Skip to content

Instantly share code, notes, and snippets.

View Niemi's full-sized avatar

Aleksei Niemi

View GitHub Profile
upstream nexus3 {
server 127.0.0.1:8081;
keepalive 32;
}
server {
listen 80;
server_name nexus.hwdomain.io;
location / {
@Niemi
Niemi / tls_checker
Created October 13, 2020 17:12
check tls 1.3 connection without nmap
#https://isc.sans.edu/forums/diary/Testing+TLSv13+and+supported+ciphers/25442/
$ for cipher in TLS_AES_128_GCM_SHA256 TLS_AES_256_GCM_SHA384 TLS_CHACHA20_POLY1305_SHA256 TLS_AES_128_CCM_SHA256 TLS_AES_128_CCM_8_SHA256 ; do openssl s_client -tls1_3 -ciphersuites $cipher -connect www.cloudflare.com:443 < /dev/null > /dev/null 2>&1 && echo "$cipher" ; done
@Niemi
Niemi / gist:7c8c326c35885d461ce0272e1d96fb68
Last active February 10, 2023 07:40
Sytemd service spring boot app
[Unit]
Description=Java App
Requires=network.target
After=syslog.target
[Service]
User=tomcat
Group=tomcat
#EnvironmentFile=/etc/profile.d/java
Environment='JAVA_OPTS=-Djava.awt.headless=true -Djava.net.preferIPv4Stack=true -Dfile.encoding=utf-8 -Djava.security.egd=file:/dev/./urandom -Xss256k -Xmx128m -Xms128m -XX:MaxDirectMemorySize=128m'
ExecStart=/usr/bin/java -jar /home/app/app.jar
@Niemi
Niemi / ca
Created July 3, 2017 13:11
Apache Cassandra Init.d Script by Author: Eric Evans <[email protected]>
#! /bin/sh
### BEGIN INIT INFO
# Provides: cassandra
# Required-Start: $remote_fs $network $named $time
# Required-Stop: $remote_fs $network $named $time
# Should-Start: ntp mdadm
# Should-Stop: ntp mdadm
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 6
# Short-Description: distributed storage system for structured data
[Unit]
Description=Apache Tomcat Web Application Container
After=network.target
[Service]
Type=forking
Environment=JAVA_HOME=/usr/lib/jvm/latest/jre
Environment=CATALINA_PID=/opt/tomcat/work/tomcat.pid
Environment=CATALINA_HOME=/opt/tomcat
#https://wiki.mozilla.org/SecurityEngineering/x509Certs (read it)
#openssl minimum version 1.0.1
export somedomainname="example.com"
#cat > openssl.ss.cnf << EOF
#basicConstraints = CA:FALSE
#subjectAltName =DNS:$somedomainname
#extendedKeyUsage =serverAuth
#EOF
#generate Elliptic Curve Cryptography Self Signed Key
openssl req -new -x509 -sha256 -nodes \
@Niemi
Niemi / gist:d434f2b94566796a4502
Last active September 16, 2015 10:05 — forked from dannysheehan/gist:9d67adb67eeef6ad1413
haproxy.cfg configuration for 1Gb KVM with 1 CPU with backend NGINX and percona /mariadb cluster.
#---------------------------------------------------------------------------
# @(#)$Id$
#title :/etc/haproxy/haproxy.cfg
#description :ftmon cluster haproxy config. NGINX and XtraDB Cluster backend
#author :Danny W Sheehan
#date :July 2014
#website :ftmon.org
#
# This is a work in progress. A lot of trial and error and man hours have
# gone into this configuration. I have referenced sources that have been
@Niemi
Niemi / gist:25cee1ff594de7e9e05c
Last active September 16, 2015 10:01 — forked from dannysheehan/gist:d26067dcc3599c4226aa
/etc/nginx/common/nginx.conf basic NGINX location rules common to all website platforms. Should be included in all virtual site configurations.
#---------------------------------------------------------------------------
# @(#)$Id$
#title :/etc/nginx/common/nginx.conf
#description :ftmon cluster nginx common config for all sites.
#author :Danny W Sheehan
#date :July 2014
#website :ftmon.org
#
# This is a work in progress. A lot of trial and error and man hours have
# gone into this configuration. I have referenced sources that have been
#---------------------------------------------------------------------------
# @(#)$Id$
#title :/etc/nginx/common/wpcommon.conf
#description :ftmon cluster nginx common configurations for Wordpress.
#author :Danny W Sheehan
#date :July 2014
#website :ftmon.org
#
# This is a work in progress. A lot of trial and error and man hours have
# gone into this configuration. I have referenced sources that have been
#!/bin/bash
#must be url where i get it (thanks to Author)
# Info
# ---
# script can run with the domain as a command line input
# `sudo ./nginx_domain.sh my_domain.com` or without and
# the script will prompt the user for input
#config
web_root='/usr/share/nginx/'