Skip to content

Instantly share code, notes, and snippets.

@santisaez
santisaez / monzo-alertmanager-config.yaml
Created January 19, 2021 09:10 — forked from milesbxf/monzo-alertmanager-config.yaml
Monzo's Alertmanager Slack templates
###################################################
##
## Alertmanager YAML configuration for routing.
##
## Will route alerts with a code_owner label to the slack-code-owners receiver
## configured above, but will continue processing them to send to both a
## central Slack channel (slack-monitoring) and PagerDuty receivers
## (pd-warning and pd-critical)
##
@santisaez
santisaez / kubernetes-digitalocean.tf
Created March 6, 2019 21:06
Example Terraform code to deploy a Kubernetes cluster at DigitalOcean
// Create a Kubernetes cluster in DigitalOcean
resource "digitalocean_kubernetes_cluster" "prueba" {
name = "prueba"
region = "lon1"
version = "1.11.7-do.3"
node_pool {
name = "prueba-pool"
size = "s-1vcpu-2gb"
node_count = 1
@santisaez
santisaez / poodle.md
Last active August 29, 2015 14:07
#poodle recap

#poodle recap

Enable SSL debug on Apache and check if your clients are using SSLv3, you will get the protocol+cipher used for each HTTPS request:

CustomLog /tmp/apache_ssl.log "%v %a %{SSL_PROTOCOL}x %{SSL_CIPHER}x"

Tip: see mod_ssl documentation if you need other SSL environment variables.

If possible, disable SSLv3 on the web server:

@santisaez
santisaez / gist:3226594
Created August 1, 2012 12:49
NTP fingerprint for hora.rediris.es
NTP fingerprinting script is available on http://kcy.me/a70n, those are the results for public RedIRIS NTP server:
$./ntp.pl -t hora.rediris.es
** It was possible to gather the following information from the remote NTP host hora.rediris.es
NTP daemon: Version=ntpd [email protected] Thu Dec 22 11:32:11 UTC 2005 (3)
Processor: i686
Operating System: Linux/2.4.23-NANOTIM
@santisaez
santisaez / gist:3187798
Created July 27, 2012 12:57
State of the Art: STUN + TURN servers on Linux (July 2012)

STUN implementations

  • stund
  • Content: server daemon and test client for STUN, RFC-3489 only
  • URL does not load, the project seems abandoned
  • The code is also available on SourceForge, last update was on January 2012
  • TCP and TLS modes not supported
  • The server needs two IPs, it’s mandatory and can not be configured
  • C++, no extra libraries required, Windows port available
  • Version = 0.97 (0.96 package available on Debian, 5 years without updates)
@santisaez
santisaez / gist:1639453
Created January 19, 2012 11:12
memcached 1.4.11 and make test fails on RHEL-4 i386
[powerstack@centos-4-i386 memcached-1.4.11]$ make test
./sizes
Slab Stats 64
Thread stats 200
Global stats 196
Settings 96
Item (no cas) 32
Item (cas) 40
Libevent thread 96
Connection 320
@santisaez
santisaez / gist:1639412
Created January 19, 2012 10:59
memcached 1.4.11 and make test fails on RHEL-6 i386
[powerstack@centos-6-i386 memcached-1.4.11]$ make test
./sizes
Slab Stats 64
Thread stats 200
Global stats 196
Settings 96
Item (no cas) 32
Item (cas) 40
Libevent thread 96
Connection 320
@santisaez
santisaez / gist:1639368
Created January 19, 2012 10:45
memcached 1.4.11 and make test fails on RHEL-5 i386
[powerstack@centos-5-i386 memcached-1.4.11]$ make test
./sizes
Slab Stats 64
Thread stats 200
Global stats 196
Settings 96
Item (no cas) 32
Item (cas) 40
Libevent thread 96
Connection 320
@santisaez
santisaez / gist:1632139
Created January 18, 2012 09:27
memcached 1.4.11 RPM build on RHEL-6 i386
Executing(%prep): /bin/sh -e /var/tmp/rpm-tmp.yLSyEc
+ umask 022
+ cd /home/powerstack/BUILD
+ cd /home/powerstack/BUILD
+ rm -rf memcached-1.4.11
+ /usr/bin/gzip -dc /home/powerstack/SOURCES/memcached-1.4.11.tar.gz
+ /bin/tar -xf -
+ STATUS=0
+ '[' 0 -ne 0 ']'
+ cd memcached-1.4.11
@santisaez
santisaez / gist:1632081
Created January 18, 2012 09:04
memcached 1.4.11 build on RHEL-5 i386 (./configure and make outputs)
$ ./configure
checking build system type... i686-pc-linux-gnu
checking host system type... i686-pc-linux-gnu
checking target system type... i686-pc-linux-gnu
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking for gcc... gcc