| OS: Ubuntu 14.04 LTS, Apache 2.4.7, OpenSSL 1.0.1f | |
| SSL Labs: A+ (RSA2048, SHA256 certificate) | |
| Certificate: 100% | |
| Protocol Support: 95% | |
| Key Exchange: 90% | |
| Cipher Strength: 90% | |
| #### In the SSL.CONF file | |
| SSLCipherSuite AES256+EECDH:AES256+EDH:AES128+EECDH:AES128+EDH |
These are my notes basically. At first i created this gist just as a reminder for myself. But feel free to use this for your project as a starting point. If you have questions you can find me on twitter @thomasf https://twitter.com/thomasf This is how i used it on a Debian Wheezy testing (https://www.debian.org/releases/testing/)
Discuss, ask questions, etc. here https://news.ycombinator.com/item?id=7445545
| #/bin/bash | |
| #-- Author: Bhagya Silva (https://about.me/bhagyas) | |
| #-- Script to automate https://help.github.com/articles/why-is-git-always-asking-for-my-password | |
| #-- based on original code from : https://gist.github.com/m14t/3056747 | |
| REPO_URL=`git remote -v | grep -m1 '^origin' | sed -Ene's#.*(https://[^[:space:]]*).*#\1#p'` | |
| if [ -z "$REPO_URL" ]; then | |
| echo "-- ERROR: Could not identify Repo url." | |
| echo " It is possible this repo is already using SSH instead of HTTPS." | |
| exit |
This gist assumes:
Config Apache with /etc/apache2/conf-available/le.conf:
Alias /.well-known/acme-challenge/ "/var/www/html/.well-known/acme-challenge/"
<Directory "/var/www/html/">
AllowOverride None
Options MultiViews Indexes SymLinksIfOwnerMatch IncludesNoExec
Require method GET POST OPTIONS
</Directory>
| #cache_store.yml file: | |
| production: | |
| cache_store: redis_store | |
| servers: | |
| - redis://localhost | |
| database: 1 | |
| #redis.yml file: | |
| production: |
| <?php | |
| # Fill our vars and run on cli | |
| # $ php -f db-connect-test.php | |
| $dbname = 'name'; | |
| $dbuser = 'user'; | |
| $dbpass = 'pass'; | |
| $dbhost = 'host'; | |
| $link = mysqli_connect($dbhost, $dbuser, $dbpass) or die("Unable to Connect to '$dbhost'"); |
| #!/bin/bash | |
| ### VARIABLES ### \ | |
| EMAIL="" | |
| SERVER=$(hostname) | |
| MYSQL_CHECK=$(mysql -e "SHOW VARIABLES LIKE '%version%';" || echo 1) | |
| LAST_ERRNO=$(/usr/bin/mysql -e "SHOW SLAVE STATUS\G" | grep "Last_Errno" | awk '{ print $2 }') | |
| SECONDS_BEHIND_MASTER=$(/usr/bin/mysql -e "SHOW SLAVE STATUS\G"| grep "Seconds_Behind_Master" | awk '{ print $2 }') | |
| IO_IS_RUNNING=$(/usr/bin/mysql -e "SHOW SLAVE STATUS\G" | grep "Slave_IO_Running" | awk '{ print $2 }') | |
| SQL_IS_RUNNING=$(/usr/bin/mysql -e "SHOW SLAVE STATUS\G" | grep "Slave_SQL_Running" | awk '{ print $2 }') |
| #include <stdlib.h> | |
| #include <stdio.h> | |
| #include <string.h> | |
| int main(int argc, char** argv) { | |
| int max = -1; | |
| int mb = 0; | |
| char* buffer; | |
| if(argc > 1) |
| ### collectd.conf config file (Collectd 5.5) | |
| FQDNLookup true | |
| Interval 300 | |
| Timeout 2 | |
| ReadThreads 5 | |
| LoadPlugin syslog |