Kiril Piskunov ciudilo

MongoDB 3.2.x SSL with Letsencrypt

Letsencrypt is an initative which aims to increase the use of encryption for websites. It basically allows people to apply for free certificates provided that they prove the they control the requested domain. We will look at the what is needed to secure your MongoDB installation. For more details on setting up a MongoDB server see MongoDB 3.2.x.

Set the hostname

We sould to set the hostname to match the name of the certificate we are going to optain.

sudo hostname mongo0.example.com

Then update the hostname file to set the server name permanently.

Install tcpkill
yum -y install dsniff --enablerepo=epel

View connections
netstat -tnpa | grep ESTABLISHED.*sshd.

Block with ip tables
iptables -A INPUT -s IP-ADDRESS -j DROP

Kill connection

	/*
	* Auto-tuning delete that allows for removal of large amounts of data
	* without impacting performance. Configurable to a target load amount.
	*
	* How it works:
	* TL;DR: Delete a small slice every second; Vary the size of each slice
	* based on how long the previous delete took; sleep; repeat.
	*
	* TODO: Modify this to allow for deletion based on objectid's date
	* which is embedded in the first four bytes.

	#!/bin/bash

	############################################################################
	# Automated WWDC 2014 videos downloader script
	# Cristian Grau @SaroFR
	# Based on Krzysztof Zablocki's (@merowing_) Download HD WWDC 2014 command
	############################################################################

	function download {
	curl --silent --remote-name $1

	-- Adapted from these sources:
	-- http://peterdowns.com/posts/open-iterm-finder-service.html
	-- https://gist.github.com/cowboy/905546
	--
	-- Modified to work with files as well, cd-ing to their container folder
	on run {input, parameters}
	tell application "Finder"
	set my_file to first item of input
	set filetype to (kind of (info for my_file))
	-- Treats OS X applications as files. To treat them as folders, integrate this SO answer:

	/*
	* Copyright 2012 Thomas Broyer <[email protected]>
	*
	* Licensed under the Apache License, Version 2.0 (the "License");
	* you may not use this file except in compliance with the License.
	* You may obtain a copy of the License at
	*
	* http://www.apache.org/licenses/LICENSE-2.0
	*
	* Unless required by applicable law or agreed to in writing, software