Posts on myblog

Fortinet

Fri, 14 Nov 2025 00:00:00 +0000

Configuring the LAN interface, including DHCP server

Network > Interfaces > doble-click on port5

Alias: LAN-HQ Role: LAN IP/Netmask 172.16.10.1/24

Administrative Access IPV4 : HTTPS, PING, SSH after Enable DHCP Server

Address range: 172.16.10.21-172.16.10.256

Comments: Lan port connected to HQ and click OK

Double-click on port6

Alias: WAN-ISP Role: WAN

IP/Netmask: 172.16.20.1/30 and IPV4: SSH

Comments: WAN port connected to ISP and click OK

Configuration of the LAN and WAN interfaces is complete.

GO API

Wed, 19 May 2021 00:00:00 +0000

Making GET Requests and Handling Responses in Go

Making GET Requests and Handling Responses

Welcome to the second lesson in our journey of interacting with APIs using Go. In the previous lesson, we established a strong understanding of RESTful APIs and how HTTP requests facilitate interactions with them. We used curl to interact directly with an API endpoint. Now, we will automate this process using Go’s net/http package. This lesson will guide you through making HTTP requests in Go, equipping you with essential skills for web development and API integration.

Git

Tue, 18 May 2021 00:00:00 +0000

Create a repository in an existing directory:

Linux:

cd home user my_project

MacOS:

cd Users user my_project

Windows:

cd C:/Users/user/my_project

then run the command:

git init

Add existing files under version control:

git add *.c
git add LICENSE
git commit -m ‘Initial project version’

Clone an existing repository

git clone https://github.com/libgit2/libgit2

Clone the repository to a directory named mylibgit: $ git clone https://github.com/libgit2/libgit2 mylibgit

Working with Git

Git Add

Add existing files under version control:

$ git status

On branch main
Your branch is up to date with 'origin/main'.

nothing to commit, working tree clean

Adding README + status:

GO

Tue, 18 May 2021 00:00:00 +0000

Introduction to Programming with Go

Taking Your First Step in Go Programming

Can you feel the excitement coursing through your veins? You’re on the verge of diving into the world of programming. Let’s get started!

What You’ll Learn

Go is a powerful language that enables us to build a range of applications and solve real-world problems. As we embark on this journey, we’ll first learn to create a basic program in Go — a simple fmt.Println statement. This program will offer a friendly greeting to the world, setting the pace for our future explorations.

GO for Beginners

Tue, 18 May 2021 00:00:00 +0000

Getting Started with Go: Syntax and Your First Program

Go Syntax Basics In Go, we use statements to perform actions. These are usually terminated by a new line or a semicolon (;). The semicolon in the end of the statement is optional and used rarely. Go uses curly braces ({ }) to group statements into blocks.

Take a look at this simple Go syntax example:

package main

import "fmt"

func main() {
    fmt.Println("Hello, Go World!")
}

In this example, package main specifies that it’s the main entry point of the Go application. import "fmt" instructs Go to use the fmt library for formatted I/O operations, and in the main function, we print "Hello, Go World!". Though you may not fully understand this code just yet, we will explore each part of it step-by-step in forthcoming lessons.

Microsoft Graph

Fri, 14 Aug 2026 00:00:00 +0000

Microsoft GRAPH

Install

Install module

Install-Module Microsoft.Graph -Scope CurrentUser

Connect to Graph and tenant

Disconnect-MgGraph -ErrorAction SilentlyContinue

Connect-MgGraph `
    -TenantId "YOUR_ACCOUNT.onmicrosoft.com" `
    -Scopes "RoleManagement.Read.Directory","Directory.Read.All"

See All Global Administrator

$role = Get-MgDirectoryRole -Filter "displayName eq 'Global Administrator'"

Get-MgDirectoryRoleMember -DirectoryRoleId $role.Id -All |
ForEach-Object {
    Get-MgUser -UserId $_.Id `
        -Property DisplayName,UserPrincipalName,AccountEnabled
} |
Where-Object {
    $_.UserPrincipalName -ne "admin@temworld25.onmicrosoft.com"
} |
Select-Object DisplayName,UserPrincipalName,AccountEnabled |
Format-Table -AutoSize

Check what tenant you connected

Exchange online

Wed, 21 Jan 2026 00:00:00 +0000

Install-Module ExchangeOnlineManagement -Scope CurrentUser

Connect to Exchange online

Connect-ExchangeOnline -UserPrincipalName admin@example.com

Get-MailboxFolderPermission office@example\ןמוי

Get-MailboxFolderPermission office@example\ןמוי | fl

Check guest permission


Get-MailboxPermission user1@example.com

# В Simple.com PowerShell
Add-MailboxFolderPermission -Identity user1@domain1.com:\Calendar -User guest@domain2.eu -AccessRights Editor

Get-MailboxFolderStatics office@1all.co.il | Select-Object Name, FolderPath

Connect to Microsoft.Graph

Install module Microsoft.Graph

Install-Module Microsoft.Graph -Scope CurrentUser

Microsoft.Graph is the official PowerShell module (Microsoft Graph PowerShell SDK) designed to manage Microsoft cloud services through a single Microsoft Graph API interface.

Database Design

Fri, 10 Oct 2025 21:29:01 +0800

Database Design

OLTP and OLAP

How should we organize and manage data?
Schemas: How should my data be logically organized?
Normalization: Should my data have minimal dependency and redundancy?
Views: What joins will be done most often?
Access control: Should all users of the data have the same level of access?
DBMS: How do I pick between all the SQL and NoSQL options?
and more!

