Written for fairly adept technical users, preferably of Debian GNU/Linux, not for absolute beginners.
|
You'll probably be working with a single smartcard, so you'll want only one primary key ( |
|
You'll probably be working with a single smartcard, so you'll want only one primary key ( |
Prerequisites : the letsencrypt CLI tool
This method allows your to generate and renew your Lets Encrypt certificates with 1 command. This is easily automatable to renew each 60 days, as advised.
You need nginx to answer on port 80 on all the domains you want a certificate for. Then you need to serve the challenge used by letsencrypt on /.well-known/acme-challenge.
Then we invoke the letsencrypt command, telling the tool to write the challenge files in the directory we used as a root in the nginx configuration.
I redirect all HTTP requests on HTTPS, so my nginx config looks like :
server {
Thanks to this article by Christoph Berg
Directories and files
~/| The MIT License (MIT) | |
| Copyright (c) 2014 Matteo Rinaudo | |
| Permission is hereby granted, free of charge, to any person obtaining a copy | |
| of this software and associated documentation files (the "Software"), to deal | |
| in the Software without restriction, including without limitation the rights | |
| to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | |
| copies of the Software, and to permit persons to whom the Software is | |
| furnished to do so, subject to the following conditions: |
A Dashing widget that checks whether a server is responding to either an http or ping request. It displays either a check or alert depending on the response.
| site :opscode | |
| cookbook 'apt' | |
| cookbook 'statsd', git: 'https://github.com/librato/statsd-cookbook.git' | |
| cookbook 'graphite', git: 'https://github.com/hw-cookbooks/graphite.git' |
| # /etc/network/interfaces | |
| # | |
| auto lo | |
| iface lo inet loopback | |
| # device: eth0 | |
| iface eth0 inet manual | |
| # IPv4 bridge | |
| # (connect ONLY your firewall/router KVM instance here, this is the WAN device!) |
| rds-modify-db-parameter-group {param-group-name} \ | |
| --parameters="name=character_set_server, value=utf8, method=pending-reboot" \ | |
| --parameters="name=collation_server, value=utf8_general_ci, method=pending-reboot" \ | |
| --parameters="name=tmp_table_size, value={DBInstanceClassMemory/16}, method=pending-reboot" \ | |
| --parameters="name=max_heap_table_size, value={DBInstanceClassMemory/16}, method=pending-reboot" \ | |
| --parameters="name=query_cache_type, value=1, method=pending-reboot" \ | |
| --parameters="name=query_cache_size, value=131072, method=pending-reboot" \ | |
| --parameters="name=table_open_cache, value=2500, method=pending-reboot" \ | |
| --parameters="name=join_buffer_size, value={DBInstanceClassMemory/64}, method=pending-reboot" \ | |
| --parameters="name=thread_cache_size, value={DBInstanceClassMemory/12582880}, method=pending-reboot" \ |
| Subject: Thanks for signing up! | |
| Date: {{date}} | |
| To: {{recipient}} | |
| From: {{sender}} | |
| MIME-Version: 1.0 | |
| Content-Type: text/plain | |
| Thanks for signing up for the Foobar service! | |
| Your email address is: {{recipient}} |
| <?php | |
| /* | |
| * XSS filter, recursively handles HTML tags & UTF encoding | |
| * Optionally handles base64 encoding | |
| * | |
| * ***DEPRECATION RECOMMENDED*** Not updated or maintained since 2011 | |
| * A MAINTAINED & BETTER ALTERNATIVE => kses | |
| * https://github.com/RichardVasquez/kses/ | |
| * | |
| * This was built from numerous sources |