The post AWS Cookbook appeared first on MrBrown blob.

When you work with Nginx, a powerful feature is to take advantage of Lua scripting language directly in your configuration files.

You can come across solutions that involve Lua scripting. If your setup doesn’t include Lua module, you’ll get an error message like this in nginx error.log :

2016/11/23 09:51:58 [emerg] 12730#0: unknown directive "rewrite_by_lua" in /etc/nginx/sites-enabled/v3.conf:59

Lua is available with nginx through ngx_http_lua_module. This module is installed with nginx-extras package (nginx web/proxy server (extended version))

$ apt-get install nginx-extras

Remember that this package contains a full working version of nginx server, it will remove packages like nginx-full or nginx-light.

Also you can find source code and documentation on github : ngx_http_lua_module – Embed the power of Lua into Nginx HTTP Servers.

The post Nginx: unknown directive “rewrite_by_lua” appeared first on MrBrown blob.

I had to migrate a blog to a new URL structure. This migration led to create about 600+ unique redirects without any shared patterns.
To solve this, I used a nginx configuration file containing all the redirects and I included it in my vhost configuration like this :

• /etc/nginx/site-enabled/v3.conf

server {
    listen 443 ssl;
    [...]
    include /etc/nginx/conf.d/v3.redirects
    [...]
    location / {
    [...]
    }
}

• /etc/nginx/conf.d/v3.redirects

[...]
rewrite ^/le-stress(.*) /conseils/relaxation/le-stress$1 permanent;
[...]

The v3.redirects file has been generated with a command line script.

It works like a charm for this amount of redirects. If you need to manage a lot more of them, take a look at lua and redis.

The post Nginx: mass permanent redirects appeared first on MrBrown blob.

To center it vertically, you need to use the gravity property :

In your xml layout file, add the following property :

android:gravity="center_vertical"

To center the text vertically and horizontally :

Use the following property :

android:gravity="center"

To do it programmatically, use the following syntax :

MyTextView.setGravity(Gravity.CENTER)

The post Android: center text horizontally and vertically in a TextView appeared first on MrBrown blob.

Let’s say you need to install capistrano 2.* to be able to use your deploy scripts. In this case, I’m running a fresh Yosemite install.

Let’s say we’ll need to setup a specific ruby version with a specific gem version. To do that, we use homebrew and rbenv.

Install homebrew

ruby -e "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/master/install)"

Follow instructions and refer to homebrew website for more details.

Install rbenv

brew install rbenv ruby-build

Update your shell setup to use rbenv when you open a new terminal

echo 'if which rbenv > /dev/null; then eval "$(rbenv init -)"; fi' >> ~/.bash_profile

Refresh your current session

source ~/.bash_profile

List available ruby versions

rbenv install -l

Install a specific version of ruby

rbenv install 2.1.5
rbenv global 2.1.5

Check your ruby version

ruby -v
ruby 2.1.5p273 (2014-11-13 revision 48405) [x86_64-darwin14.0]

Install your gem

gem install capistrano -v "=2.15.5"

You’re done!

cap --version
Capistrano v2.15.5

The post Install gem as user on OSX 10.10 Yosemite appeared first on MrBrown blob.

If you need to use specific command line options (like -c ), you need to update your /etc/init.d/sphinxsearch

In the do_start() function, change the line :

start-stop-daemon --start --pidfile $PIDFILE --chuid www-data --exec ${DAEMON}

with

start-stop-daemon --start --pidfile $PIDFILE --chuid www-data --exec ${DAEMON} -- ${DAEMON_OPTS}

Set the DAEMON_OPTS variable at the beginning of the file. For example :

CONFIG=/var/www/udg/app/config/sphinx.conf
DAEMON_OPTS="-c ${CONFIG}"

I’ve also updated all /etc/sphinxsearch/sphinx.conf occurrences to ${CONFIG}

The post Ubuntu: start sphinxsearch with specific options appeared first on MrBrown blob.

If you need a more recent version, you can find a .deb package directly on Sphinx website : http://sphinxsearch.com/downloads/release/

Pick-up your package and install it locally :

$ wget http://sphinxsearch.com/files/sphinxsearch_2.2.6-release-0ubuntu12~trusty_amd64.deb

$ dpkg -i sphinxsearch_2.2.6-release-0ubuntu12~trusty_amd64.deb

$ searchd -h
Sphinx 2.2.6-id64-release (r4843)
Copyright (c) 2001-2014, Andrew Aksyonoff
Copyright (c) 2008-2014, Sphinx Technologies Inc (http://sphinxsearch.com)
...

The post Install a specific version of sphinxsearch on Ubuntu 14.04 appeared first on MrBrown blob.

• OSX : 10.8.5
• Apache :

# httpd -V
Server version: Apache/2.2.26 (Unix)
Server built: Dec 10 2013 22:06:35
Server's Module Magic Number: 20051115:33
Server loaded: APR 1.4.5, APR-Util 1.3.12
Compiled using: APR 1.4.5, APR-Util 1.3.12
Architecture: 64-bit
Server MPM: Prefork
 threaded: no
 forked: yes (variable process count)
Server compiled with....
 -D APACHE_MPM_DIR="server/mpm/prefork"
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_FLOCK_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=128
 -D HTTPD_ROOT="/usr"
 -D SUEXEC_BIN="/usr/bin/suexec"
 -D DEFAULT_PIDLOG="/private/var/run/httpd.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_LOCKFILE="/private/var/run/accept.lock"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="/private/etc/apache2/mime.types"
 -D SERVER_CONFIG_FILE="/private/etc/apache2/httpd.conf"

openssl :

