Skip to main content

How to exclude IP from logs in nginx?

Imagine a situation: you have a static ip and you do a lot and do a lot of time editing the site. At the same time, you still need to monitor, periodically, the logs for errors in queries, or for vulnerability scans. And the presence of a large number of records with your IP makes it difficult to view logs.

With the help of a conditional entry that is available in nginx, starting with version 1.7.0, we can check the visitor's ip and not record it in the log files. Indeed, why do this if logging your ip is not necessary?

(Further…)

Free SSL certificate from L'ets Encrypt to Debian

The massive transition of sites to work on an encrypted protocol is gaining momentum day after day. And if before working with certificates was a rather routine task, today you can easily and free get a certificate with a basic verification of ownership of the owner.

And this will help us cool service Let's Encrypt . This certification center began to work in beta mode on December 3, 2015. And during this time the number of its users is growing.

(Further…)

How to hide the server application version

Hiding the version of the software used on the server is a good practice to confuse potential hackers. After all, knowing the version, for example, a web server, you can try to exploit a vulnerability that is relevant for this version.

And if the hacker does not know which version of software is used on the server, the selection of the vulnerability becomes a little more difficult. This page presents the parameters of some applications that allow you to hide the version and even the fact of using the service itself.
(Further…)

Installing php 7.0.5 on debian

While some put php 5.3 , getting it out of the grave, I decided not to lag behind the whole planet, where the sites are translated to the seventh version of php, which is so much praised on the Internet, including high speed, and installed it from the DotDeb repository today. I must say, the increase in speed is really noticeable. My websites and WordPress, and MODX began to fly yet. :) That's how I did the migration.

(Further…)

Enable http2 support on a server with nginx and Debian

HTTP / 2 is the second version of the http network protocol, which includes many different improvements. These include multiplexing requests (all requests can be processed in parallel), increased performance, header compression, etc.

HTTP / 2 has replaced SPDY, which has been discontinued.

Nginx supports the http / 2 protocol, starting with version 1.9.5. However, only version 1.6.2 is present in the stable release of Debian Jessie. Therefore, we will connect the backports repository to upgrade nginx to 1.9.10.
(Further…)