Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
1
SSL / NEW feature Idea - SSL without pointing the IP to CWP by ACMEV2
« on: November 08, 2023, 08:26:55 PM »
I notice that cyberpanel has new feature update is SSLv2 which does not need pointing the IP from Cloudflare to CWP, which is great, because we use cloudflare to proxy the domain, SSL does not work all the time because of this. ACMEv2 is another method to obtain the
SSL for our website without expose our 443 port to the public, I have done in my router, PfSense firewall. it is working well. All I need just need to take the api token to setup the ACMEv2 plugin. but I want it to be work at CWP integration.
I love this feature in Cyberpanel, but I already buy many of CWP licenses for my server, and I love the functions and UI of CWP(can't get rid off CWP, LOL)
SSL for our website without expose our 443 port to the public, I have done in my router, PfSense firewall. it is working well. All I need just need to take the api token to setup the ACMEv2 plugin. but I want it to be work at CWP integration.
I love this feature in Cyberpanel, but I already buy many of CWP licenses for my server, and I love the functions and UI of CWP(can't get rid off CWP, LOL)
2
CSF Firewall / Re: AbuseIP DB on centos
« on: September 13, 2023, 05:44:03 PM »We've been using them, along with auto reporting.
Be careful how many lists you have enabled, as it can slow and possibly overload the server.
One of the the core lists that's good is DShield. Been using that list for 23 years.
I running all list enable. I found that is will slow the server definitely as you described. So I should consider one or two list enable and use AbuseIPdb auto-script to contribute reports. Thanks all of you reply
3
CSF Firewall / AbuseIP DB on centos
« on: September 12, 2023, 12:04:44 AM »
Have anyone success use abuseIPdb in centos block the IPs that have report threshold at 10times?
It's very easy
https://www.abuseipdb.com/csf
and can activate other IP database in this file
vi /etc/csf/csf.blocklists
I enabled all of the list, share what IP list have you enabled.
It's very easy
https://www.abuseipdb.com/csf
and can activate other IP database in this file
vi /etc/csf/csf.blocklists
I enabled all of the list, share what IP list have you enabled.
4
PHP Selector / Re: PHPFPM 8.1.15 not getting build and activated
« on: August 29, 2023, 06:21:34 PM »
I'm on centos 8 also having this problem when building php80, php74:ok php81:ok php82:ok
ERROR: Missing extension file /sodium.so
ERROR: Missing extension file /sodium.so
5
PHP Selector / Re: PHP-FPM 8.0 not building.
« on: August 29, 2023, 06:18:54 PM »
No lucks building php80
on Centos 8 as well
on Centos 8 as well
6
Mod_Security / Re: Error 403 Forbidden (You don't have permission to access / on this server)
« on: August 14, 2023, 03:50:16 PM »
I also have this issue when switch the web server from apache only to nginx only.
it only work apache only or Apache & nginx or Apache&nginx&varnish
tried: uninstall Mod_security, re-generate Vhost, Fix permissions from GUI.
logs.
From the log it says is missing file /apps/files/preview-service-worker.js. when I go to file manager , it's confirmed missing this file.
but why would it work when switchted to apache webserver. I will regenerate this issue from new Nextcloud installation
it only work apache only or Apache & nginx or Apache&nginx&varnish
tried: uninstall Mod_security, re-generate Vhost, Fix permissions from GUI.
logs.
Code: [Select]
[i][i][i]2023/08/14 18:39:45 [error] 4784#4784: *65 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:12 [error] 5206#5206: *70 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:21 [error] 5330#5330: *71 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:34 [error] 5551#5551: *73 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"
2023/08/14 18:40:42 [error] 5663#5663: *74 openat() "/home/weasam/nextcloud.domain.com/index.php/apps/files/preview-service-worker.js" failed (20: Not a directory), client: 192.168.10.1, server: nextcloud.domain.com, request: "GET /index.php/apps/files/preview-service-worker.js HTTP/1.1", host: "nextcloud.domain.com", referrer: "https://nextcloud.domain.com/index.php/apps/files/preview-service-worker.js"[/i][/i][/i]From the log it says is missing file /apps/files/preview-service-worker.js. when I go to file manager , it's confirmed missing this file.
but why would it work when switchted to apache webserver. I will regenerate this issue from new Nextcloud installation
7
FTP / Re: Error when enable jailkit to a user
« on: July 18, 2023, 10:17:47 PM »
Thanks a lot. really help me to solved this.
8
Installation / Re: Jailkit problems
« on: July 18, 2023, 09:58:16 PM »
How did you solved? would'n share it?
An error occurred trying to enable Jailkit An error occurred trying to: <user>
I found the solution
https://forum.centos-webpanel.com/index.php?topic=10954.0#:~:text=rm%20-rf%20%2Frun%2Fsystemd%2Fgenerator%2Fhome-jail-%20%5Buser_cwp%5D-home-%20%5Buser_cwp%5D.mount%20rm%20%2Frun%2Fsystemd%2Fgenerator%2Flocal-fs.target.requires%2Fhome-jail-%20%5Buser_cwp%5D-home-,0%200%20or%20delete%20that%20line%20reboot%20server
An error occurred trying to enable Jailkit An error occurred trying to: <user>
I found the solution
https://forum.centos-webpanel.com/index.php?topic=10954.0#:~:text=rm%20-rf%20%2Frun%2Fsystemd%2Fgenerator%2Fhome-jail-%20%5Buser_cwp%5D-home-%20%5Buser_cwp%5D.mount%20rm%20%2Frun%2Fsystemd%2Fgenerator%2Flocal-fs.target.requires%2Fhome-jail-%20%5Buser_cwp%5D-home-,0%200%20or%20delete%20that%20line%20reboot%20server
9
How to / Re: reverse proxy on cwp hostname
« on: October 23, 2022, 02:53:51 PM »
My Solution is create domains
for admin
cwpadmin.mydomain.com
for user
cwpuser.mydomain.com
Then do the reverse proxy
[CWP] WebServers Settings >> WebServers Domain Conf >> Select User&Domain: cwpadmin.mydomain.com
>>
[Nginx >Proxy > custom port]
Custom port: 2031
IP: hostname.mydomain.com ##this is the host domain need to port number to visit the admin panel.
