Domains maintenaince mode

EckyBrazzz · Jun 7, 2019

Thanks, I already tried to find it but did not sucseed.

Code (Text):

#find . -type f -exec grep "Centmin Mod Nginx Test Page" '{}' \; -print       
grep: ./proc/sys/fs/binfmt_misc/register: Invalid argument
grep: ./proc/sys/net/ipv4/route/flush: Permission denied
grep: ./proc/sys/net/ipv6/conf/all/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/default/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/eth0/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/lo/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/route/flush: Permission denied
grep: ./proc/sys/vm/compact_memory: Permission denied
^Z
[3]+  Stopped                 find . -type f -exec grep "Centmin Mod Nginx Test Page" '{}' \; -print
#find . -type f- grep "Centmin Mod Nginx Test Page" '{}' \; -print     
find: Arguments to -type should contain only one letter
# find . -type f -print | xargs grep "Centmin Mod Nginx Test Page"
grep: ./proc/sys/fs/binfmt_misc/register: Invalid argument
grep: ./proc/sys/net/ipv4/route/flush: Permission denied
grep: ./proc/sys/net/ipv6/conf/all/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/default/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/eth0/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/lo/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/route/flush: Permission denied
grep: ./proc/sys/vm/compact_memory: Permission denied

eva2000 · Jun 7, 2019

EckyBrazzz said: ↑

Thanks, I already tried to find it but did not sucseed.

Code (Text):

#find . -type f -exec grep "Centmin Mod Nginx Test Page" '{}' \; -print      
grep: ./proc/sys/fs/binfmt_misc/register: Invalid argument
grep: ./proc/sys/net/ipv4/route/flush: Permission denied
grep: ./proc/sys/net/ipv6/conf/all/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/default/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/eth0/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/lo/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/route/flush: Permission denied
grep: ./proc/sys/vm/compact_memory: Permission denied
^Z
[3]+  Stopped                 find . -type f -exec grep "Centmin Mod Nginx Test Page" '{}' \; -print
#find . -type f- grep "Centmin Mod Nginx Test Page" '{}' \; -print    
find: Arguments to -type should contain only one letter
# find . -type f -print | xargs grep "Centmin Mod Nginx Test Page"
grep: ./proc/sys/fs/binfmt_misc/register: Invalid argument
grep: ./proc/sys/net/ipv4/route/flush: Permission denied
grep: ./proc/sys/net/ipv6/conf/all/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/default/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/eth0/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/conf/lo/stable_secret: Input/output error
grep: ./proc/sys/net/ipv6/route/flush: Permission denied
grep: ./proc/sys/vm/compact_memory: Permission denied

Click to expand...

strange you must of edited or removed it or overwrote the contents in the file already ? or you running the command or running the command in wrong present working directory

try narrowing the find target directory to /usr/local/nginx

Code (Text):

find /usr/local/nginx -type f -exec grep "Centmin Mod Nginx Test Page" '{}' \; -print

Code (Text):

find /usr/local/nginx -type f -exec grep "Centmin Mod Nginx Test Page" '{}' \; -print 
                <h1><strong>Centmin Mod Nginx Test Page</strong></h1>
/usr/local/nginx/html/index.html

EckyBrazzz · Jun 7, 2019

eva2000 said: ↑

or you running the command or running the command in wrong present working directory
Click to expand...

Because I didn't know where to look, yes,

EckyBrazzz · Jun 7, 2019

Perect, even added a tracking code so that I can see what countries have the prioritie to start!

EckyBrazzz · Jun 9, 2019

100 domains now show another page when made a change @ cloudflare

A completely other site.....hosted on a com.br domain

eva2000 · Jun 9, 2019

strange you can check their curl headers
Code (Text):
curl -I http://domain.com
Code (Text):
curl -I http://www.domain.com
Code (Text):
curl -I https://domain.com
Code (Text):
curl -I https://www.domain.com
did you create domains via centmin.sh menu option 2, 22 etc or just not setting it and pointing DNS only to centmin mod server ? if so make sure IP is correct and not mistyped

EckyBrazzz · Jun 9, 2019

Well, disabling Cloudflare resolved it. I only created the DNS but had also the Proxy on. So disabling the proxy resolved the issue.

