Roger's questions

From a bash script:

source ./expect.sh

I am including a expect code:

#!/bin/bash
/usr/bin/expect <<EOL
spawn ssh-copy-id -i /home/user/.ssh/id_rsa.pub 111.111.111
expect '*?assword*'
send 'thepassword'
interact
EOL

And I am getting this:

spawn ssh-copy-id -i /home/user/.ssh/id_rsa.pub 111.111.111.111
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
[email protected]'s password: 

Then I try to connect and I am prompted for a password...

Checking the server, I'm certain no key was uploaded because I would expect to list the "authorized_keys" file:

root@server: ls /home/user/.ssh/
known_hosts

What am I doing wrong?

I am setting up a nginx/php-fpm only server that will just redirect requests in a very simple way.

I am planing to do this like this:

• the request should be as simples as for example http://server-url.com?redirection-url.com,
• save the url in log file,
• log with a real time analytics (piwik.org)
• and at end proceed with the redirection via php-fpm.

This will be a very fast server only used to this purpose.

The question is: is there a way to calculate the right server I'll be needing if this server receives, let say, from 5k to 100k visits a day?

Would Linux Bootstrap JeOS VPS be a solution to this problem?

Thanks.

I'd like to make a 301 rewrite to the sites's index without any querystring. Like this:

http://example.com/anypage.asp?anyvar=anyvalue

To:

http://example.com/

Here's a real example:

http://atipico.com.br/conteudo.asp?P_categ=23

I am trying to follow this: http://wiki.nginx.org/NginxHttpRewriteModule#rewrite

(The commented are my attempts):

location ~ /conteudo\.asp(.*)$ {
    #rewrite ^ / permanent;
    #rewrite ^ /? permanent;
    #return 301 /;
    #return 301 /?;
    #if ($args) { return 301 /; }
}

It always rewrites to http://atipico.com.br/?P_categ=23

Any ideas?

I have a list of 301 rewrites to set in Nginx. And I want to specify exactly the uri instead of using regex. What's the write way to do that?

This is what I think it should be done:

rewrite /o-atipico /rogerio-madureira.htm permanent;
rewrite /CHANGELOG.txt / permanent;
rewrite /MaxLucado / permanent;
rewrite /adwords / permanent;
rewrite /animals.txt / permanent;
rewrite /apresentacao / permanent;
rewrite /arquivos / permanent;
rewrite /atipico / permanent;
rewrite /atipico.com.br / permanent;
rewrite /baix / permanent;
rewrite /baixe.asp / permanent;
rewrite /blog / permanent;
rewrite /c / permanent;
rewrite /calendario.asp / permanent;
rewrite /capture.asp / permanent;
rewrite /contato / permanent;
rewrite /contato.asp / permanent;
rewrite /conteudo.asp / permanent;
rewrite /cu / permanent;
rewrite /cur / permanent;
rewrite /curs / permanent;
rewrite /curso / permanent;
rewrite /curso.asp / permanent;
rewrite /cursoempresa.asp / permanent;
rewrite /cursoindividual.asp / permanent;
rewrite /cursoonline.asp / permanent;
rewrite /cursopresencial.asp / permanent;
rewrite /empreendedor / permanent;
rewrite /empresário / permanent;
rewrite /error_log / permanent;
rewrite /exemplo-de-codifo-semantico.html / permanent;
rewrite /favicon.bmp / permanent;
rewrite /function.file-put-contents / permanent;
rewrite /function.getimagesize / permanent;
rewrite /function.include / permanent;
rewrite /galeria.html / permanent;
rewrite /google / permanent;
rewrite /home.htm / permanent;
rewrite /home.xsl / permanent;
rewrite /hospedagem-de-sites / permanent;
rewrite /i / permanent;
rewrite /ideias-em-curso.php / permanent;
rewrite /index.php5 / permanent;
rewrite /inex.htm / permanent;
rewrite /ivar.html / permanent;
rewrite /marketing.htm / permanent;
rewrite /matricula.asp / permanent;
rewrite /me / permanent;
rewrite /muieblackcat / permanent;
rewrite /natal / permanent;
rewrite /news / permanent;
rewrite /news.html / permanent;
rewrite /obrigado / permanent;
rewrite /overview.asp / permanent;
rewrite /pagina.html / permanent;
rewrite /palestra / permanent;
rewrite /participe.asp / permanent;
rewrite /performance-de-sites / permanent;
rewrite /pesquisa.htm / permanent;
rewrite /prodo / permanent;
rewrite /prodo.asp / permanent;
rewrite /promocao. / permanent;
rewrite /promocao.asp / permanent;
rewrite /promoparti.asp / permanent;
rewrite /propaganda-e-anuncios-de / permanent;
rewrite /r / permanent;
rewrite /results.aspx / permanent;
rewrite /robost.txt / permanent;
rewrite /robots.txt / permanent;
rewrite /seo / permanent;
rewrite /shorinji / permanent;
rewrite /sites / permanent;
rewrite /sualoja.asp / permanent;
rewrite /teste.htm / permanent;
rewrite /treinamento-de-marketing.htm / permanent;
rewrite /treinamento-de-seo.htm / permanent;
rewrite /treinamento-de-vendas.htm / permanent;
rewrite /treinamentos.asp / permanent;
rewrite /vcard / permanent;
rewrite /vendas / permanent;
rewrite /vendas.htm / permanent;
rewrite /vendedor / permanent;
rewrite /xml.asp / permanent;

Is it the best way to do that?

