Ask Ubuntu General Room

Thomas W.

00:03

@Zacharee1 Go to this gist to get the configs. Ask me questions if you have no idea what this all means.

oops

there

3 separate files for sites_enabled

:P

TheXed

High?

Thomas W.

no, we are not smoking anything here :P

what's up?

Mateo

@TheBrownOne I ran the desktop version of vlc on my Ubuntu phone. I thought you said you had the gif ready

TheXed

00:19

@ThomasW. oh okay...well I always thought if you stand on your toilet then you are high on pot...

Serg

Denver is actually mile high . . . .literally.... and figuratively too

TheXed

@Serg the air is pretty thin there....Makes the people pretty dense...

edwinksl

@Serg seems fine though

Seth

@terdon has it been 3 years already! My my.

Serg

@edwinksl i only have two complains about the whole marijuana thing : it attracted dum-dums and rude people to Denver and worsened traffic . . .

otherwise yes, it's fine

Serg

00:39

How many checkboxes could a checkbox check if a checkbox could check checkboxes? ( from here )

TheXed

@Serg I don't know I have never done illicit drugs...so I can objectively say one way or another....

Serg

Roses are red, violets are blue , in soviet russia drugs do you

TheXed

@Serg lol

Getting higher...

Serg

better . . .faster . . . stronger . . .higher . . .insaner . . .

Nathan Osman

@TheXed Is that you?

Good 3G coverage up there?

TheXed

00:45

@NathanOsman I am the one on the bottom...and we have LTE here :-P

Seth

bottom as in, ground, or higher but lower than that?

TheXed

As in on the ground.

Nathan Osman

@Seth He wouldn't be able to look straight up anywhere but the ground :D

TheXed

Nobody has offered me a ride yet...

Serg

as in he was the one who took the pic

Nathan Osman

00:46

@TheXed Promise to set up their WiFi or something.

TheXed

@Serg yes I took the picture...

Nathan Osman

You'd be amazed how grateful people can be for simple IT help... :P

Seth

@NathanOsman oh duh lol

TheXed

@NathanOsman good call...it would be so easy to set up a hotspot then they can use facebook while they pilot their hot air balloon...

Serg

and post instagram pics from up there

Nathan Osman

00:48

The question is... if they can't get coverage up there, what makes you think you will? :D

Zacharee1

@ThomasW. I assume I just disable the pufferpanel file?

Nathan Osman

Satellite phones FTW. But data on those is reaaaaaaly slow. And the phones are >$500.

TheXed

@NathanOsman dual sim...if one carrier doesn't work, surely the other will :-P

Thomas W.

@Zacharee1 I just picked names off the top of my head, you can put everything in one file or in multiple

Zacharee1

oh

cool

Thomas W.

00:51

@Zacharee1 I tend to have individual site server blocks done by domain - gitlab.hellnet.io for instance is a file in /etc/nginx/sites_available/, with a symlink to it in /etc/nginx/sites_enabled which contains a reverse proxy clause to a gitlab instance running on the same box in its own nginx that shipped with gitlab-ce's installer

but the concept is the same

you can both serve a site locally

and reverse proxy to something else internally

TheXed

Interesting side note: Site Korea has 97% 4G LTE service penetration....

Thomas W.

it's how I set up my 'web gateway' boxes which route traffic to the different hypervisors from the outside on a globally web-facing server on my network

Zacharee1

@ThomasW. OK, I think I get it :p

Does nginx ignore any files in the site-enabled dir that don't end in .conf?

Thomas W.

@Zacharee1 it doesn't ignore anything in sites-enabled

the idea is your files go into sites-available

TheXed

Anyone play Tiny Tower?

Thomas W.

00:54

and you symlink the configs from sites-enabled to the sites-available actual files

Zacharee1

@ThomasW. hmm OK

Thomas W.

similar to Apache's sites-enabled and sites-available folders, but without the tools to do it simply

@Zacharee1 You can also just move your config out to an 'old sites' folder if you make one and drop my three files in place and see if it all works

Zacharee1

@TheXed I used to, but Mobage decided they didn't want to be in business anymore, so only the Vegas one works on Android

Thomas W.