It depends on the intended use the date

PostgreSQL

Thu, 09 Oct 2025 21:29:01 +0800

PostgreSQL Summary stats and window functions

Introduction to windows functions

Window functions

Perform calculations across a set of table rows that are somehow related to the current row
Similar to GROUP BY aggregation, but all rows remain in the output (no grouping)

Uses

Fetching values from preceding or following rows (e.g. fetching the previous row’s value)
- Determining reigning champion status
- Calculating growth over time
Assigning ordinal ranks (1st, 2nd, etc.) to rows based on their values’ positions in a sorted list

SQL

Wed, 01 Oct 2025 21:29:01 +0800

Joining Data in SQL

Inner JOINs

SELECT *
FROM cities
-- Inner join to countries
INNER JOIN countries
-- Match on country codes
ON cities.country_code = countries.code;

-- Select name fields (with alias) and region 
SELECT city.name, country.name, region
FROM cities AS city
INNER JOIN countries AS country
ON city.country_code = country.code;

-- Select fields with aliases
SELECT c.code AS country_code, c.name, e.year, e.inflation_rate 
FROM countries AS c
-- Join to economies (alias e)
INNER JOIN economies AS e 
-- Match on code field using table aliases
ON c.code = e.code;

SELECT c.name AS country, l.name AS language, official
FROM countries AS c
INNER JOIN languages AS l
-- Match using the code column
USING (code);

Bash

Thu, 18 Sep 2025 21:29:01 +0800

Using Variables in Shell Scripts

Welcome back to the world of shell scripting. In the previous lesson, you crafted your very first shell script that printed “Hello, World!” to the screen. Today, we will take the next step by exploring how to use variables in shell scripts. This lesson will introduce you to variable declaration, reassignment, and some basic arithmetic operations.

Using variables can make your scripts more dynamic and flexible, allowing you to store information, reuse values, and perform calculations. Let’s get started!

Windows Server Terminal (RDS)

Thu, 01 May 2025 21:29:01 +0800

Termenal for Free

Add Terminal to Domain

set DNS of DC server (if not work disable IPv6)
Change
Choose domain my domain dan.local
Done !

Troubleshooter Problems

If doesn’t connect to domain - disable ipv6
Network Level Authentication
Run sysdm.cpl
Disable NLA

Create Terminal and Adds Roles

Manage > Add Roles and Features
Next
Select Role-based or feature-based installation and Next
Next
Remote Desktop Services , Next
NET. Framework 4.8 Features, Next

Windows Server

Thu, 13 Mar 2025 21:29:01 +0800

First i need change on server dns on localhost

After change the name of server and restart

Add DC

Install

Wait

Promote this server to a domain controller

dan.local name of my dc

Install

Wait

Done !

DNS Reverse IP

DNS > Reverse Lookup Zone > New Zone

Enter Zone IP my its 192.168.1

MacOS

Sat, 01 Mar 2025 21:29:01 +0800

MacOS Sequoia

Install Anydesk and Allow Permissions

Open https://anydesk.com

Click-on Allow

Double-click on icon

Double-click on anydesk.dmg and drag Anydesk on Applications

Double-click on icon Applications after double-click on icon Anydesk

Click on Open

Click on Allow

Now need give permission for Screen Recording and Accessibility

Switch it to ON and enter your password

Click on Ouit & Reopen

AutoHotKey

Wed, 22 Jan 2025 21:29:01 +0800

For complex sites with redirects to another site, where each user has a unique token in the GET request metadata, making it impossible to store credentials in the browser cache since the page is different each time.

Download AutoHotkey

we need to download it from the website. https://www.autohotkey.com (download all versions.)

Simple Script

create simple script for autoconnect for website

Open new text document and copy & past dan and pasword replace it with yours and save it like myscript.ahk

Run, "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" "https://*****.co.il/*****/default.php"
Sleep, 5000 ; We will wait 5 sec for the site to load (you can increase the time if necessary)

; Automatic input
Send, dan ; Enter your username
Send, {Tab} ; Switching to the password entry field
Send, Mypassword ; Enter your password
Send, {Enter} ; Press Enter to enter

Save it like myscript.ahk or your custom name

Convert file.ahk to file.exe

Now we want to run it where there is no AutoHotKey program. so we need to turn it into an .exe file.

Exchange 2019

Fri, 13 Dec 2024 21:29:01 +0800

Add New User to AD for Exchange

Tools > Active Directory Users and Computers
Create New User exchange
Password never expires

Users > exchange > Right click > Member of > Add Domain Admins, Schema Admins, Enterprise Admins> OK

On Echange 2019 Server

Add to DNS DC to server for me its 192.168.1.220

Dont forget disable dhcpv6 and join to domain

Download and Install Net Framework 4.8

https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-8-offline-installer-for-windows-9d23f658-3b97-68ab-d013-aa3c3e7495e0

