Skip to content

Instantly share code, notes, and snippets.

View selivan's full-sized avatar
:octocat:
meow

Pavel Selivanov selivan

:octocat:
meow
66 followers · 4 following
View GitHub Profile
@mtigas
mtigas / gist:952344
Last active April 3, 2024 07:57
Mini tutorial for configuring client-side SSL certificates.

Client-side SSL

For excessively paranoid client authentication.

Updated Apr 5 2019:

because this is a gist from 2011 that people stumble into and maybe you should AES instead of 3DES in the year of our lord 2019.

some other notes:

@drax68
drax68 / gist:2412600
Created April 18, 2012 10:01
Zabbix phone notification
Шаг №1 — Пререквизиты. Ставим festival и pjsip
sudo aptitude install festival
Загружаем и собираем pjsip:
wget http://www.pjsip.org/release/1.10/pjproject-1.10.tar.bz2
tar xfv pjproject-1.10.tar.bz2
cd pjproject-1.10
./configure --disable-sound
@arnaud-lb
arnaud-lb / UseIndexWalker.php
Created May 15, 2012 19:27
USE INDEX / FORCE INDEX in a Doctrine2 DQL query
<?php
use Doctrine\ORM\Query\SqlWalker;
/**
* Quick hack to allow adding a USE INDEX on the query
*/
class UseIndexWalker extends SqlWalker
{
const HINT_USE_INDEX = 'UseIndexWalker.UseIndex';
@piscisaureus
piscisaureus / pr.md
Created August 13, 2012 16:12
Checkout github pull requests locally

Locate the section for your github remote in the .git/config file. It looks like this:

[remote "origin"]
	fetch = +refs/heads/*:refs/remotes/origin/*
	url = git@github.com:joyent/node.git

Now add the line fetch = +refs/pull/*/head:refs/remotes/origin/pr/* to this section. Obviously, change the github url to match your project's URL. It ends up looking like this:

@AliMD
AliMD / gist:3344523
Created August 13, 2012 22:28
All github Emoji (Smiles)

All github Emoji (Smiles)

ali.md/emoji

:bowtie: | 😄 | 😆 | 😊 | 😃 | ☺️ | 😏 | 😍 | 😘 | :kissing_face: | 😳 | 😌 | 😆 | 😁 | 😉 | :wink2: | 👅 | 😒 | 😅 | 😓

😩 | 😔 | 😞 | 😖 | 😨 | 😰 | 😣 | 😢 | 😭 | 😂 | 😲 | 😱 | :neckbeard: | 😫 | 😠 | 😡 | 😤 | 😪 | 😋 | 😷

😎 | 😵 | 👿 | 😈 | 😐 | 😶 | 😇 | 👽 | 💛 | 💙 | 💜 | ❤️ | 💚 | 💔 | 💓 | 💗 | 💕 | 💞 | 💘 | ✨

@HowardMei
HowardMei / gist:4350896
Last active May 16, 2020 16:30
python bash integration
A collection of python & shell integration attempts:
pysh:Write shell scripts in Python
https://github.com/yunabe/pysh
lshell:function limited shell
https://github.com/ghantoos/lshell
sh:similar to plumbum but has builtin features
https://github.com/amoffat/sh
@davisford
davisford / gist:5039064
Last active February 9, 2022 13:39
git clone into non-empty directory

Let's say you start a project locally, and do some editing.

$ mkdir -p ~/git/foo && cd ~/git/foo
$ touch NEWFILE

Now you decide you want to create a new github repo and track it, but the directory is non-empty so git won't let you clone into it. You can fix this, thusly:




  


  




    


          
    

      

        
        

          

              @jayjanssen
          

          

            
                jayjanssen
                / gist:5697813
            
            

              Created
              June 3, 2013 12:33
            

              
                Testing multicast with iperf
              
          

        

      

        

  

    
    


        



  


  

        

          
          this is a sample of output:
        

        

          
          

        

        

          
          root@percona-db-2:~# iperf -s -u -B 226.94.1.1 -i 1
        

        

          
          ------------------------------------------------------------
        

        

          
          Server listening on UDP port 5001
        

        

          
          Binding to local address 226.94.1.1
        

        

          
          Joining multicast group  226.94.1.1
        

        

          
          Receiving 1470 byte datagrams
        

        

          
          UDP buffer size:   122 KByte (default)
        

        

          
          ------------------------------------------------------------
        

  





    


  




    


          
    

      

        
        

          

              @chrisboulton
          

          

            
                chrisboulton
                / ip_blacklist.lua
            
            

              Last active
              May 23, 2024 07:53
            

              
                Redis based IP blacklist for Nginx (LUA)
              
          

        

      

        

  

    
    


        



  


  

        

          
          -- a quick LUA access script for nginx to check IP addresses against an
        

        

          
          -- `ip_blacklist` set in Redis, and if a match is found send a HTTP 403.
        

        

          
          --
        

        

          
          -- allows for a common blacklist to be shared between a bunch of nginx
        

        

          
          -- web servers using a remote redis instance. lookups are cached for a
        

        

          
          -- configurable period of time.
        

        

          
          --
        

        

          
          -- block an ip:
        

        

          
          --   redis-cli SADD ip_blacklist 10.1.1.1
        

        

          
          -- remove an ip:
        

  





    


  




    


          
    

      

        
        

          

              @denji
          

          

            
                denji
                / OCSP-generate.sh
            
            

              Last active
              February 23, 2018 06:12
            

              
                Priming the OCSP cache in Nginx
              
          

        

      

        

  

    
    


        



  


  

        

          
          #!/bin/sh
        

        

          
          ISSUER_CER=$1
        

        

          
          SERVER_CER=$2
        

        

          
          

        

        

          
          URL=$(openssl x509 -noout -ocsp_uri -in "$SERVER_CER")
        

        

          
          

        

        

          
          openssl ocsp -noverify -no_nonce -respout ocsp.resp -issuer "$ISSUER_CER" -cert "$SERVER_CER" -url "$URL"
        

        

          
          

        

        

          
          # Where "ocsp.resp" is whatever file you have configured in Nginx for the "ssl_stapling_file".