I have setup a few wordpress with centos, apache in the same server and they all works fine. But somehow this is with this wordpress, when I go to the domain.com it just shows

Index of /
    Name    Last modified   Size    Description
    cgi-bin/    2020-07-20 12:53    -    

I googled but everyone's answer is either because there's a subdirectory installed by accident which it's not though. Also this is not installed through a cpanel.

this is how my root directory of the wordpress looks like

drwxr-xr-x.  5 apache apache  4096 Sep 28 02:58 .
drwxr-xr-x. 17 apache apache  4096 Sep 27 20:25 ..
-rwxr-xr-x.  1 apache apache    19 Sep 14  2018 3f361b82411a33ef76.txt
-rwxr-xr-x.  1 apache apache    16 Sep 14  2018 1D3AE47DEBA.html
-rwxr-xr-x.  1 apache apache   418 Sep 14  2018 index.php
-rwxr-xr-x.  1 apache apache 19935 Sep 14  2018 license.txt
-rwxr-xr-x.  1 apache apache  7415 Jun 11 00:34 readme.html
-rwxr-xr-x.  1 apache apache  6878 Apr 30 00:34 wp-activate.php
drwxrwxrwx.  9 apache apache  4096 Sep 14  2018 wp-admin
-rwxr-xr-x.  1 apache apache   364 Sep 14  2018 wp-blog-header.php
-rwxr-xr-x.  1 apache apache  1889 Sep 14  2018 wp-comments-post.php
-rwxr-xr-x.  1 apache apache  3312 Sep 14  2018 wp-config.php
-rwxr-xr-x.  1 apache apache  2853 Sep 14  2018 wp-config-sample.php
drwxrwxrwx.  7 apache apache  4096 Sep 28 02:57 wp-content
-rwxr-xr-x.  1 apache apache  3669 Sep 14  2018 wp-cron.php
drwxrwxrwx. 18 apache apache 12288 Sep 14  2018 wp-includes
-rwxr-xr-x.  1 apache apache  2422 Sep 14  2018 wp-links-opml.php
-rwxr-xr-x.  1 apache apache  3306 Sep 14  2018 wp-load.php
-rwxr-xr-x.  1 apache apache 37804 Apr 30 00:34 wp-login.php
-rwxr-xr-x.  1 apache apache  8048 Sep 14  2018 wp-mail.php
-rwxr-xr-x.  1 apache apache 16246 Sep 14  2018 wp-settings.php
-rwxr-xr-x.  1 apache apache 30091 Sep 14  2018 wp-signup.php
-rwxr-xr-x.  1 apache apache  4620 Sep 14  2018 wp-trackback.php
-rwxr-xr-x.  1 apache apache  3065 Sep 14  2018 xmlrpc.php

I even seen posts about changing the httpd.conf file

<IfModule dir_module>
    DirectoryIndex  index.php index.html
</IfModule>

actually the above is already there.

This is how my virtualhost looks like which is copied then modified the directory and servername from other working wordpress

<VirtualHost *:80>
    ServerName www.domain.com
    ServerAlias domain.com
    DocumentRoot /var/www/lci
    <Directory "/var/www/lci">
        Options Indexes FollowSymLinks
        Order allow,deny
        Allow from all
        AllowOverride All
    </Directory>
</VirtualHost>

What might be the possibility of any settings I might have forgotten?

If I click into the cgi-bin like I get a 403 forbidden though.

Thanks in advance for any suggestions and advices

I am learning about How to Deploy Hyperledger Fabric on AWS with Blockchain Templates. from this tutorial https://medium.com/faun/how-to-deploy-hyperledger-fabric-on-aws-with-blockchain-templates-12ff1b219d98

I have tried to follow every single steps but realized there are something missing from his steps and I tried putting in the missing pieces but somehow still getting error while creating.

I tried to google around but doesn't seem to be able to find much much.

Wondering if there's anyone able to give me suggestions / advice.

