Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!
openssl genrsa -des3 -out rootCA.key 4096| ## Running playbooks after every file change | |
| $ ls -d roles/*/tasks/* | entr sh -c 'ansible-playbook -v -i inventory playbook.yml ' |
| ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQCiifL98yxfRuzi5Ksmi3N4Y82PunMVIT5GM7XPpbp4kP3//KetCbixqyuRW6/mjtnC4sOXpEllhBJ3dcO+eORhGGFlhwQYO9smckCUPbKkOBEQwOEAC3NapFwuqdHOhfr0H1idHssDV76nnbvG8QMHyjmU5uVO8kZBb7YaCS98KtfzzIBEDXFt0nktan5JKEE2GCpEEgfINfhYq7UibKXAJX3wDO9ogmm9kFYFGtRx9jIkC6vk+h2BoZPQ4DlrFyqXg8inY+Vt4YAp74l61i/IE3l8jqCTbx/Ol5IqeBjz5yMYcQVAkFTsdO0RJ+HGxei71u2uBeVP7+nAJ8vVx54D |
| CREATE USER 'newuser'@'localhost' IDENTIFIED BY 'password'; | |
| GRANT ALL PRIVILEGES ON * . * TO 'newuser'@'localhost'; | |
| FLUSH PRIVILEGES; | |
| GRANT ALL PRIVILEGES ON `%`.* TO '[user]'@'[hostname]' IDENTIFIED BY '[password]' WITH GRANT OPTION; |
| SELECT ' DROP DATABASE [' + NAME + ']' FROM sys.sysdatabases where name like 'PREFIX%' |
| #!/usr/bin/python | |
| from Crypto.Cipher import DES3 | |
| import base64 | |
| import os | |
| import re | |
| from os.path import expanduser | |
| home = expanduser("~") | |
| # costanti :) |
| # Ansible EC2 external inventory script settings | |
| # | |
| [ec2] | |
| # to talk to a private eucalyptus instance uncomment these lines | |
| # and edit edit eucalyptus_host to be the host name of your cloud controller | |
| #eucalyptus = True | |
| #eucalyptus_host = clc.cloud.domain.org |
| location ~* "(eval\()" { deny all; } | |
| location ~* "(127\.0\.0\.1)" { deny all; } | |
| location ~* "([a-z0-9]{2000})" { deny all; } | |
| location ~* "(javascript\:)(.*)(\;)" { deny all; } | |
| location ~* "(base64_encode)(.*)(\()" { deny all; } | |
| location ~* "(GLOBALS|REQUEST|CHAR)(=|\[|%)" { deny all; } | |
| location ~* "(<|%3C).*script.*(>|%3)" { deny all; } | |
| location ~ "(\\|\.\.\.|\.\./|~|`|<|>|\|)" { deny all; } |
| # Install dependencies that nginx was originally compiled with | |
| sudo apt install libperl-dev libgeoip-dev libgd-dev | |
| # Get the nginx source | |
| wget https://nginx.org/download/nginx-1.14.0.tar.gz | |
| tar zxf nginx-1.14.0.tar.gz | |
| # Get the module source | |
| wget https://github.com/fdintino/nginx-upload-module/archive/master.zip | |
| unzip master.zip |
| apiVersion: v1 | |
| kind: Service | |
| metadata: | |
| name: wordpress | |
| labels: | |
| app: wordpress | |
| spec: | |
| ports: | |
| - protocol: TCP | |
| port: 80 |