Vesta Control Panel - Forum

Andy, nicely spotted.
I've figured it out.

There's a bug in the http2.tpl and http2.stpl nginx templates located at:
/usr/local/vesta/data/templates/web/nginx/

As you rightly mentioned the logpaths are hardcoded to /var/log/httpd/domains when they should be /var/log/%web_system%/domains/.

So in ...

I've just installed a fresh version of 0.9.8-19 on Ubuntu 16 with Apache and NGINX, configured a new web domain, successfully added a Let's Encrypt certificate but when I change the proxy template to "http2" I get an error that NGINX is unable to restart.

Anyone else having the same problem?

Logs ...

Can anyone help? I have checked the log files and nothing displays!
The Vesta login page just displays Invalid Login Token or something about Language...
If I try to log in manually I don't get any errors, only when WHMCS attempts login.

Do you only get the error when you try to login from WHMCS ...

Any FTP server will work - there isn't a specific configuration required.
Give it a go and we can probably help if you have any errors.

Looks really nice! Good job - would love to install this on my production servers.
Do let me know if you need help in testing.

Thanks plutocrat - really appreciate the guidance.
I've been keeping an eye on Apache and memory is hovering on average at 75% usage at the moment.


First of all, what is happening to your swap at the time of the attack?
According to NixStats, about 300Mb of swap was used during the attack. Upon ...

Try changing it from a CNAME to an A record.

plutocrat thanks for replying.
I have a good idea of how to ensure that Apache doesn't utilise too much memory and start too many child processes.

I was actually trying to figure out why Apache didn't release any of the memory it was using once the attack had stopped and why it had to be restarted ...

Whilst sound asleep, a WordPress installation of mine hosted on Vesta 0.9.8-17 with Apache2 + nginx had it's xmlrpc.php file totally hammered by some bot somewhere for a few hours .

There's thousands of requests like the one below - almost 4 a second.
69.197.x.x - - [05/Dec/2017:05:12:53 +0000 ...

*bump*