| # The general procedure here is adapted from the 7->8 guide here. https://www.tecmint.com/upgrade-centos-7-to-centos-8/ | |
| # | |
| # It is a curated list of my bash history. I entered other commands so hopefully I got the right ones here. | |
| yum upgrade | |
| reboot | |
| dnf install epel-release | |
| dnf install rpmconf | |
| dnf install yum-utils | |
| rpmconf -a # answer "n" to both things |
This guide was adapted from https://gist.github.com/niw/e4313b9c14e968764a52375da41b4278#running-ubuntu-server-for-arm64
| # filter by request host header | |
| varnishlog -q 'ReqHeader ~ "Host: example.com"' | |
| # filter by request url | |
| varnishlog -q 'ReqURL ~ "^/some/path/"' | |
| # filter by client ip (behind reverse proxy) | |
| varnishlog -q 'ReqHeader ~ "X-Real-IP: .*123.123.123.123"' | |
| # filter by request host header and show request url and referrer header |
| filter { | |
| if [type] == "magento" { | |
| multiline{ | |
| pattern => "^%{TIMESTAMP_ISO8601:timestamp}" | |
| what => "previous" | |
| negate=> true | |
| } | |
| grok { | |
| match => [ | |
| "message", |
| <? | |
| //CSP only works in modern browsers Chrome 25+, Firefox 23+, Safari 7+ | |
| $headerCSP = "Content-Security-Policy:". | |
| "connect-src 'self' ;". // XMLHttpRequest (AJAX request), WebSocket or EventSource. | |
| "default-src 'self';". // Default policy for loading html elements | |
| "frame-ancestors 'self' ;". //allow parent framing - this one blocks click jacking and ui redress | |
| "frame-src 'none';". // vaid sources for frames | |
| "media-src 'self' *.example.com;". // vaid sources for media (audio and video html tags src) | |
| "object-src 'none'; ". // valid object embed and applet tags src | |
| "report-uri https://example.com/violationReportForCSP.php;". //A URL that will get raw json data in post that lets you know what was violated and blocked |
| more_set_headers "Access-Control-Allow-Origin: $http_origin"; | |
| more_set_headers "Access-Control-Allow-Credentials: true"; | |
| # OPTIONS indicates a CORS pre-flight request | |
| if ($request_method = 'OPTIONS') { | |
| more_set_headers "Access-Control-Max-Age: 1728000"; | |
| more_set_headers "Access-Control-Allow-Methods: GET, POST, PUT, DELETE, PATCH, OPTIONS"; | |
| more_set_headers "Access-Control-Allow-Headers: Authorization,Content-Type,Accept,Origin,User-Agent,DNT,Cache-Control,X-Mx-ReqToken,Keep-Alive,X-Requested-With,If-Modified-Since"; | |
| more_set_headers "Content-Length: 0"; |
| # To check if this is up-to-date with the tax rates go to | |
| # http://www.expatax.nl/tax-rates-2016.php and see if there's anything | |
| # newer there. | |
| # | |
| # I make no guarantees that any of this is correct. I calculated this | |
| # at the time and have been updating it when new tax rates come along | |
| # because people keep finding this useful. | |
| # | |
| # There's also an interactive JS version of this created by | |
| # @stevermeister at |