paulcalabro

FROM busybox:1.36.1-uclibc as busybox
FROM cloudflare/cloudflared:2023.8.2
COPY --from=busybox /bin/sh /bin/sh
COPY --from=busybox /bin/cat /bin/cat
ENTRYPOINT [ "/bin/sh", "-c", "export TUNNEL_TOKEN=$(cat /run/secrets/tunnel_prod_token) ;  cloudflared --no-autoupdate tunnel run" ]

paulcalabro

How to create a self-signed SSL Certificate with SubjectAltName(SAN)

After Chrome 58, self-signed certificate without SAN is not valid anymore.

Step 1: Generate a Private Key

openssl genrsa -des3 -out example.com.key 2048

Step 2: Generate a CSR (Certificate Signing Request)

paulcalabro

Adjusting child processes for PHP-FPM (Nginx)

When setting these options consider the following:

• How long is your average request?
• What is the maximum number of simultaneous visitors the site(s) get?
• How much memory on average does each child process consume?

Determine if the max_children limit has been reached.

• sudo grep max_children /var/log/php?.?-fpm.log.1 /var/log/php?.?-fpm.log

paulcalabro

#!/usr/bin/env python


import pickle
import sys

if __name__ == '__main__':
    argv = sys.argv
    if len(argv) <= 1:
        print 'Specify pickle file as parameter.'

paulcalabro

/**
 * Creates a read/writable property which returns a function set for write/set (assignment)
 * and read/get access on a variable
 *
 * @param {Any} value initial value of the property
 */
function createProperty(value) {
    var _value = value;

    /**

paulcalabro

#!/bin/bash

## List all manually installed packages on a debian/ubuntu system
## manually installed means:
##   1. not pre-installed with the system
##   2. not marked auto-installed by apt (not dependencies of other
##      packages)
## Note: pre-installed packages that got updated still needs to be
##   filtered out.

paulcalabro

set http or socks proxy environment variables

# set http proxy
export http_proxy=http://PROXYHOST:PROXYPORT

# set http proxy with user and password
export http_proxy=http://USERNAME:PASSWORD@PROXYHOST:PROXYPORT

# set http proxy with user and password (with special characters)

paulcalabro

#!/usr/bin/env python
"""
Clone all public and private repositories from a GitHub user or organization.

Copyright (c) 2018 Yuriy Guts

usage: github-clone-all.py [-h] [--auth-user AUTH_USER]
                           [--auth-password AUTH_PASSWORD] [--clone-user USER]
                           [--clone-org ORG]

paulcalabro

See here

Please go to Enable Docker Remote API with TLS client verification.

Old content:

docker-auth.js Generate Certs

Troubleshooting

paulcalabro

Enable Docker Remote API with TLS client verification

Docker's Remote API can be secured via TLS and client certificate verification.
First of all you need a few certificates and keys:

• CA certificate
• Server certificate
• Server key
• Client certificate
• Client key

Create certificate files