VirtualTam's bookmarks

1. dev-sec/ansible-collection-hardening - Hardening for Linux, SSH, Apache HTTPD, Nginx, MySQL

   2024-03-31
   configuration-management/ansible database/mysql linux network/http-server/apache-httpd network/http-server/nginx network/ssh

   Permalink
2. Rust's Journey to Async/await - Steve Klabnik

   2022-05-12
   concurrency concurrency/threading network/http-server/nginx programming/node.js programming/rust

   Permalink
3. Reining in the thundering herd ⛈ Getting to 80% CPU utilization with Django

   2021-08-19
   framework/django gunicorn network/http network/http-server/nginx network/reverse-proxy network/reverse-proxy/haproxy programming/python protocol/fastcgi uwsgi web wsgi

   Permalink
   • https://rachelbythebay.com/w/2020/03/07/costly/
   • https://docs.gunicorn.org/en/stable/faq.html#does-gunicorn-suffer-from-the-thundering-herd-problem
   • https://uwsgi-docs.readthedocs.io/en/latest/articles/SerializingAccept.html
   • https://uwsgi-docs.readthedocs.io/en/latest/Options.html
   • https://web.archive.org/web/20160117023812/http://cramer.io/2013/06/27/serving-python-web-applications
   • https://circus.readthedocs.io/en/latest/
4. NGINX Docs | UDP Health Checks

   2020-12-21
   load-balancing network network/http-server/nginx network/tcp network/udp

   Permalink
   • https://docs.nginx.com/nginx/admin-guide/load-balancer/tcp-udp-load-balancer/
5. NAXSI - an open-source, high performance, low rules maintenance WAF for NGINX

   2019-09-17
   linux/kernel network network/http network/http-server/nginx network/proxy security

   Permalink
   • https://www.digitalocean.com/community/tutorials/how-to-install-and-configure-naxsi-on-ubuntu-14-04
6. Tuning PHP-FPM for high traffic

   2019-03-29
   network/http network/http-server/nginx performance php-fpm programming/php

   Permalink
   • https://haydenjames.io/php-fpm-tuning-using-pm-static-max-performance/
   • https://www.if-not-true-then-false.com/2011/nginx-and-php-fpm-configuration-and-optimizing-tips-and-tricks/
   • http://www.softwareprojects.com/resources/programming/t-optimizing-nginx-and-php-fpm-for-high-traffic-sites-2081.html
   • https://www.php.net/manual/en/install.fpm.configuration.php
   • https://serverfault.com/questions/773216/php-error-pool-www-seems-busy-you-may-need-to-increase-pm-start-servers-or-p
   • https://serverfault.com/questions/874642/configuring-nginx-php-fpm-for-high-traffic-load
7. nginx-quick-reference: This notes describes how to improve Nginx performance, security and other important things.

   2019-02-08
   cipher cryptography/encryption network/http network/http-server/nginx network/transport-layer-security security server

   Permalink
8. Docker PHP/PHP-FPM Configuration via Environment Variables | Juan Treminio

   2019-01-23
   linux/container/docker network/http-server/nginx programming/php web

   Permalink
9. server-configs: Boilerplate configurations for various web servers.

   2019-01-23
   apache network/http network/http-server/apache-httpd network/http-server/nginx network/transport-layer-security server

   Permalink
   • https://github.com/h5bp/server-configs-apache
   • https://github.com/h5bp/server-configs-nginx
10. Nginx - Enable PHP-FPM Status Page

    2018-10-26
    network/http-server/nginx programming/php status

    Permalink
    • https://brandonwamboldt.ca/understanding-the-php-fpm-status-page-1603/
11. OpenResty - a dynamic web platform based on NGINX and LuaJIT

    2018-07-17
    network/http network/http-server/nginx performance programming/api programming/lua server

    Permalink
    • https://openresty.org/en/linux-packages.html
    • https://opm.openresty.org/
    • https://github.com/openresty
    • https://github.com/openresty/openresty
    • https://www.reddit.com/r/lua/comments/209l92/openresty_with_others_language/
    • https://www.reddit.com/r/devops/comments/6tv1yc/dynamic_layer_4_load_balancing/
12. Creating a custom Nginx build for Ubuntu/Debian - JGuru

    2018-07-13
    linux linux/debian linux/ubuntu network/http network/http-server/nginx package

