How to redirect web service URLS using nginxfrom internal to the URL
Hi, Hoping someone is able to provide some assistance or recommendations here. We are wanting to make API calls from an internal network URL and have it automatically redirect to the a cloud app URL....
View ArticleRe: Client certificate validation error handling
I didn't find a way to achieve the goal above. In the end, we decided to use `optional_no_ca` mode and validate certificates on our backend side.
View ArticleIs it possible to get the whole client certificate chain as a variable value?
In case of a certificate hierarchy "CA -> Interm1 -> Interm2 -> a client certificate", after a successful SSL handshake the ssl_client_cert variable contains the client certificate but not the...
View Articlehow to tell nginx not to cache fastcgi
how to tell nginx not to cache fastcgi if response/content size is less than some bytes?
View ArticleGetting NGINX SSL working
I am in need of some assistance getting NGINX working with SSL. I used CertBot to get a free SSL Certificate, and in the process of doing this it told me that my server wasn't found in the server...
View ArticleReverse proxy from NGINX to Keycloak with 2FA
Hello all, I have a problem with NGINX. In addition, I will provide you with a configuration file and a picture of the architecture schema. I want to access Keycloak via nginx and log in to it. I use...
View ArticleExclude images from location
So far after several attempts and reading the manuals I am still unable to get a clear and working response to how to exclude a path from ngnix. Please only reply if you ACTUALLY KNOW what you're...
View ArticleWildcard certificate - force redirect http to https for specific domain
Hi all, My environment : Centos 6.9 + rh-nginx18-nginx-1.8.1-1.el6.x86_64 . I have wildcard certificate for domain *.mydomain.com , server accepts both http and https requests [code] server { listen...
View ArticleRe: Wildcard certificate - force redirect http to https for specific domain
I tried remove "default_server" at listen entry , still not work, anyone get same problem ?
View ArticleRe: Wildcard certificate - force redirect http to https for specific domain
This also doesn't work : [code] server { listen 192.168.0.19:80; # we serve both http and https listen 192.168.0.19:443 default_server ssl; server_name *.mydomain.com; ssl_certificate...
View ArticleCannot get Nginx to work with my WordPress
Hello all A bit of background information. I have a CentOS 7 VPS. I installed the LAMP stack on it and everything was fine, all working well, but heard how Nginx is faster, so I decided to move my...
View ArticleNginx Cache even if it's a 404 response
Hello everybody, I use 404 rewriting url: error_page 404 = /url_rewriting.php; I cache images generated with a php render script which is in a folder /render/framed/: set $no_cache 0; location ~...
View ArticleCompletely discard second POST when sent in under 500ms?
Hello, I would like to completely discard (not buffer, queue or respond to) any POST request from a user within 500ms (preferably cookie based maybe?) I've looked at...
View ArticleBehavior of ssl_verify_client = optional
Hi, I've setup nginx 1.10.3 on ubuntu 16.04.4 with client SSL certificates: ssl_client_certificate /etc/nginx/client-cert/ca.crt; ssl_verify_client optional; I am not getting any prompts for the...
View Articlehandling relative URL redirects in a reverse proxy; mixed content warnings
I am using Nginx as a reverse proxy, we are adding TLS to a back end application and are handling redirects port 80 http to 443 https. Works great for several sites and 95% for an enterprise...
View Articleauth_request and fastcgi_pass can't use var? And what should I do ?
Hello, I want to see $token to $tk not "$tk" and I think nginx doesn't understand two variables. But I can be not right, actually. I have to cut out some part from uri and use that in sub-request. Is...
View ArticleNginx config issue
https://stackoverflow.com/questions/50149596/nginx-if-cookie-exist-different-location here is my question and I need to get it to work earlier but I don't know how, thanks,
View Article