| - Tune /etc/ssh/sshd_config | |
| UseDNS no # Disable DNS lookups | |
| GSSAPIAuthentication no # Disable negotation of slow GSSAPI | |
| don't forget to restart it, use a script provider to set it , or create it with veewee or snapshot it | |
| - Tune Vagrantfile | |
| vb.customize ["modifyvm", :id, "--natdnshostresolver1", "on"] |
| # Access Logs | |
| LogFormat "{ \ | |
| \"@vips\":[\"%v\"], \ | |
| \"@source\":\"%v%U%q\", \ | |
| \"@source_host\": \"%v\", \ | |
| \"@source_path\": \"%f\", \ | |
| \"@tags\":[\"Apache\",\"Access\"], \ | |
| \"@message\": \"%h %l %u %t \\\"%r\\\" %>s %b\", \ | |
| \"@fields\": { \ | |
| \"timestamp\": \"%{%Y-%m-%dT%H:%M:%S%z}t\", \ |
| # define some variables | |
| variable "aws_ubuntu_ami" { | |
| default = "ami-972444ad" | |
| } | |
| variable "aws_keypair" { | |
| default = "xxxx" | |
| } | |
| # AWS account details |
| #!/bin/bash | |
| #Vars | |
| web_service='nginx' | |
| config_path='/usr/local/letssl/' | |
| le_path='/opt/letsencrypt' | |
| exp_limit=20; | |
| #Func | |
| function check_ssl { |
| { | |
| "AWSTemplateFormatVersion": "2010-09-09", | |
| "Description": "CoreOS on EC2: http://coreos.com/docs/running-coreos/cloud-providers/ec2/", | |
| "Mappings": { | |
| "RegionMap": { | |
| "ap-northeast-1": { | |
| "AMI": "ami-f9b08ff8" | |
| }, | |
| "ap-southeast-1": { | |
| "AMI": "ami-c24f6c90" |
| #!/usr/bin/ruby | |
| require 'json' | |
| require 'net/http' | |
| require 'shellwords' | |
| require 'time' | |
| require 'uri' | |
| require 'yaml' | |
| @target_sidecar_image = YAML.load(YAML.load(`kubectl --namespace=istio-system get configmap istio-sidecar-injector -o yaml`)['data']['config'])['template'].match(/.*(eu.gcr.io\/at-artefacts\/platform-istio-proxy.*)".*/)[1] |
kops cluster config
kubeAPIServer:
authorizationMode: RBAC
authorizationRbacSuperUser: admin
oidcCAFile: /srv/kubernetes/ca.crt
oidcClientID: example
oidcGroupsClaim: groups
oidcIssuerURL: https://dex.example.com
oidcUsernameClaim: email
| server { | |
| listen 80 default; | |
| server_name ~^(www\.)?(?<domain>.+)$; | |
| root /srv/httpd/$domain/public_html/; | |
| access_log /srv/httpd/$domain/logs/access.log; | |
| location / { | |
| index index.html index.htm index.php; |
| 1. Create the KV config: | |
| docker run traefik \ | |
| storeconfig \ | |
| --consul \ | |
| --consul.prefix="traefik" \ | |
| --consul.watch \ | |
| --consul.endpoint="CONSUL_IP:8500" \ | |
| --consulcatalog=true \ | |
| --consulcatalog.endpoint="CONSUL_IP:8500" \ |
| apiVersion: extensions/v1beta1 | |
| kind: Ingress | |
| metadata: | |
| name: kibana-ingress | |
| annotations: | |
| kubernetes.io/ingress.class: traefik | |
| traefik.backend.loadbalancer.sticky: "true" | |
| ingress.kubernetes.io/rewrite-target: "/" | |
| spec: | |
| tls: |