server
{
listen 443 ssl http2;
server_name sign.mgu.cc;
index index.html index.htm index.php;
root /home/wwwroot/sign.mgu.cc/Tieba-Cloud-Sign;
ssl on;
ssl_certificate /root/ssl/1__.mgu.cc_bundle.crt;
ssl_certificate_key /root/ssl/mgu.cc_key.txt;
ssl_session_timeout 5m;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
location ~ /(lib|plugins|source|templates)/.*\.(php|Php|PHp|PHP|phP|pHP|pHp|PhP)?$ {
deny all;
}
一定要放置在PHP执行前面,否则无效.
可以用私钥来做这件事。生成一个解密的key文件，替代原来key文件。
openssl rsa -in server.key -out server.key.unsecure
然后修改配置文件
这样就可以不用输入密码了
错误报告邮件如下
/etc/cron.daily/spamassassin:
wget: MIRRORED.BY: Permission denied
error: unable to refresh mirrors file for channel updates.spamassassin.org, using old file
wget: 1742071.tar.gz: Permission denied
wget: 1742071.tar.gz: Permission denied
wget: 1742071.tar.gz: Permission denied
wget: 1742071.tar.gz: Permission denied
channel: could not find working mirror, channel failed
sa-update failed for unknown reasons
解决方法
chown -R debian-spamd:debian-spamd /var/lib/spamassassin
chmod -R 700 /var/lib/spamassassin/
编辑 /etc/ssh/sshd_config 文件
在末尾增加两行
ClientAliveInterval 30
ClientAliveCountMax 3
重启ssh服务
/etc/init.d/ssh restart