SaturdayMP Show #23: Adding Basic Auth to NGINX Passenger Docker (Part 3)

In this stunning conclusion to the 3 part series I finally get HTTP Basic Authentication working. Including merging my changes into the main branch in GitLab and making sure it works in staging and production in Render. The video is so long because I made dumb mistake 10 minutes in.

Spoiler: When using the Passenger Docker image it’s really important you don’t delete:

RUN rm -f /etc/service/nginx/down

Found this video useful? Then help others find it by liking, subscribing, and sharing.

[Read More]

SaturdayMP Show #22: Adding Basic Auth to NGINX Passenger Docker (Part 2)

In this episode I get the Basic Authentication NGINX configuration working using the envsubst tool to replace environment variables in the config file. Ran out of time to test the fix in actual staging. That will hopefully be done in the 3rd part of this series.

Watch the previous video in the series:

[Read More]

SaturdayMP Show #21: Adding Basic Auth to NGINX Passenger Docker (Part 1)

In this episode I explain and then start to add HTTP Basic Authentication to the Saturday MP website which is a Ruby on Rails application hosted on a Passenger Docker image. As usual I ran into some trouble and at the end of the video figured out I should use the envsubst command to dynamically set the Basic Auth, and other values, in the NGINX config.

Found this video useful? Then help others find it by liking, subscribing, and sharing.

[Read More]

Rate Limiting Using Nginx and Fail2Ban - BSides Edmonton 2022

I’m honored to be presenting at BSides Edmonton on November 25, 2022. I’ll be demoing rate limiting using nginx and Fail2Ban. You can find the demo here in-case you want to follow along during the demo or you want a preview/spoiler.

BSides Edmonton 2022 Logo

While I’m honored to be presenting, my hope is to learn more than I impart. I’m looking forward to chatting and learning from you, my fellow BSides Edmonton 2022 speakers and attendees. I enjoy discussing securing small to medium sized business, legacy code, software development best practices, games, or anything remotely technology or software related.