| #!/usr/bin/env python3 | |
| # -*- coding: utf-8 -*- | |
| """ | |
| Clear blocked IP addresses in switchvox. | |
| Requires pyswitchvox | |
| Feel free to adjust logger if desired. | |
| """ | |
| from pyswitchvox.client import Client |
| from fastapi import FastAPI | |
| from fastapi.openapi.utils import get_openapi | |
| import os | |
| app = FastAPI() | |
| lable_lang_mapping = {"Plain JS": "JavaScript", "NodeJS": "JavaScript"} | |
| @app.get("/hello") | |
| async def hello(): |
This is a small guide on how to configure Netgate's pfSense firewall to use the FreeIPA LDAP service.
The first step is to create a user group in FreeIPA to manage which user can access the pfSense admin interface. You will be able to create some others groups later if you need to get different profiles on the pfSense admin interface (full admin, vpn admin, etc...).
| #!/usr/bin/env bash | |
| set -euo pipefail | |
| # This script downloads, compiles, and installs python3.8 as the system default | |
| export VERSION=3.8.5 | |
| apt install -y \ | |
| build-essential \ | |
| libbz2-dev \ |
| """ | |
| WARNING: dont use loguru, use structlog | |
| https://gist.github.com/nkhitrov/38adbb314f0d35371eba4ffb8f27078f | |
| Configure handlers and formats for application loggers. | |
| """ | |
| import logging | |
| import sys | |
| from pprint import pformat |
| import logging | |
| from fastapi import FastAPI | |
| from uicheckapp.services import EchoService | |
| logging.config.fileConfig('logging.conf', disable_existing_loggers=False) | |
| logger = logging.getLogger(__name__) | |
| app = FastAPI() |
| from typing import Optional | |
| import base64 | |
| from passlib.context import CryptContext | |
| from datetime import datetime, timedelta | |
| import jwt | |
| from jwt import PyJWTError | |
| from pydantic import BaseModel |
| assumption: | |
| /etc/openldap/ldap.conf is correct: | |
| SASL_NOCANON on | |
| URI ldaps://ipa.foo.com | |
| BASE dc=foo,dc=com | |
| TLS_CACERT /etc/ipa/ca.crt | |
| check LDAP: |
| server: | |
| ########################################################################### | |
| # BASIC SETTINGS | |
| ########################################################################### | |
| # Time to live maximum for RRsets and messages in the cache. If the maximum | |
| # kicks in, responses to clients still get decrementing TTLs based on the | |
| # original (larger) values. When the internal TTL expires, the cache item | |
| # has expired. Can be set lower to force the resolver to query for data | |
| # often, and not trust (very large) TTL values. | |
| cache-max-ttl: 86400 |
