<TimMc>
I'm happy to look over the nginx stuff if you'd like another set of eyes.
strugee has joined #sandstorm
<ocdtrekkie>
I torched everything I had tried so far, but the goal is basically to add a location to the lemp-box nginx config such that I continue to serve / out of /var/www but that I can do like /footgun-manager and it will go to /opt/app/footgun-manager
<ocdtrekkie>
The main problem I seemed to be having was getting PHP to process the files correctly.
<ocdtrekkie>
"Primary script unknown" was the error I was hitting, I spent a lot of time in ServerFault/StackOverflow threads.
strugee has joined #sandstorm
jryans has quit [Ping timeout: 248 seconds]
torhex-pasmul[m4 has quit [Ping timeout: 268 seconds]
<ocdtrekkie>
So Standalone Domains will not let me host these at their original URLs, sadly. Sandstorm doesn't recognize the hostname I'm CNAMEing to the standalone subdomain. RIP
<ocdtrekkie>
That's like... probably for the best anyways?
<ocdtrekkie>
I was thinking if I can get a management tool on there I'd put my sql import/export crud there, for one, maybe eventually a file manager.
<ocdtrekkie>
Right now once you restore grain a footgun, you can't add/upload anything else without making it a new grain and breaking any existing links and sharing.
<TimMc>
ah
<ocdtrekkie>
I hadn't actually put anything there but a hello worldish php file to test Nginx.
<ocdtrekkie>
But if you know how to modify nginx to successfully get it to do that I could throw something together.
<TimMc>
"Primary script unknown" is pretty mysterious. Kind of sounds like something (what layer is even generating that?) can't find the PHP file to start with, or can't find the CGI executable or something.
<ocdtrekkie>
If you look at nginx.conf in the lemp stack, it involves the script_filename variable and stuff I think.
<ocdtrekkie>
But search results on primary script unknown, php multiple locations, should start to get you an idea where the difficulties I'm hitting are.
<TimMc>
I saw some stuff pointing to systemd's ProtectHome setting. Not sure what to make of it.
<TimMc>
(it made me think there was maybe something about not having permissions to read the specified script)
<TimMc>
I've seen a post where someone got "Primary script unknown" via Apache, which means it's a layer down -- in php-fpm or PHP itself.
<ocdtrekkie>
That's the page I'm on and it doesn't mention GTS
<TimMc>
I've never heard of GTS.
<ocdtrekkie>
But I did a crt.sh and it looks like some of my domains came up with a Google Trust Services cert at the same time as the new Let's Encrypt starting late this year.
<ocdtrekkie>
Google Trust Services, one of the many ways the entire Internet stack is critically compromised by a single company who is every role simultaneously.
<ocdtrekkie>
Although I imagine if the source of the compromise is Cloudflare they would also have to revoke all the Google certs they store the private keys for too?