Rai Escarez brainv

NGINX WAF Ingress

Deploy NGINX Ingress Controller Operator
Create an instance of NginxIngress
Deploy an app and expose it at the Ingress
Deploy RateLimit and a WAF Policy
Helpful Sites
Clean Up

System Updates

http://bookofzeus.com/harden-ubuntu/initial-setup/system-updates/

Keeping the system updated is vital before starting anything on your system. This will prevent people to use known vulnerabilities to enter in your system.

sudo apt-get update
sudo apt-get upgrade
sudo apt-get autoremove
sudo apt-get autoclean

AWS region code	AWS region name	Number of AZs	AZ names
us-east-1	Virginia	4	us-east-1a, us-east-1b, us-east-1c, us-east-1e
us-west-1	N. California	2	us-west-1a, us-west-1b
us-west-2	Oregon	3	us-west-2a, us-west-2b, us-west-2c
eu-west-1	Ireland	3	eu-west-1a, eu-west-1b, eu-west-1c
eu-central-1	Frankfurt	2	eu-central-1a, eu-central-1b
ap-southeast-1	Singapore	2	ap-southeast-1a, ap-southeast-1b
ap-southeast-2	Sydney	2	ap-southeast-2a, ap-southeast-2b, ap-southeast-2c
ap-northeast-1	Tokyo	2	ap-northeast-1a, ap-nort

	ssh-keygen -t rsa -b 4096 -m PEM -f jwtRS256.key
	# Don't add passphrase
	openssl rsa -in jwtRS256.key -pubout -outform PEM -out jwtRS256.key.pub
	cat jwtRS256.key
	cat jwtRS256.key.pub

	#!/bin/bash

	aptitude -y install expect

	// Not required in actual script
	MYSQL_ROOT_PASSWORD=abcd1234

	SECURE_MYSQL=$(expect -c "

	set timeout 10

	# Ctrl+W to delete the previous word
	bind "^W" ed-delete-prev-word
	# Ctrl+U to delete the current line contents
	bind "^U" vi-kill-line-prev
	# Ctrl+R to search the query history
	bind "^R" em-inc-search-prev
	# Ctrl+Left Arrow to go the previous word
	bind "\e[1;5D" vi-prev-word
	# Ctrl+Right Arrow to go to the next word
	bind "\e[1;5C" vi-next-word

	[unix_http_server]
	file=/tmp/supervisor.sock ; path to your socket file

	[supervisord]
	logfile=/var/log/supervisord/supervisord.log ; supervisord log file
	logfile_maxbytes=50MB ; maximum size of logfile before rotation
	logfile_backups=10 ; number of backed up logfiles
	loglevel=error ; info, debug, warn, trace
	pidfile=/var/run/supervisord.pid ; pidfile location
	nodaemon=false ; run supervisord as a daemon

	----- Esc -----
	Quick change directory: Esc + c
	Quick change directory history: Esc + c and then Esc + h
	Quick change directory previous entry: Esc + c and then Esc + p
	Command line history: Esc + h
	Command line previous command: Esc + p
	View change: Esc + t (each time you do this shortcut a new directory view will appear)
	Print current working directory in command line: Esc + a
	Switch between background command line and MC: Ctrl + o
	Search/Go to directory in active panel: Esc + s / Ctrl + s then start typing directory name