Mike Taylor bear

If you see the following error in your Travis-CI GAE deploy:

ERROR: Error Response: [403] Project has not enabled the API. Please use Google Developers Console to activate the API for your project.
Details: [
  [
    {
      "@type": "type.googleapis.com/google.rpc.Help",
      "links": [
        {

Web Security Checklist (draft)

Instructions

Please fork this gist and use as your own checklist as you develop/deploy your web application or api.

WARNING: This checklist makes an assumption of the level of expertise and experience of the reader and assumes significant in-depth knowledge and experience in web development.

App

Keybase proof

I hereby claim:

I am bear on github.
I am codebear (https://keybase.io/codebear) on keybase.
I have a public key ASDmWeaDLHWrk6kSQqjLcuSMVHh0jvidZeaRIIY2s707jwo

To claim this, I am signing this object:

	{
	"client_id": "https://bear.im",
	"baseurl": "http://localhost:9999",
	"logpath": ".",
	"host": "localhost",
	"port": 9999
	}

	#!/bin/bash

	# assumes a fairly recent Ubuntu - may work on Debian or others but needs testing
	# assumes you have your .ssh/config setup to specify a user and key for the host

	HOST=$1
	KEY=$2

	if [ "${HOST}" == "" ]; then
	echo "you must provide a hostname"

	server {
	listen :80;
	server_name example.net;

	access_log /var/log/nginx/example-access.log;
	error_log /var/log/nginx/example-error.log error;
	root /srv/known;

	location ~ /\.ht {
	deny all;

	#!/usr/bin/env python

	# count_hcards.sh domain workdir datajson resultjson

	import os, sys
	import json
	import argparse

	parser = argparse.ArgumentParser()
	parser.add_argument('domain',)

	#!/bin/bash

	iptables -F

	# Default policy is drop
	iptables -P INPUT DROP
	iptables -P FORWARD DROP
	iptables -P OUTPUT DROP

	iptables -A INPUT -p tcp -m multiport --dports 22 -j fail2ban-ssh

	#!/usr/bin/env python

	import os
	import json

	# pip install PyGithub
	from github import Github

	github_config = os.path.expanduser('~/.github.cfg')

	server {
	listen 80;
	server_name bear.im;

	location '/.well-known/acme-challenge' {
	default_type "text/plain";
	root /tmp/letsencrypt-auto;
	}
	location / {
	return 301 https://$server_name$request_uri;