df-a

$UpdateSession = New-Object -ComObject Microsoft.Update.Session
$UpdateSearcher = $UpdateSession.CreateupdateSearcher()
$Updates = @($UpdateSearcher.Search("IsHidden=0 and IsInstalled=0").Updates)
$Updates | Select-Object Title

df-a

# config to don't allow the browser to render the page inside an frame or iframe
# and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
# if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
# https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
add_header X-Frame-Options SAMEORIGIN;

# when serving user-supplied content, include a X-Content-Type-Options: nosniff header along with the Content-Type: header,
# to disable content-type sniffing on some browsers.
# https://www.owasp.org/index.php/List_of_useful_HTTP_headers
# currently suppoorted in IE > 8 http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx

df-a

ALERT

Please submit new entries as pull requests to https://github.com/jauderho/nts-servers. This gist will eventually just point to the repo.

Initial source: https://docs.ntpsec.org/latest/NTS-QuickStart.html

Use this to verify connectivity (h/t @cadusilva)

chronyd -Q -t 3 'server NTP_SERVER_HERE iburst nts maxsamples 1'

df-a

Google Public NTP [AS15169]:

time.google.com

time1.google.com

time2.google.com

time3.google.com

df-a

To fetch Git modules, you can use the following command:

git submodule update --init --recursive

This command will initialize and update any submodules defined in the Git repository. It will clone the submodules if they have not already been cloned, or update them to the latest commit if they have already been cloned.

If the repository has nested submodules, you may need to use the --recursive option to ensure that all submodules are updated.

df-a

#!/usr/bin/env bash
set -e

# names of latest versions of each package
export NGINX_VERSION=1.13.5
export VERSION_ZLIB=zlib-1.2.11
export VERSION_PCRE=pcre-8.41
export VERSION_LIBRESSL=libressl-2.6.1
export VERSION_NGINX=nginx-$NGINX_VERSION

df-a

OpenSSL Directory Structure

/opt
    └── ssl
        ├── bin
        ├── include
        │   └── openssl
        ├── lib64
 │   ├── engines-3

df-a

The SSH keepalive value determines how often an idle SSH connection will send a message to the remote host to keep the connection alive. If the connection is idle for longer than the keepalive value, the connection will be closed.

To prevent Ansible from hanging due to idle SSH connections, it is recommended to set an appropriate SSH keepalive value. A common value for this parameter is 60 seconds. This value can be set in the ssh_args parameter in your Ansible inventory file, like this:

ansible_ssh_common_args='-o ServerAliveInterval=60'

Alternatively, you can set this value in your SSH configuration file (~/.ssh/config) using the following syntax:

df-a

SSH Keys

Resources

• Generate SSH Keys
• Managing Multiple SSH Keys
• Connecting to GitHub with SSH
• Unix: How To Generate ed25519 SSH Key

---

df-a

# found here
# https://raghuvirkasturi.com/yearly-ritual/
worker_processes    auto;
user                [whatever user you use];

events {
  worker_connections 1024;
}

http {