nginx

Guide on how to use regex in Nginx location block section?

风流意气都作罢 提交于 2021-02-17 08:28:56
问题 Nginx regex location syntaxe Regex expressions can be used with Nginx location block section, this is implemented with the PCRE engine. What does exactly this feature support as it is not fully documented? 回答1: Nginx location: Nginx location block section have a search order, a modifier, an implicit match type and an implicit switch to whether stop the search on match or not. the following array describe it for regex. # -------------------------------------------------------------------------

使用 kubeadm 安装最新 Kubernetes 1.15 版本

荒凉一梦 提交于 2021-02-17 07:40:20
导读: kubeadm是Kubernetes官方提供的用于快速安装Kubernetes集群的工具,伴随Kubernetes每个版本的发布都会同步更新,kubeadm会对集群配置方面的一些实践做调整,通过实验kubeadm可以学习到Kubernetes官方在集群配置上一些新的最佳实践。 作者:青蛙小白 原文: https://blog.frognew.com/2019/07/kubeadm-install-kubernetes-1.15.html 最近发布的Kubernetes 1.15中,kubeadm对HA集群的配置已经达到beta可用,说明kubeadm距离生产环境中可用的距离越来越近了。 1.准备 1.1系统配置 在安装之前,需要先做如下准备。两台CentOS 7.6主机如下: cat /etc/hosts 192.168.99.11 node1 192.168.99.12 node2 如果各个主机启用了防火墙,需要开放Kubernetes各个组件所需要的端口,可以查看Installing kubeadm中的”Check required ports”一节。这里简单起见在各节点禁用防火墙: systemctl stop firewalld systemctl disable firewalld 禁用SELINUX: setenforce 0 vi /etc/selinux

[通达OA] RCE + Getshell

て烟熏妆下的殇ゞ 提交于 2021-02-17 06:56:00
跟着大佬轻松复现: https://github.com/jas502n/OA-tongda-RCE 通达OA下载: https://www.tongda2000.com/download/2019.php 傻瓜式安装,不作多介绍。 漏洞原因:未授权文件上传 + 文件包含(利用nginx日志也可以getshell) 版本不同路径不同 2013: 文件上传路径:/ispirit/im/upload.php 文件包含路径:/ispirit/interface/gateway.php 2017: 文件上传路径:/ispirit/im/upload.php 文件包含路径:/mac/gateway.php 复现过程 文件上传 抓取数据包使用Burp改成POST,再改成 from-data 就好了 Request: POST /ispirit/im/upload.php HTTP/1.1 Host: 192.168.95.129 Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36 Accept:

云原生系列3 pod核心字段

可紊 提交于 2021-02-17 06:47:09
<br /> <br /> <br />pod是容器化的基础,好比大楼的地基。<br /> Pod跟容器的关系 <br /> <br />类比一下:<br /> <br />POD: 物理机<br />容器: 物理机上的一个进程;<br /> <br />容器只是Pod的一个普通字段。<br /> <br /> Pod的作用范围 <br />跟容器的linux namespace相关的东西一定是Pod级别的,pod。<br /> <br /> <br />比如:<br /> <br />网络: hostAliases : 写入/ect/hosts内容 ; sharePrcessNamespace: 共享PID 空间<br /> <br />存储: vlume<br /> <br />安全: secret<br /> <br />调度: NodeSelector 用户指定pod跟node的对应关系 ; NodeName 标识调度过了,可用来调试pod;<br /> <br /> <br /> <br /> Pod的Container元素 containers和initContainers关系 <br /> <br />initContainers先于containers创建 ; sidecar实现的重要基础;按照定义的顺序来执行;<br /> <br />containers:

Error while using Nginx lua module: libluajit-5.1.so.2: cannot open shared object file: No such file or directory

生来就可爱ヽ(ⅴ<●) 提交于 2021-02-17 06:31:22
问题 I am receiving below error with Nginx: 2020-12-24 10:41:46 INFO XMLTooling.SecurityHelper : loading certificate(s) from file (/etc/shibboleth/sp-encrypt-cert.pem) 2020-12-24 10:41:46 DEBUG Shibboleth.ServiceProvider : registered remoted message endpoint (default::getHeaders::Application) 2020-12-24 10:41:46 INFO Shibboleth.Listener : listener service starting nginx: [emerg] dlopen() "/etc/nginx/modules/ngx_http_lua_module.so" failed (libluajit-5.1.so.2: cannot open shared object file: No such

