VirtualTam's bookmarks

121. Common approaches to securing Linux servers and what runs on them. 2018-02-08

     tags: internet-of-things, linux, security, server

     [ permalink ]

     • https://www.reddit.com/r/linux/comments/7vepi4/common_approaches_to_securing_linux_servers_and/
     • https://en.wikipedia.org/wiki/Security_controls
     • https://blog.qualys.com/news/2017/09/26/achieve-continuous-security-and-compliance-with-the-cis-critical-security-controls
122. Jenkins & .Net 2018-02-06

     tags: continuous-integration, continuous-integration/jenkins, linux, microsoft/windows, programming/c#

     [ permalink ]

     • https://plugins.jenkins.io/msbuild
     • https://jenkinsheaven.blogspot.fr/
     • https://blog.alexellis.io/continuous-integration-docker-windows-containers/
     • https://asmagin.com/2017/05/02/jenkins-on-docker-for-net-projects/
     • https://developers.redhat.com/blog/2016/09/05/how-to-install-and-configure-jenkins-to-build-net-apps-on-red-hat-enterprise-linux/
     • https://docs.microsoft.com/en-us/dotnet/core/linux-prerequisites
     • https://www.pgs-soft.com/cross-platform-application-using-net-core-jenkins-docker/
     • https://stackoverflow.com/questions/27725236/jenkins-net-build-server
     • https://blog.couchbase.com/continuous-deployment-with-jenkins-and-net/
123. Netlify CMS | Open-Source Content Management System 2018-01-29

     tags: content, documentation, personal-knowledge/blog, programming/html, source-code-management/git, static, web

     [ permalink ]

     • https://github.com/netlify/netlify-cms
     • https://www.netlify.com/blog/2017/08/17/a-complete-cms-with-no-server-and-18-lines-of-code/
     • https://fosdem.org/2018/schedule/event/finding_a_home_for_docs/
124. Don't publicly expose .git, or how we downloaded your website's sourcecode - An analysis of Alexa's 1M 2018-01-20

     tags: apache, network/http, network/http-server/nginx, security, source-code-management, source-code-management/git, web

     [ permalink ]

     • https://stackoverflow.com/questions/2530372/how-do-i-disable-directory-browsing
     • https://httpd.apache.org/docs/current/mod/mod_rewrite.html

     via https://git.github.io/rev_news/2017/06/14/edition-28/

125. gencebay/httplive: HTTP Request & Response Service, Mock HTTP 2018-01-08

     tags: network/http, request, server, user-interface

     [ permalink ]
126. How to Monitor HAProxy with the ELK Stack - Logz.io 2018-01-08

     tags: network/http, network/reverse-proxy/haproxy, observability/elastic, observability/elastic/logstash, observability/logging, server

     [ permalink ]

     • https://logz.io/learn/complete-guide-elk-stack/
     • https://app.logz.io/#/dashboard/apps?q=haproxy
     • https://cbonte.github.io/haproxy-dconv/1.8/configuration.html#8
127. Orion: an alternative server and visualization tool for OwnTracks : selfhosted 2017-12-21

     tags: gps, location, map, mobile/android, network/mqtt, openstreetmap, web

     [ permalink ]

     • http://owntracks.org/
     • https://github.com/LINKIWI/orion-server
     • https://github.com/LINKIWI/orion-web
128. SSH Can Do That? Productivity Tips for Working with Remote Servers | Smylers [blogs.perl.org] 2017-12-05

     tags: editor/vim, network, network/ssh, remote, server

     [ permalink ]
129. Distributed environments and database migrations 2017-11-29

     tags: data, database, database/migration, distributed, framework/django, linux/container/docker

     [ permalink ]

     Actors:

     • database server / cluster
     • load-balanced application servers relying on a database schema with migrations
     • reverse proxy

     Issue:

     • managing database schema migrations

     Possible sequence:

     • create the database
     • run a service that executes database schema migrations
     • start application servers
     • start the load-balancer / reverse-proxy

     Resources:

     • https://www.reddit.com/r/docker/comments/2t2pnf/what_are_best_strategies_to_migrate_relational/
     • https://softwareengineering.stackexchange.com/questions/357929/db-migration-strategy-for-docker-containers-in-aws-ecs
     • https://stackoverflow.com/questions/41592091/run-a-database-migration-command-when-deploying-a-docker-container-to-aws
     • https://ltd-keeper.lsst.io/gke-migrations.html
     • https://stackoverflow.com/questions/31715239/docker-compose-database-migrations-and-other-pre-post-scripts
     • https://stackoverflow.com/questions/38089999/docker-compose-rails-best-practice-to-migrate
     • https://stackoverflow.com/questions/37058812/how-best-to-run-one-off-migration-tasks-in-a-kubernetes-cluster
130. How can I debug a docker container initialization? - Server Fault 2017-10-11

     tags: debugging, linux/container/docker

     [ permalink ]

     $ docker start -a <id>

131. Playing HTTP Tricks with Nginx | Elastic 2017-10-09

     tags: network/http, network/http-server/nginx, observability/elastic, observability/elastic/elasticsearch, observability/elastic/kibana, security, security/authentication

     [ permalink ]

     The X-Pack plugin comes with a subscription plan and a 30-day trial license:

     • https://www.elastic.co/subscriptions
     • https://www.elastic.co/guide/en/x-pack/current/license-expiration.html
     • https://discuss.elastic.co/t/after-x-pack-license-expiration/78072/7

     Once the license has expired, a number of features become unavailable, among which is user management (authentication, authorization).

