Samir Rachidi samir-plusb

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

How to add an image to a gist

Create a gist if you haven't already.

Clone your gist:

# make sure to replace `<hash>` with your gist's hash
git clone https://gist.github.com/<hash>.git # with https
git clone [email protected]:<hash>.git     # or with ssh

Let's say you start a project locally, and do some editing.

$ mkdir -p ~/git/foo && cd ~/git/foo
$ touch NEWFILE

Now you decide you want to create a new github repo and track it, but the directory is non-empty so git won't let you clone into it. You can fix this, thusly:

Problems with Let's Encrypt on ISPConfig?

Look into the following links:

https://www.howtoforge.com/community/threads/letsencrypt-renew.75020/page-2
Reconfigure Services by executing a manual update:
- https://www.howtoforge.com/community/threads/how-to-reconfigure-ispconfig-3-services-without-uninstalling.73260/
- https://www.ispconfig.org/blog/ispconfig-3-1-15p3-released-security-bugfix-release/
Tills error FAQ: https://www.howtoforge.com/community/threads/lets-encrypt-error-faq.74179/
Debugging stuff: https://www.faqforge.com/linux/debugging-ispconfig-3-server-actions-in-case-of-a-failure/

Motivation

As long as composer support in CMS is "not there yet", you need to get around somehow.

Say you want to use the (awesome) markdown library, you need a way to get it in.

How

Use a container extension with a private namespace

Loading variables from .env files in Ansible

Ansible has various ways of looking up data from outside sources, including plain text password files, CSV files and INI files. But it doesn't seem to have a lookup for .env files, as used in Laravel projects, also available for PHP, Ruby, Node.js, Python and others.

One option is to launch Ansible with the Ruby dotenv command line script... But that requires Ruby, which seems like overkill to me.

So here is a simpler solution that I use. It consists of:

The .env file itself
A small shell script that loads the .env file into environment variables - ansible-playbook.sh

	FROM debian

	RUN apt-get update && \
	apt-get install -y \
	locales && \
	rm -r /var/lib/apt/lists/*

	RUN sed -i -e 's/# en_US.UTF-8 UTF-8/en_US.UTF-8 UTF-8/' /etc/locale.gen && \
	sed -i -e 's/# de_DE.UTF-8 UTF-8/de_DE.UTF-8 UTF-8/' /etc/locale.gen && \
	dpkg-reconfigure --frontend=noninteractive locales

	#!/bin/sh

	##
	## Usage: ./ovpn-writer.sh SERVER CA_CERT CLIENT_CERT CLIENT_KEY SHARED_SECRET > client.ovpn
	##

	server=${1?"The server address is required"}
	cacert=${2?"The path to the ca certificate file is required"}
	client_cert=${3?"The path to the client certificate file is required"}
	client_key=${4?"The path to the client private key file is required"}

	from here: https://legacy.thomas-leister.de/apache-reverse-proxy-mit-ssl-support-einrichten/

	SSLProxyEngine On
	ProxyPass / https://mypage.com/en/category/blog/
	ProxyPassReverse / https://mypage.com/en/category/blog/

	#!/usr/bin/env python

	import multiprocessing
	import time
	import subprocess, os, signal, sys

	def test(s):
	while True:
	print s
	time.sleep(1.5)