Skip to content

Instantly share code, notes, and snippets.

@selivan
selivan / OCSP-generate.sh
Last active February 17, 2018 18:58 — forked from denji/OCSP-generate.sh
Priming the OCSP cache in Nginx
#!/bin/sh
ISSUER_CER=$1
SERVER_CER=$2
URL=$(openssl x509 -noout -ocsp_uri -in "$SERVER_CER")
openssl ocsp -noverify -no_nonce -respout ocsp.resp -issuer "$ISSUER_CER" -cert "$SERVER_CER" -url "$URL"
# Where “ocsp.resp” is whatever file you have configured in Nginx for the “ssl_stapling_file“.
@selivan
selivan / pornhub-noage.txt
Last active March 6, 2018 09:38
Userstyle to remove pornhub age verification
@-moz-document domain("www.pornhub.com") {
div[id="age-verification-wrapper"]{ display:none !important; }
div[id="age-verification-container"]{ display:none !important; }
div[id="verifyAgeWrapper"]{ display:none !important; }
div[id="pb_block"]{ display:none !important; }
}
#!/usr/bin/env python3
"""
Import XML configuration files using Zabbix API:
https://www.zabbix.com/documentation/3.4/manual/api/reference/configuration/import
"""
import argparse
from urllib import request
import json
import sys
from pprint import pformat
@selivan
selivan / letsencrypt-update.sh
Created June 11, 2018 13:54
Letsencrypt update certs using webroot
#!/bin/bash
DOMAINS=example.net
WEBROOT=/var/www/html
iptables -A INPUT -p tcp --dport 80 -j ACCEPT
certbot certonly --webroot --webroot-path "$WEBROOT" --register-unsafely-without-email -d "$DOMAINS"
iptables -D INPUT -p tcp --dport 80 -j ACCEPT
apache2ctl graceful
@selivan
selivan / music.yandex.ru userstyle
Last active August 11, 2018 14:15
Userstyle for music.yandex.ru - remove all shit but leave side ads. Use with https://github.com/openstyles/stylus/
@-moz-document domain("music.yandex.ru") {
.bar-below_plus {
position: absolute !important;
z-index: -100;
}
.ads-block{
display: none !important;
}
.d-overhead{
position: absolute !important;
#!/bin/bash
#set -x
function die {
echo "ERROR: $*";
exit 1
}
usage_info="Usage: $0 ca_dir
#!/bin/bash
#set -x
function die {
echo "ERROR: $*";
exit 1
}
usage_info="Usage: $0 ca_dir client|server certificate_name
@selivan
selivan / upwork.profile
Created January 22, 2019 16:15
upwork firejail profile
noblacklist ${HOME}/.Upwork
mkdir ${HOME}/.Upwork
whitelist ${HOME}/.Upwork
noblacklist ${HOME}/.config/Upwork
mkdir ${HOME}/.config/Upwork
whitelist ${HOME}/.config/Upwork
noblacklist ${HOME}/.cache/Upwork
mkdir ${HOME}/.cache/Upwork
@selivan
selivan / auditd.conf
Created April 21, 2019 17:25 — forked from sakalajuraj/auditd.conf
Logstash configuration for auditd messages received via syslog
# Content of the file /etc/logstash/conf.d/auditd.conf
# Tested on the CentOS 7 auditspd logs forwarded to logstash via rsyslog
input {
syslog {
type => AUDITD
port => xxxx
host => "xxx.xxx.xxx.xxx"
}
}
An exception occurred during task execution. To see the full traceback, use -vvv. The error was: UnicodeEncodeError: 'ascii' codec can't encode characters in position 57566-57569: ordinal not in range(128)
fatal: [localhost]: FAILED! => {"changed": false, "module_stderr": "Traceback (most recent call last):
File \"/root/.ansible/tmp/ansible-tmp-1563092412.49-239477708342027/AnsiballZ_zabbix_template.py\", line 125, in <module>
_ansiballz_main()
File \"/root/.ansible/tmp/ansible-tmp-1563092412.49-239477708342027/AnsiballZ_zabbix_template.py\", line 117, in _ansiballz_main
invoke_module(zipped_mod, temp_path, ANSIBALLZ_PARAMS)
File \"/root/.ansible/tmp/ansible-tmp-1563092412.49-239477708342027/AnsiballZ_zabbix_template.py\", line 54, in invoke_module
imp.load_module('__main__', mod, module, MOD_DESC)
File \"/tmp/ansible_zabbix_template_payload_StS_pq/__main__.py\", line 742, in <module>
File \"/tmp/ansible_zabbix_template_payload_StS_pq/__main__.py\", line 689, in main