Content-Security-Policy makes page render differently

2020-12-18 Thread Paul Pace
When I load a page from OpenBSD served with relayd and httpd with Content-Security-Policy set to default-src self, I can see that a basic HTML page that normally renders with all of the text in the center is now rendered on the left. I have this currently configured with http://mostlybsd.com

Non-default partitions and upgrades

2021-04-12 Thread Paul Pace
Hello! I generally try and run things as a project recommends, but I am wondering about running different additional partitions (e.g., add /var/www) or changing partition letter (e.g., move /var to the end for convenient VPS expansion). I know it isn't the biggest thing in the world, but

Client-authenicated TLS handshake with relayd

2021-02-19 Thread Paul Pace
Hello! I am putting a small server behind Cloudflare that currently is configured to serve everything through relayd. I want to use their option of client-authenticated TLS handshakes, but I can't see a way to do it with relayd - is this possible? It does look like I could use httpd tls

Swap disklabel partition location?

2021-09-15 Thread Paul Pace
Hello! I am wondering if there is some requirement to have the swap disklabel partition always as partition b? I have a VPS where I might prefer to put swap at the end so when the VPS RAM and storage is increased, I can increase swap size, as needed, but I can't figure out why this might be

Re: Swap disklabel partition location?

2021-09-15 Thread Paul Pace
, you should be able to re-allocate it in the future, upon a reboot. But it is also possible that you'll hit bugs in the disklabel editor, since I've never heard of anyone doing this. Paul Pace wrote: Hello! I am wondering if there is some requirement to have the swap disklabel partition always

Re: httpd(8) and PHP - more details in error log

2021-10-05 Thread Paul Pace
On 10/4/21 11:45 PM, openbsd.l...@krottmayer.com wrote: Hi, I use PHP on OpenBSD's HTTPD for my private web page. In the default configuration it's hard to debug an PHP error, because I don't see a time or the specific request on which the error occurred. Is there a configuration for PHP or

Re: Self-hosting OpenBSD server, any documentation?

2023-07-08 Thread Paul Pace
On 7/8/23 1:03 AM, Theo de Raadt wrote: Jonathan Drews wrote: On Sat, Jul 8, 2023, at 01:42, Jonas Borchelt wrote: The book "Absolute OpenBSD" is an excellent choice to expand your knowledge of the OpenBSD operating system. It was written by Michael W. Lucas and is regarded as a

Re: relayd filter

2023-06-06 Thread Paul Pace
On 6/5/23 3:15 PM, Nick Bouliane wrote: Hi, in relayd.conf I'm trying to do : pass from 192.168.1.1 path "/something.html" If I individually specify the "from" or the "path", it works but when I combine both, it doesn't work. Nowadays, when I come upon this I just use tags and move on.

self-hosted man.openbsd.org script?

2023-12-24 Thread Paul Pace
I have this vague memory of reading someone who posted a script, IIRC, to convert the system's man pages to HTML, or similar, into somewhere under /var/www and the pages worked just like the highly useful man.openbsd.org, and not like the plain text pages that everyone always posts to their

Re: relayd forward with tls

2024-01-04 Thread Paul Pace
On 1/4/24 10:22 AM, Adriano Barbosa wrote: Hi! I'm trying to use relayd with multiple FQDNs mixing remote servers with and without tls: relayd -- fqdn1 --> 127.0.0.1 (no tls) -- fqdn2 --> x.x.x.x (with tls) I wrote my relayd.conf like this: table { 127.0.0.1 } table { x.x.x.x }

Re: relayd forward with tls

2024-01-07 Thread Paul Pace
On 1/6/24 7:35 PM, Adriano Barbosa wrote: On Thu, Jan 04, 2024 at 06:57:10PM -0800, Paul Pace wrote: On 1/4/24 10:22 AM, Adriano Barbosa wrote: Hi! I'm trying to use relayd with multiple FQDNs mixing remote servers with and without tls: relayd -- fqdn1 --> 127.0.0.1 (no tls) -- fq

Re: relayd forward with tls

2024-01-08 Thread Paul Pace
On 1/7/24 1:31 PM, Adriano Barbosa wrote: On Sun, Jan 07, 2024 at 05:21:04AM -0800, Paul Pace wrote: On 1/6/24 7:35 PM, Adriano Barbosa wrote: On Thu, Jan 04, 2024 at 06:57:10PM -0800, Paul Pace wrote: On 1/4/24 10:22 AM, Adriano Barbosa wrote: Hi! I'm trying to use relayd with multiple

gzip-static option isn't working on default index

2023-11-09 Thread Paul Pace
I have gzip-static set in a server block in httpd.conf. If I make the following request: curl -I -H 'Accept-Encoding: gzip,deflate' http://example.com the response has no Content-Encoding header and the Content-Length matches /var/www/htdocs/index.html. If I make the following request:

cloudflare.cdn.openbsd.org has been down for days

2024-04-24 Thread Paul Pace
Hello! Apologies if this was announced some place as planned and I missed it, but I just wanted to let everyone know that cloudflare.cdn.openbsd.org has been down for a few days now. pkg_add -nu https://cloudflare.cdn.openbsd.org/pub/OpenBSD/7.4/packages-stable/amd64/: TLS handshake

Re: Relayd forward to multiple ports on one target host?

2024-05-03 Thread Paul Pace
On 2024-05-02 07:32, Manuel Giraud wrote: table { 127.0.0.1 } table { 127.0.0.1 } table { 127.0.0.1 } On 2024-05-02 07:02, Zé Loff wrote: table { 10.17.16.10 } table { 10.17.16.10 } table { 10.17.16.10 } Multiple tables - I didn't see that! I'm going with something like

Relayd forward to multiple ports on one target host?

2024-05-02 Thread Paul Pace
Hello! I have an OpenBSD server that hosts multiple services listening on various ports (some projects have their own web server, some projects require a reverse proxy, some projects just use httpd, etc.). This server receives requests via relayd on a different server. I was hoping to not