MRatWork Forum by Mustafa Ramadhan - custom webserver entry dan edit protocol

Sponsor:
Server and Web Integrator
Link:
6.5.0 or 7.0.0
Click for "How to install"
Donation/Sponsorship:
Kloxo-MR is open-source.
Donate and or Sponsorship always welcome.
Click to:

MRatWork Forum | Please login or register. | 2017-11-07, 22:39:03

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- custom webserver entry dan edit protocol

« previous next »

- Print

Pages: [1] 2 Go Down

### Author Topic: custom webserver entry dan edit protocol (Read 1534 times)

0 Members and 1 Guest are viewing this topic.

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### custom webserver entry dan edit protocol

« on: 2015-12-08, 09:08:16 »
1. kalau mau tambah custom entry web server (nginx atau apache) untuk tapi hanya salah satu subdomain/domain gimana ya?
2. edit ssl cipher gimana ya?
ada user yang komplain katanya nginx kloxo mr masih pakai chiper diffie helman (DHE) yg katanya kurang aman
(dia tes pakai qualys ssl labs)
saya coba buat custom.defaults.conf.tpl custom.domains.conf.tpl kemudian cipher DHE saya remove
tapi waktu menjalankan sh /script/fixweb yang ditulis ke /opt/configs/nginx/conf/domains/domain.com.conf masih pakai rules dari domains.conf.tpl defautls.conf.tpl
apa webserver tidak support custom config?
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #1 on: 2015-12-08, 09:14:17 »
Setelah tambahkan custom file, harus dijalankan fixweb dan restart-web.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #2 on: 2015-12-08, 09:23:02 »
tidak berpengaruh pak
entry yg ditulis ke /opt/configs/nginx/conf/domains/domain.com.conf
masih mengikuti aturan config asli kloxomr, bukan yang custom
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #3 on: 2015-12-08, 09:32:42 »
Yang anda ubah adalah ' /opt/configs/nginx/conf/domains/custom.domain.com.conf'.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #4 on: 2015-12-08, 10:57:57 »
Quote from: MRatWork on 2015-12-08, 09:32:42

> Yang anda ubah adalah ' /opt/configs/nginx/conf/domains/custom.domain.com.conf'.

oh file confignya (domain.conf)
saya kira file tpl nya (/opt/configs/nginx/tpl/domains.conf.tpl)
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #5 on: 2015-12-08, 11:08:59 »
Quote from: Wibowo on 2015-12-08, 10:57:57

> Quote from: MRatWork on 2015-12-08, 09:32:42

> > Yang anda ubah adalah ' /opt/configs/nginx/conf/domains/custom.domain.com.conf'.

> oh file confignya (domain.conf)
> saya kira file tpl nya (/opt/configs/nginx/tpl/domains.conf.tpl)

Saya salah kutip. Mestinya memang /opt/configs/nginx/tpl/custom.domains.conf.tpl
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #6 on: 2015-12-08, 11:12:49 »
Quote from: MRatWork on 2015-12-08, 11:08:59

> Quote from: Wibowo on 2015-12-08, 10:57:57

> > Quote from: MRatWork on 2015-12-08, 09:32:42

> > > Yang anda ubah adalah ' /opt/configs/nginx/conf/domains/custom.domain.com.conf'.

> > oh file confignya (domain.conf)
> > saya kira file tpl nya (/opt/configs/nginx/tpl/domains.conf.tpl)

> Saya salah kutip. Mestinya memang /opt/configs/nginx/tpl/custom.domains.conf.tpl

tidak berubah pak
masih sama saja
sama seperti file /opt/configs/nginx/tpl/domains.conf.tpl
« Last Edit: 2015-12-08, 11:19:52 by Wibowo »
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #7 on: 2015-12-08, 12:21:55 »
Yang anda maksud tidak berubah itu apa?. Lampirkan file /opt/configs/nginx/tpl/custom.domains.conf.tpl yang sudah anda ubah.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #8 on: 2015-12-08, 12:50:44 »
Quote from: MRatWork on 2015-12-08, 12:21:55

