Tundra_Bit Tundra-bit

Nginx location:

Nginx location block section have a search order, a modifier, an implicit match type and an implicit switch to whether stop the search on match or not. the following array describe it for regex.


# --------------------------------------------------------------------------------------------------------------------------------------------
# Search-Order       Modifier       Description                                                        Match-Type        Stops-search-on-match
# --------------------------------------------------------------------------------------------------------------------------------------------
#     1st               =           The URI must match the specified pattern exactly                  Simple-string              Yes

ports for mailcow

ufw allow 25/tcp
ufw allow 465/tcp
ufw allow 587/tcp
ufw allow 143/tcp
ufw allow 993/tcp
ufw allow 110/tcp
ufw allow 995/tcp
ufw allow 4190/tcp

Not happy with Docker modifying your precious firewall rules?

Docker inserts iptables rules when it's started by default
buster uses nftables by default
let's make Docker use nftables instead
PROFIT

Prerequisites

Install Docker CE and nftables:

	# Made by Justin Marwad 2022

	# Install ex: ./Install-Wazuh.ps1 -server [wazuh_ip] -name [name_wazuh_sees] -install
	# Update cert ex: ./Install-Wazuh.ps1 -server [wazuh_ip] -name [name_wazuh_sees]
	# Restart ex: ./Install-Wazuh.ps1 -restart
	# Uninstall ex: ./Install-Wazuh.ps1 uninstall

	param (
	[string]$server = $null,
	[string]$name = [System.Net.Dns]::GetHostName(),

	#!/bin/bash

	zone=domain.nl
	dnsrecord=some-server.domain.nl

	## Cloudflare authentication details
	## keep these private
	cloudflare_token="XXXXXX"

	# get certificate hash

	# Run the last command as root
	sudo !!
	# Serve current directory tree at http://$HOSTNAME:8000/
	python -m SimpleHTTPServer
	# Save a file you edited in vim without the needed permissions
	:w !sudo tee %
	# change to the previous working directory
	cd -
	# Runs previous command but replacing
	^foo^bar

	[reload]
	command:/usr/local/bin/flock -n -E 0 -o /tmp/filter_update_tables_blk.lock /usr/home/blacklist-update.sh
	parameter:
	type:script_output
	message:IP Blacklist Update
	description:Centralized Blacklist IP Update from my own service

	upstream proxmox {
	server pve1:8006;
	server pve2:8006;
	server pve3:8006;
	}

	server {
	listen 80 default_server;
	rewrite ^(.*) https://$host$1 permanent;
	}

	[void][Windows.Networking.Connectivity.NetworkInformation, Windows, ContentType = WindowsRuntime]
	$cost = [Windows.Networking.Connectivity.NetworkInformation]::GetInternetConnectionProfile().GetConnectionCost()
	$cost.ApproachingDataLimit -or $cost.OverDataLimit -or $cost.Roaming -or $cost.BackgroundDataUsageRestricted -or ($cost.NetworkCostType -ne "Unrestricted")

	function Get-InstalledSoftware {
	<#
	.SYNOPSIS
	Get all installed from the Uninstall keys in the registry.
	.DESCRIPTION
	Read a list of installed software from each Uninstall key.

	This function provides an alternative to using Win32_Product.
	.EXAMPLE
	Get-InstalledSoftware