<div dir="auto"><div text="#000000" bgcolor="#FFFFFF">
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:30px 0px 0.8em;white-space:pre-wrap;width:inherit;color:rgb(51,51,51);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><span class="m_6238972960199643087md-expand" style="box-sizing:border-box">Hoi Reinis,</span></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:30px 0px 0.8em;white-space:pre-wrap;width:inherit;color:rgb(51,51,51);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><span class="m_6238972960199643087md-expand" style="box-sizing:border-box">I aswered inline and applied colors for <font color="#6633ff">my (</font></span><span class="m_6238972960199643087md-expand" style="box-sizing:border-box"><font color="#6633ff"><span class="m_6238972960199643087md-expand" style="box-sizing:border-box;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:pre-wrap;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">#</span><span class="m_6238972960199643087md-expand" style="box-sizing:border-box;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:pre-wrap;word-spacing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:initial">6633ff) </span> </font>and <font color="#cc9933">your (#cc9933) </font>text for better readability
</span></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:30px 0px 0.8em;white-space:pre-wrap;width:inherit;color:rgb(51,51,51);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><span class="m_6238972960199643087md-expand" style="box-sizing:border-box">Thanks a lot for your input
</span></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;color:rgb(51,51,51);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><span style="box-sizing:border-box"> </span></p>
<blockquote style="box-sizing:border-box;margin:0.8em 0px;border-left:4px solid rgb(223,226,229);padding:0px 15px;color:rgb(119,119,119);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0px;white-space:pre-wrap"><font color="#6633ff"><span style="box-sizing:border-box">></span><span style="box-sizing:border-box"> I have a Synology NAS what runs a nginx as default web server to run all their apps. I would like to extend it to meet the following.</span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box"></span><span style="box-sizing:border-box">></span><span style="box-sizing:border-box"> </span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box">></span><span style="box-sizing:border-box"> The purposes is that if the useraccount webapp1 is compromised, it will only affect webaoos1's web server.. and repeat this for all accounts/websites/whatever you want to keep separated. this approach use some more ram than having a single nginx instance do everything directly.</span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box"></span><span style="box-sizing:border-box">></span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box"></span><span style="box-sizing:border-box">></span><span style="box-sizing:border-box"> Besides the question for the optimal setup to realize this</span></font><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box"></span><span style="box-sizing:border-box"></span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"></span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"><span class="m_6238972960199643087md-linebreak-mark" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"></span>
</span><font color="#cc6600"><span style="box-sizing:border-box"> While technically you could run per-user nginx listening on an unix socket and then make a proxy on top of those while doable iit feels a bit cumbersome (at least to me).</span></font></p>
</blockquote>
<p class="m_6238972960199643087md-end-block m_6238972960199643087md-focus" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span class="m_6238972960199643087md-expand" style="box-sizing:border-box">how do I do it eaxtly regardless if it is cumbersome?. Be it only for informational purpose but it makes the entire conversation a bit easier. </span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box">Combined with the outcome of the section it could outline all possbiel options (incl. pro and cons).
</span></font></p>
<p class="m_6238972960199643087md-end-block m_6238972960199643087md-focus" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">
</span></font></p>
<blockquote style="box-sizing:border-box;margin:0.8em 0px;border-left:4px solid rgb(223,226,229);padding:0px 15px;color:rgb(119,119,119);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0px;white-space:pre-wrap"><font color="cc9933"><span style="box-sizing:border-box"> Usually what gets compromised is the (dynamic) backend application (php/python/perl/lua etc) not the nginx/webserver itself, also nginx by default doesn't run under root but 'nobody'. root is only needed on startup for the master process to open 80/443 (ports below 1024) then all the workers switch to an unprivileged user.</span></font><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box"></span></p>
</blockquote>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">So far I assuemd that the worker start the backend application the access to php is configured in the server block (my reference is </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://askubuntu.com/questions/134666/what-is-the-easiest-way-to-enable-php-on-nginx" style="box-sizing:border-box" target="_blank" rel="noreferrer"><span style="box-sizing:border-box">What is the easiest way to enable PHP on nginx?</span></a></span><span style="box-sizing:border-box"> and </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://www.linode.com/docs/web-servers/nginx/serve-php-php-fpm-and-nginx/" style="box-sizing:border-box" target="_blank" rel="noreferrer"><span style="box-sizing:border-box">Serve PHP with PHP-FPM and NGINX</span></a></span><span style="box-sizing:border-box">).</span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box">My googling tells my that the PHP process usually runs with the permissions of the webserver. So I need to find a way that each webapplication (webapp1, webapp2, etc.) call its PHPs using a unique user account. When I read </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://serverfault.com/questions/826378/nginx-php-run-with-different-user-id" style="box-sizing:border-box" target="_blank" rel="noreferrer"><span style="box-sizing:border-box">nginx + php run with different user id</span></a></span><span style="box-sizing:border-box"> and </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://stackoverflow.com/questions/21999586/changing-php-user-to-run-as-nginx-user" style="box-sizing:border-box" target="_blank" rel="noreferrer"><span style="box-sizing:border-box">changing php user to run as nginx user</span></a></span><span style="box-sizing:border-box"> it must be somehow possible.</span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box">Could share mor information how to achive that?