> Yang anda maksud tidak berubah itu apa?. Lampirkan file /opt/configs/nginx/tpl/custom.domains.conf.tpl yang sudah anda ubah.

output domain.com.conf pak
yg saya edit hanya bagian "ssl_ciphers" , mau hapus 'DHE-'
Code: [Select]

    ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
    #ssl_ciphers HIGH:!aNULL:!MD5;
    #ssl_ciphers ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS;
    ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNUL!:EXPORT:!DES:!MD5:!PSK:!RC4";
    ssl_prefer_server_ciphers on;
    ssl_session_cache builtin:1000 shared:SSL:10m;

« Last Edit: 2015-12-08, 12:53:46 by Wibowo »
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #9 on: 2015-12-08, 12:55:28 »
Jika yang anda edit adalah domain.com.conf langsung maka apabila jalankan fixweb akan di-overwrite. Makanya yang harus diedit adalah custom.domains.conf.tpl yang merupakan template untuk 'membuat' domain.com.conf.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #10 on: 2015-12-08, 13:08:09 »
Quote from: MRatWork on 2015-12-08, 12:55:28

> Jika yang anda edit adalah domain.com.conf langsung maka apabila jalankan fixweb akan di-overwrite. Makanya yang harus diedit adalah custom.domains.conf.tpl yang merupakan template untuk 'membuat' domain.com.conf.

sudah pak
yang saya edit file custom.domains.conf.tpl
ini hasil edit nya pak
https://maswibowo.web.id/custom.domains.conf.tpl.txt
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #11 on: 2015-12-08, 13:20:25 »
Letakkan file custom tersebut di /opt/configs/nginx/tpl, jalankan fixweb dan kemudian 'restart-web -y'. Selesai.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #12 on: 2015-12-08, 13:38:20 »
sudah pak
sudah di rebuilt pakai sh /script/fixweb
tapi masih terdeteksi pakai protokol ini
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b)
TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x39)
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (0x88)
secara operasional sejauh ini ga ada masalah pak
cuma barusan ada salah satu user yang mengingatkan soal ini
https://weakdh.org/
Logged

#### Wibowo

- Master
- Posts: 391
- Karma: +0/-0
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #13 on: 2015-12-08, 13:53:20 »
Quote from: MRatWork on 2015-12-08, 13:20:25

> Letakkan file custom tersebut di /opt/configs/nginx/tpl, jalankan fixweb dan kemudian 'restart-web -y'. Selesai.

kalo tambah custom entry config web server tapi cuma untuk satu domain saja gimana pak?
Logged

#### MRatWork

- Administrator
- The Elite
- Posts: 15,381
- Karma: +112/-9
- Gender:

##### Re: custom webserver entry dan edit protocol

« Reply #14 on: 2015-12-08, 14:05:51 »
Ganti saja:
Code: [Select]

    	ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";

dengan:
Code: [Select]

    <?php
    	if ($domainname === 'domain.com') {
    ?>
    	ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
    <?php
    	} else {
    ?>
    	ssl_ciphers "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA256:DHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:DES-CBC3-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4";
    <?php
    	}
    ?>

Ganti 'domain.com' dengan nama domain yang sesuai.
File .tpl ditulis pakai php.
Logged
..:: MRatWork (Mustafa Ramadhan Projects) ::..
-- Server/Web-integrator - Web Hosting (Kloxo-MR READY!) --

- Print

Pages: [1] 2 Go Up
« previous next »

- MRatWork Forum by Mustafa Ramadhan »
- Language Specific Discussions »
- Indonesia Users »
- custom webserver entry dan edit protocol

MRatWork Affiliates: BIGRAF(R) Inc. House of LMAR EFARgrafix

- Design By SMFSimple.com
- SMF 2.0.14 | SMF © 2017, Simple Machines

Page created in 0.041 seconds with 17 queries.

Mirror created by MasterkinG32.CoM