Thanks.

I am redirecting /example.php?var=value to /index.htm like this:

rewrite /example.php?var=value / permanent;

However, the browser ins printing the final uri like this:

domain.com/?var=value

How can I have a clean uri like this?

domain.com

Thanks.

I'd like to make two simple 301 page redirections.

For example:

http://domain.com/example.php?var=value

and:

http://domain.com/some-page

Both redirecting to:

http://domain.com/index.htm

Which is the index of the domain.

I tried:

location / {
    index index.htm index.php;
    rewrite example.php?var=value / permanent;
}

But it is not working...

Any ideas?

Thanks.

I am using this code to serve a file for download via PHP:

$file='file.pdf';
$filepath="/path-to-download-folder/$file";

if(!file_exists($filepath)){
  header('HTTP/1.1 404 Not Found');
  exit;
}elseif(!is_file($filepath) or !is_readable($filepath)){
  header('HTTP/1.1 403 Forbidden');
  exit;
}else{
    header('Cache-Control: no-store, no-cache, must-revalidate');
    header('Content-Type: '.mime_content_type($filepath));
    header('Content-Length: '.filesize($filepath));
    header('Content-Disposition: attachment; filename="'.$file.'"');

    set_time_limit(0); // Big files/slow connections may result in incomplete downloads
    readfile($filepath);
    exit;
}

However some people are receiving a corrupted PDF file.

For example: http://mlkshk.com/r/8FGS

In Nginx I have this:

    gzip on;
    gzip_disable "msie6";
    # gzip_vary on;
    # gzip_proxied any;
    # gzip_comp_level 6;
    # gzip_buffers 16 8k;
    # gzip_http_version 1.1;
    # gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript;

My question is: how to set it not to gzip PDF files? Maybe this is the problem...

Thanks.

I wrote this to prevent the directory "download" to be accessed but from the IP 1.2.3.4.

location ~ /folder/download {
    allow 1.2.3.4;
    deny all;
    return 403;
}

However, the directory "folder" is being blocked as well and I did not wanted this.

What am I doing wrong?

UPDATE:

Here it goes all the real config:

server {
    server_name www.domain.com;
    rewrite ^ $scheme://domain.com$request_uri? permanent;
}

server {
    server_name atpc.info;

    access_log /var/log/nginx/atpc.info.access;
    error_log /var/log/nginx/atpc.info.error;

    root /var/www/atpc.info;

    location ^~ folder/download {
            allow 1.2.3.4;
            deny all;
    }

    location ^~ folder/includes {
            allow 1.2.3.4;
            deny all;
    }

    location ^~ folder/mythings {
            allow 1.2.3.4;
            deny all;
    }

    location ^~ folder/functions {
            allow 1.2.3.4;
            deny all;
    }

    location / { index index.htm index.php; }

    location ~ .php$ {
            fastcgi_pass 127.0.0.1:9000;
            fastcgi_index index.php;
            fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
            include /etc/nginx/fastcgi_params;
    }

    location = /favicon.ico {
            return 204;
            access_log off;
            log_not_found off;
    }

    location = /robots.txt { allow all; log_not_found off; access_log off; }
    location ~ /\. { deny all; access_log off; log_not_found off; }
}

Thanks.

I have different files inside three different directories.

I'd like to block access to all files inside those (also block directory listing).

This way, I'd block, for example:

• /a/b/file

• /a/c/file

• /a/d/file

Whatever the file extension...

This is what I am trying:

location /a/(b|c|d) {
    allow 1.2.3.4; #IP
    deny all;
    return 403;
}

But it's not working.

I want to deny access to one specific folder (and all files inside of it) but I'd like that php files from inside my server could have access to it (and its files). Is it possible? This is what I am trying without suvccess:

location /folder/ {
    allow 1.2.3.4;  # my server IP
    deny all;
    return 404;
}

Is there a way to auto-rename an existing file on the receiver? For example: if filename already exists, it auto-rename filename to something like filename_001, filename_002 and so on....

So far all I have is this:

$ rsync -rh --progress --stats --exclude '.thumb' \
    --update --perms /origin /destination

By the way, I know rsync has --ignore-existing to "skip updating files that exist on receiver", but I guess what I need would be something like --rename-existing.