Fri, 13 Dec 2024 21:29:01 +0800

Whatsapp Link Generator

Open text copy & past and change name to whatsapp.html

<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>WhatsApp Link Generator</title>
    <style>
        body {
            display: flex;
            flex-direction: column;
            justify-content: center;
            align-items: center;
            text-align: center;
            height: 100vh;
            margin: 0;
            font-family: Arial, sans-serif;
            background-color: black;
            color: white;
        }
        .ascii-art {
            font-family: monospace;
            white-space: pre;
            line-height: 1.2;
            margin-bottom: 20px;
            color: lime;
        }
        label, input, button, p {
            margin-top: 10px;
        }
        input, button {
            background-color: white;
            color: black;
            border: none;
            padding: 5px 10px;
            border-radius: 5px;
        }
        button:hover {
            background-color: gray;
            color: white;
        }
        a {
            color: cyan;
        }
    </style>
</head>
<body>
    <h1>WhatsApp Link Generator</h1>
    <div class="ascii-art">
 /$$      /$$ /$$                   /$$               /$$$$$$                     
| $$  /$ | $$| $$                  | $$              /$$__  $$                    
| $$ /$$$| $$| $$$$$$$   /$$$$$$  /$$$$$$   /$$$$$$$| $$  \ $$  /$$$$$$   /$$$$$$ 
| $$/$$ $$ $$| $$__  $$ |____  $$|_  $$_/  /$$_____/| $$$$$$$$ /$$__  $$ /$$__  $$
| $$$$_  $$$$| $$  \ $$  /$$$$$$$  | $$   |  $$$$$$ | $$__  $$| $$  \ $$| $$  \ $$
| $$$/ \  $$$| $$  | $$ /$$__  $$  | $$ /$$\____  $$| $$  | $$| $$  | $$| $$  | $$
| $$/   \  $$| $$  | $$|  $$$$$$$  |  $$$$//$$$$$$$/| $$  | $$| $$$$$$$/| $$$$$$$/
|__/     \__/|__/  |__/ \_______/   \___/ |_______/ |__/  |__/| $$____/ | $$____/ 
                                                              | $$      | $$      
                                                              | $$      | $$      
                                                              |__/      |__/      
    </div>
    <label for="phoneNumber">Enter the phone number (in the format 972XXXXXXXXXXXXXXX):</label>
    <input type="text" id="phoneNumber" placeholder="972XXXXXXXXX">
    <button onclick="generateLink()">Create link</button>
    <p id="output"></p>

    <script>
        function generateLink() {
            const phoneInput = document.getElementById('phoneNumber');
            let phoneNumber = phoneInput.value.trim();

            if (!/^[0-9]{11,15}$/.test(phoneNumber)) {
                alert('Please enter the correct phone number in international format (without +).');
                return;
            }

            if (phoneNumber.startsWith('9720') && phoneNumber[4] === '5') {
                phoneNumber = '972' + phoneNumber.slice(4);
            }

            const link = `https://web.whatsapp.com/send/?phone=${phoneNumber}&text&type=phone_number&app_absent=0`;
            const outputElement = document.getElementById('output');

            outputElement.innerHTML = `Link: <a href="${link}" target="_blank">Open WhatsApp</a>`;
        }
    </script>
</body>
</html>

for example :

Windows Server 2025 LAPS

Fri, 13 Dec 2024 21:29:01 +0800

Local Administrator Password Solution (LAPS)

The “Local Administrator Password Solution” (LAPS) provides management of local account passwords of domain joined computers. Passwords are stored in Active Directory (AD) and protected by ACL, so only eligible users can read it or request its reset.

Download Legacy LAPS for old windows servers

https://www.microsoft.com/en-us/download/details.aspx?id=46899

Important

The legacy Microsoft LAPS product is deprecated as of Windows 11 23H2 and later. Installation of the legacy Microsoft LAPS Microsoft Installer (MSI) package is blocked on newer OS versions, and Microsoft no longer considers code changes for the legacy Microsoft LAPS product.

Windows Server Core

Fri, 13 Dec 2024 21:29:01 +0800

Only for proxmox

egrep -wo 'vmx|svm' /proc/cpuinfo

vmx — Intel VT-x
svm — AMD-V

Enable nested virtualization for KVM

Intel:

cat /sys/module/kvm_intel/parameters/nested

AMD:

cat /sys/module/kvm_amd/parameters/nested

need be 1

nano /etc/pve/qemu-server/100.conf

need be

cpu: host

💥 Command will enable the RDP connections through the firewall on Server Core:

netsh advfirewall firewall set rule group="remote desktop" new enable=Yes

💥 Command Edit the value in the registry to enable remote desktop :

cscript C:\Windows\System32\Scregedit.wsf /ar 0

Install Hyper-V

install hyper-v and management tools

Windows Server Domain Change

Fri, 13 Dec 2024 00:00:00 +0000

DNS

Add New Name

Add new name my name its mynewzone.local

Add new _msdcs

Add new name my name its _msdcs.mynewzone.local

OpenWrt

Fri, 01 Nov 2024 21:29:01 +0800

BRI-R3 Mini

https://wiki.banana-pi.org/Getting_Started_with_BPI-R3_MINI

https://downloads.openwrt.org/snapshots/targets/mediatek/filogic/

https://firmware-selector.openwrt.org/?version=SNAPSHOT&target=mediatek%2Ffilogic&id=bananapi_bpi-r3-mini

https://openwrt.org/toh/sinovoip/bananapi_bpi_r3_mini?s[]=bananapi&s[]=bpi&s[]=r3&s[]=mini

