Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Block expensive svnweb operations without a cookie | Dan Fandrich | 12 days | 1 | -0/+9 |
| | | | | | | | | | If an expensive request comes in from anyone without a cookie attached, redirect to a page where the cookie is set using JavaScript, then redirect back. This should block robots from these paths, most of which do not support JavaScript. The collateral damage is that a JavaScript browser is now required for users to access those paths. The contents of the cookie is not currently checked, merely that it is set. | ||||
* | Reduce the number of SVN paths considered too expensive | Dan Fandrich | 12 days | 1 | -4/+3 |
| | | | | | | | These two don't seem to contribute much to the load seen when robots start hitting svnweb that hard. Also, remove a separate query block that seems to not help much (and which was hard to find in a different location in the file). | ||||
* | Block expensive operations on another Google bot | Dan Fandrich | 2025-05-19 | 1 | -2/+2 |
| | | | | | | | The last range was actually another Google bot, which clearly doesn't support Crawl-Delay:. Rather than block one IP range, which isn't going to work long-term since they have so many ranges, block only expensive operations via its new User-Agent: string instead. | ||||
* | Block another abusive IP address range | Dan Fandrich | 2025-05-19 | 1 | -1/+1 |
| | |||||
* | Block more abusive IP address ranges | Dan Fandrich | 2025-05-17 | 1 | -1/+1 |
| | | | | These comprise roughly 20% of current requests. | ||||
* | Rotate apache logs weekly on sucuk to keep them smaller | Jani Välimaa | 2025-05-10 | 1 | -0/+3 |
| | |||||
* | Block Presto | Jani Välimaa | 2025-05-04 | 1 | -1/+1 |
| | | | | Most probably Presto is not used as user agent in browsers used by potential users of Mageia. | ||||
* | Block Trident | Jani Välimaa | 2025-05-04 | 1 | -1/+1 |
| | |||||
* | Block a few more things | Pascal Terjan | 2025-04-16 | 1 | -1/+4 |
| | |||||
* | Expand the IP ranges banned for hosting spiders | Dan Fandrich | 2025-03-07 | 1 | -1/+1 |
| | | | | Widen the CIDR mask to catch many more addresses used by these bots. | ||||
* | Fix a typo in the last commit | Dan Fandrich | 2024-10-30 | 1 | -1/+1 |
| | |||||
* | Reduce the number of old Apache logs on friteuse (mga#33670) | Dan Fandrich | 2024-10-30 | 1 | -1/+5 |
| | | | | | They're currently taking up half the available disk which is currently full. | ||||
* | Remove conditionals for releases older than Mageia 6 | Dan Fandrich | 2024-10-15 | 1 | -1/+1 |
| | | | | | This eliminates a bunch of conditionals, simplifying the configuration. We no longer have any servers running on a release older than this. | ||||
* | Enable transparent compression on Apache (mga#6969) | Dan Fandrich | 2024-10-15 | 1 | -0/+36 |
| | | | | | | This will increase CPU usage somewhat, but the reduction in required bandwidth ought to make it a win for users. The compression level is set to the lowest setting to keep CPU usage down. | ||||
* | Use @ when accessing variables in templates | Dan Fandrich | 2024-10-05 | 12 | -43/+43 |
| | | | | | | | | Access without the @ symbol is the older method and is discouraged. This take leaves alone accesses of variables that are defined within the template, which don't seem to allow an @. This batch of changes is for templates related to web sites. | ||||
* | Revert "Use @ when accessing variables in templates" | Dan Fandrich | 2024-10-04 | 13 | -35/+35 |
| | | | | | | Variables defined within a template can't be accessed with @. This change needs to be reworked to eliminate those cases. This reverts commits 2c7da665 and ae197622. | ||||
* | Use @ when accessing variables in templates | Dan Fandrich | 2024-10-04 | 13 | -35/+35 |
| | | | | Access without the @ symbol is the older method and is discouraged. | ||||
* | Block a couple of IP address ranges on svnweb | Dan Fandrich | 2024-09-04 | 1 | -1/+6 |
