iamwildtuna

Meta (Instagram, Facebook)
// Узлы
157.240.253.174, 157.240.253.172, 157.240.253.167, 157.240.253.63, 157.240.253.32
157.240.252.174, 157.240.252.172, 157.240.252.167, 157.240.252.63, 157.240.252.38
57.144.112.34, 57.144.110.1, 157.240.205.174, 87.245.223.97

// Подсети
213.102.128.0/24
204.15.20.0/22
199.201.0.0/16

alikarimii

این آموزش مربوط به سیستم های یونیکسه.

CDN

خب اول یک دامنه یا ساب دامنه انتخاب کنید و یک A رکورد به مقدار آی پی سرور خارجی و پرت HTTPS بسازید.سی دی ان داخلی باشه که طرح رذالتو دور بزنید. باید روی SSL,CDN رو فعال کنید.

SSL

خب برای اون دامنه باید اس اس ال داشته باشید با این فایل ها fullchain.pem, privkey.pem, chain.pem, dhparam.pem آموزش گرفتن اس اس ال هم که زیاده. (dhparam- Diffie–Hellman (D-H))

NGINX

اول nginx رو روی سرور خارجی نصب کنید.

jslay88

#!/bin/bash

install_deps_windows() {
    echo "Installing Build Dependencies (Windows)..."
    choco install -y make visualstudio2019buildtools visualstudio2019-workload-vctools
}

install_deps_darwin() {
    echo "Installing Build Dependencies (Darwin)..."
    xcode-select --install

zengxs

#!/bin/sh

export CLOUDFLARE_EMAIL='[REDACT: your cloudflare email]'
export CLOUDFLARE_API_KEY='[REDACT: your cloudflare api key]'

lego \
  --server https://acme.zerossl.com/v2/DV90 \
  --accept-tos \
  --path /srv/lego \
  --eab \

duxor

# startupkin.com basic test config
image: trion/ng-cli-e2e:latest

stages:
  - build
  - deploy

build_stage:
  stage: build
  script:

kenrachynski

pipeline {
    agent any
    environment {
        COMMITDATE = ""
    }
    stages {
        stage('setup') {
            steps {
                script {
                    COMMITDATE = sh(returnStdout: true, script: "git show -s --format=%ci ${GIT_COMMIT}")

Chambras

# bash commands
  alias c='clear'
  alias sau='sudo apt update; sudo apt list --upgradable'
  alias sai='sudo apt upgrade'
  alias rld='source ~/.bashrc; source ~/.bash_aliases; source ~/.profile'
  alias tsync='sudo hwclock -s'

# Kafka
  alias ktls='kafka-topics.sh --list --bootstrap-server localhost:9092'
  alias ktc='kafka-topics.sh --create --bootstrap-server localhost:9092 --replication-factor 1 --partitions 1 --topic'

phiberoptick

Ignore all that craziness below.  These can be set from the cli with the "pritunl" command.

The commands below can be used to get/set the values of the cert, key, port and if the :80 -> "app.server_port" redirect is active.


# Get current SSL server cert:
pritunl get app.server_cert

# Get current SSL server key:
pritunl get app.server_key

gilmacieljr

Lab 8: Kafka Security

Kafka provides Authentication via SASL (Simple Authentication and Security Layer) and SSL (Secure Sockets Layer), Kafka also provides Authorization (pluggable) and Encryption SSL (in transit).

Authentication

Kafka Broker supports Authentication in producers and consumers, brokers, tools with methods SSL and SASL.

Kafka supports the following SASL mechanisms:

NiceGuyIT

Intro

This is an example configuration to have nginx output JSON logs to make it easier for Logstash processing. I was trying to get nginx > Filebeat > Logstash > ES working and it wasn't until I connected Filebeat directly to Elasticsearch that I saw the expected data. Google led me to ingest-convert.sh and I realized filebeat setup works for Filebeat > ES but not Filebeat > Logstash > ES. This is because Logstash does not use ingest pipelines by default. You have to enable them in the elasticsearch output block.

Having nginx log JSON in the format required for Elasticsearch means there's very little processing (i.e. grok) to be done in Logstash. nginx can only output JSON for access logs; the error_log format cannot be changed.

Extra fields are output and not used by the Kibana dashboards. I included them in case they might be useful. Since they are not declared in the filebeat setup, their default is "string" when yo