Unbrick Nand from Emmc U-Boot

usb start

usb storage

Device 0: Vendor: SanDisk Rev: 1.00 Prod: Cruzer Blade
            Type: Removable Hard Disk
            Capacity: 14664.0 MB = 14.3 GB (30031872 x 512)

usb tree

USB device tree:
  1  Hub (5 Gb/s, 0mA)
  |  U-Boot XHCI Host Controller
  |
  +-2  Mass Storage (480 Mb/s, 200mA)
       SanDisk Cruzer Blade 03025908011622061257

ls usb 0:1

fatload usb 0:1 $loadaddr openwrt-mediatek-filogic-bananapi_bpi-r3-mini-snand-factory.bin

fatload usb 0:1 $loadaddr mtk-bpi-r3mini-NAND-20231115-single-image.bin

nand erase 0x0 0x8000000

nand write $loadaddr 0 0x8000000

switch to nand

Gmail

Wed, 10 Jul 2024 20:29:01 +0800

Settings :

pop.gmail.com

smtp.gmail.com

POP3 = 995 
SMTP = 587

WEB:

https://myaccount.google.com/apppasswords

NFS

Mon, 01 Apr 2024 21:29:01 +0800

Install Server NFS

update

sudo apt update

install nfs server

sudo apt install nfs-kernal-server

view if nfs ok

rpcinfo -p | grep nfs

other ways view if ok

cat /proc/filesystems | grep nfs

enable nfs-server start after restart

sudo systemctl enable nfs-server

create folder

sudo mkdir /mnt/nfs

chown nobody:nogroup /mnt/nfs

admin privilege on folder

sudo chmod -R 777 /mnt/nfs

edit exports file

sudo nano /etc/exports

The /etc/exports Options

General Options	Description
secure	Requires request originate on secure ports, those less than 1024. This is on by default.
insecure	Turns off the secure option.
ro	Allows only read-only access. This is the default.
rw	Allows read/write access.
sync	Performs all writes when requested. This is the default.
async	Performs all writes when the server is ready.
no_wdelay	Performs writes immediately, not checking to see if they are related.
wdelay	Checks to see if writes are related, and, if so, waits to perform them together. Can degrade performance. This is the default.
hide	Automatically hides an exported directory that is the subdirectory of another exported directory. The subdirectory has to be explicitly mounted to be accessed. Mounting the parent directory does not allow access. This is the default.
no_hide	Does not hide an exported directory that is the subdirectory of another exported directory (opposite of hide). Only works for single hosts and can be unreliable.
subtree_check	Checks parent directories in a file system to validate an exported subdirectory. This is the default.
no_subtree_check	Does not check parent directories in a file system to validate an exported subdirectory.
insecure_locks	Does not require authentication of locking requests. Used for older NFS versions.

User ID Mapping	Description
all_squash	Maps all UIDs and GIDs to the anonymous user. Useful for NFS-exported public FTP directories, news spool directories, and so forth.
no_all_squash	The opposite option to all_squash. This is the default setting.
root_squash	Maps requests from remote root user to the anonymous UID/GID. This is the default.
no_root_squash	Turns off root squashing. Allows the root user to access as the remote root.
anonuid
anongid	Sets explicitly the UID and GID of the anonymous account used for all_squash and root_squash options. The defaults are nobody and nogroup.

exemple:

Rclone Gdrive Windows 10

Mon, 01 Apr 2024 21:29:01 +0800

Create API for Google Drive

go to

https://console.cloud.google.com/

api & services

open new project

Create new project Google Drive

Open Enable Apis and Services

Enable Google Drive

Don`t forget add test accaunt

Create new credentials

Save password

Download RClone

https://rclone.org/downloads/

Download NSSM

https://nssm.cc/download

copy nssm.exe to rclone folder

Configuration RClone

open cmd

C:\Users\Burzum>cd Downloads

C:\Users\Burzum\Downloads>cd rclone-v1.67.0-windows-amd64

C:\Users\Burzum\Downloads\rclone-v1.67.0-windows-amd64>rclone config

No remotes found, make a new one?

Sleeping-Hacker

Sat, 04 Nov 2023 21:29:01 +0800

Ansible

Sun, 03 Sep 2023 21:29:01 +0800

Host

[frontend_servers]
reactjs_one ansible_host=192.168.1.200 ansible_user=ubuntu ansible_ssh_private_key=~/.ssh/id_rsa

ansible -i hosts frontend_servers -m ping

ansible.cfg

[defaults]
host_key_checking = False
inventory         = ./hosts

reactjs.yaml

---
- hosts: frontend_servers
  
  vars:
    project_path: /var/www
    repository: gitlab.com/danpoznanski/example.git

  tasks: 

    - name: "Yarn | GPG"
      apt_key:
        url: https://dl.yarnpkg.com/debian/pubkey.gpg
        state: present
    
    - name: "Yarn | Ensure Debian sources list file exists"
      file: 
        path: /etc/apt/sources.list.d/yarn.list
        owner: root
        mode: 0644
        state: touch
    
    - name: "Yarn | Update APT cache"
      apt:
        update_cache: yes
    
    - name: Install the packages YARN, NPM, NodeJS, Nginx
      apt:
        pkg: ['yarn','npm','nodejs','nginx']
    
    - name: Delete the html file
      file:
        path: "{{project_path}}/html"
        state: absent
    
    - name: Set some variable
      set_fact:
      release_path: "{{ project_path }}/releases/{{ lookup('pipe','date +%Y%m%d%H%M%S',) }}"
      current_path: "{{ project_path }}/html"
    
    
    - name: Create project path
      file: 
        dest={{ project_path }}
        mode=0755
        recurse=yes
        state=directory

    - name: Retrieve current release folder
      command: readlink -f html
      register: current_release_path
      ignore_errors: yes
      args:
        chdir: "{{ project_path }}"
    
    - name: Create Release folder
      file:
        dest={{ release_path }}
        mode=0755
        recurse=yes
        state=directory

    - name: Clone the repository
      git:
        repo: "{{ repository }}"
        dest: "{{ release_path }}"
    
    - name: YARN install dependencies
      command: yarn install
      args:
        chdir: "{{ release_path }}"
    
    - name: Yarn build
      command: yaen build
      args:
        chdir: "{{ release_path }}"
    
