Архів категорії: Без категорії

Minio setup

Minio it is self-hosted storage compartible with s3 API Create key and secret Make nomad file Get mc – CLI for Minio Create connection to storage and add bucket Create file with policy user.json Add policy Add user Apply policy to user Go to another server/OS configure connect to minio and test upload Done Documentation… Читати далі »

Ansible. nmcli module. Failed to import the required Python library

In new version of Ubuntu/Centos need to use new name of imported module. When using old nmcli.py i had this error: Failed to import the required Python library (NetworkManager glib API) on node’s Python /usr/bin/python3. Please read module documentation and install in the appropriate location. If the required library is installed, but Ansible is using… Читати далі »

Make simple Kubernetes cluster and deploy own Golang application

Main goal to create simple cluster with one master node and two worker-nodes . All procedures we will do on 3 VPS with Ubuntu 20.04 Server installation. First step is to create separate user on all VPS, for the test environment let it be ‘kubuntu’. For orchestration we will use Ansible Lets create directory for… Читати далі »

WireGuard on Kernel 5.6. Quick start

Install all downloaded deb’s Reboot server/PC by command reboot After startup check the kernel version^ Test Wireguard on server Add repository for ubuntu 18.04 Make some changes to Firewall on server Simple script for generating key pairs and base cofigs for server and client Or download here: Put wg0.server as /etc/wireguard/wg0.conf on Server side and… Читати далі »

Configure Apache for A-rating on SSLLabs

Just add following lines to vhost.conf SSLEngine on SSLProtocol TLSv1.2 TLSv1.1 SSLProxyProtocol TLSv1.2 TLSv1.1 SSLHonorCipherOrder on SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA25