peerapach

# read more here http://tautt.com/best-nginx-configuration-for-security/

# don't send the nginx version number in error pages and Server header
server_tokens off;

# config to don't allow the browser to render the page inside an frame or iframe
# and avoid clickjacking http://en.wikipedia.org/wiki/Clickjacking
# if you need to allow [i]frames, you can use SAMEORIGIN or even set an uri with ALLOW-FROM uri
# https://developer.mozilla.org/en-US/docs/HTTP/X-Frame-Options
add_header X-Frame-Options SAMEORIGIN;

peerapach

<?xml version="1.0" encoding="UTF-8"?>
<zabbix_export>
    <version>2.0</version>
    <date>2017-09-15T04:43:45Z</date>
    <groups>
        <group>
            <name>Percona Templates</name>
        </group>
    </groups>
    <templates>

peerapach

# turn off PowerShell execution policy restrictions
Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope LocalMachine

# configure WinRM
winrm quickconfig -q
winrm set winrm/config/winrs '@{MaxMemoryPerShellMB="2048"}'
winrm set winrm/config/winrs '@{MaxConcurrentUsers="10"}'
#winrm set winrm/config/winrs '@{MaxProcessesPerShell="0"}'
#winrm set winrm/config/winrs '@{MaxShellsPerUser="0"}'
winrm set winrm/config '@{MaxTimeoutms="7200000"}'

peerapach

proxy_buffering on;

proxy_cache_path  /var/nginx/cache  levels=1:2    keys_zone=STATIC:10m   inactive=24h  max_size=1g;

limit_req_zone $binary_remote_addr zone=five_per_second:10m rate=5r/s;
limit_req_zone $binary_remote_addr zone=ten_per_one_minute:10m rate=10r/m;

server {
    listen 80;
    server_name       www.ezylinux.com;

peerapach

input {
    beats {
        port => "5044"
    }
}

filter {
    if [message] =~ /^type\,/ {
        drop { }
    }

peerapach

DEV=eth0
PORT=80


### Use SYNPROXY ###
/sbin/iptables -t raw -A PREROUTING -i $DEV -p tcp -m tcp --syn --dport $PORT -j CT --notrack         
/sbin/iptables -t mangle -A INPUT -i $DEV -p tcp -m conntrack --ctstate INVALID,UNTRACKED --dport $PORT -j SYNPROXY \
         --sack-perm --timestamp --wscale 7 --mss 1460         
/sbin/iptables -t mangle -A INPUT -i $DEV -p tcp -m conntrack --ctstate INVALID --dport $PORT -j DROP

peerapach

---
- hosts: all
  vars:
  tasks:
    - name: Install required packages
      package:
        name: "{{ item }}"
        state: present
      with_items:
        - docker

peerapach

user www-data;
worker_processes auto;
pid /run/nginx.pid;

events {
    #...
}

http {
    # ...

peerapach

apiVersion: v1
kind: Namespace
metadata:
  name: gitlab-managed-apps
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: gitlab-sa
  namespace: gitlab-managed-apps 

peerapach

{
	"all": {
		"hosts": ["example-k8s-node-3", "example-k8s-node-1", "example-k8s-node-2", "example-k8s-master-1"]
	},
	"os_metadata_kubespray_groups=kube-node,k8s-cluster,": {
		"hosts": ["example-k8s-node-3", "example-k8s-node-1", "example-k8s-node-2"]
	},
	"_meta": {
		"hostvars": {
			"example-k8s-node-3": {