    - name: Update symlink
      file:
        scr={{ release_path }}/build
        dest={{ current_path }}
        state=link

run playbook -b or --become its sudo

Docker

Sun, 03 Sep 2023 21:29:01 +0800

Install using the Apt repository

# Add Docker's official GPG key:
sudo apt-get update
sudo apt-get install ca-certificates curl gnupg
sudo install -m 0755 -d /etc/apt/keyrings
curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /etc/apt/keyrings/docker.gpg
sudo chmod a+r /etc/apt/keyrings/docker.gpg


# Add the repository to Apt sources:
echo \
  "deb [arch="$(dpkg --print-architecture)" signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu \
  "$(. /etc/os-release && echo "$VERSION_CODENAME")" stable" | \
  sudo tee /etc/apt/sources.list.d/docker.list > /dev/null
sudo apt-get update

Simple commands

watch version

Ngrok

Sun, 03 Sep 2023 21:29:01 +0800

Ngrok on Ubuntu

after download ngrok Unzip

create folders and file

root/.config/ngrok/ngrok.yml

# in ngrok.yml
authtoken: 2UoPmLJDDOzSLlTA3obRZuswHTN_ZbmHcjZYLDdsPShY5KYP
version: 2
region: us

for config ./ngrok config edit

to run ./ngrok http 8080

SonarQube

Sun, 03 Sep 2023 21:29:01 +0800

Install SonarQube on Ubuntu

Modify Kernel System Limits

SonarQube uses Elasticsearch to store its indices in an MMap FS directory. It requires some changes to the system defaults.

Edit the sysctl configuration file

sudo nano /etc/sysctl.conf

Add the following lines:

vm.max_map_count=262144
fs.file-max=65536
ulimit -n 65536
ulimit -u 4096

Save and exit the file

Reboot the system to apply the changes

sudo reboot

install Java

See vesion

java-version

install java 17 need for sonarqube 10 for sonarqube 9 need java 11

Loki

Tue, 01 Aug 2023 21:29:01 +0800

The architecture of Loki

A brief overview of components in Loki architecture:

Promtail - It is the log collection agent that runs on each node of a Kubernetes cluster.
Distributor - The first component to receive logs from promtail.
Ingestor - It builds compressed chunks of log data and flushes them out as chunks.
Querior - It handles the read path, scanning the index to figure out which chunks match

Prometheus

Tue, 01 Aug 2023 21:29:01 +0800

Prometheus

Prometheus - database of time series
Exporter - instrument for get metric
Alertmanager - notification and everything is connected with it

Basic startup parameters

We will start looking at the configuration file in the next task, but now let’s look at the main Prometheus startup keys:

--config.file="prometheus.yml" - which configuration file to use;

--web.listen-address="0.0.0.0:9090" - the address that the embedded web server will listen to;

--web.enable-admin-api - enable or disable administrative API via web-interface;

Puppet

Tue, 01 Aug 2023 21:29:01 +0800

CRM Configuration Management System

Diagram of Work Puppet Push/Pull

Consul

Mon, 08 May 2023 21:29:01 +0800

Consul provides feature such as:

Service discovery
Tagging
Health checks
Secure Service Communication
Multi Datacenter
System-wide key/value storage

Server vs Client

Server:

running on individual machine

form a failsafe cluster

communicating with client machine

Client:

working on machine were running service

checking health of server

sending information on server

example config registration service

`{ "service":{"name": "web", "tags":["be"], "port": 80,"check":{"args": ["curl", "localhost"], "interval": "10s" }}}`

Instal consul

create account consul

useradd -s /bin/false -m consul

download binar file https://developer.hashicorp.com/consul/downloads for ubuntu

ELK Stack

Mon, 08 May 2023 21:29:01 +0800

ELK Stack

Elasticsearch

is search and analytics engine that is widely used for full-text search, log and event data analysis

storage
analytics
search

Shard - shard is a basic unit of storage and search

Indexer - logical space for storing shards

Logstach

Kibana

Download and install the Debian package manually

wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.11.1-amd64.deb
wget https://artifacts.elastic.co/downloads/elasticsearch/elasticsearch-8.11.1-amd64.deb.sha512
shasum -a 512 -c elasticsearch-8.11.1-amd64.deb.sha512 
sudo dpkg -i elasticsearch-8.11.1-amd64.deb

after install take password from cli

Vagrant

Wed, 03 May 2023 21:29:01 +0800

Example

vagrantfile

vagrant.configure("2") do |config|
  
  config.vm.provider :virtualbox do |v|
    v.memory = 2048
  end

  config.vm.define "reactjsserver" do |db|
    db.vm.box = "ubuntu/focal64"
    db.vm.hostname = "reactjsserver"
    db.vm.network :private_network, ip: "10.10.10.10"
    db.vm.provision "ansible" do |ansible"
        ansible.playbook = "OneServer/reactjs.yaml"
        ansible.become = true
    end 
  end
end

run vagrant

vargant up

connect to vagrant virtualmachine

vagrant ssh

ss -tlpn see all ports

see all boxes

vagrant box list

delete virtual machine

vagrant destroy

Search Boxes

https://app.vagrantup.com/boxes/search

Proxmox

Mon, 01 May 2023 21:29:01 +0800

Before Create Datacenter

add ssh public key to hosts

nano /etc/ssh/ssh_config

PermitRootLogin yes

copy key to node1

ssh-copy-id -i root@192.168.1.128

copy key to node2

ssh-copy-id -i root@192.168.1.129

copy key t node3

ssh-copy-id -i root@192.168.1.130

Config Local DNS

Node1

connect to ssh

ssh root@192.168.1.129

nano /etc/hosts

192.168.1.128 pve1.local pve1
192.168.1.129 pve2.local pve2
192.168.1.130 pve3.local pve3

test for ping ping pve2 and ping pve3

Wrong Repository


nano /etc/apt/sources.list

# deb https://enterprise.proxmox.com/debian/pve stretch pve-enterprise

dev https://download.proxmox.com/debian/pve stretch no-subscription

install htop and mc

Vault

Mon, 01 May 2023 21:29:01 +0800

Vault Overview. Use-cases. Architecture Basics

Description

We are glad to welcome you to the first task of the mini-workshop on HashiCorp Vault.