I will try writing out steps of what I have done.

1. I created a new by launching VPC wizard with VPC with a single public subnet I named this BlockChainVPC

2. I created a new EC2 and chose the first AMI Amazon Linux 2 AMI (HVM), SSD Volume Type, I configured the network to use the VPC I created in previous step, then left the other instance details as default. As for security group, I created a new security group named Hyperledge with inbound rules of HTTP + HTTPS to be accessible anywhere. As for outbound, it's open to all traffic. As for PEM, I created new PEM named blockchainbook

3. I created one elastic ip with the setting of us-west-2 for network border group. I created both ec2 + vpc in Oregon (us-west-2). Then I associated this elastic ip to the ec2 I created previously.

4. I created another security group named blockchainbook with SSH + 8080 as inbound rules and all traffic for outbound. This security group is with the new VPC(blockchainVPC)

5. I created a new policy under IAM named EC2BC, I added full access to Elastic Container Registry and Elastic Container Service and S3 with resources as all resources

6. I created a new role named EC2Blockchain with aws service and common use case of EC2 I attached the policy I created above (EC2BC) into this role.

7. I went back to the EC2 created in step 2, then attached the EC2Blockchain role to it.

8. I went to this page from aws https://aws.amazon.com/blockchain/templates/getting-started/ and chose Launch in US West (Oregon) region (us-west-2) to launch hyperledger fabric which brings me to cloudformation with the a template url of hyperledger fabric. As for stack name I entered BlockchainStack. VPC Connection, I chose BlockChainVPC which I created in step 1. Subnet, I chose the subnet that was created with the BlockchainVPC. EC2 Key pair I chose the one I created with ec2 in step 2. Security group, I choose the blockchainbook I created in step 4. As for EC2 Instance Profile ARN, I chose the Role ARN from the role I created in step 6.

9. Finally I started to create the stack and see that it's in progress because of the state CREATE_IN_PROGRESS, after a few minutes I see an error of Embedded stack arn:aws:cloudformation:us-west-2:234234234:stack/BlockchainStack-FabricEC2CommonStack-1OF23423423/234234234-234234234-234 was not successfully created: The following resource(s) failed to create: [EC2InstanceForDev].

After the error I tried recreating the stack again all settings are the sam except the EC2 Instance Profile ARN, this time I chose Instance Profile ARNs from the role I created in step 6. But error is still the same, no luck.

I also thought it might be the role permission I set or the security group I had wrong so I even tried to attach the admin policy into the role and all traffic to both inbound + outbound for the security group but still no luck.

Does anyone has suggession / advice for this?

Thanks in advance for any help.

I am actually writing a simple script to zip a local game save then upload the zip file into my s3 bucket.

Somehow it gives me this error though. The most I can find googling around is about filesize + adding --region init which doesn't help at all.

somehow for testing, I created an empty folder, with just a random text file with random words in it. Let's call the folder name AA

I zipped it using zip -r filename.zip AA the zip works fine

Then I do the s3 cp as such

aws s3 cp filename.zip s3://BUCKET_NAME/public/ --profile myProfile

This works fine though, then I changed the folder name to my game save name let's say it's called BB then I did aws s3 cp filename.zip s3://BUCKET_NAME/public/ --profile myProfile again then I get the error of

upload failed: ./filename.zip to s3://BUCKET_NAME/public/filename.zip ('Connection aborted.', ConnectionResetError(104, 'Connection reset by peer'))

The folder is only approx 5mb and after zipped, it's approx 500kb. So size wouldn't have been the matter even though I did try to get the ./aws/config and add the bandwith.

If I create another new folder with random files inside let's say folder name is CC. It would work.

If I changed the folder name of the actually folder I want to upload after zipped. I get the same error.

Is there any restriction on what files can / cannot be uploaded to aws? Or else what might be the reason? I can't really think of much though.

Thanks in advance for any suggestions / advices.