Error while using Nginx lua module: libluajit-5.1.so.2: cannot open shared object file: No such file or directory

时光怂恿深爱的人放手 提交于 2021-02-17 06:31:11
问题 I am receiving below error with Nginx: 2020-12-24 10:41:46 INFO XMLTooling.SecurityHelper : loading certificate(s) from file (/etc/shibboleth/sp-encrypt-cert.pem) 2020-12-24 10:41:46 DEBUG Shibboleth.ServiceProvider : registered remoted message endpoint (default::getHeaders::Application) 2020-12-24 10:41:46 INFO Shibboleth.Listener : listener service starting nginx: [emerg] dlopen() "/etc/nginx/modules/ngx_http_lua_module.so" failed (libluajit-5.1.so.2: cannot open shared object file: No such

centOs7 java启动jar 并部署到nginx

Deadly 提交于 2021-02-17 05:31:08
简单启动命令 启动命令: nohup java –jar 项目名 & 注意 1.加&表示一直后台运行,不加表示临时运行,关闭窗口项目即停止运行 2.nohup:即项目在运行前新建一个nohup.out文件用来记录该项目的运行日志情况。 更新Jar包需要 杀死之前的进程重新部署 重启时需要 ps aux|grep xx.jar 获取当前jar 的端口号 kill -9 端口号 之后 再重新 java -jar xx.jar & 如需要指定端口号 java -jar xx.jar --server.port=8081 & 如果发现&无效 关闭终端还是会杀死进程就用这个 nohup java -jar xx.jar --server.port=8081 >/dev/null 2>&1 & nginx 配置 server { listen 80; server_name www.rr.com; error_page 500 502 503 504 /50x.html; location = /50x.html { root /usr/share/nginx/html; } #将/renren-admin请求转发给http://127.0.0.1:8080/renren-admin处理 location /renren-admin { proxy_pass http://127.0.0.1

部署前后端分离项目

一个人想着一个人 提交于 2021-02-17 00:13:55
1.先从后端搞起,部署django后台的环境依赖 -解决环境依赖的办法:   1.可以挨个的解决报错   2.把可以正常运行路飞哪个机器地下的python包,全部导出来,就可以     pip3 freeze > requirements.txt   3.把这个文件,传输给linux系统     linux再通过命令安装     pip3 install -r requirements.txt 3.通过模块依赖文件,直接安装,着是从讲师机器上下载的 手动创建依赖文件,然后写入 (s17luffy) [root@master luffy_boy]# cat requirements.txt certifi==2018.11.29 chardet==3.0.4 crypto==1.4.1 Django==2.1.4 django-redis==4.10.0 django-rest-framework==0.1.0 djangorestframework==3.9.0 idna==2.8 Naked==0.1.31 pycrypto==2.6.1 pytz==2018.7 PyYAML==3.13 redis==3.0.1 requests==2.21.0 shellescape==3.4.1 urllib3==1.24.1 uWSGI==2.0.17.1 4.安装uwsgi启动路飞后端

how to match # character in a url in nginx through location directive

家住魔仙堡 提交于 2021-02-16 21:37:59
问题 How do I match a # character in a url using location directive? I understand that we can use regex(PCRE), but their docs say that : The location directive only tries to match from the first / after the hostname, to just before the first ? or #. (Within that range, it matches the unescaped url.)" In short, How to match "example.com/#123456" using location ~ [someregex] { return 200 "matched"; } or with any other alternative 回答1: Simple answer, you can't actually, because that part is never

how to match # character in a url in nginx through location directive

喜你入骨 提交于 2021-02-16 21:37:00
问题 How do I match a # character in a url using location directive? I understand that we can use regex(PCRE), but their docs say that : The location directive only tries to match from the first / after the hostname, to just before the first ? or #. (Within that range, it matches the unescaped url.)" In short, How to match "example.com/#123456" using location ~ [someregex] { return 200 "matched"; } or with any other alternative 回答1: Simple answer, you can't actually, because that part is never