Deploying Letsencrypt certificates with Docker.

Preparing Docker environment and configure letsencrypt

mkdir -p /srv/docker/letsencrypt/etc/
mkdir -p /srv/docker/letsencrypt/log
chmod 700 /srv/docker/letsencrypt/log
mkdir -p /srv/docker/letsencrypt/lib/webrootauth
mkdir /etc/letsencrypt/                                                         
ln -s /srv/docker/letsencrypt/etc/live/ /etc/letsencrypt/

waja / gist:4cc1e9ca87c0495397c7e51f647bd408

Last active 5 months ago

0 0 6

Deploying dehydrated for apache2 on Debian Jessie:

wget https://gist.githubusercontent.com/waja/8df78afb09691e4f383d818685f48885/raw/deploy_dehydrated.sh \
 -O /tmp/deploy_dehydrated.sh && \
 bash /tmp/deploy_dehydrated.sh <registration email>

Now you need to create /etc/dehydrated/domains.txt like documented.

waja / gist:026d4e4ddf1845b1a971fbb35b2fe941

Last active 5 months ago

0 0 2

1	# wget https://gist.githubusercontent.com/waja/d9e176f712ae6a6e4442486df80a13ba/raw/deploy_unattended-upgrades.sh -O /tmp/a && sh /tmp/a
2	apt-get -y install unattended-upgrades needrestart && \
3	cat > /etc/apt/apt.conf.d/10periodic <<EOF
4	APT::Periodic::Update-Package-Lists "1";
5	APT::Periodic::Download-Upgradeable-Packages "1";
6	APT::Periodic::AutocleanInterval "7";
7	APT::Periodic::Unattended-Upgrade "1";
8	EOF
9	sed -i 's#// "o=Debian,n=jessie"# "o=Debian,n=jessie"#' /etc/apt/apt.conf.d/50unattended-upgrades && \
10	sed -i 's#// "o=Debian,n=jessie-updates"# "o=Debian,n=jessie-updates"#' /etc/apt/apt.conf.d/50unattended-upgrades && \

waja / gist:4a5bbec1b0bd49dba11a67a4c28ed6a7

Last active 5 months ago

0 0 1

1	#!/bin/bash
2	# See http://blog.christhulhu.de/2016/06/28/amazon-kindle-fire-google-playstore-installieren-und-werbung-entfernen/
3	# Install playstore
4	adb kill-server
5	adb start-server
6	adb install com.google.android.gms-6.6.03_$1681564-036$-6603036-minAPI9.apk
7	adb install GoogleLoginService.apk
8	adb install GoogleServicesFramework.apk
9	adb shell pm grant com.google.android.gms android.permission.INTERACT_ACROSS_USERS
10	adb install com.android.vending-5.9.12-80391200-minAPI9.apk

waja / gist:43fa914e00a74a16b977636e8497e695

Last active 5 months ago

0 0 1

1	<?php
2	/*
3	##########################################################################
4	# PHP Benchmark Performance Script #
5	# © 2010 Code24 BV #
6	# #
7	# Author : Alessandro Torrisi #
8	# Author : Sergey Dryabzhinsky #
9	# Company : Code24 BV, The Netherlands #
10	# Date : July 2, 2015 #

waja / gist:8bad57019ea74d45b3a36a72e33c09eb

Last active 5 months ago

0 0 1

1	#! /bin/sh
2	### BEGIN INIT INFO
3	# Provides: syncthing
4	# Required-Start: $remote_fs $syslog
5	# Required-Stop: $remote_fs $syslog
6	# Default-Start: 2 3 4 5
7	# Default-Stop: 0 1 6
8	# Short-Description: Controls Syncthing execution
9	# Description: Used for starting the decentralized syncthing platform
10	### END INIT INFO

waja / gist:fdfd880db9b04a29aa3449d37c0b06ac

Last active 5 months ago

0 0 1

1	wget -c "https://boot.netboot.xyz/ipxe/netboot.xyz.lkrn" -O /boot/netboot.xyz.lkrn && \
2	cat > /etc/grub.d/40_custom <<EOF
3	#!/bin/sh
4	exec tail -n +3 \$0
5	menuentry 'netboot.xyz' {
6	set root='hd0,msdos1'
7	linux16 /netboot.xyz.lkrn
8	}
9	EOF
10	update-grub

waja / gist:e518bc6006ad424b957fdd8832bb5306

Last active 5 months ago

0 0 1

New location

Head over to https://github.com/waja/debian-update-cheatsheets/blob/jessie2stretch/jessie2stretch.sh

waja / gist:adf8a6ca1b6646989033f06b24d7f53a

Last active 5 months ago

0 0 1

1	#!/bin/sh
2	MYSQLADMIN_CFG="/etc/mysql/mariadb.conf.d/90-mysqladmin.cnf"
3	# generate password
4	PASS=$(perl -e 'print map{("a".."z","A".."Z",0..9)[int(rand(62))]}(1..16)');
5	# adjust /etc/mysql/debian.cnf (used as defaults file by system scripts)
6	sed -i "s/^password =.*$/password = ${PASS}/" /etc/mysql/debian.cnf
7	sed -i "s/^user =.*$/user = debian-sys-maint/" /etc/mysql/debian.cnf
8	# create config file for mysqladmin itself (maybe not needed)
9	umask 066
10	cat > ${MYSQLADMIN_CFG} <<EOF

waja / gist:aebd5e7b92b94ac08596c096801743e0

Last active 5 months ago

0 0 3

1	#!/bin/bash
2	# wget https://gist.githubusercontent.com/waja/d0995072b54b4ab5cb2b5e9ab9962543/raw/deploy_icinga2_agent_hw.sh -O /tmp/b && bash /tmp/b
3
4	. /etc/os-release
5
6	if [ "$(systemd-detect-virt)" == "none" ]; then
7	modprobe ipmi_si && modprobe ipmi_devintf && \
8	apt-get install -y --no-install-recommends -t ${VERSION_CODENAME}-backports freeipmi-tools libipc-run-perl pciutils && \
9	echo "nagios ALL=(root) NOPASSWD: /usr/sbin/ipmi-sensors, /usr/sbin/ipmi-sel, /usr/sbin/ipmi-fru, /usr/sbin/ipmi-dcmi" > /etc/sudoers.d/check_ipmi_sensor && \
10	echo "nagios ALL=(root) NOPASSWD: /usr/sbin/smartctl" > /etc/sudoers.d/check_smart && \