double-p

frontend zammad
 acl ssfn_path_zammad path_beg /zammad /assets /api
 acl ssfn_path_zammadws path_beg /zammad/ws /ws
 acl ssfn_type_websocket hdr(Upgrade) -i WebSocket
 use_backend ssfn_zammad if ssfn_path_zammad !ssfn_path_zammadws
 use_backend ssfn_zammad_websocket if ssfn_path_zammadws
 use_backend ssfn_zammad_websocket if ssfn_type_websocket
 
backend ssfn_zammad
 http-request set-header X-Real-IP %ci

double-p

$inet6em1='echo "inet6 $1" >> /etc/hostname.em1 && sh /etc/netstart em1'
$inet6carp=<<SCRIPT
echo "vhid 6 carpdev em1\ninet6 $1" > /etc/hostname.carp6 && sh /etc/netstart carp6
SCRIPT
$v6fwd="v=net.inet6.ip6.forwarding=1 ; sysctl -w $v ; echo $v >> /etc/sysctl.conf"

Vagrant.configure("2") do |config|
  config.vm.define "internet" do |v|
    v.vm.box = "openbsd"
    v.vm.network :private_network, ip: "10.123.0.3"

double-p

# ifconfig output like
tap0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	lladdr fe:e1:ba:d3:98:45
	description: vm1-if0-myvm
	index 73 priority 0 llprio 3
	groups: tap
	status: active
	inet 100.64.1.2 netmask 0xfffffffe
tap1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
	lladdr fe:e1:ba:d4:a7:78

double-p

acl good_ip src -f /etc/haproxy/ips.lst
http-request allow if good_ip
http-request deny

double-p

[2019-02-20T07:58:42,280][WARN ][o.e.d.s.a.MultiBucketConsumerService] 
This aggregation creates too many buckets (10001) and will throw an error
in future versions. You should update the [search.max_buckets] cluster 
setting or use the [composite] aggregation to paginate all buckets in multiple requests.

(This is an ES 6.4)

double-p

policy_module(ssfn-dovecot, 1.2)

require{
 type dovecot_auth_t;
 type dovecot_t;
 type dovecot_var_run_t;
 type proc_security_t;
 type init_t;
 class fifo_file { open write };
 class file { getattr };

double-p

reqrep ^([^\ :]*)\ /(.*).htmlx(.*) \1\ /foo/\2.html\3

double-p

policy_module(ssfn-sympa, 1.0)

require{
 type postfix_pipe_t;
 type var_spool_t;
 class file { write create rename };
 class dir { add_name open read write create remove_name };
}

allow postfix_pipe_t var_spool_t:dir { add_name open read write remove_name };

double-p

  diskfile = File.realpath( "." ).to_s + "/data.vdi"
  config.vm.provider :virtualbox do |v|
    v.customize ["modifyvm", :id, "--memory", 512]
    v.gui = true;
    #v.customize ["createhd", "--filename", diskfile, "--format", "VDI", "--size", 5120 ]
    v.customize ["storageattach", :id, "--storagectl", "IDE", "--port", 1, "--device", 1, "--type", "hdd", "--medium", diskfile]
  end

double-p

$ uname -a ; bundle exec vagrant status ; bundle exec vagrant up ; bundle exec vagrant ssh -c "uname -a"
OpenBSD ssfnhv011.ham3.rootnexus.net 6.2 GENERIC.MP#134 amd64
Current machine states:

vagrobsd                  not_created (openbsd)

The instance is not created. Run `vagrant up` to create it.
Bringing machine 'vagrobsd' up with 'openbsd' provider...
==> vagrobsd: Verifying VMM present and CPU capable...
==> vagrobsd: Importing an OpenBSD instance