paluminum.net|blog

Deny SCM directories with apache

ryan — Thu, 15 Jan 2009 17:14:33 +0000

I use Mercurial (hg) and git to manage a few of my personal projects. Some of those projects are exposed to the web (my site, for example). I don’t want the .hg/ and .git/ directories to be available to people via apache, there is no reason (especially since i’m not hosting those repos publicly). I wanted a sitewide solution to deny access to those directories, and I figured blocking .svn would be worthwhile while I was at it.

I run debian on my VPS, so these instructions will be targeted towards how debian (and its derivatives, like ubuntu) structure the apache configuration. It would be trivial to adapt my solution to another distro’s configuration.

I created a file called /etc/apache2/conf.d/deny-scm.conf
The file’s contents:

## Deny access to various scm directories
## by Ryan (ryan@paluminum.net) 1-15-2009
 
# Deny access to .hg/ directories
<directory ~ "\.hg">
        Order allow,deny
        deny from all
directory>
 
# .git
<directory ~ "\.git">
        Order allow,deny
        deny from all
directory>
 
# .svn
<directory ~ "\.svn">
        Order allow,deny
        deny from all
directory>

Automated Backup Scripts

ryan — Fri, 09 Jan 2009 03:48:39 +0000

I wrote some scripts to run from cron to keep my stuff backed up properly. I wrote one to backup my sql databases and another to use rsync to backup my home directory (which also contains sql backups, mail, etc).

This first script, dumps SQL databases and creates a tar.bz2 nightly of all dumped databases - purges dumps older than 7 days.

#!/bin/sh
# Backup sql databases
 
DBUSER=""
DBPASS=""
 
MYSQLDUMP="mysqldump -u $DBUSER -p$DBPASS --add-drop-database --add-drop-table"
DATABASES="space separated list of databases"
STAMP=`date +%Y%m%d`
 
# Purge all database dumps more than 7 days old.
find `dirname $0`/sql/ -type f -iname '*.tar.bz2' -mtime +7 | xargs rm &> /dev/null
 
# Dump each db to a $db-date.sql file
for db in $DATABASES;
do
        FILENAME="$db-$STAMP.sql"
        $MYSQLDUMP $db > `dirname $0`/sql/$FILENAME
        if [ $? != 0 ]; then
                echo "Error dumping database: $db"
                rm -f `dirname $0`/sql/$FILENAME
        fi
done
 
# Create a .tar.bz2 of all db dumps (save on file count, and improve compression)
cd `dirname $0`/sql
rm -rf db-$STAMP.tar*
tar cf db-$STAMP.tar *-$STAMP.sql
bzip2 -9 db-$STAMP.tar
rm -rf *.sql
cd ..

The second script is an rsync script to backup my home directory (and can do other stuff too) to my server at home. This is currently not configured for automatic backups (need to set up an ssh priv/pub key for it yet).

#!/bin/sh
# Automatically uses rsync to backup various directories
PATH="/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin"
SCRIPT_PATH=`dirname $0`
 
REMOTE_ADDR="ryan@********:/home/ryan/backup/"
BACKUP_DIRS="/home/ryan"
 
RSYNC_ARGS=" -avz --progress --log-file=$SCRIPT_PATH/logs/rsync_$(date +%Y%m%d).log --exclude '$SCRIPT_PATH/logs/' --exclude '/home/ryan/.cpan/' "
 
for dir in $BACKUP_DIRS
do
        rsync $RSYNC_ARGS $dir $REMOTE_ADDR
done

I just quickly pumped these scripts out, so they’re pretty rough and not well tested. That said, hopefully they will help someone out…

Starting fresh

ryan — Thu, 08 Jan 2009 19:40:43 +0000

I was unhappy with my blog, and decided to take a new direction with it. I would like to blog about personal projects and hobbies, code, etc. I plan on updating regularly (at least 1-2 times weekly for now). I figure I’ll keep anime related posts off of this blog. I may start another blog elsewhere for that at some point.

Permalink structure: /blog/post-title

Until I get stuff fully setup this blog will be “in testing” or something.

preview of upcoming post(s): nerf maverick mods