Please, how can I make this simple operation in Nginx:

I wish that every requests for uris like: http://example.com/adm or: http://example.com/adm Goes to the wordpress login page: wordpress/wp-login.php (The wordpress installation is inside the folder "wordpress").

I've tried:

location /adm/ { alias wordpress/wp-login.php; }
location /adm { alias wordpress/wp-login.php; }

and:

rewrite ^/adm$ wordpress/wp-login.php;

But with no success... The worse here is that some rules, like "rewrite /adm wordpress/wp-login.php;" (that does work!), auto redirects some requests, once the user is logged in, to the default wordpress admin page... And I do not know why...

Just in case someone asks, this is my serve conf. file:

server {
    server_name www.example.com;
    rewrite ^ http://example.com$request_uri? permanent;
}

server {
    server_name example.com;

    access_log /var/log/nginx/example.com.access;
    error_log /var/log/nginx/example.com.error;

    root /var/www/example.com;

    index index.htm index.php;

    location / {try_files $uri /wp$uri/ /wordpress/index.php$args;}

    location ~ .php$ {
        try_files $uri =404;
        #fastcgi_split_path_info ^(.+\.php)(/.+)$;
        fastcgi_pass 127.0.0.1:9000;
        fastcgi_index index.php;
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        include /etc/nginx/fastcgi_params;
    }

    location = /favicon.ico {log_not_found off;access_log off;}
    location = /robots.txt {allow all;log_not_found off;access_log off;}
    location ~ /\. {deny all;access_log off;log_not_found off;  }
}

Thanks.

I have a site with just one file: index.htm which have some ajax linked to php files. I'd like to make those php files only accessible via ajax (post and get) coming from this index file and block access to all files but the index.htm. Is it possible in Nginx? Thanks.

I have configured Nginx (on my local server) to add Expires headers like this:

location ~* \.(ico|css|js|gif|jpe?g|png)$ {
    expires max;
    #auth_basic "Restricted, please login";
    #auth_basic_user_file htpasswd.users;
}

But YSlow keeps on saying:

There is 1 static component without a far-future expiration date.
* (no expires) http://atpc.dev/f/a/i/favicon.ico

Am I doing something wrong?

How do I set up a subdomain in Postfix just with the purpose to receive forwarded emails and pipe them to a PHP script?

Can somebody throw me in the right direction in order to get emails forwarded from Google Apps to be piped by Postfix to a PHP Script? This answer didn't helped much but to tell me that I need to confgiure a subdomain in order to receive the email and pipe them to a php script. Is it right?

This is a very basic question but I got to get this solved in order to go further. I have configured my MX reccords with Google Apps dns, so all my domain's incoming email go to Apps. I have also Postfix installed on my Linux server and I am able to send email from PHP pages using PHPMailler class. I don't understand. Isn't email beeing processed by Google as a email hosting? I haven't made all configurations described in: mailserver for google apps email

Thank you.

I have already set up a public key to automate the login on remote server for my user.

So this is running without any problem from cli:

rsync -r -a -v -e "ssh -l user" --delete ~/local/file 111.111.11.111:~/remote/;

But, when I try to run the same from a PHP script (on a webpage in my local server):

$c='rsync -r -a -v -e --log-file=FILE "ssh -l user" --delete ~/local/file 111.111.11.111:~/remote/';

//exec($c,$data);
passthru($c,$data);
print_r($data);

This is what I receive:

2011/01/23 19:18:29 [6401] rsync: connection unexpectedly closed (0 bytes received so far) [sender] 2011/01/23 19:18:29 [6401] 
rsync error: unexplained error (code 255) at io.c(601) [sender=3.0.7] 

The permissions qre set like this:

Local:
chmod 600 ~/.ssh/local-rsync-key
chmod 600 ~/.ssh/local-apache-key
chmod 700 ~/.ssh/

Remote:
chmod 600 ~/.ssh/authorized_keys
chmod 700 ~/.ssh/
chmod 700 ~/

I registered two keys on ~/.ssh/authorized_keys:

user@localserver
apache@localserver

I went dry of ideas... I guess I have to do something else in the remote /etc/ssh/sshd_config file. I am running Nginx in both servers. Thanks for any help.

UPDATE:

While I cannot get rsync, this is how I got to transfer the file from local to remote:

if($con=ssh2_connect('111.111.11.111',22)) echo 'ok!';
if(ssh2_auth_password($con,'apache','xxxxxx')) echo ' ok!';
if(ssh2_scp_send($con,'localfile','/remotefolder',0755)) echo ' ok!';

Local file needs: 0644 Remote folder needs: 0775

I also read this suggestion: "I don't think you want to "copy the key somewhere where apache can get to it" - that's a security violation. Better to change the script to run as a secure user and then setup the .ssh keys for passwordless login between servers.

If somebody know how to do this, please, it would be of great help.