Content-Security-Policy makes page render differently

2020-12-18 Thread Paul Pace
When I load a page from OpenBSD served with relayd and httpd with Content-Security-Policy set to default-src self, I can see that a basic HTML page that normally renders with all of the text in the center is now rendered on the left. I have this currently configured with http://mostlybsd.com n

Client-authenicated TLS handshake with relayd

2021-02-19 Thread Paul Pace
Hello! I am putting a small server behind Cloudflare that currently is configured to serve everything through relayd. I want to use their option of client-authenticated TLS handshakes, but I can't see a way to do it with relayd - is this possible? It does look like I could use httpd tls cli

Non-default partitions and upgrades

2021-04-12 Thread Paul Pace
Hello! I generally try and run things as a project recommends, but I am wondering about running different additional partitions (e.g., add /var/www) or changing partition letter (e.g., move /var to the end for convenient VPS expansion). I know it isn't the biggest thing in the world, but wou

gzip-static option isn't working on default index

2023-11-09 Thread Paul Pace
I have gzip-static set in a server block in httpd.conf. If I make the following request: curl -I -H 'Accept-Encoding: gzip,deflate' http://example.com the response has no Content-Encoding header and the Content-Length matches /var/www/htdocs/index.html. If I make the following request: curl

self-hosted man.openbsd.org script?

2023-12-24 Thread Paul Pace
I have this vague memory of reading someone who posted a script, IIRC, to convert the system's man pages to HTML, or similar, into somewhere under /var/www and the pages worked just like the highly useful man.openbsd.org, and not like the plain text pages that everyone always posts to their web

Re: relayd forward with tls

2024-01-04 Thread Paul Pace
On 1/4/24 10:22 AM, Adriano Barbosa wrote: Hi! I'm trying to use relayd with multiple FQDNs mixing remote servers with and without tls: relayd -- fqdn1 --> 127.0.0.1 (no tls) -- fqdn2 --> x.x.x.x (with tls) I wrote my relayd.conf like this: table { 127.0.0.1 } table { x.x.x.x } http

Re: relayd forward with tls

2024-01-07 Thread Paul Pace
On 1/6/24 7:35 PM, Adriano Barbosa wrote: On Thu, Jan 04, 2024 at 06:57:10PM -0800, Paul Pace wrote: On 1/4/24 10:22 AM, Adriano Barbosa wrote: Hi! I'm trying to use relayd with multiple FQDNs mixing remote servers with and without tls: relayd -- fqdn1 --> 127.0.0.1 (no tls)

Re: relayd forward with tls

2024-01-08 Thread Paul Pace
On 1/7/24 1:31 PM, Adriano Barbosa wrote: On Sun, Jan 07, 2024 at 05:21:04AM -0800, Paul Pace wrote: On 1/6/24 7:35 PM, Adriano Barbosa wrote: On Thu, Jan 04, 2024 at 06:57:10PM -0800, Paul Pace wrote: On 1/4/24 10:22 AM, Adriano Barbosa wrote: Hi! I'm trying to use relayd with mul

cloudflare.cdn.openbsd.org has been down for days

2024-04-24 Thread Paul Pace
Hello! Apologies if this was announced some place as planned and I missed it, but I just wanted to let everyone know that cloudflare.cdn.openbsd.org has been down for a few days now. pkg_add -nu https://cloudflare.cdn.openbsd.org/pub/OpenBSD/7.4/packages-stable/amd64/: TLS handshake failure:

Relayd forward to multiple ports on one target host?

2024-05-02 Thread Paul Pace
Hello! I have an OpenBSD server that hosts multiple services listening on various ports (some projects have their own web server, some projects require a reverse proxy, some projects just use httpd, etc.). This server receives requests via relayd on a different server. I was hoping to not ins

Re: Relayd forward to multiple ports on one target host?

2024-05-03 Thread Paul Pace
On 2024-05-02 07:32, Manuel Giraud wrote: table { 127.0.0.1 } table { 127.0.0.1 } table { 127.0.0.1 } On 2024-05-02 07:02, Zé Loff wrote: table { 10.17.16.10 } table { 10.17.16.10 } table { 10.17.16.10 } Multiple tables - I didn't see that! I'm going with something like th

Re: relayd filter

2023-06-06 Thread Paul Pace
On 6/5/23 3:15 PM, Nick Bouliane wrote: Hi, in relayd.conf I'm trying to do : pass from 192.168.1.1 path "/something.html" If I individually specify the "from" or the "path", it works but when I combine both, it doesn't work. Nowadays, when I come upon this I just use tags and move on. Some

Re: Self-hosting OpenBSD server, any documentation?

2023-07-08 Thread Paul Pace
On 7/8/23 1:03 AM, Theo de Raadt wrote: Jonathan Drews wrote: On Sat, Jul 8, 2023, at 01:42, Jonas Borchelt wrote: The book "Absolute OpenBSD" is an excellent choice to expand your knowledge of the OpenBSD operating system. It was written by Michael W. Lucas and is regarded as a comprehe

Swap disklabel partition location?