</span></font></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">
</span></font></p>
<blockquote style="box-sizing:border-box;margin:0.8em 0px;border-left:4px solid rgb(223,226,229);padding:0px 15px;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px 0px;white-space:pre-wrap"><font color="cc9933"><span style="box-sizing:border-box"> One way of doing this would be instead of launching several nginxes just run the backend processes (like php-fpm, gunicorns etc) under particular users and let nginx communicate to those via sockets.</span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box"> </span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;white-space:pre-wrap"> <span class="m_6238972960199643087md-linebreak-mark" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;white-space:pre-wrap"></span>
</span><span style="box-sizing:border-box"> I'm not familiar how Synology NAS internally separates different user processes but it has Docker support ( </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://www.synology.com/en-global/dsm/feature/docker" style="box-sizing:border-box" target="_blank" rel="noreferrer">https://www.synology.com/en-global/dsm/feature/docker</a></span><span style="box-sizing:border-box">) and even Virtual Machine Manager which technically would be a better user / application isolation. </span></font></p>
</blockquote>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">Unfortunettely, my NAS does not support it</span></font></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">
</span></font></p>
<blockquote style="box-sizing:border-box;margin:0.8em 0px;border-left:4px solid rgb(223,226,229);padding:0px 15px;color:rgb(119,119,119);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0px;white-space:pre-wrap"><font color="6633ff"><span style="box-sizing:border-box">></span><span style="box-sizing:border-box"> I'm wondering how I can call the web server locally, within my LAN if I call them by the NAS's IP.</span></font><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box"><font color="cc9933"><span style="box-sizing:border-box"> </span></font><font color="cc9933">It depends on your network topology.</font></span><font color="cc9933"><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box"> </span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;white-space:pre-wrap"> <span class="m_6238972960199643087md-linebreak-mark" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;white-space:pre-wrap"></span>
</span><span style="box-sizing:border-box"> Does the Synology box has only LAN interface? Then you either need to configure portforwarding on your router or make a server/device which has both lan/wan interfaces (DMZ) and then can expose either on tcp level (for example via iptables) or via http proxy the internal websites/resources</span></font></p>
</blockquote>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">The NAS has only one LAN interface. You suggest a more complex solution as just simple NAT port fowarding, as explained in </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://superuser.com/questions/1218881/using-router-and-internal-lan-port-forwarding-device-advice-please" style="box-sizing:border-box" target="_blank" rel="noreferrer"><span style="box-sizing:border-box">Using router and internal LAN port forwarding device - Advice please :)</span></a></span><span style="box-sizing:border-box">.</span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box">I have simple router, the </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01999&md=NBG6616" style="box-sizing:border-box" target="_blank" rel="noreferrer"><span style="box-sizing:border-box">Zyxel NBG6616</span></a></span><span style="box-sizing:border-box">. it seems that is supports </span><span class="m_6238972960199643087md-link" style="box-sizing:border-box"><a href="https://www.zyxel.com/tr/tr/guidemo/zyw70/h_DMZ.html" style="box-sizing:border-box" target="_blank" rel="noreferrer"><span style="box-sizing:border-box">DMZ</span></a></span><span style="box-sizing:border-box"> and if your refer to a static DHCP table by IP Table than it is supported as well but doens't look good for the http proxy. </span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box">I still not understand how to forward to UNIX Sockets. Do I need custom ports entry in the prox part like NASIP:80001 -> Wepapp1ViaUNIXSocket</span><span class="m_6238972960199643087md-softbreak" style="box-sizing:border-box">
</span><span style="box-sizing:border-box">NASIP:80002 -> Wepapp1ViaUNIXSocket</span></font></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">I could run a DNS server on the NAS if that simplifies it.</span></font></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">
</span></font></p>
<blockquote style="box-sizing:border-box;margin:0.8em 0px;border-left:4px solid rgb(223,226,229);padding:0px 15px;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0px;white-space:pre-wrap"><font color="cc9933"><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;white-space:pre-wrap"> </span><span style="box-sizing:border-box"> If you make a virtual machine for each user you can then assign a separate LAN or WAN ip for each instance.</span></font></p>
</blockquote>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">VMs aren't supported, so it isn't an option</span></font></p>
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0.8em 0px;white-space:pre-wrap;width:inherit;font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial"><font color="#6633ff"><span style="box-sizing:border-box">
</span></font></p>
<blockquote style="box-sizing:border-box;margin:0.8em 0px;border-left:4px solid rgb(223,226,229);padding:0px 15px;color:rgb(119,119,119);font-family:"Open Sans","Clear Sans","Helvetica Neue",Helvetica,Arial,sans-serif;font-size:16px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:normal;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px;text-decoration-style:initial;text-decoration-color:initial">
<p class="m_6238972960199643087md-end-block" style="box-sizing:border-box;margin:0px 0px 0.8em;white-space:pre-wrap"><span style="box-sizing:border-box"> </span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"> <span class="m_6238972960199643087md-linebreak-mark" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"></span>
</span><span style="box-sizing:border-box"> </span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"> <span class="m_6238972960199643087md-linebreak-mark" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"></span>
</span><span style="box-sizing:border-box"> But this kind of gets out of the scope of this mailing list. </span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"> <span class="m_6238972960199643087md-linebreak-mark" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"></span>
</span><span style="box-sizing:border-box"> </span><span class="m_6238972960199643087md-linebreak" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"> <span class="m_6238972960199643087md-linebreak-mark" style="box-sizing:border-box;font-family:var(--monospace);opacity:0.6;color:inherit;white-space:pre-wrap"></span>
</span><span style="box-sizing:border-box"> rr</span><br></p>
</blockquote>
</div></div>