Category: Webservers

Redirect HTTP to HTTPS on IIS

July 9, 2014

If you need to force HTTPS on the entire site then add the following to the web.config file:

<rewrite>
 <rules>
  <rule name="HTTP to HTTPS redirect" stopProcessing="true">
  <match url="[SOURCE]$" />
  <conditions>
   <add input="{HTTPS}" pattern="off" ignoreCase="true" />
  </conditions>
  <action type="Redirect" redirectType="Found" url="https://{HTTP_HOST}/[DESTINATION]" />
  </rule>
 </rules>
</rewrite>

<rules>

</conditions>

</rule>

</rules>

</rewrite>

If you want to force HTTPS on a specific URL, then use this instead:

<rewrite>
 <rules>
  <rule name="HTTP to HTTPS redirect" stopProcessing="true">
   <match url="(.*)" />
   <conditions>
    <add input="{HTTPS}" pattern="off" ignoreCase="true" />
   </conditions>
   <action type="Redirect" redirectType="Found" url="https://{HTTP_HOST}/{R:1}" />
  </rule>
 </rules>
</rewrite>

<rules>

</conditions>

</rule>

</rules>

</rewrite>

Redirect HTTPS to HTTP

June 26, 2014

If you want to redirect all HTTPS traffic to HTTP then add the following to your .htaccess file:

RewriteCond %{SERVER_PORT} ^443$ [OR]
RewriteCond %{HTTPS} =on
RewriteRule ^(.*)$ http://%{SERVER_NAME}/$1 [R=301,L]

RewriteCond %{SERVER_PORT} ^443$ [OR]

RewriteCond %{HTTPS} =on

RewriteRule ^(.*)$ http://%{SERVER_NAME}/$1 [R=301,L]

Block Access To .git And .svn Folders

June 26, 2014

On Nginx add the following to each “server” block:

location ~ /\.git {
  deny all;
}
location ~ /\.svn {
  deny all;
}

location ~ /\.git {

deny all;

}

location ~ /\.svn {

deny all;

}

And the for Apache add the following to the VirtualHost block:

<Directorymatch "^/.*/\.git+/">
  Order deny,allow
  Deny from all
</Directorymatch>
<Files ~ "^\.git">
    Order allow,deny
    Deny from all 
</Files>
<Directorymatch "^/.*/\.svn+/">
  Order deny,allow
  Deny from all
</Directorymatch>
<Files ~ "^\.svn">
    Order allow,deny
    Deny from all
</Files>

Order deny,allow

Deny from all

</Directorymatch>

Order allow,deny

Deny from all

</Files>

Order deny,allow

Deny from all

</Directorymatch>

Order allow,deny

Deny from all

</Files>

Set X-Robots-Tag Header On Plesk/Nginx

June 24, 2014

On a Plesk server with Nginx enabled here are the steps to setup custom X-Robot-Tag headers has described here: https://developers.google.com/webmasters/control-crawl-index/docs/robots_meta_tag?csw=1 In Plesk control panel: 1. Select the domain 2. Click Web Server Settings 3. Scroll down to nginx settings 4. If you have “Serve static files directly by nginx” checked (which I recommend), you’ll need to remove the file extensions to which you’re going to apply headers. In this example remove “pdf” from the list. 5. In the “Additional nginx directives” field enter:

location ~* \.pdf$ {
	add_header  X-Robots-Tag "index, noarchive, nosnippet";
}

location ~* \.pdf$ {

add_header X-Robots-Tag "index, noarchive, nosnippet";

}

6. Click OK button to save changes.

maxclients.sh Script For Apache

May 3, 2014

This script attempts to look at Apache memory usage and recommend a stable setting for MaxClients.

#!/bin/bash

PROCNAME=httpd
PARENTPIDS=`comm -12 <(ps -C $PROCNAME -o ppid | sort -u) <(ps -C $PROCNAME -o pid | sort -u)`

for ParPID in $PARENTPIDS; do
  SUM=0
  COUNT=0
  for x in `ps f --ppid $ParPID -o rss | tail -n +2`; do
    SUM=$(( $SUM + $x ))
    COUNT=$(( $COUNT + 1 ))
  done

  MEMPP=$(( $SUM / $COUNT / 1024 ))
  FREERAM=$(( `free | tail -2 | head -1 | awk '{print $4}'` / 1024 ))
  APACHERAM=$(( $SUM / 1024 ))
  APACHEMAX=$(( $APACHERAM + $FREERAM ))

  (
  echo
  echo "Info for the following parent apache process:"
  echo "  "`ps f --pid $ParPID -o command | tail -n +2`
  echo
  echo "Current # of apache processes:        $COUNT"
  echo "Average memory per apache process:    $MEMPP MB"
  echo "Free RAM (including cache & buffers): $FREERAM MB"
  echo "RAM currently in use by apache:       $APACHERAM MB"
  echo "Max RAM available to apache:          $APACHEMAX MB"
  echo
  echo "Theoretical maximum MaxClients:  $(( $APACHEMAX / $MEMPP ))"
  echo "Recommended MaxClients:          $(( $APACHEMAX / 10 * 9 / $MEMPP ))"
  echo
  )
done

#!/bin/bash

PROCNAME=httpd

PARENTPIDS=`comm -12 <(ps -C $PROCNAME -o ppid | sort -u) <(ps -C $PROCNAME -o pid | sort -u)`

for ParPID in $PARENTPIDS; do

SUM=0

COUNT=0

for x in `ps f --ppid $ParPID -o rss | tail -n +2`; do

SUM=$(( $SUM + $x ))

COUNT=$(( $COUNT + 1 ))

done

MEMPP=$(( $SUM / $COUNT / 1024 ))

FREERAM=$(( `free | tail -2 | head -1 | awk '{print $4}'` / 1024 ))

APACHERAM=$(( $SUM / 1024 ))

APACHEMAX=$(( $APACHERAM + $FREERAM ))

(

echo

echo "Info for the following parent apache process:"

echo " "`ps f --pid $ParPID -o command | tail -n +2`

echo

echo "Current # of apache processes: $COUNT"

echo "Average memory per apache process: $MEMPP MB"

echo "Free RAM (including cache & buffers): $FREERAM MB"

echo "RAM currently in use by apache: $APACHERAM MB"

echo "Max RAM available to apache: $APACHEMAX MB"

echo

echo "Theoretical maximum MaxClients: $(( $APACHEMAX / $MEMPP ))"

echo "Recommended MaxClients: $(( $APACHEMAX / 10 * 9 / $MEMPP ))"

echo

)

done

Reliable Penguin provides managed web hosting, systems administration, website and server migrations, and expert consulting.

Recent Updates

Fixing WP‑CLI “eval()’d code” Parse Errors on PHP 8.4 During “wp db import”

Force a 404 With a CloudFront Function (Always)

HTTP Basic Auth Is Dead

WordPress 6.8 Speculative Loading Can Break HTTP Basic Auth

Zero‑Trust for WordPress Admin with Cloudflare Access (Email One‑Time Codes)

Category: Webservers

Redirect HTTP to HTTPS on IIS

Redirect HTTPS to HTTP

Block Access To .git And .svn Folders

Set X-Robots-Tag Header On Plesk/Nginx

maxclients.sh Script For Apache

Recent Updates

Categories

Get a free consultation from Reliable Penguin