All Activity

Just as another question does heliohost system automatically generate an SSL certificate for custom domain? and what can I use to transfer from my old host to my new host since a) FXP does not work on either side and b) either its my mistake or not but Plesk's build in server moving features failed for some reason once again thanks for you guy's work!

Hi. I would like to add the following domain to my account (thelazycat2011), if possible, makes it point to the neomotion.helioho.st site so both point to the same site: - gdps.thelazycat.dpdns.org thanks!

Sure. My Tommy account is phroton.

Thank you

wolstech would need to do this for you

Domain added. it can take up to 2 hours to start working.

Hello my username is: techhouse I would like to add my domain: techhouseservices.com to my johnny.heliohost The techhouseservices.com domain I purchased and is currently at Hostinger. -Thank You

Hi, I am planning to deploy an ASP.NET (NET 9.0) website on a Tommy account. However, I realized that my account needs a Lily to make it work. Thanks.

Okay, thank you for your reply. Another question: is it intentional that well-nigh all directories outside /home are list-accessible by anyone? It is at least quirky that (although I could not access the files themselves, fortunately) the contents of /boot can be freely listed, thus revealing the kernel version and literally every former patch. Not a security issue itself, but can be used for preparing an attack. Methinks /boot and /proc directories should be completely denied (including listing files) for anyone excluding root.

You can do this yourself in Plesk. See https://wiki.helionet.org/Node.js

Hello Admin, I am currently hosting project (https://tanzilskill.helioho.st/) on johnny.heliohost.org. To extend its functionality, I need to run a Node.js and npm. Could you please enable Node.js (preferably the latest LTS version, e.g. 18 or 20) and npm for my account, or guide me on how to access a Node.js runtime on the server? Having these tools available will allow me to install dependencies and build the service properly. Thank you for your support. Best regards, Zacharia

Glad to see you got it working. Please let us know if you need anything else.

Yeah /tmp is shared by everyone. It's just how Plesk servers work (I know some other products put a user's /tmp inside the home folder which IMO would make more sense, but it is what it is). You shouldn't be able to save things anywhere besides /tmp and ~ though, and there are certain commands, files, and folders that can trigger a permanent ban if their account is seen messing with them. In fact, people tend to fill up /tmp accidentally quite a bit with broken Node apps (passenger logs get saved there, and when people do things like write bad apps, or delete their node app without turning node off, passenger sits there slowly filling /tmp with logs until the server breaks). You'll get suspended for filling /tmp, and monitoring to automatically handle /tmp filling up is a project currently on our radar since its a common issue. We had an outage on Morty due to a full /tmp the other day. As for the space limit not changing in Plesk, consumed disk space is only recalculated a few times a day, so you can technically exceed the limit up front, but it will automatically suspend you when the next recalc happens.

I have genuine security problems... for bypassing the storage limit, the problem itself is that Plesk does not „see” anything outside the home directory. Thus, I was able to create a rather huge file in /tmp (by running a Bash-based CGI script), which is continuously accessible between two restarts, and Plesk has still shown that my account has the same amount of disk space remaining. Methinks it is an issue. And there are a few other problems as well...

Users that bypass the storage limit face a Plesk suspension. That said, if you have genuine security problems to bring up, a root administrator might reach out directly.

Good day! I have detected a few – closely linked – security issues on the Johnny server. First question: where could I contact the developers privately? Of course, it is possible that only I am concerned about insignificant problems, but, for example, being able to bypass the storage limit does not seem to be good. Thank you!

Got it, thank you! I've removed that block and added the empty indexes.html and also removed the options calls on the other files which I see got rid of the error and disabled directory listing. All solved

MoneyBroz tried to do a backup for you last night, and was having trouble with it so I told him to give up and I'd take a look at it today. I took a look at it myself just now, and I'm unable to access the filesystem either. It looks like it locked up too many times, and was forcibly rebooted too many times and it destroyed the filesystem. I went ahead and started the rebuild for you. You'll get an email in a few minutes when it's done.

Just let us know when you're ready to increase your Morty balance and we can provide a link to set up the payment. For something like a Morty balance increase it's not that big of a deal if the money takes a couple weeks to arrive. We will send you an email when you have about a month's worth of balance left.

Domains added. it can take up to 2 hours for them to start working.

The .well-known folder is a weird folder, I've run into a few different things that behave strangely in there. You'll need to remove the below section (or at least add a second condition that allows access to the acme-challenge folder and anything inside) if you want Lets Encrypt SSL certificates to work properly. # Block directory browsing in .well-known paths RewriteCond %{REQUEST_URI} ^/\.well-known(/openpgpkey(/hu)?)?/?$ RewriteRule ^ - [F,L] Plesk creates things in /.well-known/acme-challenge to verify the domain, so you cannot restrict access to that folder. Some other services you might want to use also need access to .well-known too, so we generally recommend not restricting .well-known at all. Also, be aware the Options line in .htaccess doesn't behave very well on Plesk, so that line may or may not do what you expect. Usually if they're not supported, they're either ignored entirely (why you had directory listings despite Options -Indexes being in there), or will cause a 500 error (which will have a line in the logs saying "Options directive not allowed here").

Hi, I would like to add the following domains to my account (apa240): hcwgandsmores.com lrtaylorstudio.com gathering.band pixelatedthoughts.com Thank you!

Perfect! I will do that next time then, don't mind the wait time ^^ how can I get the Stripe details to submit that for next time? (In about ~6 months probably haha).

Thank you, I will do that! Anything else I should fix on those .htaccess files?

Your previous balance was $1.4062 plus $6.00 ($1.00 bonus) means you have $7.4062 now. Thanks. Yes, if you have a routing number and an account number you could send us the money via Stripe with much less fees than a credit card. PayPal does not allow payments like this. The only downside to this e-check method of payment is it can take up to 2 weeks to verify the payment went through.