rohan-molloy

• General settings
  • Include another configuration file
  • Include a directory of configuration files
  • Include a directory of configuration files excluding *.bak
  • Do not read /etc/hosts
  • Read an alternative host file
  • Set the resolve file
  • Disable the resolv file

rebane2001

import cv2
import numpy as np
import win32api, win32con
import math

webcam_x = 640 #Set webcam resolution
webcam_y = 640
screen_x = 1280 #Set screen resolution
screen_y = 1024

rohan-molloy

server.socket                   = "0.0.0.0:443"
server.username                 = "lighttpd"
server.groupname                = "lighttpd"
server.modules                  =   (
                                        "mod_openssl",
                                        "mod_proxy",
                                        "mod_dirlisting",
                                        "mod_access",
                                        "mod_compress",
                                        "mod_auth"

rohan-molloy

Regular Expression for IPv4 Address

grep -E '\b(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9]).(25[0-5]|2[0-4][0-9]|1[0-9][0-9]|[1-9]?[0-9])\b'

rohan-molloy

Print lines that do not end in semicolon

awk '!/;\s*$/'

rohan-molloy

In order to be issued a certificate, Let's Encrypt needs to verify you have control over the domain. This process is automated through challenges, such as setting up a local webserver, or adding DNS TXT records. I don't like the DNS-TXT challenge, as it requires giving every host a DNS service account.

I came up with my own solution. The .well-known/acme-challenge can be hosted using S3, allowing Let's Encrypt to perform an HTTP-01 challenge.

This method requires the least amount of privileges on the host (no ports need to be open)

Why do internal hosts need valid certs?

The primary reason I want internal hosts to have valid certs is quite simple - invalid/untrusted certificates break things! A secondary reason is that constant browser warning are annoying and false alarms are detrimental to security.

rohan-molloy

####################################
# Generates ~/.ssh/config entries  #
# using hostname+mac (/etc/ethers) #
####################################
#!/bin/bash
dev=${1:-'eth0'}      # use eth0 if no device specified
domain=.${2:-'local'} # use .local if no domain specified
while read line; do
  mac=$(echo $line|awk '{print $1}');
  host=$(echo $line|awk '{print $2}');

rohan-molloy

admins = {}

modules_enabled = { 
 "roster"; "saslauth"; "tls"; "private"; "vcard"; "uptime"; "time"; "ping"; "pep"; "admin_adhoc";"posix"; "mod_log_auth"; "disco";		
};

modules_disabled = {
 "offline"; "s2s";
};

rohan-molloy

Ability
Able
About
Above
Accept
According
Account
Across
Act
Action

rohan-molloy

Ask yes/no in Bash

read -r -p "Are you sure? [y/N] " response
case "$response" in
    [yY][eE][sS]|[yY]) 
        do_something
        ;;
    *)
 do_something_else