Kirill Trofimov g3rhard

Cloud Security Orienteering: Checklist
by Rami McCarthy
via TL;DR sec

How to orienteer in a cloud environment, dig in to identify the risks that matter, and put together actionable plans that address short, medium, and long term goals.

Based on the Cloud Security Orienteering methodology.

Checklist

Inspired By: grafana/loki#333

docker-compose.yml

version: "3"

networks:
  loki:

New sysadmin job - preparing a to-do/check list (credits: https://www.reddit.com/r/sysadmin/comments/5ioemb/new_sysadmin_job_preparing_a_todocheck_list/) I change my sysadmin job for two months (after 10 years working in current workplace). I prepared a list of things to accomplish in my new workplace based on multiple posts on r/sysadmin Each comment will be valuable.

Audit/check/Inventory/review:

Scope definition: Are you responsible for electricity, laptops, desktops, software support, mobile phones, server, online services the company uses, defining policies, etc
General documentation: do not impove until you understand the environment (do backup before change)
Crucial services inventory: Identify mission critical services and where they are hosted; identify who is responsible for them if its not you
[DR] Disaster Recovery Plan: Backups are running properly? Backup rotation? Last DR test? Automated? In case of my absence?
[BC] Business Continuity Plan
[BIA] Business Impact Analysis
Network

	bash#!/bin/bash

	# avoidng collisions with other rsync processes

	#the minutes passed to the script 21h*60min = 1260 Minuten
	minutes=1260

	# Make sure no one else is using rsync
	pro_on=$(ps aux \| grep -c rsync)

	name: Component Triggering
	on:
	issue_comment:
	types:
	- created
	jobs:
	trigger-webhook:
	runs-on: ubuntu-latest
	if: ${{ github.event.issue.pull_request }}
	steps:

	---
	name: Helm

	on:
	push:
	branches: [ production ]
	paths-ignore:
	- 'README.md'
	- 'helm-charts/**/README.md'
	- 'LICENSE'

	name: deploy api

	on:
	push:
	branches:
	- master
	release:
	types: [created]

	env:


	# This config came around after a friend had problems with a Steam cache on his
	# Cox internet connection. Cox would intercept any requests to Steam content
	# servers and return a 302 to Cox's servers. The cache would return the 302
	# to the Steam client, and the Steam client would go directly to Cox, bypassing
	# the cache.
	# This config makes nginx follow the 302 itself, and caches the result of the
	# redirect as if it was the response to the original request. So subsequent
	# requests to the URL that returned a 302 will get the file instead of a 302.

	set vlcPath="C:\vlc.exe"

	%vlcPath% %1 --video-x=1980 --video-y=400 --width=300 --height=300 --fullscreen ^
	--no-video-title-show --no-embedded-video --no-qt-fs-controller

	#!/usr/bin/env bash

	set -Eeuo pipefail

	cd "$(dirname "${BASH_SOURCE[0]}")" >/dev/null 2>&1

	trap cleanup SIGINT SIGTERM ERR EXIT

	usage() {
	cat <<EOF