VirtualConfusion

Nothing serious!

Rise of dridex

There is currently a wave of phising emails sent to a lot of people, these emails are really well imitating a swisscom invoice (Swisscom being one of the main telecom service provider in Switzerland). The risk is to have the computer infected by Dridex type virus

There is a very good blog article made by a Swiss government organization in charge of alerting on internet risks which explains the attack, the consequences and the response.

Worth checking it…

Nextcloud virtualhost configuration

I was using the Qsync function of my Qnap NAS for several months, but I reverted back to a Nextcloud self hosted solution. The Linux installation guide made my life really easier.

The only problem I had was with the following error message:

Your data directory and your files are probably accessible from the internet. The .htaccess file that ownCloud provides is not working. We strongly suggest that you configure your webserver in a way that the data directory is no longer accessible or you move the data directory outside the webserver document root.

My solution was to remove Satisfy Any from the below virtualhost file

<VirtualHost XXXXX>
  DocumentRoot "/var/www/nextcloud"
  ServerName my.nextcloud.site

  ErrorLog ${APACHE_LOG_DIR}/error.log
  CustomLog ${APACHE_LOG_DIR}/access.log combined

  <Directory /var/www/nextcloud/>
    Options +FollowSymlinks
    AllowOverride All

    <IfModule mod_dav.c>
      Dav off
    </IfModule>

    SetEnv HOME /var/www/nextcloud
    SetEnv HTTP_HOME /var/www/nextcloud
    #Satisfy Any
  </Directory>
</VirtualHost>

Next step is to implement SSL.

Stranger Thing 2