krisek

admin:
  access_log_path: /dev/stdout
  address:
    socket_address:
      address: 127.0.0.1
      protocol: TCP
      port_value: 9901
static_resources:
  listeners:
  - name: listener_0

krisek

# Create a tag for which department someone is in
tag department
  id 1000                 # arbitrary, but must be unique
  enum 100 spoke          # has no meaning to filter, but used in UI to offer a selection
  enum 200 hub
;

# Whitelist only IPv4 (/ARP) and IPv6 traffic and allow only ZeroTier-assigned IP addresses
drop                      # drop cannot be overridden by capabilities
  not ethertype ipv4      # frame is not ipv4

krisek

#!/usr/bin/env python3
"""
Matrix Webhook.

Post a message to a matrix room with a simple HTTP POST
"""

import asyncio
import json
import os

krisek

apiVersion: autoscaling.k8s.io/v1
kind: VerticalPodAutoscaler
metadata:
  name: kyverno
spec:
  targetRef:
    apiVersion: "apps/v1"
    kind:       Deployment
    name:       kyverno
  updatePolicy:

krisek

Most important connectivity test and network discovery tools

Netcat

Package: netcat-openbsd

Connect to a server on a given IP and port (telnet on steroids)

nc 10.10.2.1 80

krisek

import json
import requests
import os
import re
import hashlib

templates = {
   'slack': {},

   'teams': {

krisek

import logging
from typing import Dict
from typing import List

import boto3
import neo4j

from .util import get_botocore_config
from cartography.util import aws_handle_regions
from cartography.util import run_cleanup_job

krisek

##
# You should look at the following URL's in order to grasp a solid understanding
# of Nginx configuration files in order to fully unleash the power of Nginx.
# https://www.nginx.com/resources/wiki/start/
# https://www.nginx.com/resources/wiki/start/topics/tutorials/config_pitfalls/
# https://wiki.debian.org/Nginx/DirectoryStructure
#
# In most cases, administrators will remove this file from sites-enabled/ and
# leave it as reference inside of sites-available where it will continue to be
# updated by the nginx packaging team.

krisek

groups:
- name: node_exporter_alerts
  rules:
  - alert: Node down
    expr: up{job="monitoring-pi"} == 0
    for: 2m
    labels:
      severity: warning
    annotations:
      title: Node {{ $labels.instance }} is down

krisek

# Create a tag for which department someone is in
tag department
  id 10                 # arbitrary, but must be unique
  enum 100 spoke          # has no meaning to filter, but used in UI to offer a selection
  enum 200 hub
  enum 300 super
;

# Whitelist only IPv4 (/ARP) and IPv6 traffic and allow only ZeroTier-assigned IP addresses
drop                      # drop cannot be overridden by capabilities