I think I might have posted in the wrong place (stackoverflow) but instead of reposting here which would make it duplicates, I will paste the link in stackoverflow.

https://stackoverflow.com/questions/55069430/aws-elastic-beanstalk-nginx-reverse-proxy-settings

Sorry for any inconveniences.

I have a website where users need to log in. They can upload and delete their own pictures BUT these pictures are supposed to be private so images are not set to public that anyone can view.

I know that we can use IAM policies to restrict access to different folders in a S3 bucket to different IAM users. However the website users are just normal registered users recorded in the database (probably MySQL), they are not IAM Users.

What would be the logic to set this up without needing an IAM user for each website user? Are there any good examples that you can suggest? Or I am thinking too much that there's easier way to set this kind of restrictions?

Thanks in advance for any suggestions.

This just came into my mind and I wonder if the below is possible?

I have a domain www.example.com but the client is all across Canada, would it be a good idea to have a server(including db) in both Oregon and Canada(central) with db replication then would using route53 work to check which geo location is accessing www.et.com, if closer to east coast then goes to Canada(central) if closer to west then goes to Oregon or there's a better way for this?

Thanks in advance for any advices

currently I am using a django backend which makes another post request to a expressjs backend. I have tested in development server and local machine, worked the request was made perfectly. So I push it to production which does not work at all.

then I see there's this error TypeError: SSLError(CertificateError("hostname 's.com' doesn't match 'f.com'",) which is weird. f.com is in the same server instance in s.com but their server block config is separated though.

Currently using let's encrypt certbot for these two domains. Why would this be happening and anyhow I can track down more how is this happening?

Thanks in advance for any help.

in my /etc/nginx/sites-available I have a file for s.com and f.com

as for f.com here is my config

server {
    client_max_body_size 100M;
    listen 80;
    server_name f.com;

location / {
        proxy_pass http://localhost:3005;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    # First attempt to serve request as file, then
    # as directory, then fall back to displaying a 404.
    # try_files $uri $uri/ =404;
}

    listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/f.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/f.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot


if ($scheme != "https") {
    return 301 https://$host$request_uri;
} # managed by Certbot

}

as for s.com here is my config

server {
    listen 80;
    server_name s.com;

location / {
        proxy_pass http://localhost:3006;
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection 'upgrade';
        proxy_set_header Host $host;
        proxy_cache_bypass $http_upgrade;
    # First attempt to serve request as file, then
    # as directory, then fall back to displaying a 404.
    # try_files $uri $uri/ =404;
    # deny all;
}

    listen 443 ssl; # managed by Certbot
ssl_certificate /etc/letsencrypt/live/s.com/fullchain.pem; # managed by Certbot
ssl_certificate_key /etc/letsencrypt/live/s.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot
    ssl_dhparam /etc/letsencrypt/ssl-dhparams.pem; # managed by Certbot

# Redirect non-https traffic to https
if ($scheme != "https") {
    return 301 https://$host$request_uri;
} # managed by Certbot

}

currently I have this as my proxy_pass which works fine

    location = /sms/resetpass {
             proxy_pass http://xxx.xxx.xxx.xxx/api/resetpass;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection 'upgrade';
             proxy_set_header Host $host;
             proxy_cache_bypass $http_upgrade;
    }

the above works fine but I figured if I want another proxy such as

    location = /sms/sample1 {
             proxy_pass http://xxx.xxx.xxx.xxx/api/sample1;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection 'upgrade';
             proxy_set_header Host $host;
             proxy_cache_bypass $http_upgrade;
    }

then I have to make another location block

is it possible to do something like this?

    location = /sms/something_here {
             proxy_pass http://xxx.xxx.xxx.xxx/api/something_here;
             proxy_http_version 1.1;
             proxy_set_header Upgrade $http_upgrade;
             proxy_set_header Connection 'upgrade';
             proxy_set_header Host $host;
             proxy_cache_bypass $http_upgrade;
    }

where something_here means if I pass in any url into sms/blah then the proxy_pass would be api/blah

I tried to google something like proxy_pass with subpath or something like that but doesn't seem to be what I need. So I am wondering if this is possible or I just didn't know the right word to find it?

