Joe Cefoli jcefoli

My Preferred nginx Config For Multiple Sites

Host multiple sites on a single server
Use Let's Encrypt and force SSL on all subdomains
Create an area for Let's Encrypt's ACME verification, but restrict this to specific host headers
- This is so we can auto-renew certs but prevent my server from responding to someone else's bogus enrollment request if they point DNS at my server and it responds to the validation
Create an https default_server fallback, so my sites are isolated if tou type the ipv6only
Top security practices, with an A+ rating on SSLLabs.com scan

There are two modes when you don't want Certbot to edit your configuration:

Webroot is better because it doesn't need to replace Nginx (to bind to port 80) to renew certificates.

In the following, we're setting up mydomain.com to be served from /var/www/mydomain, and challenges will be served from /var/www/letsencrypt.

Must have mercurial, the hg-git mercurial extension, and git installed

git init --bare /path/to/git/repo.git

cd /path/to/hg/repo

hg bookmark -r default master

	<#
	.SYNOPSIS
	Powershell Script that will loop through a folder and run SQL scripts against a database

	.Description
	This script was developed to be used with VSTS. It must accept parameters, since VSTS variables cannot be used within scripts. Developers can specify a different SQL folder with each build

	.NOTES
	Version: 1.0.1
	Author: jcefoli

	#!/usr/bin/env bash

	if [ "$(whoami)" != "root" ]; then
	echo -e "Sorry, you are not running as root.\nPlease run this script as root.\n\nExiting...";
	exit 1
	fi

	#!/bin/bash

	## This will install Ruby using rbenv on the Windows 10 Ubuntu Subsystem
	## The travis gem did not compile correctly when I installed via 'apt-get install ruby' but worked using this method

	sudo apt-get -y install build-essential libreadline-dev zlib1g-dev

	cd ~
	git clone https://github.com/rbenv/rbenv.git ~/.rbenv
	echo 'export PATH="$HOME/.rbenv/bin:$PATH"' >> ~/.bashrc

	rm -rf /etc/letsencrypt/live/${DOMAIN}
	rm /etc/letsencrypt/renewal/${DOMAIN}.conf

	#In this example, we're adding C:\bin. I hard coded the path to make it a powershell one liner
	[Environment]::SetEnvironmentVariable("Path", $env:Path + ";C:\bin", [EnvironmentVariableTarget]::User)