Differences

This shows you the differences between two versions of the page.

--- linux:webhosting [2023/05/15 12:19] – admin
+++ linux:webhosting [2026/10/25 15:43] (current) – gsys
@@ Line 20: / Line 20: @@
 ==== Generate Credentials ====
+:!: insecure default MD5
 <code>
-htpasswd -n werner                                # generate cerdentials for user "werner" and display the results
+htpasswd -n testuser                                # generate cerdentials for user "werner" and display the results
-                                                  # on standard output rather than updating a file
+                                                    # on standard output rather than updating a file
-htpasswd -c ~/public_html/.htpasswd werner        # generate ".htpasswd" file and create credentials for user "werner"
+htpasswd -c ~/public_html/.htpasswd testuser        # generate ".htpasswd" file and create credentials for user "werner"
-htpasswd ~/public_html/.htpasswd werner           # create or modify credentials for user "werner" in ".htpasswd" file
+htpasswd ~/public_html/.htpasswd testuser           # create or modify credentials for user "werner" in ".htpasswd" file
+</code>
+:-) secure bcrypt
+<code>
+htpasswd -nBC 10 testuser
+#        -n        Show ouput on stdout
+#         -B       Use bcrypt encryption algorithm
+#          -C 10   Computing time used for the bcrypt algorithm (higher is more secure but slower, default: 5, valid: 4 to 17)
 </code>
 === Traefik ===
-** Don't forget to escape dollar signs ($ -> $$) in traefik docker compose files! **
+**Don't forget to escape dollar signs ($ -> $$) in traefik docker compose files!**
-example:
+use this command:
 <code>
-htpasswd -n werner
+echo $(htpasswd -nB werner) | sed -e s/\\$/\\$\\$/g
-New password:
-Re-type new password:
-werner:$rpr1$3FS0FG.s$rf0h/7C36ABYDS45XKEQ.
 </code>
@@ Line 43: / Line 49: @@
 <code>
 ...
     labels:
       - "traefik.enable=true"
       - "traefik.docker.network=traefik-prod"
       - "traefik.http.services.nginx-web-prod.loadbalancer.server.port=8180"
+      - "traefik.http.routers.nginx-web-prod.middlewares=basicauth-prod"
       - "traefik.http.middlewares.basicauth-prod.basicauth.users=werner:$$apr1$$3FS0FG.s$$rc0h/7C36ABYDS45XKEQ."
 ...
 </code>