Thanks in advance for any advices.

I am trying to make a crontab to start nginx if it is stopped.

I googled and found these two scripts

http://www.akamaras.com/linux/linux-script-to-check-if-a-service-is-running-and-start-it-if-its-stopped/

#!/bin/bash
service=replace_me_with_a_valid_service

if (( $(ps -ef | grep -v grep | grep $service | wc -l) > 0 ))
then
echo "$service is running!!!"
else
/etc/init.d/$service start
fi

somehow if I run it manually it works fine by doing source scriptName after I add it to crontab even if the service is stopped, it keeps on echoing nginx is running and does not start the service.

Then I found another script in digital ocean

https://www.digitalocean.com/community/tutorials/how-to-use-a-simple-bash-script-to-restart-server-programs

#!/bin/sh

ps auxw | grep nginx | grep -v grep > /dev/null

if [ $? != 0 ]
then
        /etc/init.d/nginx start > /dev/null
fi

again if I run it manually it works, but it will ask for the user's password

==== AUTHENTICATING FOR org.freedesktop.systemd1.manage-units ===
Authentication is required to start 'nginx.service'.
Authenticating as: abc,,, (abc)

after I typed in the password ==== AUTHENTICATION COMPLETE === will show and starts nginx

then I add the script into crontab...I get this permission error

Failed to start nginx.service: Interactive authentication required.

Does anyone know how I can fix this?

Thanks in advance for any advices.

I have a running instances which shows the site properly on aws. what's included to run the site are django, nginx, uwsgi with elastic ip

I have created an image of the instances. Launch the instance which now I have a second instance which is the same as the first one.

The second instance just have normal floating ip. When I input the ip into the browser, I was expecting to see my site too else just a long loading until it timeout since I didn't do any configurations in site-available yet.

Anyways, I was then able to see only the nginx welcome page. I went to the site-available, put the ip into server_name, also I setup a dns for a subdomain name. After the changes, I restarted uwsgi.

I tried using ip and subdomain on browser, but still showing the nginx welcome page. There isn't even an error.

Does someone have any idea why or advice what I do try?

They are both the same settings, shouldn't it work properly?

P.S. I then tried moving the elastic ip from first instance to the second instance...I used the domain of first instance in browser...then my site pops up not the nginx welcome page

site-available for the original instance which works perfectly

# `gzip` Settings
#
#
# gzip on;
# gzip_disable "msie6";

gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_min_length 256;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/vnd.ms-fontobject application/x-font-ttf font/opentype image/svg+xml image/x-icon;


# configuration of the server
server {
    # the port your site will be served on
    listen      80;

    # the domain name it will serve for
    server_name  xxx.xxx.xxx.xxx subdomain.domain.com; # substitute your machine's IP address or FQDN
    charset     utf-8;

    # max upload size
    client_max_body_size 25M;   # adjust to taste

    # Django media
    location /media  {
        alias /home/ubuntu/appName/appName/mediafiles;  # your Django project's media files - amend as required
    }

    location /static {
        alias /home/ubuntu/appName/appName/static; # your Django project's static files - amend as required
    }

    # Finally, send all non-media requests to the Django server.
    location / {
        uwsgi_pass  unix:/tmp/appName.sock;
        include     /home/ubuntu/appName/appName/uwsgi_params; # the uwsgi_params file you installed
    #add_header 'Access-Control-Allow-Origin' '*';
    }




    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/subdomain.domain.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/subdomain.domain.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot


    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    } # managed by Certbot


}

as for the second instances...I changed the server_name and I tried including and excluding the ssl but both the same result

this is the config for the second instance

# `gzip` Settings
#
#
# gzip on;
# gzip_disable "msie6";

gzip_vary on;
gzip_proxied any;
gzip_comp_level 6;
gzip_buffers 16 8k;
gzip_http_version 1.1;
gzip_min_length 256;
gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/vnd.ms-fontobject application/x-font-ttf font/opentype image/svg+xml image/x-icon;


