stefanorg

Guides:

• https://stephentanner.com/restoring-grub-for-an-encrypted-lvm.html
• https://askubuntu.com/questions/719409/how-to-reinstall-grub-from-a-liveusb-if-the-partition-is-encrypted-and-there-i
• https://help.ubuntu.com/community/Grub2/Installing

cryptsetup luksOpen /dev/sdb3 home_sdb3
vgchange -ay
lvscan

stefanorg

AWS ECS Deploy Permissions

In order to be able to deploy using the scripts provided by npm scripts for AWS ECS make sure your user is part of an IAM Group that has the following inline policy applied to it.

Note: This may not be complete.

{
    "Version": "2012-10-17",
    "Statement": [

stefanorg

embed-server --server-config=custom-full-ha.xml --empty-config --remove-existing
# Extensions first
batch
/extension=org.jboss.as.clustering.infinispan:add
/extension=org.jboss.as.clustering.jgroups:add
/extension=org.jboss.as.connector:add
/extension=org.jboss.as.deployment-scanner:add
/extension=org.jboss.as.ee:add
/extension=org.jboss.as.ejb3:add
/extension=org.jboss.as.jaxrs:add

stefanorg

S3 Static Sites

What this will cover

• Host a static website at S3
• Redirect www.website.com to website.com
• Website can be an SPA (requiring all requests to return index.html)
• Free AWS SSL certs
• Deployment with CDN invalidation

Resources

stefanorg

import cdk = require('@aws-cdk/cdk');
import ec2 = require('@aws-cdk/aws-ec2');
import { SubnetType } from '@aws-cdk/aws-ec2';

const region = 'us-east';
const azA = `${region}-1a`;
const azB = `${region}-1b`;
const azC = `${region}-1c`;
const availabilityZones = [azA, azB, azC];
const publicCidrs = ['10.1.192.0/24', '10.1.194.0/24', '10.1.196.0/24']

stefanorg

const makeCancelable = promise => {
  let hasCanceled = false;

  const wrappedPromise = new Promise((resolve, reject) => {
    promise.then(
      val => (hasCanceled ? reject(Error('Request canceled')) : resolve(val)),
      error =>
        hasCanceled ? reject(Error('Request canceled')) : reject(error),
    );
  });

stefanorg

image: docker:latest

variables:
  REPOSITORY_URL: <AWS ACCOUNT ID>.dkr.ecr.eu-central-1.amazonaws.com/<ECS REPOSITORY NAME>
  REGION: eu-central-1
  TASK_DEFINTION_NAME: <TASK DEFINITION NAME>
  CLUSTER_NAME: <CLUSTER NAME>
  SERVICE_NAME: <SERVICE NAME>

services:

stefanorg

import javax.servlet.http.HttpServletRequest;
import javax.ws.rs.WebApplicationException;
import javax.ws.rs.core.Context;
import javax.ws.rs.ext.Provider;

import org.jboss.resteasy.annotations.interception.ServerInterceptor;
import org.jboss.resteasy.core.ResourceMethod;
import org.jboss.resteasy.core.ServerResponse;
import org.jboss.resteasy.spi.Failure;
import org.jboss.resteasy.spi.HttpRequest;

stefanorg

In order to run this image do: docker-compose up -d to get all up. On first run DB initialization and initial user setup is done like so:

First start a bash in the container: docker-compose exec sentry /bin/bash. Then, inside bash, do sentry upgrade wait until it asks you for an inital user. When finished exit the bash.

When in doubt check with docker-compose ps if all went fine.

stefanorg

***************************************
* /usr/bin/letsencrypt-example.com.sh *
* rif: https://community.letsencrypt.org/t/multiple-domains-webroot-paths-using-webroot-plugin/7982/5
***************************************

# Settings
DOMAIN=example.com
TIMESTAMP=$(date +"%F %T")

# Execute