José Coelho jacoelho
jacoelho
/ Dockerfile
Created
October 8, 2015 08:11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| ADD application.yml /var/www/config/application.yml |
jacoelho
/ docker-env.sh
Last active
October 8, 2015 08:13
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| docker run --env secret=12345 --env othersecret=abcd mycontainer |
jacoelho
/ docker-env-file.sh
Created
October 8, 2015 08:21
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| docker run --env-file /config/secrets myapp |
jacoelho
/ docker-bind-mount.sh
Created
October 8, 2015 08:35
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| docker run -v /config/application.yml:/var/www/application.yml:ro myapp |
jacoelho
/ docker-run-volumes-from.sh
Created
October 8, 2015 09:06
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| docker run --volumes-from app-conf myapp |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| import sys | |
| data = sys.stdin.readlines() | |
| for line in data: | |
| key = line.split(":")[0] | |
| key = key.replace("#", "") | |
| value = key.replace("redis_", "", 1) | |
| value = key.replace("_", "-") |
jacoelho
/ ipsec-tools.conf
Last active
November 17, 2015 13:39
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| #!/usr/sbin/setkey -f | |
| flush; | |
| spdflush; | |
| spdadd 192.168.205.10/32 192.168.205.11/32 any -P in ipsec | |
| esp/transport//require; | |
| spdadd 192.168.205.11/32 192.168.205.10/32 any -P out ipsec | |
| esp/transport//require; | |
| spdadd 192.168.205.10/32 192.168.205.12/32 any -P in ipsec |
jacoelho
/ racoon.conf
Created
November 17, 2015 13:41
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| log notify; | |
| path pre_shared_key "/etc/racoon/psk.txt"; | |
| remote anonymous { | |
| exchange_mode main; | |
| proposal { | |
| encryption_algorithm aes_256; | |
| hash_algorithm sha1; | |
| authentication_method pre_shared_key; | |
| dh_group modp1024; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 192.168.205.10 securepassword | |
| 192.168.205.11 securepassword | |
| 192.168.205.12 securepassword |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| defaults REDIS | |
| mode tcp | |
| timeout connect 3s | |
| timeout server 6s | |
| timeout client 6s | |
| frontend ft_redis | |
| bind *:6379 ssl crt /etc/haproxy/certificate.pem ciphers ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK | |
| default_backend bk_redis |