Jon dayreiner

Prerequisites

Ubuntu 20.04 (18.04, 16.04 works the same)
Apache 2.4.18 or higher
OpenSSL 1.0.2g-1ubuntu4.10 or higher
e.g. LetsEncrypt certificate

OS: Ubuntu 20.04 Apache/2.4.18 1.0.2g-1ubuntu4.10 +

References on modern password policies

Below links provide source, reference link and relevant quote

Standards

NIST

https://github.com/usnistgov/800-63-3/blob/nist-pages/sp800-63b/sec5_authenticators.md

Verifiers SHOULD NOT impose other composition rules (e.g., requiring mixtures of different character types or prohibiting consecutively repeated characters) for memorized secrets. Verifiers SHOULD NOT require memorized secrets to be changed arbitrarily (e.g., periodically).However, verifiers SHALL force a change if there is evidence of compromise of the authenticator.

Major organisations

Modes

Vim has two modes insertion mode and command mode. The editor begins in command mode, where the cursor movement and text deletion and pasting occur. Insertion mode begins upon entering an insertion or change command. [ESC] returns the editor to command mode (where you can quit, for example by typing :q!). Most commands execute as soon as you type them except for "colon" commands which execute when you press the ruturn key.

Quitting

:x Exit, saving changes
:q Exit as long as there have been no changes
ZZ Exit and save changes if any have been made
:q! Exit and ignore any changes

Inserting Text

# Install gosu.  https://github.com/tianon/gosu
ENV GOSU_VERSION=1.11
RUN gpg --keyserver ha.pool.sks-keyservers.net --recv-keys B42F6819007F00F88E364FD4036A9C25BF357DD4 \
    && curl -o /usr/local/bin/gosu -SL "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64" \
    && curl -o /usr/local/bin/gosu.asc -SL "https://github.com/tianon/gosu/releases/download/${GOSU_VERSION}/gosu-amd64.asc" \
    && gpg --verify /usr/local/bin/gosu.asc \
    && rm /usr/local/bin/gosu.asc \
    && rm -r /root/.gnupg/ \
 &amp;&amp; chmod +x /usr/local/bin/gosu \

	// keep N-day worth of data
	var days=7;

	// change to false to have the script to really exclude old records
	// from the database. While true, no change at all will be made to the DB
	var dryrun=true;

	var now = new Date().getTime(),
	time_criteria = now ;
	time_criteria_in_seconds = time_criteria / 1000;

	############ If you are using DOCKER all-in-one image, create Dockerfile like: ################
	############ FROM openproject/openproject:16 ################
	############ COPY ./enterprise_token.rb app/models/enterprise_token.rb ################

	############ If you are runing a manual installation: ################
	############ REPLACE app/models/enterprise_token.rb in the source code with this file! ################
	############ also be sure to RESTART OpenProject after replacing the file. ################

	############ If using some other set up (eg docker-compose), read the comments on ################
	############ https://gist.github.com/markasoftware/f5b2e55a2c2e3abb1f9eefcdf0bfff45 ################

	Server 2 sockets,6 cores each, 2.4ghz

	# Set ixgbe options
	# Limit RSS queues to the number of physical cores per cpu
	# Disable offload
	# When you change this, you need to run the command and reboot for it to take.
	echo "options ixgbe LRO=0,0 MQ=1,1 RSS=6,6 VMDQ=0,0 vxlan_rx=0,0" > /etc/modprobe.d/ixgbe.conf

	# Shut down HT cores
	for i in $(seq 1 2 23); do

	# Virtual Tunnel Interface
	# 172.196.17.188 - 172.196.17.191
	set interfaces vti vti0 address 172.196.17.190/30
	set interfaces vti vti0 description 'Virtual tunnel interface for VPN tunnel'

	# Phase 2
	set vpn ipsec esp-group ESP-Default compression 'disable'
	set vpn ipsec esp-group ESP-Default lifetime '3600'
	set vpn ipsec esp-group ESP-Default mode 'tunnel'
	set vpn ipsec esp-group ESP-Default pfs 'dh-group16'

	#!/bin/bash

	# Quickly setup Zsh powered by antigen on fresh Debian servers
	# Usage: bash -c "$(curl -fsSL https://gist.githubusercontent.com/soifou/c99be4373f6ffe3b4ff7/raw/COMMIT_ID/zsh-antigen-debian.sh)"


	if [[ $(which zsh \| wc -m) == 0 ]]; then
	echo "Zsh is not installed... installing"
	sudo apt-get install -y zsh
	fi

	{
	"APIGatewayServiceRolePolicy": {
	"Arn": "arn:aws:iam::aws:policy/aws-service-role/APIGatewayServiceRolePolicy",
	"AttachmentCount": 0,
	"CreateDate": "2019-10-22T18:22:01+00:00",
	"DefaultVersionId": "v6",
	"Document": {
	"Statement": [
	{