Wes Winham [email protected]
There are many tutorials floating around the web that almost get you a dynamic VPN in EC2. The goal of this tutorial is to be a one-stop-shop for this specific setup.
| #------------------------------------------------------------------------------- | |
| # Copyright (C) 2015 The Gravitee team (http://gravitee.io) | |
| # Licensed under the Apache License, Version 2.0 (the "License"); | |
| # you may not use this file except in compliance with the License. | |
| # You may obtain a copy of the License at | |
| # http://www.apache.org/licenses/LICENSE-2.0 | |
| # Unless required by applicable law or agreed to in writing, software | |
| # distributed under the License is distributed on an "AS IS" BASIS, | |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. | |
| # See the License for the specific language governing permissions and |
| [ | |
| [ | |
| "Prefix", | |
| "Verb", | |
| "URI", | |
| "Pattern", | |
| "Controller#Action" | |
| ], | |
| [ | |
| "GET", |
| Enter varnish admin | |
| varnishadm | |
| clear cache for index home page only | |
| ban req.http.host ~ www.htpcguides.com && req.url ~ "^/$" | |
| clear cache for specific page |
Wes Winham [email protected]
There are many tutorials floating around the web that almost get you a dynamic VPN in EC2. The goal of this tutorial is to be a one-stop-shop for this specific setup.
| [Unit] | |
| Description=supervisord - Supervisor process control system for UNIX | |
| Documentation=http://supervisord.org | |
| After=network.target | |
| [Service] | |
| Type=forking | |
| ExecStart=/bin/supervisord -c /etc/supervisord/supervisord.conf | |
| ExecReload=/bin/supervisorctl reload | |
| ExecStop=/bin/supervisorctl shutdown |
| ; Sample supervisor config file. | |
| [unix_http_server] | |
| file=/tmp/supervisor.sock ; (the path to the socket file) | |
| ;chmod=0700 ; sockef file mode (default 0700) | |
| ;chown=nobody:nogroup ; socket file uid:gid owner | |
| ;username=user ; (default is no username (open server)) | |
| ;password=123 ; (default is no password (open server)) | |
| ;[inet_http_server] ; inet (TCP) server disabled by default |
| #!/bin/sh | |
| # Variables | |
| USER="admin" | |
| PASS="password" | |
| # Assert Root User | |
| SCRIPTUSER=`whoami` | |
| if [ "$SCRIPTUSER" != "root" ] | |
| then |
This is quick howto for installing vault on AWS Linux, mostly to remind myself. At the end of this tutorial, you'll have a working vault server, using s3 for the backend, self signed certificates for tls, and supervisord to ensure that the vault server is always running, and starts on reboot.
First things first, let's set up an s3 bucket to use as the storage backend for our s3 instance.
From the AWS Mangement Console, go to the S3 console.
Click on the Create Bucket button
| #!/bin/bash | |
| set -e | |
| # This script is part of my blog post : | |
| # http://thoughtsimproved.wordpress.com/2015/01/03/tech-recipe-setup-a-rabbitmq-cluster-on-ubuntu/ | |
| # It sets up a RabbitMQ cluster by connecting to user-provided master and slave servers | |
| # and ringing them up to a cluster on the fly. | |
| # RabbitMQ Clustering is described in detail here : |