Nginx/Password - Revision history

Unknown user: /* OpenSSL */

2022-03-10T04:13:48Z

OpenSSL

← Older revision		Revision as of 04:13, 10 March 2022
Line 18:		Line 18:
	</pre>		</pre>

	NOTE: leave out the password to be interactively prompted for it (more secure).		NOTE: leave out the password to be interactively prompted for it (more secure):

			<pre>
			sudo sh -c 'printf "<user>:$(openssl passwd -apr1)\n" >> /etc/nginx/.htpasswd'
			</pre>

	You can repeat this process for additional usernames. You can see how the usernames and encrypted passwords are stored within the file by typing:		You can repeat this process for additional usernames. You can see how the usernames and encrypted passwords are stored within the file by typing:

Unknown user: /* OpenSSL */

2022-03-08T16:06:15Z

OpenSSL

← Older revision		Revision as of 16:06, 8 March 2022
Line 16:		Line 16:
	<pre>		<pre>
	sudo sh -c 'printf "<user>:$(openssl passwd -apr1 <your password>)\n" >> /etc/nginx/.htpasswd'		sudo sh -c 'printf "<user>:$(openssl passwd -apr1 <your password>)\n" >> /etc/nginx/.htpasswd'
			</pre>

	~~</pre>~~		NOTE: leave out the password to be interactively prompted for it (more secure).

	You can repeat this process for additional usernames. You can see how the usernames and encrypted passwords are stored within the file by typing:		You can repeat this process for additional usernames. You can see how the usernames and encrypted passwords are stored within the file by typing:

Unknown user: /* Modify sites-available file */

2022-03-08T06:57:03Z

Modify sites-available file

← Older revision		Revision as of 06:57, 8 March 2022
Line 77:		Line 77:
	}		}
	</pre>		</pre>




			[[Category:Nginx]]
			[[Category:Security]]

Unknown user: /* Modify sites-available file */

2022-03-08T06:56:42Z

Modify sites-available file

← Older revision		Revision as of 06:56, 8 March 2022
Line 33:		Line 33:
	==Modify sites-available file==		==Modify sites-available file==

	Here is ~~the~~ original nginx default sites-available:		Here is an example original nginx default sites-available:

	'''<code>/etc/nginx/sites-available/default</code>'''		'''<code>/etc/nginx/sites-available/default</code>'''

Unknown user: /* OpenSSL */

2022-03-08T06:56:13Z

OpenSSL

← Older revision		Revision as of 06:56, 8 March 2022
Line 12:		Line 12:
	Suppose you want to let people access the web server using the username <code>foo</code> and the password <code>bar</code>.		Suppose you want to let people access the web server using the username <code>foo</code> and the password <code>bar</code>.

	Set the username foo and the password bar using openssl:		Set the username foo and the password bar using openssl, using <code>/etc/nginx/.htpasswd</code> as the destination:

	<pre>		<pre>

Unknown user: /* OpenSSL */

2022-03-08T06:55:32Z

OpenSSL

← Older revision		Revision as of 06:55, 8 March 2022
Line 12:		Line 12:
	Suppose you want to let people access the web server using the username <code>foo</code> and the password <code>bar</code>.		Suppose you want to let people access the web server using the username <code>foo</code> and the password <code>bar</code>.

	Set the username foo:		Set the username foo and the password bar using openssl:

	<pre>		<pre>
	sudo sh -c "~~echo~~ -n ~~'foo:'~~ >> /etc/nginx/.htpasswd"		sudo sh -c 'printf "<user>:$(openssl passwd -apr1 <your password>)\n" >> /etc/nginx/.htpasswd'
	~~</pre>~~

	~~Now add the hashed password bar using openssl:~~

	~~<pre>~~
	~~sudo sh -c "openssl passwd -apr1 >> /etc/nginx/.htpasswd"~~
	</pre>		</pre>

Line 27:		Line 22:

	<pre>		<pre>
	cat /etc/nginx/.htpasswd		cat /etc/nginx/.htpasswd
	</pre>		</pre>

Admin: /* Modify sites-available file */

2018-11-06T16:59:23Z

Modify sites-available file

← Older revision		Revision as of 16:59, 6 November 2018
Line 39:		Line 39:

	Here is the original nginx default sites-available:		Here is the original nginx default sites-available:

			'''<code>/etc/nginx/sites-available/default</code>'''

	<pre>		<pre>
Line 60:		Line 62:
	* <code>auth_basic</code>		* <code>auth_basic</code>
	* <code>auth_basic_user_file</code>		* <code>auth_basic_user_file</code>

			'''<code>/etc/nginx/sites-available/default</code>'''

	<pre>		<pre>

Admin: /* Create the Password File */

2018-11-06T16:58:44Z

Create the Password File

@@ Line 34: / Line 34: @@
 <pre>
 foo:$apr1$wI1/ER4B$kTOuTJHkTWkekoQnXqC1d1
 </pre>

Admin: Created page with "To password protect a folder on an Nginx server: * Create an .htpaasswd file that contains the username and the hashed password * instruct nginx to use the .htpasswd file to..."

2018-11-06T16:48:21Z

Created page with "To password protect a folder on an Nginx server: * Create an .htpaasswd file that contains the username and the hashed password * instruct nginx to use the .htpasswd file to..."

New page

To password protect a folder on an Nginx server:

* Create an .htpaasswd file that contains the username and the hashed password
* instruct nginx to use the .htpasswd file to authenticate users trying to access a particular location

==Create the Password File==

===OpenSSL===

Here we use openssl to create the password file, which is a hidden file called .htpasswd in the /etc/nginx configuration directory.

Suppose you want to let people access the web server using the username <code>foo</code> and the password <code>bar</code>.

Set the username foo:

<pre>
sudo sh -c "echo -n 'foo:' >> /etc/nginx/.htpasswd"
</pre>

Now add the hashed password bar using openssl:

<pre>
sudo sh -c "openssl passwd -apr1 >> /etc/nginx/.htpasswd"
</pre>

You can repeat this process for additional usernames. You can see how the usernames and encrypted passwords are stored within the file by typing:

<pre>
cat /etc/nginx/.htpasswd
</pre>

Output

<pre>
foo:$apr1$wI1/ER4B$kTOuTJHkTWkekoQnXqC1d1
</pre>