Adding HTTP Security Headers to a Hugo Site on Netlify
Hardening the security headers to defend against cross-site scripting and clickjacking
Posted on July 4, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
Three years are about to pass since this site moved to Hugo.
I configured the HTTP security headers for the site, which had been left alone for a while.
They are directives used by web applications to configure security measures in the web browser, and they are used to defend against things like cross-site scripting and clickjacking
This article covers the configuration for the Hugo + Netlify environment that this site uses
Also, I will leave out explanations of the configuration terminology
[Read More]Moving /var/lib/docker to Another Partition with a Bind Mount
Moving /var/lib/docker and using a bind mount on Debian11
Posted on May 10, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
The root partition (/) of the machine I run Docker on was getting tight, so I moved /var/lib/docker
These days, when you install Linux without thinking about it, the automatic configuration often gives the root partition (/) something small such as 30GB.
When you run Docker, /var/lib/docker grows and grows, so / ended up in a state close to full.
So I moved it to /home, which is on a separate partition and has room to spare
[Read More]Upgrading Growi from 4.5 to 5.0 on docker-compose
How to upgrade Growi 4.5 to 5.0 running on docker-compose
Posted on May 10, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
I have written about upgrading Growi before, but this time it is a major upgrade from 4.x to 5.x.
Assume that Growi is running on Docker with the configuration below
App Version Growi 4.5.19 mongodb 4.4 Note that if you are building it with docker for the first time, you can build it just as the official installation describes, so the work from here on is unnecessary
Get 4.x up to the latest version first If you are running it on docker, I think it is better to update 4.x to the latest version as far as you can, based on the official upgrade information below.
[Read More]Cannot Create Files or Directories in the Home Directory on Debian
Permission denied in the home directory, caused by tracker-miner
Posted on March 30, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
After logging in to a certain Linux (Debian) machine, I ran into a symptom where I could not create files or directories.
Copy $ mkdir test mkdir: ディレクトリ `test' を作成できません: 許可がありません $ touch test touch: 'test' に touch できません: 許可がありません I tried various things
Logging in works normally Checked the UID and GID with the id command Checked the attributes of the home directory and its contents Tried changing the shell None of them showed a problem, and when I looked at the error log, there was an error like the one below
[Read More]No Matching Host Key Type Found After Upgrading to OpenSSH 8.8
OpenSSH 8.8 disables RSA signatures
Posted on March 30, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
I updated openssh with Homebrew on my Mac, and after the version went up I could no longer connect, with the error below.
Copy ERROR: Unable to negotiate with 192.168.1.10 port 22: no matching host key type found. Their offer: ssh-rsa,ssh-dss The error did not appear for every destination; the ones I could no longer reach were those running relatively old operating systems.
SSH that can connect Copy $ ssh -V OpenSSH_8.4p1 Debian-5, OpenSSL 1.1.1k 25 Mar 2021 SSH that cannot connect Copy $ ssh -V OpenSSH_8.9p1, OpenSSL 1.1.1n 15 Mar 2022 Looking into it, the cause is that RSA keys with SHA-1 have been disabled since OpenSSH8.8
[Read More]CentOS 7 Stuck at the dracut Emergency Prompt and Would Not Boot
centos7 dracut initqueue timeout and could not boot
Posted on March 22, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
At some point, somewhere around when I updated the CentOS7 kernel, it stopped booting properly.
When it boots, it gets stuck showing this screen and goes no further
Copy Wrning: /dev/centos_web/root does not exist Warning: /dev/mapper/centos_web-root does not exist Generating "/run/initramfs/sosreport.txt" Entering emergency mode. Exit the shell to continue. Type "journalctl" to view system logs. You might want to save "/run/initramfs/sosreport.txt" to a USB stick or /boot after mounting them and attach it to a bug report. dracut:/# I figured that something grub-related had probably broken or been misconfigured when the kernel was updated, so I googled it
[Read More]Esc Stopped Working in Vim
Vim esc key not working
Posted on March 22, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
I first hit a case where the Esc key did nothing while editing with Vim in the web console of a guest OS on ESXi.
I could not leave insert mode, and of course the other keybindings did not work either.
I looked around the web in case others had seen the same thing.
[Read More]Restricting Access with nginx-proxy: Basic Auth and IP Allowlists
nginx-proxy can do basic authentication and access limiting
Posted on March 15, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
This article is a note on access restriction using Docker’s jwilder/nginx-proxy.
Incidentally, this is information that is also written in the official documentation
Basic authentication Create a .htpasswd folder inside the nginx-proxy folder Create a file named after the domain, in htpasswd format, under the .htpasswd folder Set .hpasswd as a volume in docker-compose.yml .htpasswd In the .htpasswd folder, create a file in htpasswd format named after the custom domain you want to protect with basic authentication
[Read More]Setting Up RSS-Bridge with Docker Compose
rssbridge on docker-compose
Posted on March 14, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
It supports many social networks such as Facebook and Instagram, and acts as a hub-like fetching server that turns their updates into RSS.
If setting up a server sounds like too much trouble, or you just want to try it out, you might use one of the instances that anyone can access
RSS-Bridge on Docker I am building it with docker this time as well
[Read More]Switching My RSS Aggregator from ttrss to FreshRSS on Docker
freshrss on docker-compose
Posted on March 8, 2022
(Last modified on August 19, 2026)
• Other languages:
日本語
For about three years I had been running tinytinyRSS, or ttrss, on Docker.
There is still nothing wrong with it, but when updating it with docker-compose I also have to take dependencies such as mercury and opencc into account, and at this point FreshRSS has a simpler configuration and a good reputation, and FreeRSS came to be supported in Reeder5, the Mac app, as well, so I changed my RSS aggregator.
[Read More]