@Zacharee1 also, PHP handling pitfall, don't let PHP handle the static files, just let NGINX do that, and you reduce PHP heaviness (It should only process PHP, not static files)

Zacharee1

@ThomasW. that'll work too ;P

@ThomasW. uh, idk what you mean

this is a pre-built thing

TheXed

00:55

Mobage?

Thomas W.

@Zacharee1 you had location / { ... } and everything going through PHP

oh

@Zacharee1 well, if it doesn't work, I'll make three lines of change for the one file

and it will be the same as it 'was' :P

Zacharee1

@TheXed the company which hosted the Nimblebit Android online stuff

Thomas W.

whomever wrote the configs ran into a pitfall for the PHP handling

TheXed

Oh...Umm...

It works fine for me...

Zacharee1

probably ;P @ThomasW.

@TheXed normal Tiny Tower on Droid?

So I notice in the second and third files you have xpw1.no-ip.org. Should the second one be changed to x-p-w.tk? @ThomasW.

Seth

00:57

Ugh, BlackBerry.

TheXed

Yes on Andriod...@Zacharee1

Seth

@James --^

Zacharee1

@Seth cool

Thomas W.

@Zacharee1 Yes, it's probably copy-paste failure

Zacharee1

ah thx

@TheXed weird

Thomas W.

00:57

@Zacharee1 but that's an easy easy fix ;)

Zacharee1

yeah :p

TheXed

@Zacharee1 always has...?

Zacharee1

No, they said it shouldn't

Seth

@Zacharee1 ??

Zacharee1

You should have lost all your data and the ability to connect @TheXed

@Seth >:P

@ThomasW. can I do server_alias to include www.x-p-w.tk?

TheXed

00:59

@Zacharee1 I don't know...I have played on and off over the last 5 years...on various devices...

never had a problem.

Zacharee1

hmm

Thomas W.

No need.

server_name x-p-w.tk www.x-p-w.tk;

^ use that

@Zacharee1 you can define multiple hosts to serve from that block by simply listing the hosts that match for it

Zacharee1

oh

That's so much simpler

Thomas W.

that said, you may wish to instead consider a separate www. block that will automatically rewrite www. to non-www.

which is real easy

and only another, what, 8 lines?

server {
    listen 80;

    server_name www.x-p-w.tk;

    return 301 x-p-w.tk$request_uri;
}

Zacharee1

@ThomasW. ooh thanks

And are those your comments in the config?

Thomas W.

01:01

@Zacharee1 let me sanity check that first against my own sites, but that returns a 301 redirection to the site you want it to be at

@Zacharee1 yes, the comment blocks are mine

Zacharee1

I like them

Thomas W.

i added them in so you could perhaps better understand things :)

Zacharee1

they're funny

Andgelpful

And that ^ is what happens when your taskbar covers the textbox

Thomas W.

lol

@Zacharee1 i can confirm that last config block I just posted will correctly redirect http://www.x-p-w.tk/* to http://x-p-w.tk/* (where * is any request and related arguments and such)

so then the only real issue you have to worry about then is what's on the x-p-w.tk site

Zacharee1

yeah

hmm

Job for nginx.service failed because the control process exited with error code. See "systemctl status nginx.service" and "journalctl -xe" for details.

Thomas W.

01:04

it also prevents you from having the risk of two sets of cookies for a site - one for www and one for non-www.

@Zacharee1 sudo nginx -t

Zacharee1

oh cool

Thomas W.

or systemctl -l status nginx.service

Zacharee1

oh

nginx: [emerg] a duplicate default server for 0.0.0.0:80 in /etc/nginx/sites-enabled/server.conf:6
nginx: configuration file /etc/nginx/nginx.conf test failed

Thomas W.

o.O

oh

@Zacharee1 do you have the 'default' server item in /etc/nginx/sites-enabled/ too?