2021-09-15 Thread Paul Pace
Hello! I am wondering if there is some requirement to have the swap disklabel partition always as partition b? I have a VPS where I might prefer to put swap at the end so when the VPS RAM and storage is increased, I can increase swap size, as needed, but I can't figure out why this might be a

Re: Swap disklabel partition location?

2021-09-15 Thread Paul Pace
ge near the end. And then yes, you should be able to re-allocate it in the future, upon a reboot. But it is also possible that you'll hit bugs in the disklabel editor, since I've never heard of anyone doing this. Paul Pace wrote: Hello! I am wondering if there is some requirement to

Re: httpd(8) and PHP - more details in error log

2021-10-05 Thread Paul Pace
On 10/4/21 11:45 PM, openbsd.l...@krottmayer.com wrote: Hi, I use PHP on OpenBSD's HTTPD for my private web page. In the default configuration it's hard to debug an PHP error, because I don't see a time or the specific request on which the error occurred. Is there a configuration for PHP or HTT

Re: Rate limit the httpd web server for signup requests

2024-06-11 Thread Paul Pace
On 2024-06-11 15:41, Martin wrote: I already do some rate limiting with stateful tracking options for PF, which works really great for the stuff I use it for. I also use block lists of known bad IP addresses etc. But what useful methods exists that prevent spamming a HTML signup form from stuff

Re: Rate limit the httpd web server for signup requests

2024-06-13 Thread Paul Pace
On 6/12/24 10:32 PM, Chris Bennett wrote: It's not perfect, but I have a long list of regexes that I know are spam that I have my Perl code that processes the form block. Trying to block from a log is not very helpful. It can let through thousands of the same spam attempts before the log catches

Multiple httpd.conf rules within location brackets must be on separate lines

2024-09-15 Thread Paul Pace
I just discovered that location block rules in httpd.conf can only be on separate lines. For example, the following does not pass the syntax test (httpd -n): location "foo" { block, no log } But this passes: location "foo" { block no log } However, server block rules can cont

Re: Multiple httpd.conf rules within location brackets must be on separate lines

2024-09-15 Thread Paul Pace
lowing will not pass the syntax test: location "someplace/something.ht*" { block, no log } Thank you, Paul Paul Pace wrote: I just discovered that location block rules in httpd.conf can only be on separate lines. For example, the following does not pass the syntax test (httpd -n)

7.6 MariaDB packages version is EOL

2024-11-05 Thread Paul Pace
The current version of MariaDB in packages is 10.9 series, which was EOL August, 2023 as a part of the MariaDB short-term maintenance stable series, originally released in March, 2022.[1] I don't know how much it impacts users to upgrade to a newer version, but it seems like packages should co

Mount options for attached block storage partition to be used exclusively for rsnapshot

2024-09-27 Thread Paul Pace
Hello! I have a VPS that will use rsnapshot to back up other servers via the private network. The storage used to support this is a block storage device provided by my ISP. Assuming I am understanding mount options and my use case correctly, I've generated the following for /etc/fstab: 1

Re: WordPress pretty permalinks with httpd

2024-11-26 Thread Paul Pace
On 2024-11-25 11:09, Marcus MERIGHI wrote: location match "/(wp%-json/.*)$" { request rewrite "/index.php/%1" fastcgi socket "/run/php-fpm.sock" pass } Thank you for this one, especially. It fixes the REST API issue. Unfortunately,

WordPress pretty permalinks with httpd

2024-11-25 Thread Paul Pace
I have been working on getting pretty permalinks[1] to work properly in httpd. The WordPress project publishes configurations for Apache and nginx.[2] I have a slightly better but still very weak grasp of nginx, so here is the key part of nginx.conf, as I understand it, for supporting pretty

Re: pkg_info -Q: inconsistent search results

2024-12-09 Thread Paul Pace
On 12/9/24 7:58 AM, Maxim wrote: The FAQ page [FAQ15] suggests to use "pkg_info -Q" to search the collection of pre-compiled packages. When I search for "tcl", I get a few "nextcloud" packages only, but no Tcl: $ pkg_info -v -Q tcl I've been using lynx instead: lynx --dump https://cdn.op

doas timeout feedback

2025-02-14 Thread Paul Pace
I know there are several posts regarding timeout, so I am aware this has been discussed, but I just want to provide some feedback. I am only an enthusiast, but I have switched from Ubuntu Server to OpenBSD for all of my web servers and have now been a very happy user of OpenBSD for around 5 ye

It would be nice if the Elixir package supported multiple versions of Elixir

2025-03-06 Thread Paul Pace
Hello! Since I don't know anything about creating or maintaining packages, I am not pretending to be requesting something trivial. I am currently figuring out how to install and configure Akkoma (a fork of Pleroma), and while Akkoma currently supports up to Elixir 1.17, Pleroma only supports

Re: It would be nice if the Elixir package supported multiple versions of Elixir

2025-03-07 Thread Paul Pace
On 3/6/25 12:59 PM, Volker Schlecht wrote: Well, there is also the option of porting either for OpenBSD. Still not a guarantee for anything, but at least problems won't come as a surprise. If that's something you want to consider, I'd be happy to review and test. I think based on the previous