Ryan Eby eby

Ran into the same issue as kvspb/nginx-auth-ldap#7 but with auth_pam instead of auth_ldap (using pam for ldap auth though)

auth_pam will prompt if on it's own
auth_pam will not prompt if satisfy any and IP limits

Used the solution to issue 7 and added a blank basic auth file. IP and PAM work.

            satisfy any;
 allow 192.168.100.0/24;

Keybase proof

I hereby claim:

I am eby on github.
I am eby (https://keybase.io/eby) on keybase.
I have a public key whose fingerprint is D259 4350 9280 4178 1DF4 371E AA61 9E22 65DC D696

To claim this, I am signing this object:

Internet Scale Services Checklist

A checklist for designing and developing internet scale services, inspired by James Hamilton's 2007 paper "On Desgining and Deploying Internet-Scale Services."

http://mvdirona.com/jrh/talksandpapers/jamesrh_lisa.pdf

Basic tenets

Does the design expect failures to happen regularly and handle them gracefully?
Have we kept things as simple as possible?

	#!/bin/sh
	# http://kedar.nitty-witty.com
	#SPLIT DUMP FILE INTO INDIVIDUAL TABLE DUMPS
	# Text color variables
	txtund=$(tput sgr 0 1) # Underline
	txtbld=$(tput bold) # Bold
	txtred=$(tput setaf 1) # Red
	txtgrn=$(tput setaf 2) # Green
	txtylw=$(tput setaf 3) # Yellow
	txtblu=$(tput setaf 4) # Blue

	07/02/2015 21:53:52 System: Coldstart.
	07/02/2015 20:05:04 UPS: Switched to battery backup power.
	06/23/2015 00:47:30 UPS: Returned from battery backup power.
	06/23/2015 00:47:02 UPS: Switched to battery backup power.
	06/06/2015 16:15:37 UPS: Returned from battery backup power.
	06/06/2015 16:15:32 UPS: Switched to battery backup power.
	06/06/2015 14:18:01 UPS: Returned from battery backup power.
	06/06/2015 14:18:01 UPS: Switched to battery backup power.
	05/11/2015 16:37:05 UPS: Returned from battery backup power.
	05/11/2015 16:37:04 UPS: Switched to battery backup power.


	server {
	[...]

	## Block SQL injections
	set $block_sql_injections 0;
	if ($query_string ~ "union.select.\(") {
	set $block_sql_injections 1;
	}
	if ($query_string ~ "union.all.select.*") {

	#!/bin/bash
	# A Nginx Shell Script To Block Spamhaus Lasso Drop Spam IP Address
	# Run this script once a day and drop all spam network IPs (netblock) with http 403 client error.
	# The script will get executed every day via /etc/cron.daily (make sure crond
	# is running).
	# -------------------------------------------------------------------------
	# Copyright (c) 2008 nixCraft project <http://cyberciti.biz/fb/>
	# This script is licensed under GNU GPL version 2.0 or above
	# -------------------------------------------------------------------------
	# This script is part of nixCraft shell script collection (NSSC)

	# Redirect all traffic to SSL
	server {
	listen [::]:80;
	listen 80;
	server_name docstore.yourdomain.org;
	return 301 https://$server_name$request_uri;
	}
	# SSL Server based off https://cipherli.st/ and H5BP
	server {
	# Listen on IPv6/4

	#!/bin/bash

	###
	# FILE: hpacucli-check.sh (03-Dec-2013)
	# LICENSE: GNU/GPL v3.0
	# AUTHOR: Olaf Reitmaier Veracierta <olafrv@gmail.com>
	# USAGE: Check the status of the logical drives on a HP Server
	# with hpacucli (HP Array Configuration Utility Client)
	# installed, syslog and send an email with errors.
	##

	# Same result as hard reset via button so use accordingly

	echo 1 > /proc/sys/kernel/sysrq
	echo b > /proc/sysrq-trigger