Carmine DiMascio cdimascio

## create_user.sh
# start the mongo shell, then set to the appropriate db and create a user
# in this case, create a user with dbadmin, and read write access roles
use my_db
db.createUser( {  user: "my_user", pwd: "MyP@ssw0rd", roles: [ { role: "readWrite", db: "my_db"}, { role: "dbAdmin", db: "my_db" } ] })

## mongodump
mongodump --host your-hostname --port your-port --ssl --sslAllowInvalidCertificates --db=your-db-name --archive=./ep-ao-dump -u admin -p your-password --authenticationDatabase admin

## gist:f55b4d45a0772f96a6eb455c8ba294b7
openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /tmp/tls.key -out /tmp/tls.crt -subj "/CN=example.domain.com"
kubectl create secret tls example --key /tmp/tls.key --cert /tmp/tls.crt # example is the ingress secret key

## Count connections to MongoDB by IP address
# Replace mongodb.log with your mongodb log
cat mongodb.log | grep "syslog" | cut -d " " -f 6 | sort | uniq -c | sort -rn

## kong
1. Kong default config https://github.com/Kong/kong/blob/master/kong.conf.default


2. Then modify
pg_host =            # The PostgreSQL host to connect to.
pg_port = 60335                  # The port to connect to.
pg_user = kong                  # The username to authenticate if required.
pg_password =                  # The password to authenticate if required.
pg_database = kong              # The database name to connect to.

## gist:bded6a90aa61ba3fa8bbd648fc4f3262
ngrok http -bind-tls=true localhost:3000

## install s3 creds into elasticsearch
#!/bin/bash

./bin/elasticsearch-keystore create
echo 'XXX' | ./bin/elasticsearch-keystore add --stdin s3.client.default.access_key
echo 'XXX' | ./bin/elasticsearch-keystore add --stdin s3.client.default.secret_key

## .bash
timeout 300 bash -c 'while [[ "$(curl -s -o /dev/null -w ''%{http_code}'' localhost:9000)" != "200" ]]; do sleep 5; done' || false

## gist:f18958261dbbc9d004954dac55f7e27f
ip addr
ss -pna | grep LISTEN

## aws_set_role_mfa.bash
#!/bin/bash

role_arn="<your_role_arn>"
mfa_arn="<your_mfa_arn>"
session_id=`date +%s000`
# export AWS_DEFAULT_REGION="us-east-2"
echo "MFA:"

read token_code
cmd=$(aws sts assume-role --role-arn "${role_arn}" --role-session-name "${session_id}"  --serial-number "${mfa_arn}" --token-code "${token_code}" --query '[Credentials.AccessKeyId,Credentials.SecretAccessKey,Credentials.SessionToken]' --output text)
	# start the mongo shell, then set to the appropriate db and create a user
	# in this case, create a user with dbadmin, and read write access roles
	use my_db
	db.createUser( { user: "my_user", pwd: "MyP@ssw0rd", roles: [ { role: "readWrite", db: "my_db"}, { role: "dbAdmin", db: "my_db" } ] })
	openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /tmp/tls.key -out /tmp/tls.crt -subj "/CN=example.domain.com"
	kubectl create secret tls example --key /tmp/tls.key --cert /tmp/tls.crt # example is the ingress secret key
	# Replace mongodb.log with your mongodb log
	cat mongodb.log \| grep "syslog" \| cut -d " " -f 6 \| sort \| uniq -c \| sort -rn
	1. Kong default config https://github.com/Kong/kong/blob/master/kong.conf.default


	2. Then modify
	pg_host = # The PostgreSQL host to connect to.
	pg_port = 60335 # The port to connect to.
	pg_user = kong # The username to authenticate if required.
	pg_password = # The password to authenticate if required.
	pg_database = kong # The database name to connect to.
	#!/bin/bash

	./bin/elasticsearch-keystore create
	echo 'XXX' \| ./bin/elasticsearch-keystore add --stdin s3.client.default.access_key
	echo 'XXX' \| ./bin/elasticsearch-keystore add --stdin s3.client.default.secret_key
	#!/bin/bash

	role_arn="<your_role_arn>"
	mfa_arn="<your_mfa_arn>"
	session_id=`date +%s000`
	# export AWS_DEFAULT_REGION="us-east-2"
	echo "MFA:"

	read token_code
	cmd=$(aws sts assume-role --role-arn "${role_arn}" --role-session-name "${session_id}" --serial-number "${mfa_arn}" --token-code "${token_code}" --query '[Credentials.AccessKeyId,Credentials.SecretAccessKey,Credentials.SessionToken]' --output text)