Certificate Authority (CA) Server | Host Server(s) | Client(s) |
---|---|---|
Host Server Certificate Configuration | ||
This is the server typically managed by a security team. The root CA private keys are held on this server and should be protected. If these keys are compromised it will be necessary to Revoke & Rotate/Recreate ALL Certificates!! | These are the servers that are being built or reprovisioned. The Host CA Signed Certificate is used to prove Host Authenticity to clients. It is sent to the ssh client during the initial handshake when a ssh client attempts to login. | The user laptop or server that's runing the ssh client. The Client CA Signed Certificate is used to prove Client Authenticity to the Host Server |
Step 1. Create HOST CA signing keys : Example ssh-keygen -t rsa -N '' -C HOST-CA -b 4096 -f host-ca |
Step 2. Let's generate a fresh set of ssh RSA HOST keys with 4096 bits. Typically the keys are generated by default |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
{ | |
// Disable admin for test | |
"admin": { | |
"disabled": true | |
}, | |
"apps": { | |
"http": { | |
// Use http to avoid having to provision an ssl cert | |
"http_port": 4444, | |
"servers": { |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
<script lang="ts" setup> | |
import * as monaco from 'monaco-editor/esm/vs/editor/editor.api'; | |
import { computed, toRefs } from 'vue'; | |
// Define an interface for the props | |
interface Props { | |
diffEditor?: boolean; | |
width?: string | number; | |
height?: string | number; | |
original?: string; |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
/** | |
* requestAnimationFrame polyfill from Paul Irish | |
* http://paulirish.com/2011/requestanimationframe-for-smart-animating/ | |
* MIT license | |
*/ | |
var lastTime = 0, | |
vendors = ["ms", "moz", "webkit", "o"] | |
for (var x = 0; x < vendors.length && !window.requestAnimationFrame; ++x) { | |
window.requestAnimationFrame = window[vendors[x] + "RequestAnimationFrame"] |
https://unix.stackexchange.com/questions/437468/bluetooth-headset-volume-too-low-only-in-arch
VMG's answer is subtly wrong; it will technically work, but it will disable all other plugins than a2dp, meaning bluetooth keyboards/mice/gamepads/etc will stop working, when the only plugin causing issues seems to be one called avrcp.
Edit
/lib/systemd/system/bluetooth.service
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
############################################################################ | |
# # | |
# ------- Useful Docker Aliases -------- # | |
# # | |
# # Installation : # | |
# copy/paste these lines into your .bashrc or .zshrc file or just # | |
# type the following in your current shell to try it out: # | |
# wget -O - https://gist.githubusercontent.com/jgrodziski/9ed4a17709baad10dbcd4530b60dfcbb/raw/d84ef1741c59e7ab07fb055a70df1830584c6c18/docker-aliases.sh | bash | |
# # | |
# # Usage: # |
use script
https://github.com/moby/moby/blob/master/contrib/download-frozen-image-v2.sh
usage:
chmod +x download-frozen-image-v2.sh
./download-frozen-image-v2.sh "<folder-name-where-image-will-be-saved>" <docker-image-name:docker-image-tag>
tar -cC "" . | docker load
Submitting forms with Turbolinks has always been pain in the ass, especially in a situation when the server responds with validation errors.
This snippet aims to solve the problem.
Resources:
- serialize() : https://vanillajstoolkit.com/helpers/serialize/
NewerOlder