Zacharee1

oh yeah

Thomas W.

01:05

remove it from sites-enabled

Zacharee1

I should delete that, huh?

Thomas W.

yep

Zacharee1

moved to sites-bak

Thomas W.

restart nginx :)

it shoudl run then

Zacharee1

yep

Thomas W.

01:06

test the sites :)

they should all now work

Zacharee1

but when I went to x-p-w.tk it downloaded a file named "download"

Thomas W.

that means php is still broken

hmm

Zacharee1

yep\

Thomas W.

@Zacharee1 i anticipated but we can fix that again easy

Zacharee1

it downloaded the index php :p

Thomas W.

01:07

1 sec

Zacharee1

kk

Thomas W.

@Zacharee1 know how to read diffs?

gist.github.com/teward/c36c91b890f0a9c6fbf3866fbd5819f4/…

latest revision

Zacharee1

I think

let me just turn off my color inverter

Thomas W.

basically, you're just deleting a handful of lines from my configs

if it's still not working then that means the php is weird

or your php5-fpm died

i should really finish my statistics analysis...

Zacharee1

oh lovely

hmm

now it's not responding

Thomas W.

01:10

define 'it' :P

Serg

@terdon by the way , about my use of main() in bash scripts. At lest I am not as weird as this guy

Zacharee1

connection timeout

Thomas W.

@Zacharee1 hrm, that's odd, I'd blame PHP :)

Zacharee1

I can believe that ;p

Thomas W.

@Zacharee1 I can't even reach the domain so I can't really help much more - the idea though is you can serve multiple sites

even some not on the same box

from the one box.

Zacharee1

01:11

but what can I do? anything?

uh oh

the other IP also isn't responding

But I can still connect to 8080???!

How do I list tables in SQL?

Thomas W.

the other IP not responding sounds more problematic :P

Zacharee1

yeah

Thomas W.

there may be nginx processes still running

so killall nginx then systemctl start nginx

Zacharee1

nope :/

oohh

PufferPanel works now (x-p-w.tk)

I had to set its master URL to the right one

but the IP phone isn't

it may be asleep or something

8080 still works though. Weird

@ThomasW. now do you have any idea how I set a favicon with PHP?

SQuirel

hi

Zacharee1

01:24

@ThomasW. OK. So the IP phone works locally, but times out externally

Thomas W.

@Zacharee1 /docroot/favicon.ico

you... don't do that with PHP typically

Zacharee1

oh

Thomas W.

and /docroot/ is the filepath on disk

for the doc root

Zacharee1

I tried putting it where I thought the root was

Thomas W.

@Zacharee1 so, wait, you want to proxy to an IP phone?

Zacharee1

01:25

@ThomasW. it has a web interface

Thomas W.

that... doesn't mean anything really. IP phones are a lot more complex, and very often do not accept connections from external networks to their web interfaces for security reasons

Zacharee1

hmm. It did seem spotty when it was a direct connection

Thomas W.

@Zacharee1 just because something has a web interface doesn't mean it should be web-exposed

because that's how you get hacked ;p

Zacharee1

Well it's my dad's setup

Thomas W.

your dad's got it weird

Zacharee1

01:27

lol

Thomas W.

not saying that to be rude, but he's got a setup that is oddball

in a security perspective

Zacharee1

I think he just wants to be able to configure it externally

Thomas W.

set up a VPN server

teach him to VPN into the network

Zacharee1

We do have one, but it's iffy

Thomas W.

then access everything internally via the VPN

Zacharee1

01:27

he knows VPN

Thomas W.

is it PPTP VPN?

Zacharee1

he works in A/V installation

Thomas W.

is it IPSec?

Is it OpenVPN?

Zacharee1

It's SSTP

AzureVPN

Thomas W.

... rrrright....