# openssl version
OpenSSL 0.9.8y 5 Feb 2013

Generate a self-signed certificate :

As root :

# cd /etc/apache
# mkdir ssl
# cd ssl

# openssl req -new -newkey rsa:2048 -nodes \
 -out www_192_168_90_25_xip_io.csr \
 -keyout www_192_168_90_25_xip_io.key \
 -subj "/C=FR/ST=FRANCE/L=PARIS/O=MyProject/OU=The Team/CN=www.192.168.90.25.xip.io"

# ls -l
 total 16
 -rw-r--r-- 1 root wheel 1050 Apr 1 10:15 www_192_168_90_25_xip_io.csr
 -rw-r--r-- 1 root wheel 1675 Apr 1 10:15 www_192_168_90_25_xip_io.key

# openssl x509 -req -days 730 -in www_192_168_90_25_xip_io.csr -signkey www_192_168_90_25_xip_io.key -out www_192_168_90_25_xip_io.crt
 Signature ok
 subject=/C=FR/ST=FRANCE/L=PARIS/O=MyProject/OU=The Team/CN=www.192.168.90.25.xip.io
 Getting Private key

# ls -l
 total 24
 -rw-r--r-- 1 root wheel 1294 Apr 1 10:23 www_192_168_90_25_xip_io.crt
 -rw-r--r-- 1 root wheel 1050 Apr 1 10:15 www_192_168_90_25_xip_io.csr
 -rw-r--r-- 1 root wheel 1675 Apr 1 10:15 www_192_168_90_25_xip_io.key

Configure Apache

In extra/httpd-ssl.conf add the following NameVirtualHost directive :

NameVirtualHost *:443
 Listen 443

Also configure your default virtualhost :

<VirtualHost _default_:443>
    DocumentRoot "/Users/charles/Sites"
    ServerName localhost:443
    SSLEngine on
    SSLProtocol all -SSLv2
    SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5
    SSLCertificateFile "/private/etc/apache2/ssl/www_192_168_90_25_xip_io.crt"
    SSLCertificateKeyFile "/private/etc/apache2/ssl/www_192_168_90_25_xip_io.key"
 </VirtualHost>

In httpd.conf enable ssl (by default, it’s commented out) :

Include /private/etc/apache2/extra/httpd-ssl.conf

You can now connect on your https://localhost

To setup a new virtualhost, enable ssl in your vhost directive :

<VirtualHost *:443>
    ServerAlias www.192.168.90.25.xip.io
    DocumentRoot "/Users/charles/Sites/project
    <Directory /Users/charles/Sites/project>
        Options FollowSymLinks Indexes
        AllowOverride All
    </Directory>
    SSLEngine on
    SSLProtocol all -SSLv2
    SSLCipherSuite HIGH:MEDIUM:!aNULL:!MD5
    SSLCertificateFile "/private/etc/apache2/ssl/www_192_168_90_25_xip_io.crt"
    SSLCertificateKeyFile "/private/etc/apache2/ssl/www_192_168_90_25_xip_io.key"
</VirtualHost>

The post How to configure HTTPS/SSL under Apache and OSX appeared first on MrBrown blob.

I want to create a chrooted ssh account to give access to a shell to my developers to execute commands and check logs.

This is just a raw transcript how I did it with jailkit :

$ apt-get install build-essential autoconf automake libtool flex bison debhelper binutils-gold

$ cd /usr/local/src/
$ wget http://olivier.sessink.nl/jailkit/jailkit-2.17.tar.bz2
$ tar -xjvf jailkit-2.17.tar.bz2
$ cd jailkit-2.17/
$ ./debian/rules binary
$ dpkg -i jailkit_2.17-1_amd64.deb
$ jk_init -j /var/www/mydomain jk_lsh
$ jk_init -j /var/www/mydomain sftp
$ jk_init -j /var/www/mydomain scp
$ jk_init -j /var/www/mydomain git
$ jk_init -j /var/www/mydomain extendedshell
$ jk_init -j /var/www/mydomain editors
$ jk_jailuser myuser

The post Create a chrooted ssh user with Ubuntu and jailkit appeared first on MrBrown blob.

if (isset($_SERVER['HTTP_CLIENT_IP'])
 || isset($_SERVER['HTTP_X_FORWARDED_FOR'])
 || !in_array(@$_SERVER['REMOTE_ADDR'], array('127.0.0.1', 'fe80::1', '::1'))
) {
    header('HTTP/1.0 403 Forbidden');
    exit('You are not allowed to access this file. Check '.basename(__FILE__).' for more information.');
}

If you want to use xip.io to test your local instance with devices for example, access is forbidden by default.

You can add a condition to if statement to allow connexion from your local subnet. Let’s say your subnet is 192.168.90.* and your vhost like www.192.168.90.42.xip.io, the following code will do the trick (from web/app_dev.php) :

if (isset($_SERVER['HTTP_CLIENT_IP'])
 || isset($_SERVER['HTTP_X_FORWARDED_FOR'])
 || (!in_array(@$_SERVER['REMOTE_ADDR'], array('127.0.0.1', 'fe80::1', '::1'))
     && !preg_match('/192\.168\.90\./', @$_SERVER['REMOTE_ADDR']))
) {
    header('HTTP/1.0 403 Forbidden');
    exit('You are not allowed to access this file. Check '.basename(__FILE__).' for more information.');
}

Happy coding!

The post Using Symfony and xip.io in dev environment appeared first on MrBrown blob.