| #!/bin/bash | |
| # | |
| # add_user.sh: Add user to LDAP | |
| # Author: Nick Sabine | |
| # | |
| # Defaults | |
| LDAP_BASE="dc=ORG,dc=local" | |
| LDAP_ACCOUNTS_DN="ou=people,${LDAP_BASE}" | |
| LDAP_USER_GROUP="cn=user_group,ou=groups,${LDAP_BASE}" |
WARNING: if you have not done it, already: do not buy that crappy pinephone pine64. despite the hardware related limitations, you will hardly find any linux distribution that fits. the pine keyboard needs additional driver and setup before you can use it, otherwse it's not possible to find the "-" key for example.
HANDS OFF!
| ## ~/.twmrc | |
| # NoGrabServer | |
| RestartPreviousState | |
| DecorateTransients | |
| NoRaiseOnMove | |
| NoRaiseOnResize | |
| Zoom 2 | |
| DontMoveOff | |
| NoMenuShadows |
Once in a while, you may need to cleanup resources (containers, volumes, images, networks) ...
// see: https://github.com/chadoe/docker-cleanup-volumes
$ docker volume rm $(docker volume ls -qf dangling=true)
$ docker volume ls -qf dangling=true | xargs -r docker volume rm
| global | |
| log 127.0.0.1 local2 | |
| maxconn 2048 | |
| tune.ssl.default-dh-param 2048 | |
| defaults | |
| mode http | |
| log global | |
| option httplog | |
| option dontlognull |
| # Listens on 6000-9000 for a sequence of port knocks. | |
| # Requires an explicit order of port access before opening | |
| # Current defined order is 6001,7001,8001,9000 | |
| # If another port is accessed during the sequence it must be started from the beginning | |
| listen portknock | |
| mode tcp | |
| bind *:6000-9000 | |
| stick-table type ip size 1m expire 24h store conn_cnt,gpt0 | |
| tcp-request connection track-sc0 src | |
| tcp-request connection sc-set-gpt0(0) 1 if { dst_port 6001 } { sc_get_gpt0(0) -m int lt 4 } |
So HAProxy is primalery a load balancer an proxy for TCP and HTTP. But it may act as a traffic regulator. It may also be used as a protection against DDoS and service abuse, by maintening a wide variety of statistics (IP, URL, cookie) and when abuse is happening, action as denying, redirecting to other backend may undertaken ([haproxy ddos config], [haproxy ddos])
| global | |
| log /dev/log local0 | |
| log /dev/log local1 notice | |
| chroot /var/lib/haproxy | |
| stats socket /run/haproxy/admin.sock mode 660 level admin | |
| stats timeout 30s | |
| daemon | |
| defaults | |
| log global |
| # Ansible managed | |
| global | |
| # Remote syslog servers | |
| log 10.0.102.102:514 local0 | |
| #log-send-hostname | |
| daemon | |
| chroot /var/lib/haproxy | |
| group haproxy | |
| maxconn 40000 |