To enable the Apache SSL module in Ubuntu, follow these steps Update apt package cache apt update Install Apache SSL module apt install libapache2-mod-ssl Enable the SSL module a2enmod ssl Example # a2enmod ssl Considering dependency setenvif for ssl: Module setenvif already enabled Considering dependency mime for ssl: Module mime already enabled Considering dependency socache_shmcb … Read more
Enable HSTS Header set Strict-Transport-Security “max-age=31536000; includeSubDomains; preload” Enable X-Frame-Options Header always append X-Frame-Options SAMEORIGIN Enable X-XSS-Protection Header set X-XSS-Protection “1; mode=block” Enable X-Content-Type-Options Header always set X-Content-Type-Options “nosniff” Enable Referrer-Policy Header always set Referrer-Policy “strict-origin” Enable Content Security Policy (CSP) Header always set Content-Security-Policy “default-src ‘self’; font-src *;img-src * data:; script-src *; style-src *;” … Read more
I wanted to block bots from accessing a website. For this, I need to generate a list of all browser User-Agent visiting the website, so I can see which ones can block. This work with most web servers like Apache, Nginx, IIS, etc. To get the list of all User-Agents, run awk -F\” ‘($2 ~ … Read more
On an Apache server, when accessing a long URL, got 414 Request-URI Too Long The error is because the URL is too long, this may be a bug with the web applications. If you pass so much data, you should consider using the HTTP POST method instead of GET request. To fix this error, edit … Read more
You may need to deny access to specific files on your web server for security reasons. On the Apache web server, you can do this by using .htaccess file. Let’s say you need to prevent anyone from accessing the file with the name .user.ini, you can create a file with the name .htaccess with the … Read more
To install the latest version of Apache Web Server from source code, go to the apache website, download the latest source code .tar.gz file. https://httpd.apache.org/download.cgi At the time of writing this, the latest version was Apache HTTP Server 2.4.52. cd /usr/local/src wget –no-check-certificate https://dlcdn.apache.org//httpd/httpd-2.4.52.tar.gz tar xvf httpd-2.4.52.tar.gz cd /usr/local/src/httpd-2.4.52 ./configure –prefix=/usr/local/apache –enable-proxy –enable-proxy-connect –enable-proxy-fcgi –enable-remoteip … Read more
On a CentOS server, when uploading a 100 MB video file in WordPress media manager, I got the following error message Request Entity Too Large The requested resource /wp-admin/async-upload.php does not allow request data with POST requests, or the amount of data provided in the request exceeds the capacity limit. The server had mod_security installed. … Read more
On an Apache webserver running in Ubuntu, I added a VirtualHost entry for a domain name. But instead of showing the page, it shows the website from the default Apache VirtualHost (000-default.conf). At first, I was thinking it is because Apache was somehow not able to handle Named Virtual Hosts. So I created another domain … Read more
mpm-itk allow you to run Apache VirtualHost under a specific user/group instead of under the Apache user/group. On Debian/Ubuntu Apache web server is run under user www-data. When you host multiple websites under an Apache server, running all sites under the same www-data user allows a hacker to access files of other sites if one … Read more
To only allow requests from a specific IP to a location, use Require ip 59.92.71.53 51.38.246.115 Require ip 59.92.71.53 51.38.246.115 Add custom headers based on location Require ip 59.92.71.53 51.38.246.115 Header edit Location ^/browse /internal/stream/browse AddOutputFilterByType INFLATE;SUBSTITUTE;DEFLATE text/html text/plain text/xml Substitute “s#\”/(fields|browse|machine|entries)#\”/internal/stream/$1#i”
To proxy requests in Apache For proxying HTTPS traffic, use If remote SSL is invalid, you can disable SSL verification You need to enable following apache modules for proxy to work The ProxyPreserveHost directive in Apache’s configuration is used in the context of a reverse proxy setup. When this directive is set to On, it … Read more
We have a site where we host demo websites that we do for our customers. We don’t want search engines to index these sites or strangers to see them. So it is password protected. The problem is Cpanel Auto SSL needs to access URI like /.well-known/ for SSL domain validation. With password protection, SSL domain … Read more