Now, for example, the domain ir.domain.com for Ireland gives the index.html (converted maintenance page with a tracker) again. And au.domain.com for Australia. Only I can't use https. But I placed all links from the countie sites on serval sites to get response, and that works.

So I still have the possibility to check the priority for the countries where we should start our new sites.

With this way, I don't have to create domains with option 2 or 22 and still get my valuable info. Just created for 100+ countries a DNS a record with the IP pointing to the server.

Only very strange that Cloudflare gives the content of other domain when I activate the Proxy. That domain was the domain where I installed the mamoto analytics.

eva2000 · Jun 9, 2019

EckyBrazzz said: ↑

Only very strange that Cloudflare gives the content of other domain when I activate the Proxy.
Click to expand...

is the geo country logic handled via nginx geo/geoip ? if so you need to setup proper Cloudflare real IP passthrough otherwise nginx won't see proper visitor geo location IP metadata when Cloudflare proxying is enabled

If you use a reverse proxy like Cloudflare, Sucuri, or Incapsula in front of Centmin Mod Nginx, you need to setup nginx realip to be passed onto Nginx.

See Getting Started Guide step 5 and setting correct real ip via nginx module config at http://centminmod.com/nginx_configure_cloudflare.html. The tools/csfcf.sh cronjob mentioned below helps maintain the whitelisted CSF Firewall IPs, but you still need to setup nginx realip in your nginx vhost.

If using Centmin Mod 123.09beta01 and newer, there's an added tools/csfcf.sh script to aid in this. Details at:

Beta Branch - csfcf.sh - automate Cloudflare Nginx & CSF Firewall setups | Centmin Mod Community

Beta Branch - add cloudflare.conf include file support | Centmin Mod Community

EckyBrazzz · Jun 9, 2019

# nginx -V
nginx version: nginx/1.17.0 (030619-154250-centos7-kvm)
built by gcc 8.2.1 20180905 (Red Hat 8.2.1-3) (GCC)
built with OpenSSL 1.1.1c 28 May 2019
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/lib -ljemalloc -lpcre -Wl,-z,relro -Wl,-rpath,/usr/local/zlib-cf/lib:/usr/local/lib' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -Wno-error=strict-aliasing -fstack-protector-strong -flto --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations -gsplit-dwarf' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=030619-154250-centos7-kvm --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-dynamic-module=../ngx_http_geoip2_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-dynamic-module=../lua-nginx-module-0.10.15 --add-module=../stream-lua-nginx-module-0.0.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1c --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3' --add-dynamic-module=../ModSecurity-nginx
Click to expand...

--with-http_realip_module was already installed.

eva2000 said: ↑

If using Centmin Mod 123.09beta01 and newer, there's an added tools/csfcf.sh script to aid in this. Details at:

Beta Branch - csfcf.sh - automate Cloudflare Nginx & CSF Firewall setups | Centmin Mod Community

Beta Branch - add cloudflare.conf include file support | Centmin Mod Community

Click to expand...

Next steps

EckyBrazzz · Jun 10, 2019

set_real_ip_from YOURCUSTOM_IPADDRESS;
Click to expand...

Guess this is my server IP?

VHOSTCTRL_CLOUDFLAREINC='y'
Click to expand...

Still need to setup cron?