    Permalink
    • https://www.debian.org/doc/manuals/maint-guide/build.en.html
    • https://salsa.debian.org/nginx-team/nginx
    • https://www.debian.org/doc/debian-policy/#document-ch-controlfields
    • https://www.debian.org/doc/debian-policy/#document-ch-relationships
    • https://unix.stackexchange.com/questions/333603/debian-control-file-provides-does-not-satisfy-dependency
    • https://github.com/JayH5/nginx-modules
13. https - How to run Gitlab in docker container with nginx-proxy over ssl with letsencrypt securely - Stack Overflow

    2018-06-11
    linux/container/docker network/http network/http-server/nginx network/proxy network/transport-layer-security source-code-management/git source-code-management/gitlab

    Permalink

    Container setup:

    • https://gist.github.com/netdesk/c1db2985b542f9916995139318e5a7ce
    • https://hub.docker.com/r/jwilder/nginx-proxy/
    • https://hub.docker.com/r/jrcs/letsencrypt-nginx-proxy-companion/

    Gitlab settings:

    • https://docs.gitlab.com/omnibus/docker/
    • https://docs.gitlab.com/ce/administration/environment_variables.html
    • https://docs.gitlab.com/omnibus/settings/ssl.html
    • https://gitlab.com/gitlab-org/omnibus-gitlab/blob/master/files/gitlab-config-template/gitlab.rb.template

    Performance considerations:

    • https://docs.gitlab.com/omnibus/settings/memory_constrained_envs.html (skip the cgroups section for Gitaly as we are already running in a container)
    • https://docs.gitlab.com/ee/update/#gitaly-omnibus-gitlab-configuration-structure-change for Gitlab 16 changes to Gitaly configuration
14. What is the difference between the core, full, extras and light packages for nginx? - Ask Ubuntu

    2018-04-13
    linux linux/debian linux/ubuntu network/http-server/nginx package

    Permalink
    • https://launchpad.net/~nginx/+archive/ubuntu/stable
    • https://launchpad.net/~nginx/+archive/ubuntu/development
    • https://bugs.launchpad.net/ubuntu/+source/nginx/+bug/1262710
15. NGINX Unit - a dynamic web and application server

    2018-04-13
    network/http network/http-server/nginx server web

    Permalink
    • https://www.nginx.com/products/nginx-unit/
    • https://www.nginx.com/blog/introducing-nginx-unit/
    • https://github.com/nginx/unit
    • https://news.ycombinator.com/item?id=15189949
16. Migrating to Sensu

    2018-04-04
    database/redis message-broker/rabbitmq network network/http-server/nginx network/reverse-proxy/haproxy observability observability/nagios sensu sysadmin

    Permalink
    • https://roobert.github.io/2015/11/09/Sensu-What/
    • https://blog.sensuapp.org/our-journey-implementing-sensu-to-monitor-kubernetes-in-production-5764aff2dd50
    • https://phillbarber.blogspot.fr/2015/03/nagios-vs-sensu-vs-icinga2.html
    • https://www.reddit.com/r/devops/comments/56xrnj/how_are_people_suffering_through_sensu_core/
17. logging - Make a Docker application write to stdout - Server Fault

    2018-03-19
    linux/container/docker network/http network/http-server/nginx observability/logging

    Permalink
    • https://github.com/nginxinc/docker-nginx/blob/master/mainline/alpine/Dockerfile#L135
    • https://serverfault.com/questions/661454/tail-f-not-following-log-file-in-docker-container
18. Don't publicly expose .git, or how we downloaded your website's sourcecode - An analysis of Alexa's 1M

    2018-01-20
    apache network/http network/http-server/nginx security source-code-management source-code-management/git web

    Permalink
    • https://stackoverflow.com/questions/2530372/how-do-i-disable-directory-browsing
    • https://httpd.apache.org/docs/current/mod/mod_rewrite.html

    via https://git.github.io/rev_news/2017/06/14/edition-28/

19. Playing HTTP Tricks with Nginx | Elastic

    2017-10-09
    network/http network/http-server/nginx observability/elastic observability/elastic/elasticsearch observability/elastic/kibana security security/authentication

    Permalink

    The X-Pack plugin comes with a subscription plan and a 30-day trial license:

    • https://www.elastic.co/subscriptions
    • https://www.elastic.co/guide/en/x-pack/current/license-expiration.html
    • https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/7

    Once the license has expired, a number of features become unavailable, among which is user management (authentication, authorization).

20. Generate Mozilla Security Recommended Web Server Configuration Files

    2017-10-09
    apache cipher network/http network/http-server/nginx network/transport-layer-security security server

    Permalink
    • https://github.com/mozilla/server-side-tls
    • https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
    • https://security.stackexchange.com/questions/51680/optimal-web-server-ssl-cipher-suite-configuration
    • https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/