nginx ssl only configuration

Configuring Nginx with SSL can be a bit of a nightmare to do properly. Here is a handy config file I use as a starting base for it. #HTTP Redirect server { # Set up the port listener listen 80; listen [IPV6]:80 default ipv6only=on; # Set the hostname to be served server_name SITE www.SITE; # Set up access and error logs accesslog /var/www/SITE/logs/nginx.access.log; errorlog /var/www/SITE/logs/nginx.error.log; # Redirect all requests on http to https location / { rewrite ^ https://$servername$requesturi?

2 min read
Read more →

msd fail

When security fails it’s all good to point and laugh but sometimes it really isn’t funny. The MSD (Ministry of Social Development) in New Zealand set up a kiosk system to assist with job seeking at local centres around the country. Unfortunately they didn’t heed the security report produced by Dimension Data and left open a gaping hole into their enterprise network. This hole was accessible by one of the oldest tricks in the book, Microsoft Word’s File > Open > Browse Network.

1 min read
Read more →

nginx install on debian

It took ages to try, and find a guide that actually helps with installing Nginx on a Debian system. Most either involve compiling from source or are incomplete to the point of leaving you with a useless system. So there are a number of steps to take to get Nginx up and running on a Debian system, and I will cover my way here. Step 1 – sources.list First step is to get the sources for Nginx and php5-fpm into your apt source list.

3 min read
Read more →

nginx config files

Ever since moving to Nginx I have had the self-satisfied smile of someone who knows his web applications are going to be snappy. That’s not just down to good coding, but down to the quality of the server software employed. One problem that I came across with Nginx was implementing features found in the .htaccess files you would usually use to set per site and directory settings within PHP and Apache.

2 min read
Read more →