# configuration of the server
server {
    # the port your site will be served on
    listen      80;

    # the domain name it will serve for
    server_name  xx2.xx2.xx2.xx2 subdomain2.domain2.com; # substitute your machine's IP address or FQDN
    charset     utf-8;

    # max upload size
    client_max_body_size 25M;   # adjust to taste

    # Django media
    location /media  {
        alias /home/ubuntu/appName/appName/mediafiles;  # your Django project's media files - amend as required
    }

    location /static {
        alias /home/ubuntu/appName/appName/static; # your Django project's static files - amend as required
    }

    # Finally, send all non-media requests to the Django server.
    location / {
        uwsgi_pass  unix:/tmp/appName.sock;
        include     /home/ubuntu/appName/appName/uwsgi_params; # the uwsgi_params file you installed
    #add_header 'Access-Control-Allow-Origin' '*';
    }


    #####################################
    # TRIED INCLUDING AND EXCLUDING SLL
    #####################################
    listen 443 ssl; # managed by Certbot
    ssl_certificate /etc/letsencrypt/live/subdomain2.domain2.com/fullchain.pem; # managed by Certbot
    ssl_certificate_key /etc/letsencrypt/live/subdomain2.domain2.com/privkey.pem; # managed by Certbot
    include /etc/letsencrypt/options-ssl-nginx.conf; # managed by Certbot


    if ($scheme != "https") {
        return 301 https://$host$request_uri;
    } # managed by Certbot
    #####################################
    # TRIED INCLUDING AND EXCLUDING SLL
    #####################################

}

I am facing "ssh_exchange_identification: read: Connection reset by peer" error. I am not able to ssh my instance.

Any help is highly appreciated. Thank you. Below is the debug information

ssh -i ~/.ssh/aaa.pem [email protected] -v OpenSSH_7.2p2 Ubuntu-4ubuntu2.4, OpenSSL 1.0.2g 1 Mar 2016 debug1: Reading configuration data /etc/ssh/ssh_config debug1: /etc/ssh/ssh_config line 19: Applying options for * debug1: Connecting to 52.xxx.xx.xx [52.xxx.xx.xx] port 22. debug1: Connection established. debug1: key_load_public: No such file or directory debug1: identity file /home/xx/.ssh/aaa.pem type -1 debug1: key_load_public: No such file or directory debug1: identity file /home/xx/.ssh/aaa.pem-cert type -1 debug1: Enabling compatibility mode for protocol 2.0 debug1: Local version string SSH-2.0-OpenSSH_7.2p2 Ubuntu-4ubuntu2.4 ssh_exchange_identification: read: Connection reset by peer

This actually happened quite a few times already. sometimes it happened once a day, sometimes weeks. I wasn't able to see any error logs.

What I had to do in order to fix is (rebooting never worked) to stop then start the instance.

I even tried launching another instance from a backup image I made awhile back then re-deployed my codes since all settings are the same, just need the new code then dns into this new ip instance. I tried using launching because there were at least two times the stopping took like 20 minutes and still saying stopping....so I launched a new instance. THEN this new instance have the same thing happen just out of no where that I can't ssh into my instance, site isn't running. So I had to do the previous steps again.

Any suggestion on what might be going on and how I can do checks?

recently I learned how to setup load balancer using aws and direct it to root / sub domain.

But while playing around with it, I figured there are some delays. For example, my settings are

3 instances, using nginx, node, with pm2

I changed the html content for each instances such as <h1>load 1</h1> <h1>load 2</h1> <h1>load 3</h1>

then when I keep reloading the load balancer dns, it does show the instances are switching randomly so I know that it's working.

then I went into one of the instances, stop the pm2

I went to refresh my page again, sometimes it would show gateway error which I believe it's because it went into the instance that I stopped, sometimes it would show the page BUT with super bad css that when I open console.log, there will be tones of errors saying cannot locate file.

