This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| # SSH server settings, in line with https://stribika.github.io/2015/01/04/secure-secure-shell.html | |
| # Before using, change myhosts to your hosts' nickname and myuser to your username (two instances! make sure you replace both or you'll be locked out of ssh!) | |
| - hosts: myhosts | |
| become: true | |
| remote_user: myuser | |
| tasks: | |
| # Key exchange, ciphers and MACs | |
| - lineinfile: dest=/etc/ssh/sshd_config regexp='^KexAlgorithms' line='KexAlgorithms curve25519-sha256@libssh.org,diffie-hellman-group-exchange-sha256' | |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This is a GitLab CI configuration to build the project as a docker image | |
| # The file is generic enough to be dropped in a project containing a working Dockerfile | |
| # Author: Florent CHAUVEAU <florent.chauveau@gmail.com> | |
| # Mentioned here: https://blog.callr.tech/building-docker-images-with-gitlab-ci-best-practices/ | |
| # do not use "latest" here, if you want this to work in the future | |
| image: docker:20 | |
| stages: | |
| - build |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| stages: | |
| - build | |
| - test | |
| - deploy | |
| variables: | |
| # from https://storage.googleapis.com/kubernetes-release/release/stable.txt | |
| K8S_STABLE_VERSION_URL: https://storage.googleapis.com/kubernetes-release/release/v1.10.4/bin/linux/amd64/kubectl | |
| build: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| - name: installs fail2ban on ansible hosts | |
| hosts: fail2ban-hosts | |
| become: yes | |
| tasks: | |
| - name: install apt fail2ban packages | |
| apt: | |
| name: "{{ item }}" | |
| state: latest |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [{ | |
| "name": "AC" | |
| }, { | |
| "name": "AC PROPULSION" | |
| }, { | |
| "name": "ACURA" | |
| }, { | |
| "name": "A.D. TRAMONTANA" | |
| }, { | |
| "name": "ALFA ROMEO" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [ | |
| "Abarth", | |
| "Alfa Romeo", | |
| "Aston Martin", | |
| "Audi", | |
| "Bentley", | |
| "BMW", | |
| "Bugatti", | |
| "Cadillac", | |
| "Chevrolet", |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: v1 | |
| kind: ConfigMap | |
| metadata: | |
| name: nginx-conf | |
| data: | |
| nginx.conf: | | |
| user nginx; | |
| worker_processes 3; | |
| error_log /var/log/nginx/error.log; | |
| events { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| server { | |
| listen 80; | |
| server_name cdn.domain.org; | |
| root /usr/share/nginx/cdn | |
| location / { | |
| proxy_pass http://domain.org; | |
| proxy_set_header Host $host; | |
| proxy_set_header True-Client-IP $remote_addr; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| apiVersion: v1 | |
| kind: Service | |
| metadata: | |
| name: zk | |
| labels: | |
| app: zk | |
| tier: backend | |
| spec: | |
| # Lookup: dig -t srv _client._tcp.zk.default.svc.cluster.local | |
| ports: |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| - hosts: all | |
| tasks: | |
| - name: Install prerequisites for Docker repository | |
| apt: | |
| name: ['apt-transport-https', 'ca-certificates', 'curl', 'gnupg2', 'software-properties-common'] | |
| update_cache: yes | |
| - name: Add Docker GPG key | |
| apt_key: |
NewerOlder