gilangvperdana

apiVersion: v1
kind: ConfigMap
metadata:
  name: imagecleanupconfig
  namespace: default
  labels:
    component: imagecleanup
data:
  # removes all images unused by a running container
  cronjobs: 0 0 * * * crictl rmi --prune 2>&1

gilangvperdana

General

• Project opensource from prometheus-ssh-exporter
• Overview :

Version 1: Docker Run

docker run -d -p 999:9999 -v /run/utmp:/run/utmp flor0/prometheus-ssh-exporter

gilangvperdana

General

Protect your Ubuntu Server with Fail2ban

Installation

apt install -y fail2ban

Check Status Ban

• Default jail name is sshd

gilangvperdana

General

• If you want to see your client website region, you can install GeoIP module on Nginx
• The project I've worked on, using (Filebeat, Logstash, Elasticsearch) after GeoIP is installed then visualized using Kibana or Grafana :

Installation

sudo apt update
sudo apt install libnginx-mod-http-geoip

gilangvperdana

version: "3"

services:
  routeros-6-47:
    image: evilfreelancer/docker-routeros:latest
    restart: unless-stopped
    cap_add:
      - NET_ADMIN
    devices:
      - /dev/net/tun

gilangvperdana

Generate Certificate for Mikrotik

openssl genrsa -des3 -out ca.key 4096
openssl req -new -x509 -days 3650 -key ca.key -out ca.crt
openssl genrsa -des3 -out server.key 4096
openssl req -new -key server.key -out server.csr
openssl x509 -req -days 3650 -in server.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out server.crt
openssl genrsa -des3 -out client.key 4096
openssl req -new -key client.key -out client.csr
openssl x509 -req -days 3650 -in client.csr -CA ca.crt -CAkey ca.key -set_serial 01 -out client.crt

gilangvperdana

How to add an image to a gist

1. Create a gist if you haven't already.
2. Clone your gist:

   # make sure to replace `<hash>` with your gist's hash
   git clone https://gist.github.com/<hash>.git # with https
   git clone git@gist.github.com:<hash>.git     # or with ssh

gilangvperdana

Force Reboot Ubuntu from CLI

If you have a problem when you can't reboot or shutdown your VM with shutdown -r now reboot now etc, you can force reboot with this command :

sudo -i
echo s > /proc/sysrq-trigger
echo u > /proc/sysrq-trigger
echo b > /proc/sysrq-trigger

gilangvperdana

#!/bin/bash

#Harbor on Ubuntu 18.04

#Prompt for the user to ask if the install should use the IP Address or Fully Qualified Domain Name of the Harbor Server
PS3='Would you like to install Harbor based on IP or FQDN? '
select option in IP FQDN
do
    case $option in
        IP)

gilangvperdana

General

If you need to automate a NGINX block template, you can use this script.

• add-tcpudcp.sh -> Generate TCP/UDP Nginx block.
• del-tcpudp.sh -> Delete TCP/UDP Nginx block.
• add-dnsNginx.sh -> Add HTTPS Nginx block.
• del-dnsNginx.sh -> Delete HTTPS Nginx block.

This script just Nginx block reverse proxy template, if you need an unique template of Nginx, you must customize that script.