132. Generate Mozilla Security Recommended Web Server Configuration Files 2017-10-09

     tags: apache, cipher, network/http, network/http-server/nginx, network/transport-layer-security, security, server

     [ permalink ]

     • https://github.com/mozilla/server-side-tls
     • https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
     • https://security.stackexchange.com/questions/51680/optimal-web-server-ssl-cipher-suite-configuration
     • https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
133. How to Use Elasticsearch, Logstash, and Kibana to Manage Apache Logs 2017-09-30

     tags: network/http-server/apache-httpd, observability/elastic/elasticsearch, observability/elastic/logstash, observability/logging

     [ permalink ]

     • https://www.elastic.co/guide/en/logstash/master/config-examples.html
     • https://github.com/logstash-plugins/logstash-patterns-core/blob/master/patterns/httpd
     • https://discuss.elastic.co/t/apache-error-logs-timestamp/82010/9
     • https://discuss.elastic.co/t/parsing-apache-logs-combinedapachelog-commonapachelog-not-working/82007
     • http://www.thegeekstuff.com/2014/12/logstash-setup/
134. Where can I find web server log dataset? - Quora 2017-09-30

     tags: apache, dataset, observability/logging, server

     [ permalink ]

     • https://www.quora.com/Are-there-any-free-large-datasets-in-the-format-of-an-Apache-access-log

     Apache:

     • https://github.com/silicon-valley-data-science/datasets
     • http://ita.ee.lbl.gov/html/contrib/NASA-HTTP.html
     • https://archive.org/details/webserverlogs
     • http://opensource.indeedeng.io/imhotep/docs/sample-data/
135. Open MCT - Open Source Mission Control Software — Open MCT 2017-09-24

     tags: control, dashboard, data, panel, visualization

     [ permalink ]

     • https://github.com/nasa/openmct
     • https://github.com/c-base/cbeam-telemetry-server
136. Red Hat Directory Server - Chapter 14. Managing Replication 2017-09-20

     tags: 389-ds, linux, linux/centos, linux/red-hat, network/ldap, network/transport-layer-security, replication, security/authentication

     [ permalink ]

     • http://directory.fedoraproject.org/docs/389ds/howto/howto-replicationmonitoring.html
     • http://directory.fedoraproject.org/docs/389ds/howto/howto-walkthroughmultimasterssl.html
     • http://www.port389.org/docs/389ds/FAQ/faq.html#how-does-the-389-multi-master-replication-work
137. Zend OpCache Settings/Tuning/Config 2017-09-16

     tags: performance, programming/php, server

     [ permalink ]
138. Sensu | Full-stack monitoring for today's business. 2017-09-05

     tags: configuration-management/ansible, linux, network/snmp, observability

     [ permalink ]

     • https://docs.sensu.io/
     • https://github.com/sensu/sensu
     • https://github.com/sensu/sensu-ansible
     • https://github.com/hiroakis/docker-sensu-server
     • https://github.com/sstarcher/docker-sensu
139. Docker | Access a service running on the host from a container 2017-09-05

     tags: host, linux, linux/container, linux/container/docker, network, route

     [ permalink ]

     TL;DR: docker0 bridge + iptables

     • https://stackoverflow.com/questions/31324981/how-to-access-host-port-from-docker-container
     • https://stackoverflow.com/questions/24319662/from-inside-of-a-docker-container-how-do-i-connect-to-the-localhost-of-the-mach
     • https://stackoverflow.com/questions/29598504/how-to-connect-to-service-in-the-host-machine-from-inside-a-docker-container
     • http://blog.michaelhamrah.com/2014/06/accessing-the-docker-host-server-within-a-container/
140. Ansible | Automated OpenLDAP installation on Debian 2017-08-24

     tags: configuration-management/ansible, linux, linux/debian, network/ldap, security/authentication

     [ permalink ]

     Ansible modules:

     • https://docs.ansible.com/ansible/latest/ldap_entry_module.html
     • https://docs.ansible.com/ansible/latest/ldap_attr_module.html

     Installation guides:

     • https://wiki.debian.org/LDAP/OpenLDAPSetup
     • https://debian-administration.org/article/585/OpenLDAP_installation_on_Debian

     Debconf & slapd automation:

     • https://unix.stackexchange.com/questions/362547/automating-slapd-install
     • https://www.linuxquestions.org/questions/linux-server-73/script-install-slapd-with-admin-ldap-password-4175426002/
     • https://www.digitalocean.com/community/tutorials/how-to-change-account-passwords-on-an-openldap-server