Skip to content

Instantly share code, notes, and snippets.

View grossws's full-sized avatar

Konstantin Gribov grossws

View GitHub Profile
@paskal
paskal / site.conf
Last active April 27, 2024 00:55 — forked from plentz/nginx.conf
Nginx configuration for best security and modest performance. Full info on https://terrty.net/2014/ssl-tls-in-nginx/
# read more at https://terrty.net/2014/ssl-tls-in-nginx/
# latest version on https://gist.github.com/paskal/628882bee1948ef126dd/126e4d1daeb5244aacbbd847c5247c2e293f6adf
# security test score: https://www.ssllabs.com/ssltest/analyze.html?d=terrty.net
# your nginx version might not have all directives included, test this configuration before using in production against your nginx:
# $ nginx -c /etc/nginx/nginx.conf -t
server {
# public key, contains your public key and class 1 certificate, to create:
# (example for startssl)
# $ (cat example.com.pem & wget -O - https://www.startssl.com/certs/class1/sha2/pem/sub.class1.server.sha2.ca.pem) | tee -a /etc/nginx/ssl/domain.pem > /dev/null
@lemoinem
lemoinem / ldap.conf
Last active June 15, 2016 07:01
Configurations needed to have sssd backed by an OpenLDAP with as-needed cache and OpenSSH support
base dc=ldap,dc=office
uri ldap://ldap.office
ssl start_tls
tls_cacert /etc/ssl/certs/CA.pem
@mojavelinux
mojavelinux / StartupBean.java
Created October 20, 2010 03:41
A sample CDI extension for eagerly instantiating @ApplicationScoped beans annotated @startup
@ApplicationScoped
@Startup
public class StartupBean
{
@PostConstruct
public void onStartup()
{
System.out.println("Application starting up.");
}
}