Today we will look at:

What are secrets and why keep them? What is Vault and what problems does it solve?
Vault Architecture Basics (Seal/Unseal, Tokens, Secret Engines, ACLs, etc.)
What are the analogues of Vault?
Practice: install Vault on a Linux virtual machine and configure the KV Secret engine there

Terraform

Mon, 03 Apr 2023 21:29:01 +0800

structura of terraform:

main.tf

outputs.tf

terraform.tfstate

terraform.tfstate.backup

variable.tf

used for create new project terraform init command in Terraform initializes a new or existing Terraform configuration, setting up the environment, downloading necessary plugins, modules, and configuring the backend to prepare for managing infrastructure as code.

cd /path/to/your/terraform/project
terraform init

terraform plan command in Terraform creates an execution plan that outlines the actions Terraform will take to modify the infrastructure according to the configuration files. It shows the changes, additions, modifications, or deletions of resources without actually applying these changes, allowing users to review and validate the proposed modifications before execution.

Victoria Metrics

Sun, 01 Jan 2023 21:29:01 +0800

Pre-setting

Installing packages Let’s make sure some packages are available:

tar - to unpack the archive with the binary. wget - to download the archive. curl - to execute queries to test the system. Depending on the Linux distribution, the installation will be slightly different.

for DEB-based systems (Astra Linux / Debian / Ubuntu):

apt install tar wget curl

for RPM-based systems (RED OS / Rocky Linux / CentOS):

Shadowsock + V2Ray

Tue, 06 Sep 2022 21:29:01 +0800

Server Shadowsocks Classic

First uprgade system

apt update && apt uprgade -y

Install need packets

apt install shadowsocks-libev -y

View what your ip address

ip -br a

Edit options parametrs you can change port and all ip "::1", "127.0.0.1" for example “185.85.85.85”

nano /etc/shodowsocks-libev/config.json

{
"server":["::1", "127.0.0.1"],
"mode":"tcp_and_udp",
"server_port":"8388",
"local_port":"1080",
"password":"12345678 ",
"timeout":"60",
"method":"chacha20-ietf-poly1305"
}

{
"server":["185.85.85.85"],
"mode":"tcp_and_udp",
"server_port":"8388",
"local_port":"1080",
"password":"12345678 ",
"timeout":"60",
"method":"chacha20-ietf-poly1305"
}

after change restart service:

service shadowsocks-libev restart

Gitlab

Thu, 01 Sep 2022 21:29:01 +0800

https://gitlab.com/rluna-gitlab/gitlab-ce

For Ubuntu 20.04 and 22.04, arm64 packages are also available and will be automatically used on that platform when using the GitLab repository for installation.

sudo apt-get update
sudo apt-get install -y curl openssh-server ca-certificates tzdata perl

Next, install Postfix (or Sendmail) to send notification emails. If you want to use another solution to send emails please skip this step and configure an external SMTP server after GitLab has been installed

DHCPv6

Sun, 01 May 2022 21:29:01 +0800

Pv6 Address Types

The IPv6 Address Space

As we already learned, IPv6 addresses are 128-bit long, which means that there are 340 undecillion possible addresses (the exact number is shown below).

340,282,366,920,938,463,463,374,607,431,768,211,456

or reference, in IPv4 with its 32-bit address space, there are 4.29 billion possible addresses.

The Internet Assigned Numbers Authority (IANA) allocates only a small portion of the whole IPv6 space. IANA provides global unicast addresses that start with leading leftmost bits 001. A small portion of the addresses starting with 000 and 111 are allocated for special types. All other possible addresses are reserved for future use and are currently not being allocated.

Hack & Tricks

Sun, 01 May 2022 21:29:01 +0800

Whatsapp link

exemple: https://wa.me/972501234567

Steam OS

Sun, 01 May 2022 21:29:01 +0800

Installing PORTPROTON:

All command do in terminal

out from mode “Read only”

sudo steamos-readonly disable

Initialize the key

sudo pacman-key --init

Custom Keys

sudo pacman-key -u

adding keys from the repository

sudo pacman-key --populate

Install the .cab unzipping program

sudo pacman -S cabextract

Install dependencies

sudo pacman -Syu bash icoutils wget bubblewrap zstd cabextract bc tar openssl gamemode desktop-file-utils curl dbus freetype2 gdk-pixbuf2 ttf-font zenity lsb-release nss xorg-xrandr vulkan-driver vulkan-icd-loader lsof lib32-freetype2 lib32-libgl lib32-gcc-libs lib32-libx11 lib32-libxss lib32-alsa-plugins lib32-libgpg-error lib32-nss lib32-vulkan-driver lib32-vulkan-icd-loader lib32-gamemode lib32-openssl

Installing the program

wget -c "https://github.com/Castro-Fidel/PortWINE/raw/master/portwine_install_script/PortProton_1.0" && sh PortProton_1.0

