Not going to take the risk of rewatching it, no way.
Interesting, if this is true.
Guide to Hosting Multiple Websites with Single External IP (NGINX & Apache)
Objective:
To be able to host multiple websites with SSL each with their own internal IP/Virtual Machine from a single external IP using NGINX.
Warning:
The guide will provide basic SSL configuration with a reverse proxy. Additional security should be considered, reviewed and understood before proceeding.
Synopsis:
One of the modern-day problems with technology is bloat. Having so much information at our finger types of the average joe/jane are writing guides. These are guides generally don't provide you enough information as its source was copy from another source. Each source adds a spin to the original, etc., and etc... So, this guide is going to be straight with no bloat, no added features, and is what I call slim and clean. This means it's only going to preform exactly what I want it to do, and nothing else.
We are going to use four servers, One for NGINIX, and three for hosting websites all running on Ubuntu 20.X. Please review the Prerequisites and guides mentioned for each type of server. This guide won't go into building those servers as there are many guides to get you there.
Legend:
Domain association to Server Name:
NGINX server - "Server NG"
Domain 1 (example.com ) - "Server A"
Domain 2 (guide.com) - "Server B"
Domain 3 (help.com) - "Server C"
Server Name association to IP:
Server NG - 172.16.72.2
Server A - 172.16.72.10
Server B - 172.16.72.20
Server C - 172.16.72.30
Prerequisites:
- Network infrastructure already in place with a NAT to a Linux server which will be used for NGINX.
- Internal servers need to have port 80 access to nginx
- SSH enabled in each server.
- For each server you will need full domain name.
- DNS provider access to manage CNAME records
- Server NG should have NGINX installed at its default state. Nginx Install Guide
- Server NG should have Certbot installed as its default state with DNS validation. Certbot Install Guide
- Server A, B, & C should have Apache installed. Apache Installation Guide
- Each Apache server should have a website already configured and reachable by their internal IP
With the last of the Apache tutorials nowhere to be seen (the key ones being weapons imo) is there a chance that the Apache is delayed again?
This is by no means a complaint - a late good product is much better than a bad one.
Welcome to our thirty-second* installment of Cool Query Friday. The format will be: (1) description of what we're doing (2) walk though of each step (3) application in the wild.
* One of you were kind enough to inform me that this is actually the thirty-third CQF as I accidentally counted the 14th CQF twice. We'll keep the broken numbering scheme for posterity's sake.
CVE-2021-44228
Yesterday, a vulnerability in a popular Java library, Log4j, was published along with proof-of-concept exploit code. The vulnerability has been given the designation CVE-2021-44228 and is colloquially being called "Log4Shell" by several security researchers. The CVE impacts all unpatched versions of Log4j from 2.0-beta9 to 2.14. Current recommendations are to patch Log4j to version 2.15.0-rc2 or higher.
The Log4j library is often included or bundled with third-party software packages and very commonly used in conjunction with Apache Struts.
When exploited, the Log4j vulnerability will allow Remote Code Execution (RCE). This becomes extremely problematic as things like Apache Struts are, most commonly, internet facing.
More details can be found here:
- CSA-211096 Log4j2 Vulnerability "Log4Shell" (CVE-2021-44228) US-1 | US-2 | EU-1 | US-GOV-1 (Made public for all customers via Support Portal)
- CSA-211099 Technical Information on Log4j 2 Vulnerability CVE-2021-44228 and Mitigation Strategies (Intel customers see Reports & Feeds)
- CrowdStrike Tech Alert
- CrowdStrike Trending Vulnerability Alert
- NVD CVE
- Apache Notification
- [LunaSec Write-up](https://www.lunasec.io/docs/blog/log4j
FOR SALE
*most are heavily modded, but some (like Runtly and Bugout) are not, so be sure to read descriptions/look at vids carefully so that you know what you’re getting! All mods done by me (@bladechops on IG).
*will ship tomorrow (Tues). Priority small box.
timestamp: https://imgur.com/Z04x8Ia
- EMP EDC Thick Boy w/ skinny mods (C for mods) $250. SOLD.
vid: https://imgur.com/YRXYXU9
- handles have been skinnied and edges melted.
- blade has been skinnied.
- liners/bolsters/clip oxi-darkened
- blade has been sharpened and lightly used.
- action is amazing - drops shut w/ perfect centering.
2. Pena X-Series Large Apache w/ further contouring (C for mods). $250.
vid: https://imgur.com/orgrWwA
- handles/bolsters have been further contoured.
- bolsters have been stonewashed/oxi-darkened.
- blade has been slightly reprofiled for a pointier tip, hump on spine reduced.
- blade has only been used to cut paper to test sharpness, factory edge.
3. Bestech/Poltergeist 2500 Delta w/ thumbstud/flipper delete (C for mods) $95.
vid: https://imgur.com/37g1cLh
- flipper deleted/thumbstud added.
- handles have been skinnied.
- blade has been refinished satin (coating removed), but imperfectly - sanding lines are a little off (see vid).
- blade has been used and sharpened.
- snail trails on handles.
4. Techno2 w/ reprofiled blade, contoured handles (C for mods). $150). SOLD.
vid: https://imgur.com/a6zovFS
5. SpydieChef chop (C for mods). $165. SOLD.
vid: https://www.instagram.com/p/CWgRb1mgy5v/?utm_source=ig_web_copy_link
6. Benchmade Bugout w/ contoured Ti scales (C for mods) $150 . SOLD.
- Contoured Ti handles have been oxi-darkened. Carried lightly, w/ a few tiny scratches if you look carefully.
- blade is pristine w/ factory edge.
- action/centering is perfect.
7. Finch Runtly Mokruti (B). $95. SPF. *UNMODDED
- lightly used and carried a few times
- no signs of wear or use, factory edge on blade.
TRADES:
*pretty picky and mainly looking to sell. However, am interested in:
- Yeager-M
- Spyderco
... keep reading on reddit ➡
)