Zacharee1

01:28

lol

Thomas W.

so it's Microsoft's version of VPN

Zacharee1

Sort of

It's SoftEther using Azure to give dynamic DNS VPN over SSTP

Thomas W.

fun fact: did you know that PPTP was Microsoft's implementation of VPN, and now it's obsolete because the MS-CHAP encryption on it is cracked

Zacharee1

and it still works

@ThomasW. I heard about that

Probably why my school blocks it

Thomas W.

@Zacharee1 I have dynamic DNS on my home network. I have an OpenVPN server. Port forward to the OpenVPN server from outside to the OpenVPN server.

Dynamic DNS VPN, without using third party M$ services

Zacharee1

01:30

I can never get OpenVPN to work how I want it

Thomas W.

can even set up an IPSec VPN, though I do that via my pfSense now

Zacharee1

this works fine

Thomas W.

my point though is his approach is probably because he's A/V installation - not IT

i can understand it, but at the same time, I can't

@Zacharee1 so he can VPN in... and then would be able to access everything inside the network

if tha'ts the case, why does he want everything external?

Zacharee1

idk

Thomas W.

Not to harp on this, but if I knew the IP address at your location (oh wait I do because of the dynamic DNS), and the IP phone's interface is web facing

I'd bet you a dollar I could breach it in ten minutes

without nothing more than nmap, wireshark, and armitage+metasploit from my kali box

not that I would, mind you, but to give you an idea of the risks of exposing IP phone interfaces to the world

there's a reason SIPVicious is one of the most commonly-scanned services - because people do what your dad tries to do and put IP phone SIP servers onto the Internet web facing without doing better security, and they get stolen things there.

Zacharee1

01:33

@ThomasW. well it doesn't even seem to work :p

Thomas W.

next biggest scanner I see is SSH but that's commen :P

@Zacharee1 So it didn't work before?

Zacharee1

Other people could see it all the time, but it was really spotty for me

maybe it was being brute-forced

I'll take it out of the config

there

um

Now it doesn't work again

user139252

@Zacharee1 I have no idea how nginx works.

Zacharee1

@TheBrownOne luckily, @ThomasW. does ;p

I've almost got it working

@TheBrownOne what happens when you try to connect to x-p-w.tk?

Thomas W.

address unreachable

sounds to me like you have firewalling

which restricts access

or it's just broken :)

Zacharee1

01:39

I don't know

It's weird because port 8080 is still working

Thomas W.

@Zacharee1 there's a lot of unknowns here

Zacharee1

srsly

Thomas W.

@Zacharee1 did you configure pufferpanel itself to only accept port 8080?

Zacharee1

yes

I think

Thomas W.

@Zacharee1 so configure it to listen on port 80 and accept port 80

Zacharee1

01:40

The URL settings have been changed to x-p-w.tk

WAIT A AMINUTE

wait no

nevermind

Thomas W.

you're on an old version

github.com/PufferPanel/PufferPanel/commit/…

0.8.6 has the fix for that

Zacharee1

The version number wasn't updated when they did

It's an admitted mistake :p

Thomas W.

hm

well... I can't tell you then what's up with it

that's a PufferPanel question

not an nginx one

Zacharee1

I'm going to check the router firewall

Thomas W.

"curl: (7) Failed to connect to x-p-w.tk port 80: No route to host" <-- sounds like router firewall

because I see that when I try and reach one of my servers from a nonpermitted location

Zacharee1

01:43

yeah

hmm

> Allow All Traffic [1] LAN Any Any Always

Well even direct IP isn't showing the 410 page

so its something with Ubuntu

I'm going to reboot

I did install updates and haven't rebooted so maybe that'll help?

nope

8080 isn't working either anymore, so that's something

Mateo

testing

Zacharee1

uh oh

Mateo

@Mateo pinging myself

Zacharee1

it looks like my dad's internet went offline

@Mateo having fun?

Mateo

aw, that is right it's firefox that has the native notification plugin

hmm

@Zacharee1 but yes tons of fun

Zacharee1

01:52

lol

Mateo

sadly no netflix,

Zacharee1

aw

Mateo

Blah autocorrect

Transcript for