Returning “Read-Only” mode

sudo steamos-readonly enable

VMware

Sun, 01 May 2022 21:29:01 +0800

Compobility

https://www.vmware.com/resources/compatibility/search.php

vSAN

vSAN Calculator

https://vsan.virtualappliances.eu/

10TB HDD neeed 1TB SSD cache

Resistance formula (N = Dead Disk) N x 2 + 1

ESXi Shell CLI

Troubleshooting Mode Options > Enable ESXI Shell

to enter to shell Alt + F1

to exit from Shell Alt + F2

List Commands

esxcli

List of adapters

esxcli nic list

List of vSwitch

esxcli network vswitch list

List of standard vSwitch

esxcli network vswitch standard list

List of distributed vSwitch

Windows Server

Sun, 01 May 2022 21:29:01 +0800

Before

Server Manager > Local Server > Computer name > Change > YOUR_NAME > [OK]

Firewall off

Ethernet > (Right click on) Ethernet > Properties > Internet Protocol Version 4 IPv4

IP address: 192.168.1.3

Subnet Mask 255.255.255.0

Default gateway: 192.168.1.1

DNS: 8.8.8.8

Create Active Directory

Manage > Add Roles and Features Wizard >

Next > Next > Next >

[x] Active Directory Domain Services

[x] include management tools (if applicable)

Windows Server CA

Sun, 01 May 2022 21:29:01 +0800

In this Tutorial we’re going to configure a Two-Tier Enterprise PKI with Microsoft Server 2019 intended for Lab use. The advantage of a Two-Tier Enterprise PKI Hierarchy is that clients only trust the Root CA. So if a Subordinate server gets compromised the Root CA does not have to be replaced. During normal operation the Root CA will be offline and Certificate requests are handled by the Subordinate CA. The Root CA is a non-domain joined device and will only be turned on issue a certificate for the Subordinate CA or to update the Certificate Revocation List (CRL).

Windows Server WDS

Sun, 01 May 2022 21:29:01 +0800

Windows Server WDS

Create Automatically Install Images

First download “ADK download for Windows 10” from Microsoft
Install adksetup.exe
Select the features you want change

- Deployment Tools

Need Take install.wim from windows_10.iso but we have only in … source\install.esd
Mount windows.iso go to folder “souces” and copy install.esd to c:\

We need cover from install.esd to install.wim and we need know index of windows version

open Deployment and Images Tools Environment

dism /get-wiminfo /wimfile:c:\install.esd

after take your nember of index what you want and cover from .esd format to .vim

dism /export image /sourceimagefile:c:\install.esd /sourceindex:3 /destinationimagefile:c:\install.wim /compress:mix /checkintegrity

now we need create file config for it go to site1 or site2 after generate file config and download with name “Autounattend.xml”

Windows Server APP-V

Sun, 01 May 2022 00:00:00 +0000

Tools for Create APP-V & and Office

Download ADK for Windows.

https://learn.microsoft.com/en-us/windows-hardware/get-started/adk-install

Download Office Deployment Tool

https://www.microsoft.com/en-us/download/details.aspx?id=49117

install and open
outlook.xml its config for 32 bit outlook

<!-- Office 365 client configuration file sample. To be used for Office 365 ProPlus apps, 
     Office 365 Business apps, Project Pro for Office 365 and Visio Pro for Office 365. 

     For detailed information regarding configuration options visit: http://aka.ms/ODT. 
     To use the configuration file be sure to remove the comments

     The following sample allows you to download and install the 64 bit version of the Office 365 ProPlus apps 
     and Visio Pro for Office 365 directly from the Office CDN using the Current Channel
     settings  -->

<Configuration>
  <Add OfficeClientEdition="32" Channel="PerpetualVL2024">
    <Product ID="Outlook2024Volume">
      <Language ID="he-il" />
    </Product>
  </Add>

  <!--  <Updates Enabled="TRUE" Channel="Current" /> -->

  <!--  <Display Level="None" AcceptEULA="TRUE" />  -->

  <!--  <Property Name="AUTOACTIVATE" Value="1" />  -->

</Configuration>

(all file download files in folder office)

Jenkins

Fri, 08 May 2020 21:29:01 +0800

Jenkins

Check for the latest updates and install wget

sudo apt-get update && sudo apt install wget

Configuring limits

Edit the file limit.conf

sudo vi /etc/security/limits.conf

Adding content:

jenkins      soft     core    unlimited
jenkins      hard     hard    unlimited
jenkins      soft     fsize   unlimited
jenkins      soft     fsize   unlimited
jenkins      soft     nofile  4096
jenkins      hard     nofile  8192
jenkins      soft     nproc   30654
jenkins      hard     nproc   30654

Configure the firewall

sudo apt-get install ufw

sudo ufw allow OpenSSH

sudo ufw allow 8080

sudo ufw enable

Check ufw’s status to confirm the new rules:

Simple Linux Routing

Wed, 06 May 2020 21:29:01 +0800

to see all routing

All Routing command

ip route show

for see all routing for ip v6

Routing for ip v6

ip -6 route show

Old command to see routing

Route - an obsolete utility included in the net-tools package. used to display the routing table and build static routes

you need install net-tools (apt install net-tools)

route -n

for v6 ip

route -n -6

routel - its utility for display routing its script for ip route

Windows

Tue, 07 Jan 2020 21:29:01 +0800

IP

free ip address

ipconfig / release

see all ip address

ipconfig / all

renew dns

ipconfig / flushdns

renew ip to other

ipconfig / renew

set DNS to interface

netsh int ip set dns name="name_of_network_interface" static 8.8.8.8 8.8.4.4

fix net reset winsock

netsh winsock reset

Aggregation link in Windows 7-10

Open PowerShell as Administrator:

