hilt86

from network import LoRa
import socket
import binascii
import struct
import time
import pycom
from machine import Pin
import machine
from machine import Timer

hilt86

1. certbot certonly --preferred-challenges=dns --manual -d vpn.blah.com --manual-public-ip-logging-ok --logs-dir . --work-dir . --config-dir .
2. remove old certs + keys on router
3. copy priv key and pcert to router
4. /interface sstp-server server set certificate=none then `/interface sstp-server server set certificate=realcert'

Credit to https://github.com/Disassembler0/mikrotik-scripts/blob/master/sstp-lets-encrypt/sstp-cert-upload.sh

hilt86

Copy Heroku config vars from one app to another

export

heroku config -s -a existing-heroku-app > config.txt

import

cat config.txt | tr '\n' ' ' | xargs heroku config:set -a new-heroku-app

Stolen from Emir Karşıyakalı

hilt86

Find which port a MAC address is on

First find out what the MAC address is (CRS109)

/ip dhcp-server lease print

Then match MAC to port (CRS-328)

/interface ethernet switch host print

hilt86

Useful security related commands

Prints the SHA fingerprint of a certificate

openssl x509 -noout -fingerprint -sha256 -inform pem -in cert.crt

hilt86

Restart services using Ansible ad-hoc commands

ansible -m systemd -a "name=metricbeat state=stopped" webservers --become

hilt86

SSH tips and tricks

port forward port 3389 on remote network to localhost:3389

ssh -L 3389:10.10.10.1:3389 sshServer

hilt86

"noauth" argument prevents the client expecting the server to provide a password to authenticate itself

/usr/local/sbin/sstpc --log-stderr --cert-warn --user username --password "badass" vpn.example.com:port usepeerdns require-mschap-v2 noauth noipdefault defaultroute refuse-eap noccp

hilt86

 kubectl -n kube-system create serviceaccount tiller
 kubectl create clusterrolebinding tiller --clusterrole cluster-admin --serviceaccount=kube-system:tiller
 helm init --service-account=tiller

hilt86

docker run -d --cap-add=IPC_LOCK -p 127.0.0.1:8200:8200 -v vault:/vault -e 'VAULT_LOCAL_CONFIG={"backend": {"file": {"path": "/vault/file"}}, "default_lease_ttl": "168h", "listener":{"tcp":{"address":"0.0.0.0:8200","tls_disable":1}}}", max_lease_ttl": "720h"}' -e 'VAULT_UI=TRUE' vault server