Terry Wang terrywang

Nginx TLS SNI routing, based on subdomain pattern

Nginx can be configured to route to a backend, based on the server's domain name, which is included in the SSL/TLS handshake (Server Name Indication, SNI).
This works for http upstream servers, but also for other protocols, that can be secured with TLS.

prerequisites

at least nginx 1.15.9 to use variables in ssl_certificate and ssl_certificate_key.
check nginx -V for the following:
```
...
TLS SNI support enabled
```

Mistakes to Avoid: Docker Antipatterns

Whichever route you take to implementing containers, you’ll want to steer clear of common pitfalls that can undermine the efficiency of your Docker stack.

Don’t run too many processes inside a single container

The beauty of containers—and an advantage of containers over virtual machines—is that it is easy to make multiple containers interact with one another in order to compose a complete application. There is no need to run a full application inside a single container. Instead, break your application down as much as possible into discrete services, and distribute services across multiple containers. This maximizes flexibility and reliability.

Don’t install operating systems inside Docker containers

It is possible to install a complete Linux operating system inside a container. In most cases, however, this is not necessary. If your goal is to host just a single application or part of an application in the container, you need to install only the essential

Thread Pools

Thread pools on the JVM should usually be divided into the following three categories:

CPU-bound
Blocking IO
Non-blocking IO polling

Each of these categories has a different optimal configuration and usage pattern.

Semantic Commit Messages

See how a minor change to your commit message style can make you a better programmer.

Format: <type>(<scope>): <subject>

<scope> is optional

Example

What I Wish I'd Known About Equity Before Joining A Unicorn

Disclaimer: This piece is written anonymously. The names of a few particular companies are mentioned, but as common examples only.

This is a short write-up on things that I wish I'd known and considered before joining a private company (aka startup, aka unicorn in some cases). I'm not trying to make the case that you should never join a private company, but the power imbalance between founder and employee is extreme, and that potential candidates would

	## history search
	"\e[A": history-search-backward
	"\e[B": history-search-forward
	## visible ring
	set visible-stats on
	## menu complete
	"\C-n": menu-complete

	## 快捷键备忘
	## Ctrl + a : 光标移到行首。

	function fzf-ssh () {
	local selected_host=$(grep "Host " ~/.ssh/ssh_config \| grep -v '*' \| cut -b 6- \| fzf --query "$LBUFFER" --prompt="SSH Remote > ")

	if [ -n "$selected_host" ]; then
	BUFFER="ssh ${selected_host}"
	zle accept-line
	fi
	zle reset-prompt
	}

	from tesserocr import PyTessBaseAPI
	import sys
	import os

	# tesserocr -> https://pypi.python.org/pypi/tesserocr
	# cython -> https://pypi.python.org/pypi/Cython
	# Pillow -> https://pypi.python.org/pypi/Pillow

	if len(sys.argv) != 2:
	print("you need to pass the path to the image as first argument")

	#!/bin/bash

	# Load balance multiple internet connections. Requires iproute2, awk and grep.
	# (C) 2016 Tobias Girstmair, isticktoit.net, GPLv2
	# Also useful: speedometer -l -r eth1 -t eth1 -m $(( 1024 * 1024 * 3 / 2 ))
	# Not much user error checking is done - only pass working network connections

	# script needs root to work and at least two interfaces to be useful
	[ $EUID -eq 0 -a $# -ge 2 ] \|\| {
	echo "Usage (as root): $0 iface1[:weight1] iface2[:weight2] ..." >&2

	default['sshd']['sshd_config']['AuthenticationMethods'] = 'publickey,keyboard-interactive:pam'
	default['sshd']['sshd_config']['ChallengeResponseAuthentication'] = 'yes'
	default['sshd']['sshd_config']['PasswordAuthentication'] = 'no'