Get-NetAdapter

Create a New NetSwithTeam

NetSwitchTeam -Name "MyTeam" -TeamMembers "Enternet1", "Enternet2"

to remove

Remove-NetSwitchTeam -Name "MyTeam"

see config

Get-NetSwitchTeam

Wim Capture Image

need external disk image capture to d:\

Nginx

Tue, 18 Jun 2019 00:00:00 +0000

———– redirect site to yandex.ru /etc/nginx/sites-enebled

server listen 80;

server_nane nginx.srwx.net;

return 301 “http://ya.ru”;

test config

nginx -t

curl -D - -o /dev/null -s http://nginx.srwx.net

cat etc/nginx/sites-enabled

nginx reload

Location

location /test {
  return 201 "TEST";
}

password and user

location /restricted {
  auth_basic "Restrictred";
  auth_basic_user_file .htpasswd; 
}

proxy to yandex on main domain

location /admin {
  proxy_pass http://ya.ru;
}

balance beetwen servers

upstream app {
  server 127.0.0.1:8080;
  server 10.10.21.12:8080;
}
server 
  listen 80 default_server;

  server_nane nginx.srwx.net;

  location /admin {
    proxy_pass http://app;
  }
}

Makes the site faster and gives the static css

Linux Basic Command and Map

Sat, 18 May 2019 00:00:00 +0000

Process

all process ps -auxf

see all zombie process ps -aux | grep 'Z'

see systemd ps -p 1

SIGKILL –9 SIGKILL –15

kill -9 PID

Symlink & Hardlink

Symlink example:

ln original_file symlink1

for Read: readlink symlink1

for search find . -type l

for see inode stat original_file

Hardlink example:

ln original_file hardlink1

see number of inode ‘stat original_file’

see how many hardlinks find . -inum 672135

inode - inode is a data structure that stores information about a file or directory in a file system.

Mon, 01 Jan 0001 00:00:00 +0000

adb devices

adb reboot bootloader

Mon, 01 Jan 0001 00:00:00 +0000

docker pull mcr.microsoft.com/windows/nanoserver:ltsc2025

docker pull mcr.microsoft.com/windows:ltsc2019-amd64

https://mcr.microsoft.com/

Mon, 01 Jan 0001 00:00:00 +0000

What you’ll need 2 CPUs or more 2GB of free memory 20GB of free disk space Internet connection Container or virtual machine manager, such as: Docker, QEMU, Hyperkit, Hyper-V, KVM, Parallels, Podman, VirtualBox, or VMware Fusion/Workstation

install

curl -LO https://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64

sudo install minikube-linux-amd64 /usr/local/bin/minikube

Start your cluster

minikube start

Interact with your cluster

kubectl get po -A

minikube kubectl -- get po -A

You can also make your life easier by adding the following to your shell config:

Mon, 01 Jan 0001 00:00:00 +0000

Install Ubuntu

for snap version :

on site https://snapcraft.io/node

to install version 20 :

sudo snap install node --channel=20/stable --classic

for nmv version :

on site https://github.com/nvm-sh/nvm after all close terminal !

curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.5/install.sh | bash

what your version

nmv ls

see all version on

nmv ls-remote

for install

nvm install v18.18.0

switch between system snap or nvm

nvm use system

Then install Node.js:

sudo apt install nodejs

Check that the install was successful by querying node for its version number:

Mon, 01 Jan 0001 00:00:00 +0000

Computer Configuration
└── Policies
    ├── Administrative Templates
    │   └── Windows Components
    │       └── Remote Desktop Services
    │           └── Remote Desktop Session Host
    │               └── Connections
    │                   └── Allow users to connect remotely using Remote Desktop Services → Enabled
    │
    ├── System
    │   └── Remote Assistance → Configure Offer Remote Assistance → Disabled (if you need)
    │
    └── Windows Settings
        ├── Security Settings
        │   ├── Local Policies
        │   │   └── User Rights Assignment
        │   │       └── Allow log on through Remote Desktop Services → Добавь:
        │   │             - Administrators
        │   │             - Remote Desktop Users
        │   │
        │   └── Windows Firewall with Advanced Security
        │       └── Inbound Rules → Включи:
        │             - Remote Desktop - User Mode (TCP-In)
        │             - Remote Desktop - User Mode (UDP-In)

Computer Configuration
└── Preferences
    └── Control Panel Settings
        └── Local Users and Groups
            └── New → Local Group
Action: Update

Group name: Remote Desktop Users

Add: dan\dan

gpresult /h C:\gpo-report.html
start C:\gpo-report.html

Mon, 01 Jan 0001 00:00:00 +0000

list

variant1:

list_one:
  - foo 
  - bar

or variant2:

list_one_other: [foo, bar]

Dictionary

variant1:

map_one:
  foo: one
  bar: two

or variant2:

map_one_another:{foo: one, bar: two}

Strings

variants:

string_one: Hello World
string_two: «Hello World»
string_three: 'Hello World'

## bool

variant:
```yaml
bool_one: yes
bool_two: no
bool_three: True
bool_four: true
bool_five: false
bool_string: «yes»
bool_dig_yes: 1
bool_dig_no: 0

Text

long_text: >
  support for reading
  and 
  writing

long_text: | # or \
  support reading and writing

environments

foo: &default_setting
  env: dev
  db: 
    host: localhost
  db_name: test
  port: 5432

dev: *default_settings
stage: *default_settings

stage:
  <<: *default_settings
  env: stage
  app:
    port: 8080

Multiple documents

---
foo: hello world
---
foo: hello world2

-*/–