JonTheNiceGuy

Mapping the FortiGate Timezone Field with the TZ Database

This yml file shows the relationship between the tz_database values for regions (e.g. Europe/London) and the Fortigate "system global timezone" value (e.g. 25 = Europe/London).

The TZ Database names are taken from a Wikipedia entry on TZ values, and the Fortigate values are found by me splitting the strings (on comma's) from when I have tried auto-completing the timezone field on a Fortigate model.

It is not a perfect list! Updates welcome!!

JonTheNiceGuy

Manipulating yaml tree data using Ansible

I sometimes need to convert from a dictionary tree (like in data.yml) to a specific json formatted output file using Ansible.

In this case, I've used a combination of set_fact, a for loop and a combine filter to build my output. I'm also using a regex_search to make sure I'm only getting records where the data I'm interested in is there!

Hope it's useful to people!

JonTheNiceGuy

---
- hosts: localhost
  vars:
  - dnsname: your.dns.name
  - tmppath: "./tmp/"
  - crtpath: "{{ tmppath }}{{ dnsname }}.crt"
  - pempath: "{{ tmppath }}{{ dnsname }}.pem"
  - csrpath: "{{ tmppath }}{{ dnsname }}.csr"
  - pfxpath: "{{ tmppath }}{{ dnsname }}.pfx"
  - private_key_password: "password"

JonTheNiceGuy

Redirector

This script is a simple script to redirect you from your site to other locations. It's a very basic short-link generator.

JonTheNiceGuy

Cachet on Docker with Ansible

• Cachet is from https://github.com/cachethq/cachet.
• The docker file is based on https://github.com/cachethq/docker.
• The ansible is based on a blog here: https://www.ansible.com/blog/how-i-switched-from-docker-compose-to-pure-ansible (thanks to @mohclips)
• The HTTPS on nginx is based on this gist: https://gist.github.com/mattiaslundberg/ba214a35060d3c8603e9b1ec8627d349
• Some of the nginx config is based on this too: https://gist.github.com/JonTheNiceGuy/aaecbfa50605ddd3399b74b933ba7760

This is not a "best-practice" example of doing any of these tasks. The nginx stuff could probably do with being moved into roles, and I could probably move the variables into a file handling that... however, as a POC, it works.

JonTheNiceGuy

The following scripts are tools I use on a regular basis to run simple activities on the K5 platform. They can fairly easily be modified to work with OpenStack (and, probably in many cases, will work without modifications).

These are all written by me in my spare time, and are released under the WTFPL.

JonTheNiceGuy

#!/bin/bash
while ! ping -c 1 8.8.8.8 2>/dev/null >/dev/null ; do
  echo Waiting for network...
done

ssh -X bloggsf@localhost -i ~/.ssh/gmm.id_rsa /opt/google/musicmanager/google-musicmanager

JonTheNiceGuy

runas for Unix-like Systems

Download these two files, and place them in /usr/local/bin. Chmod them to 755, and chown them to root:root.

Then, perform the following command:

runas -u someuser command

or

JonTheNiceGuy

- name: Create Users on W2012 Server
  raw: if (dsquery user -samid "{{item.key}}") {"Not Required"} else { New-ADUser -SamAccountName "{{item.key}}" -UserPrincipalName "{{item.key}}@{{windows_domain}}" -Name "{{item.value.name}}" -DisplayName "{{item.value.name}}" -GivenName "{{item.value.name.split(" ")[1]}}" -Surname "{{item.value.name.split(" ")[-1]}}" -ChangePasswordAtLogon $true -Enabled $true -AccountPassword (ConvertTo-SecureString "{{default_password}}" -AsPlainText -Force) }
   
- name: Create Users on W2008 Server with Domain Admin
  raw: if (dsquery user -samid "{{item.key}}") {"Not Required"} else {dsadd user "CN={{item.key}},CN=Users,{{search_base}}" -samid "{{item.key}}" -upn "{{item.key}}@{{windows_domain}}" -display "{{item.value.name|default("Undefined")}} {{item.value.role|default("")}}" -fn "{{item.value.name.split(" ")[1]|default("Undefined")}}" -ln "{{item.value.name.split(" ")[-1]|default("Undefined")}}" -mustchpwd yes -pwd "{{default_password}}" -memberof "CN=Domain Admins,CN=Users,{{s

JonTheNiceGuy

TT-RSS Updater

I've been a somewhat casual user of TT-RSS for several years, since Google Reader shut down (basically), but I only noticed this week that there had been no updates.

Turns out that there have been no packaged updates for a while... Two years in fact. Turns out that this forum post provided a script for performing updates, but it only pulled a couple of lines of config.

This updated script fixes that (with the config file 26).