Skip to content

Instantly share code, notes, and snippets.

View ams0's full-sized avatar
🏠
Working from home

Alessandro Vozza ams0

🏠
Working from home
View GitHub Profile

Azure Active Directory (AAD) Auth

This gist assumes a working Azure AD (not Azure AD-DS is already up and fully configured) This gist assumes working DNS / name resolution on your internal network.

this gist is part of this series

Create App Registrations

All of these steps will be done in the Azure Portal AAD UI

  1. Select App Registration from the nav bar
@tomconte
tomconte / containerd-certificate-ds.yaml
Last active May 15, 2024 06:31
This is a Kubernetes DaemonSet definition that will install a custom certificate on the nodes and restart containerd. This is useful if your private registry is protected using a self-signed certificate. Not tested in production.
apiVersion: v1
kind: ConfigMap
metadata:
name: trusted-ca
namespace: kube-system
data:
ca.crt: |+
-----BEGIN CERTIFICATE-----
MIIFkTCCA3mgAwIBAgIUCXaMcLg8teiGZ7o0dIQRIOdHEA8wDQYJKoZIhvcNAQEL
BQAweDELMAkGA1UEBhMCRlIxDDAKBgNVBAgMA04vQTEMMAoGA1UEBwwDTi9BMSAw
@mydiemho
mydiemho / RestoreAppleM1.md
Last active May 11, 2023 13:26
Apple M1 MacBook Support
@nileshtrivedi
nileshtrivedi / home-server.md
Last active June 1, 2024 00:11
Home Server setup: Raspberry PI on Internet via reverse SSH tunnel

Raspberry Pi on Internet via reverse SSH tunnel

HackerNews discussed this with many alternative solutions: https://news.ycombinator.com/item?id=24893615

I already have my own domain name: mydomain.com. I wanted to be able to run some webapps on my Raspberry Pi 4B running perpetually at home in headless mode (just needs 5W power and wireless internet). I wanted to be able to access these apps from public Internet. Dynamic DNS wasn't an option because my ISP blocks all incoming traffic. ngrok would work but the free plan is too restrictive.

I bought a cheap 2GB RAM, 20GB disk VM + a 25GB volume on Hetzner for about 4 EUR/month. Hetzner gave me a static IP for it. I haven't purchased a floating IP yet.

@DevOpsFu
DevOpsFu / main.tf
Created February 26, 2020 17:59
Terraform and Linkerd
resource "tls_private_key" "trustanchor_key" {
algorithm = "ECDSA"
ecdsa_curve = "P256"
}
resource "tls_self_signed_cert" "trustanchor_cert" {
key_algorithm = tls_private_key.trustanchor_key.algorithm
private_key_pem = tls_private_key.trustanchor_key.private_key_pem
validity_period_hours = 87600
is_ca_certificate = true
@noelbundick
noelbundick / LICENSE
Created December 15, 2018 23:18
Secure code execution via ARM template and Azure Container Instances
MIT License
Copyright (c) 2018 Noel Bundick
Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
in the Software without restriction, including without limitation the rights
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
copies of the Software, and to permit persons to whom the Software is
furnished to do so, subject to the following conditions:
{
"$schema": "https://schema.management.azure.com/schemas/2015-01-01/deploymentTemplate.json#",
"contentVersion": "1.0.0.0",
"parameters": {
"resourceName": {
"type": "String",
"metadata": {
"description": "The name of the Managed Cluster resource."
}
},
@noelbundick
noelbundick / README.md
Last active June 14, 2018 20:56
acs-aks-migration
@brusMX
brusMX / obtainAzureSP.sh
Last active November 17, 2017 00:37
Interactive command to obtain an Azure Service Principal. Requires Azure CLI 2.0 and jq-1.5
#!/bin/bash
# Interactively create an Azure Service Principal for any of your subscriptions
# Author: Bruno Medina (@brusmx)
# Requirements:
# - Azure Cli 2.0
# - jq-1.5
#
# Example of usage:
# ./obtainSP.sh
ROLE="Contributor"
@ams0
ams0 / devops.meetup.amsterdam.list.1
Last active December 11, 2015 01:48
DevOps Meetup shopping list
Pre:
- clear agenda, presentation, beamer, display adapters
- road signs
- print tags
- reminder email on wednesday
During:
- bring pro cameras