Not ready yet. we still need to change something in vhost for domain change proxy_pass url from http to https since we need to visit with SSL
[CWP] WebServers Settings >> WebServers Conf Edictor >>
/etc/nginx/conf.d/vhosts/cwpadmin.mydomain.com.conf
/etc/nginx/conf.d/vhosts/cwpadmin.mydomain.com.ssl.conf
for admin
cwpadmin.mydomain.com
for user
cwpuser.mydomain.com
Then do the reverse proxy
[CWP] WebServers Settings >> WebServers Domain Conf >> Select User&Domain: cwpadmin.mydomain.com
>>
[Nginx >Proxy > custom port]
Custom port: 2031
IP: hostname.mydomain.com ##this is the host domain need to port number to visit the admin panel.
Not ready yet. we still need to change something in vhost for domain change proxy_pass url from http to https since we need to visit with SSL
[CWP] WebServers Settings >> WebServers Conf Edictor >>
/etc/nginx/conf.d/vhosts/cwpadmin.mydomain.com.conf
/etc/nginx/conf.d/vhosts/cwpadmin.mydomain.com.ssl.conf
10
How to / Re: How to change port of CWP.user
« on: October 23, 2022, 02:33:31 PM »
Don't forget to add the new port number in CSF firewall allow list
11
How to / Re: install CWP on ARM raspberry?
« on: October 23, 2022, 02:28:28 PM »
Need recompile the code. except litespeed won't work on arm
12
How to / Re: [Tutorial] How to Change the IP Address of Server?
« on: October 23, 2022, 01:59:37 PM »
Can I change the IP to 127.0.0.1 or localhost and all rebuild all the vhost files pointing to 127.0.0.1
13
How to / Re: reverse proxy on cwp hostname
« on: October 23, 2022, 01:55:39 PM »
I also trying to do this access the panel without port number,
example
hostname.example.com:2031 >> change to hostname.example.com/admin
hostname.example.com:2083 >> change to hostname.example.com/user
or
hostname.example.com:2031 >> change to cwpadmin.example.com
hostname.example.com:2083 >> change to cwpuser.example.com
but looks like CWP has 301 permanent redirect in the config file/usr/local/cwpsrv/conf/cwpsrv.conf
Maybe we could tries
1. remove the permanent redirect in /usr/local/cwpsrv/conf/cwpsrv.conf
2. use proxy "proxy_pass" in /etc/nginx/conf.d/hostname.conf and hostname-ssl.conf
https://forum.centos-webpanel.com/index.php?topic=5194.0
https://forum.centos-webpanel.com/index.php?topic=6182.0
http://forum.centos-webpanel.com/how-to/how-to-change-cwpsrvd-listen-port-(cwp)/
example
hostname.example.com:2031 >> change to hostname.example.com/admin
hostname.example.com:2083 >> change to hostname.example.com/user
or
hostname.example.com:2031 >> change to cwpadmin.example.com
hostname.example.com:2083 >> change to cwpuser.example.com
but looks like CWP has 301 permanent redirect in the config file/usr/local/cwpsrv/conf/cwpsrv.conf
Maybe we could tries
1. remove the permanent redirect in /usr/local/cwpsrv/conf/cwpsrv.conf
2. use proxy "proxy_pass" in /etc/nginx/conf.d/hostname.conf and hostname-ssl.conf
Like this:Related/Similar TopicsCode: [Select]<VirtualHost *:8181>
ServerAdmin hostmaster@example.com
ProxyRequests off
DocumentRoot /home/DOMAIN_DIR
ProxyPreserveHost On
ServerName panel.my_domain.com
ServerAlias panel.my_domain.com
<Location />
ProxyPass http://panel.my_domain.com:2030/
ProxyPassReverse http://panel.my_domain.com:2030/
Order allow,deny
Allow from all
</Location>
</VirtualHost>
?
https://forum.centos-webpanel.com/index.php?topic=5194.0
https://forum.centos-webpanel.com/index.php?topic=6182.0
http://forum.centos-webpanel.com/how-to/how-to-change-cwpsrvd-listen-port-(cwp)/
14
Installation / Re: Found Error first time installation Centos 7: MySQL root password is invalid!!!
« on: July 27, 2022, 03:11:31 AM »
My solution is add DNS
nano /etc/resolv.conf
nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 1.1.1.1
nano /etc/resolv.conf
nameserver 8.8.8.8
nameserver 8.8.4.4
nameserver 1.1.1.1
15
SSL / Re: DNS of your domain doesn't point to this server or you have htaccess restriction
« on: July 18, 2022, 02:32:52 AM »
In my case it might due to my server is blocking 443 port by my ISP provider.