| | | | | | | There was a bot there was hammering us for weeks, but which doesn't identify itself in the User-Agent string. Also, add another couple of bot User-Agent strings. | ||||
* | Block expensive SVN operations on robots on svnweb | Dan Fandrich | 2024-09-03 | 1 | -0/+8 |
| | | | | | | This will result in most operations other than showing a directory or downloading a specific version of a file being blocked. ClaudeBot and Amazonbot remain completely blocked. | ||||
* | Fix typos in comments | Dan Fandrich | 2024-08-15 | 1 | -1/+1 |
| | | | | This should result in no difference in configuration. | ||||
* | Ban two robots from svnweb | Dan Fandrich | 2024-04-25 | 1 | -0/+10 |
| | |||||
* | Switch links to https: that are found in comments | Dan Fandrich | 2024-01-25 | 1 | -1/+1 |
| | | | | These are for use by humans only. | ||||
* | apache logrotate: add sharedscripts (mga#29620) | Thomas Backlund | 2022-07-05 | 1 | -0/+1 |
| | |||||
* | work around crash during logrotate (mga#29620) | Thomas Backlund | 2021-11-28 | 1 | -1/+1 |
| | |||||
* | apache: logrotate: keep 60 days of logs on duvel | Thomas Backlund | 2021-03-19 | 1 | -1/+2 |
| | |||||
* | apache: logrotate daily on duvel | Thomas Backlund | 2021-03-06 | 1 | -0/+4 |
| | |||||
* | apache: update logrotate to use systemctl calls | Thomas Backlund | 2021-03-06 | 1 | -4/+1 |
| | |||||
* | add missing newline | Thomas Backlund | 2018-09-05 | 1 | -1/+1 |
| | |||||
* | apache: protect any hidden files or dirs with 404 | Thomas Backlund | 2018-09-04 | 1 | -0/+4 |
| | |||||
* | Allow to not use Location directive in apache ( but keep past use by default) | Nicolas Lécureuil | 2017-04-17 | 1 | -0/+2 |
| | |||||
* | apache fcgid: support multiple script aliases | Olivier Blin | 2017-04-10 | 1 | -1/+3 |
| | |||||
* | apache: rename vhost_catalyst_app template as vhost_fcgid | Olivier Blin | 2017-04-10 | 1 | -0/+0 |
| | |||||
* | catalyst_app: simplify using AddHandler | Olivier Blin | 2017-04-08 | 1 | -3/+1 |
| | |||||
* | Allow having static alias | Pascal Terjan | 2017-04-08 | 1 | -1/+3 |
| | |||||
* | catalyst_app: use fcgid instead of fastcgi | Olivier Blin | 2017-04-08 | 1 | -1/+4 |
| | | | | fastcgi is not available on Mageia 5. | ||||
* | catalyst_app: remove duplicate aliases, already in vhost::base | Olivier Blin | 2017-04-08 | 1 | -3/+0 |
| | |||||
* | apache: fix vhost_simple for apache 2.4 | Thomas Backlund | 2016-03-14 | 1 | -1/+6 |
| | |||||
* | enforce hardened ssl | Thomas Backlund | 2016-03-01 | 2 | -3/+8 |
| | |||||
* | Make vhost_base compatible with Apache 2.4 | Pascal Terjan | 2016-02-07 | 1 | -1/+6 |
| | |||||
* | apache: rename ssl.conf as ssl_vhost.conf | Olivier Blin | 2015-11-30 | 1 | -0/+0 |
| | | | | Not to conflict with packaged file from Mageia >= 3 | ||||
* | Attempt to support alias in catalyst_app | Pascal Terjan | 2014-04-04 | 1 | -3/+2 |
| | |||||
* | Add content parameter to apache::vhost::reverse_proxy | Nicolas Vigier | 2013-10-06 | 1 | -0/+2 |
| | |||||
* | apache: move ssl vhost configuration in a separate file | Nicolas Vigier | 2013-06-25 | 2 | -10/+11 |
| | |||||
* | apache: add option to select default redirect URL | Nicolas Vigier | 2013-05-23 | 1 | -1/+9 |
| | | | | | Add an option to change the URL to redirect to in case of unknown vhost. If the option is not provided, a 404 error is returned. | ||||
* | apache: remove "dynamic lookup" warnings | Nicolas Vigier | 2012-12-18 | 1 | -1/+1 |
| | |||||
* | Create apache::var and move apache config options | Nicolas Vigier | 2012-12-10 | 1 | -1/+1 |
| | | | | Move apache options to apache::var class | ||||
* | Move custom 404 config to www vhost only (patch from rda) | Nicolas Vigier | 2012-09-19 | 1 | -1/+0 |
| | |||||
* | Patch from romain setting custom 404 for www | Pascal Terjan | 2012-08-28 | 1 | -0/+1 |
| | |||||
* | add temporary fix on champagne for CVE-2011-3192 | Nicolas Vigier | 2012-05-31 | 1 | -0/+12 |
| | |||||
* | move the others files in subdirectory | Michael Scherer | 2012-04-02 | 2 | -0/+0 |
| |