Moonglade

Modern Markdown blogging with AI-powered localization and search.

Tag: Default


Several Ways to Write and the Differences Between `server_name`, `location`, and `proxy_pass` in Nginx

This article provides an in-depth analysis of common configurations and potential pitfalls associated with the three core directives `server_name`, `location`, and `proxy_pass` in Nginx reverse proxy setups. First, `server_name` supports various matching methods, including exact domain names, wildcards, regular expressions, empty values, IP addresses, and variables. The matching priority is as follows: exact matches take precedence over prefix wildcards, which in turn take precedence over suffix wildcards and regular expressions. It is recommended to prioritize using wildcards for better performance. Second, the presence or absence of a trailing slash in `location` significantly affects matching behavior. For instance, `location /image` will match `/imageabc`, whereas `location /image/` only matches paths starting with `/image/`. Nginx follows the longest prefix matching principle, with `location /` serving as the fallback option. Finally, whether `proxy_pass` includes a trailing slash determines the path forwarding logic: if no path is specified, the original URI is preserved in its entirety; if a path is specified (including just a single slash), the prefix matched by `location` is replaced by the path specified in `proxy_pass`. This easily leads to incorrect forwarding paths. Understanding these subtle differences is crucial for correctly configuring Nginx and avoiding routing confusion.

Views 287
Default Location Match Nginx Proxy Pass Server Name reverse proxy

How My Steam Account Was Hacked

This article details a chained phishing scam targeting Steam accounts. Hackers first steal QQ accounts through internet cafes or untrusted VPN environments, then compromise user email accounts and block official Steam emails. They subsequently maliciously lock Steam accounts, inducing users into a state of panic. When users attempt to recover their accounts, they receive a forged unlock link that directs them to a highly convincing fake Steam website, tricking them into entering sensitive information such as account names, passwords, and recovery codes. Once submitted, hackers alter the linked email and phone number in the backend and remove security tokens, resulting in the complete theft of the account. The article advises users to avoid using QQ mailboxes, which have lower security, and to never enter account credentials on public computers or over public WiFi. It recommends prioritizing QR code login for Steam and using free accelerators to address slow mobile access issues. Additionally, the text lists specific hacker sender email addresses and characteristics of phishing URLs, urging users to stay vigilant, strengthen their cybersecurity awareness, and prevent the leakage of personal information.

Views 298
Cybersecurity Default Email Safety Password Theft Phishing Steam Security

Welcome to MoongladePure ★

MoongladePure removes some dependencies from the original Moonglade and can be deployed completely on premises without coupling to any particular cloud.

Views 158
Default