EckyBrazzz · Jun 10, 2019

nginx -V
nginx version: nginx/1.17.0 (030619-154250-centos7-kvm)
built by gcc 8.2.1 20180905 (Red Hat 8.2.1-3) (GCC)
built with OpenSSL 1.1.1c 28 May 2019
TLS SNI support enabled
configure arguments: --with-ld-opt='-Wl,-E -L/usr/local/zlib-cf/lib -L/usr/local/lib -ljemalloc -lpcre -Wl,-z,relro -Wl,-rpath,/usr/local/zlib-cf/lib:/usr/local/lib' --with-cc-opt='-I/usr/local/zlib-cf/include -I/usr/local/include -m64 -march=native -DTCP_FASTOPEN=23 -g -O3 -Wno-error=strict-aliasing -fstack-protector-strong -flto --param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wimplicit-fallthrough=0 -fcode-hoisting -Wp,-D_FORTIFY_SOURCE=2 -Wno-deprecated-declarations -gsplit-dwarf' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --build=030619-154250-centos7-kvm --with-compat --with-http_stub_status_module --with-http_secure_link_module --with-libatomic --with-http_gzip_static_module --add-dynamic-module=../ngx_brotli --add-dynamic-module=../ngx_http_geoip2_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module=dynamic --with-http_geoip_module --with-stream_geoip_module --with-stream_realip_module --with-stream_ssl_preread_module --with-threads --with-stream --with-stream_ssl_module --with-http_realip_module --add-dynamic-module=../ngx-fancyindex-0.4.2 --add-module=../ngx_cache_purge-2.5 --add-dynamic-module=../ngx_devel_kit-0.3.0 --add-dynamic-module=../set-misc-nginx-module-0.32 --add-dynamic-module=../echo-nginx-module-0.61 --add-module=../redis2-nginx-module-0.15 --add-module=../ngx_http_redis-0.3.7 --add-dynamic-module=../lua-nginx-module-0.10.15 --add-module=../stream-lua-nginx-module-0.0.7 --add-module=../memc-nginx-module-0.18 --add-module=../srcache-nginx-module-0.31 --add-dynamic-module=../headers-more-nginx-module-0.33 --with-pcre-jit --with-zlib=../zlib-cloudflare-1.3.0 --with-http_ssl_module --with-http_v2_module --with-openssl=../openssl-1.1.1c --with-openssl-opt='enable-ec_nistp_64_gcc_128 enable-tls1_3' --add-dynamic-module=../ModSecurity-nginx
Click to expand...

realip was already installed.

set_real_ip_from YOURCUSTOM_IPADDRESS;
Click to expand...

Guess this is my server ip?

VHOSTCTRL_CLOUDFLAREINC='y'
Click to expand...

Setup the cron, but is this necessary after adding the above to the /etc/centminmod/custom_config.inc file?

EckyBrazzz · Jun 18, 2019

Updated the page, now even showing domain name

Code (Text):

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="utf-8" />
    <meta name="viewport" content="width=device-width, initial-scale=1"/>
    <script src="//use.fontawesome.com/84c9ca0cf8.js"></script>
    <title>Site Construction</title>

    <style type="text/css">
        @import url('//fonts.googleapis.com/css?family=Roboto');
        body {
            background: #212327;
            color: #D7D7D7;
            font: 16px/1.3 "Roboto", sans-serif;
        }
        header {
            width: 100%;
            margin:0px auto;
        }
        h1 {
            text-align: center;
            color:#D7D7D7;
            font: 30px/1 "Roboto";
            text-transform: uppercase;
            display: block;
            margin: 5% auto 5%;
            margin-bottom: 35px;
        }
        p {
            font: 12px/1.3 "Roboto", sans-serif;
        }

        article { display: block; text-align: center; width: 650px; margin: 10px auto; }

        @media screen and (max-width: 720px) {
            article { display: block; text-align: center; width: 450px; margin: 0 auto; }
            h1 { font: 25px/1 "Roboto"; margin-bottom: 25px; }
        }

        @media screen and (max-width: 480px) {
            article { display: block; text-align: center; width: 300px !important; margin: 0 auto; }
            h1 { font: 20px/1 "Roboto"; margin-bottom: 15px;}
        }
    </style>

