Christian Hügel chuegel

## k8s-rancher-cheat-sheet.sh
# check supported k8s versions
rke config --list-version --all

# upgrade rancher via helm
helm repo update
helm get values rancher # use values below with set
helm  upgrade rancher rancher-stable/rancher \
    --set hostname=k8smgmt.xxxx.com \
    --set ingress.tls.source=secret \
    --set proxy=http://10.2.3.124:3128 \

## gist:65f10493db47786791ff44b0c44c82b6
https://dzone.com/articles/pmm-alerting-with-grafana-working-with-templated-d

## sauser.cf
use_bayes 1
skip_rbl_checks 0
dns_available yes
bayes_auto_learn 1
bayes_auto_learn_threshold_spam 5.0


use_pyzor 1
pyzor_path /usr/bin/pyzor

## btrfs-scrub
#! /bin/bash
#######################################################
# This is a helper script to be used in a systemd timer
# or cron job to scrub all mounted btrfs filessytems
#
# $Author: gbrks
# $Revision 0.1
# $Date: 2015.05.15
#
# Update email address below

## iptables.sh
#!/bin/bash
IPT="/sbin/iptables"

# Server IP
SERVER_IP="$(ip addr show eth0 | grep 'inet ' | cut -f2 | awk '{ print $2}')"

# Your DNS servers you use: cat /etc/resolv.conf
DNS_SERVER="8.8.4.4 8.8.8.8"

# Allow connections to this package servers

## clean-docker-for-mac.sh
#!/bin/bash

# Copyright 2017 Théo Chamley
# Permission is hereby granted, free of charge, to any person obtaining a copy of
# this software and associated documentation files (the "Software"), to deal in the Software
# without restriction, including without limitation the rights to use, copy, modify, merge,
# publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons
# to whom the Software is furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all copies or

## Mac SSH Autocomplete
_complete_ssh_hosts ()
{
        COMPREPLY=()
        cur="${COMP_WORDS[COMP_CWORD]}"
        comp_ssh_hosts=`cat ~/.ssh/known_hosts | \
                        cut -f 1 -d ' ' | \
                        sed -e s/,.*//g | \
                        grep -v ^# | \
                        uniq | \
                        grep -v "\[" ;

## Ansible Let's Encrypt Nginx setup
Ansible playbook to setup HTTPS using Let's encrypt on nginx.

The Ansible playbook installs everything needed to serve static files from a nginx server over HTTPS.
The server pass A rating on [SSL Labs](https://www.ssllabs.com/).

To use:
 1. Install [Ansible](https://www.ansible.com/)
 2. Setup an Ubuntu 16.04 server accessible over ssh
 3. Create `/etc/ansible/hosts` according to template below and change example.com to your domain
 4. Copy the rest of the files to an empty directory (`playbook.yml` in the root of that folder and the rest in the `templates` subfolder)

## le-renew-webroot
#!/bin/bash
# 08.02.2016: Small improvement to load all config files at once

web_service='nginx'
#config_file="/usr/local/etc/le-renew-webroot.ini"

le_path='/opt/letsencrypt'
exp_limit=30;

# Lets parse all config files at ones:
	# check supported k8s versions
	rke config --list-version --all

	# upgrade rancher via helm
	helm repo update
	helm get values rancher # use values below with set
	helm upgrade rancher rancher-stable/rancher \
	--set hostname=k8smgmt.xxxx.com \
	--set ingress.tls.source=secret \
	--set proxy=http://10.2.3.124:3128 \
	use_bayes 1
	skip_rbl_checks 0
	dns_available yes
	bayes_auto_learn 1
	bayes_auto_learn_threshold_spam 5.0


	use_pyzor 1
	pyzor_path /usr/bin/pyzor
	#! /bin/bash
	#######################################################
	# This is a helper script to be used in a systemd timer
	# or cron job to scrub all mounted btrfs filessytems
	#
	# $Author: gbrks
	# $Revision 0.1
	# $Date: 2015.05.15
	#
	# Update email address below
	#!/bin/bash
	IPT="/sbin/iptables"

	# Server IP
	SERVER_IP="$(ip addr show eth0 \| grep 'inet ' \| cut -f2 \| awk '{ print $2}')"

	# Your DNS servers you use: cat /etc/resolv.conf
	DNS_SERVER="8.8.4.4 8.8.8.8"

	# Allow connections to this package servers
	#!/bin/bash

	# Copyright 2017 Théo Chamley
	# Permission is hereby granted, free of charge, to any person obtaining a copy of
	# this software and associated documentation files (the "Software"), to deal in the Software
	# without restriction, including without limitation the rights to use, copy, modify, merge,
	# publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons
	# to whom the Software is furnished to do so, subject to the following conditions:
	#
	# The above copyright notice and this permission notice shall be included in all copies or
	_complete_ssh_hosts ()
	{
	COMPREPLY=()
	cur="${COMP_WORDS[COMP_CWORD]}"
	comp_ssh_hosts=`cat ~/.ssh/known_hosts \| \
	cut -f 1 -d ' ' \| \
	sed -e s/,.*//g \| \
	grep -v ^# \| \
	uniq \| \
	grep -v "\[" ;
	Ansible playbook to setup HTTPS using Let's encrypt on nginx.

	The Ansible playbook installs everything needed to serve static files from a nginx server over HTTPS.
	The server pass A rating on [SSL Labs](https://www.ssllabs.com/).

	To use:
	1. Install [Ansible](https://www.ansible.com/)
	2. Setup an Ubuntu 16.04 server accessible over ssh
	3. Create `/etc/ansible/hosts` according to template below and change example.com to your domain
	4. Copy the rest of the files to an empty directory (`playbook.yml` in the root of that folder and the rest in the `templates` subfolder)
	#!/bin/bash
	# 08.02.2016: Small improvement to load all config files at once

	web_service='nginx'
	#config_file="/usr/local/etc/le-renew-webroot.ini"

	le_path='/opt/letsencrypt'
	exp_limit=30;

	# Lets parse all config files at ones: