri @proxy_to_app;
    }

    location @proxy_to_app {
        proxy_set_header Host $http_host;
        proxy_redirect off;
        proxy_pass         http://127.0.0.1:9000/;
    }

    location /admin/ {
        allow 192.168.5.0/24;
        deny all;
    }
}

But it doesn't work. If I have the right, I get a 404 error instead of the proxy_pass.

Do you know how I can do that without having to copy/paste the proxy_pass configuration each time?

Thank you.

Lets take an example of what I have today: https://gist.github.com/Natim/6548009

I use the pillar to create a database and a user. It works fine on server with one of the roles but if I need both roles on the same server only the last pillar is taken into account.

How can I create my pillar and salt so that a salt is create for each role?

I could do something like that:

{% for db in pillar['dbs'] %}
postgresql_db_{{ db['postgresql_db_name'] }}:
    postgres_database.present:
        - name: {{ db['postgresql_db_name'] }}
        - owner: {{ db['postgresql_db_user'] }}
        - encoding: UTF8
        - lc_ctype: en_US.UTF8
        - lc_collate: en_US.UTF8
        - template: template0
        - runas: postgres
        - require:
            - service: postgresql
            - postgres_user: postgresql_user_{{ db['postgresql_db_user'] }}

postgresql_user_{{ db['postgresql_db_user'] }}:
    postgres_user.present:
        - name: {{ db['postgresql_db_user'] }}
        - password: {{ db['postgresql_db_password'] }}
        - require:
            - service: postgresql
{% endfor %}

But then how to populate the pillar['dbs'] with two files?

Thanks

I have a directory with lots of files and inside a mounted directory.

var/
   log/
   nfs/ (a NFS remote directory)
   www/

How can I chmod/chown everyfiles inside that directory without changing nfs ones.

So little question, I've got this:

redis-server:
  Installed: 2:1.2.6-1
  Candidate: 2:1.2.6-1
  Version table:
     2:2.4.15-1~bpo60+2 0
        100 http://backports.debian.org/debian-backports/ squeeze-backports/main amd64 Packages
 *** 2:1.2.6-1 0
        500 http://ftp.fr.debian.org/debian/ squeeze/main amd64 Packages
        100 /var/lib/dpkg/status

When I try to upgrade to newest version I get:

$ sudo apt-get install -t squeeze-backports redis-server
redis-server is already the newest version.

What should I do?

I am using this kind of commands :

ssh -i etc/ssh/vagrant [email protected] "cd floss_project; make install"

But if during the installation script, a user prompt is needed, I cannot see what is the question asked since, the CLI is not flush into the SSH before a \n.

How can I ask SSH to auto flush the prompt before the \n so I can see which answer I should give?

Edit:

To Help you to reproduce this bug, let say we have the following script:

name.py

#!/usr/bin/python
name = raw_input('Give me your name: ')
print("Hello "+name)

We decide to launch it with ssh:

$ ssh 127.0.0.1 python name.py

The curser is waiting for our input without actually asking for the wanted Give me your name:

How can I force SSH to display this information (actually to flush the STDOUT before a STDIN)

I am trying to install nominatim using this guide. After one day of processing, I finaly get this message:

feature 895(k)
Killed

After a read in dmesg I got:

[143978.925793] Out of memory: kill process 14456 (bash) score 204947 or a child
[143978.925796] Killed process 15081 (nominatim) vsz:4871228kB, anon-rss:2953272kB, file-rss:0kB

Using osm2pgsl you can use the -s (slim) option but how can I process using NPI ?

How can I upgrade without restarting the whole process?

I am using VirtualBox on Ubuntu with some programs installed in it. And the snapshot file does not stop to grow.

I don't need this feature. I just want my data to be saved on the virtual windows hard drive.

How can I remove the snapshot of 20GB without losing my documents and settings and without starting another one keeping growing ?

Thank you.

I would like to redirect all email from

*@domain.fr to [email protected]

Do you know how I can configure my exim4 server on Debian to do so ? (My exim configuration seams to be split in different files)

Thank you.

I am currently working on QoS router functions using iptables and tc on Linux. I would like to use virtualbox to simulate a computer plug on my router (The router would be the host)

Physically, I have the eth0 interface to the WAN and I would like to create a virtual interface eth1 where is plug my virtual machine (Virtual Machine having IP 192.168.1.10 and eth1 having IP 192.168.1.1)

Like this I can use tc and iptables to try my QoS router function.

Could you help me to configure this M

Thank you.

I want to be sure that for some URL of my website, SSL will be use. I saw a lot of answer already on SO.

https://stackoverflow.com/questions/724968/force-redirect-to-ssl-for-all-pages-apart-from-one

So I think I will use mod_rewrite.

My question is more about how to configure the Virtual Host to run my Django Application over HTTP and over HTTPS without problems. I am using WSGI.

Is it a problem to just duplicate the configuration over *:443 and over *:80 ? How should I do to have the best configuration ?

Thank you.

Rémy