IPMITool

IPMI LAN Configuration from the CLI of your server root@fluffy:~# ipmitool lan set ipsrc static root@fluffy:~# ipmitool lan set ipaddr 10.0.0.99 Setting LAN IP Address to 10.0.0.99 root@fluffy:~# ipmitool lan set netmask 255.255.255.

Docker

Docker stack file :: Traefik - API enabled, behind basic auth and SSL

traefik_stack.yml This basically is a setup which redirects http to https by default. ACME enabled. The API is enabled and accessible only after basic authentication and from predefined source IP(-range)s. version: "3.7" volumes: sslcerts: driver: local traefik:

Docker

Dockerfile

Example Dockerfiles ############################################################ # Dockerfile to build Nginx Installed Containers # Based on Alpine Linux -- https://alpinelinux.org ############################################################ # Set the base image to Alpine FROM alpine # File Author / Maintainer MAINTAINER Nick Boltjes # Install Nginx RUN apk add --no-cache nginx # Remove the default Nginx configuration file RUN

security

Nginx SSL/TLS

Diffie-Hellman Since a 1024bit Diffie-Hellman group is considered not secure enough, and we use it for about every kind of secure transport, we need to create a bigger key. 4096bit sounds like a good size. This is how to regenerate our Diffie-Hellman group with

linux

virsh console <vm>

To be able to use virsh console to access a vm console directly from a KVM host, a serial port in the vm needs to be configured. Debian/Ubuntu Create a serial port Create file /etc/init/ttyS0.conf with the following content exec

linux

Postscreen

Postscreen is a brilliant piece of software that acts somewhat like a bouncer at the entrance of a nightclub; It helps keeping the trash outside and making sure the processes 'behind the door' have more time and resources to do what they need to

security

Letsencrypt auto renewal

Let’s Encrypt is a free, automated, and open certificate authority (CA), run for the public’s benefit. It is a service provided by the Internet Security Research Group. How to enable the use of Letsencrypt certificates on your site and for TLS support