Takes like 1-2 minutes until everything is totally fine.

I am wondering if this is normal and how it should happen? Or there is a way to optimise it in order for user to have a better user experience?

Thanks for any advise.

Actually I am still a bit confused with aws auto scale up and load balancer

I am wondering if someone can help me clarify if my logic of understand is right and if so, would it be possible to combine the usage of auto-scale up and load balancer?

As for auto-scale up let's say I can setup a cloudalarm that if my main instance reaches to cpu > 90% for a minute then a new instance will spin up and the new instance will share the burden with the main instance to lower the cpu usage. (after spin up, aws will do the rest for us)this is as if I set the setting to spin up 1 instance up to 5 max

If this is correct for my understanding, does the new instance need to have the exactly the same settings of the server? If so, that means I need to create an image of the main instance and each time if I update the main instance I will have to create a new image then change the cloudalarm / auto-scale up to launch the new image right?

1. If the above is right, is there a better way of doing this? or else, it seems like I have to keep on creating image and change settings if the main instance get changes everyday.

As for load balancer, I read through the documentation and played around. Spin up three instances, registered them all to load balancer. All 3 are healthy, and if I reload the page, it keeps on changing between the three instances. If one instance is down, the other two will be running.

If this is also correct for my understanding, does this mean I need to have 2+ the same instances running and each time when I do deployment I need to do it to all the instances? Wouldn't this be a lot of work if I have lots of servers and want all of them to use load balancer in case the server suddenly becomes unhealthy?

If both of my understanding are correct, is it possible to somehow use auto-scale up with cloudalarm that if somehow main instance is unhealthy create image of the instance then register to the load-balancer?

Sorry for the trouble for the readings, but I do wondering if I am understanding them wrong or I am over thinking and getting myself confused.

Thanks for any advice and help.

I know this question has been asked in quite a few places even on amazon's form such as

https://forums.aws.amazon.com/thread.jspa?threadID=223727

I followed the documentation too but it doesn't seem to be working at all.

Can someone please give me an idea what I might be doing wrong?

I bought a new domain in godaddy. In dns management, I removed the only A record in it, now there's no A record in godaddy's dns management.

In aws, I created a load balancer and I used the dns name load balancer created which works quite well if I just paste it into a browser such as balancerName-1230.us-west-2.elb.amazonaws.com

I followed the steps to create a hosted zone in route 53, created a new record set

I tried in my browser for example.com and I get This site can’t be reached

P.S. while creating the A record, I did not type in anything in the name field to leave it as the root domain.

Is there anything I am missing that's why it's not working? Anyone has idea about this?

Thanks in advance for any help.

Currently using aws as my db hosting. Instead of using RDS I am using instances to include mariaDB and distribute few instances over different region for replication.

Everything works fine but because using instances, aws does not back up automatically so now I am creating a crontab job to run an aws cli to create image automatically. I am still in testing phase but then I found out, each time when I run the script and aws does create an image of the instance BUT the catch is, mariaDB would stop completely and would not start up automatically.

I actually got it fixed but wonder if people know about this and if there is a way to prevent this.

I have googled then tried running galera_new_cluster on the 1st node which then showed error about file named grastate.dat that I can change the bootstrap value from 0 to 1.

I did that, then run the galera_new_cluster again which then worked perfectly to start up mariadb, then I have to go to other dbs and start them manually.

At first, I thought this would be then fixed but guess not. I tried running the aws cli to create image of the instance again. The dbs all went down again. the bootstrap value is back to 0 that I have to set it to 1 and run all those commands again and to other server too.

I thought of writing a script to do it step by step each time after creating an image but it would be kinda a hassle.

Does anyone know about this situation or a way to fix it permanently?

Thanks in advance for any ideas.