Install dependencies
sudo apt-get update -y -q
sudo apt-get install -y -q nginx certbot python3-certbot-nginx
sudo apt-get install -y -q nodejs npm
These variables will be used for this snippet. Please substitute accordingly.
export RootCAName="root_ca"
export InterCAName="inter_ca"
export CommonName="hashidemos.io"
export InterCommonName="inter.hashidemos.io"
export Root_CA_ttl="730h"
export Inter_CA_ttl="350h"
export Cert_ttl="8h"
cat > /etc/default/step-ca <<'EOF'
STEPPATH="/etc/step-ca"
PASSWORD_FILE="/etc/step-ca/passwd"
CONFIG_FILE="/etc/step-ca/config/ca.json"
STEP_CA_TOKEN="..."
EOF
cat > /etc/systemd/system/step-ca.service <<'EOF'
[Unit]
curl -fsSLO https://go.dev/dl/go1.17.8.linux-armv6l.tar.gz
sudo rm -rf /usr/local/go
sudo tar -C /usr/local -xzf go1.17.8.linux-armv6l.tar.gz
rm -f go1.17.8.linux-armv6l.tar.gz
cat <<'EOF' | tee -a ~/.profile > /dev/null
Prerequisites:
Steps
PUT _template/cloudtrail | |
{ | |
"index_patterns": ["cloudtrail-*"], | |
"settings": { | |
"number_of_shards": 1, | |
"mapping": { | |
"total_fields": { | |
"limit": 10000 | |
} | |
} |
import "sockaddr" | |
import "strings" | |
# | |
# allow update secrets under secret/ path only to clients coming from 10.0.0.0/8 CIDR range | |
# | |
precond = rule { | |
request.operation in ["update"] and | |
strings.has_prefix(request.path, "secret/") |
conky.config = { | |
alignment = 'top_right', | |
background = false, | |
border_width = 1, | |
cpu_avg_samples = 2, | |
default_color = 'white', | |
default_outline_color = 'white', | |
default_shade_color = 'white', | |
draw_borders = false, | |
draw_graph_borders = true, |