    <!--[if IE]><script src="//html5shiv.googlecode.com/svn/trunk/html5.js"></script><![endif]-->



</head>
<body>
<div class="wrap">
    <article>
        <header>
            <h1 id="fittext1">Site Maintenance & Contruction</h1>
        </header>
        <p id="fittext2">Performing some site maintenance and construction.</p>
        <p id="fittext3">Check our updated page in  <script>
document.getElementById("fittext3").innerHTML =
"Check our updated page " + window.location.hostname;
</script> in a few days!</p>


        <i class="fa fa-cog fa-spin fa-5x fa-fw"></i>
    </article>
</div>
<script src="//ajax.googleapis.com/ajax/libs/jquery/1/jquery.min.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/FitText.js/1.2.0/jquery.fittext.js"></script>
<script type="text/javascript">
    $("#fittext1").fitText(1.2);
    $("#fittext2").fitText(1.9);
    $("#fittext3").fitText(1.7);
</script>
</body>
<!-- Matomo -->
<script type="text/javascript">
  var _paq = window._paq || [];
  /* tracker methods like "setCustomDimension" should be called before "trackPageView" */
  _paq.push(["setCookieDomain", "*.domain.com"]);
  _paq.push(['trackPageView']);
  _paq.push(['enableLinkTracking']);
  (function() {
    var u="https://analytics.domain.com/";
    _paq.push(['setTrackerUrl', u+'matomo.php']);
    _paq.push(['setSiteId', '9']);
    var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
    g.type='text/javascript'; g.async=true; g.defer=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
  })();
</script>
<noscript><p><img src="https://analytics.domain.com/matomo.php?idsite=9&amp;rec=1" style="border:0;" alt="" /></p></noscript>
<-- End Matomo Code -->
</html>

EckyBrazzz · Jun 18, 2019

Now figuring out how to autotranslate it based on browser language!

Obs. Posting image on test domain, so IP of server keeps secret!

Earl · Nov 23, 2020

EckyBrazzz said: ↑

hmm, just did some testing with some VPN's, but when using sitestatus off all site go into that mode, doesn't make any difference if I put 0; or 1; so what I posted above doesn't work.
Click to expand...

EckyBrazzz said: ↑

The idea was to put a selected site into maintenance mode for all visitors except the whitelisted IP's. Not the entire server. The test with several VPN's proved that it did not work.

TIP: I use Softether VPN from the University of Japan, it's free to use SoftEther VPN Project - SoftEther VPN Project
Click to expand...

Yes, I can confirm this. I'm facing the same issue.
Code:
sitestatus off
sets the whole server into maintenance mode. URI Exclude setting doesn't work.

here is the maintenance.conf file
Code (Text):
     # IPs you can whitelist from maintenance mode
     geo $maint_whitelist {
          include /usr/local/nginx/conf/sitestatus.conf;
          127.0.0.1 0;
          #124.43.196.31 0;
          #YOURIPADDRESS 0;
     }

     map $http_host$uri $exclude_url {
          default                                                0;
          "~^newdomain1.com/js/jquery.fittext.js"                1;
          "~^newdomain1.com/blog/js/jquery.fittext.js"           1;
          "~^under-maintenance-domain.com/" 1;
     }

     map $maint_whitelist$exclude_url $maintenance {
          default        1;
          10             1;
          11             1;
          00             0;
          01             0;
     }
this puts the whole server into maintenance mode including under-maintenance-domain.com

Any update?

eva2000 · Nov 24, 2020

Earl said: ↑

Yes, I can confirm this. I'm facing the same issue.
Click to expand...

Are you using Cloudflare in front of site on Centmin Mod Nginx ?

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

Domains maintenaince mode

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

Earl New Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

Domains maintenaince mode

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

eva2000 Administrator Staff Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

EckyBrazzz Active Member

Earl New Member

eva2000 Administrator Staff Member

.