fabmorais

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

fabmorais

Nginx FastCGI cache

Example /etc/nginx/nginx.conf using FastCGI (e.g. to PHP-FPM) with FastCGI cache enabled. This will capture returned data and persist it to a disk based cache store for a configurable amount of time, great for robust full page caching.

Will need to create a directory to hold cache files, for the example given here that would be:

$ sudo mkdir -p /var/cache/nginxfastcgi
$ chown www-data: /var/cache/nginxfastcgi

fabmorais

#!/bin/bash

# Configure the instance to run as a Port Address Translator (PAT) to provide 
# Internet connectivity to private instances. 
# This is pretty much the same as the configure-pat.sh script from a AWS AmazonLinux NAT instance except that we tweak 
#the iptables rule to NOT NAT traffic that has to flow over the VPN but NAT anything that does'nt match our remote ends 
#VPC CIDR value. This way access to remote subnet over VPN will be normally routed and not NATted to IP of our NAT instance.
#E.g. in this script, the assumption is that the VPC CIDR for the "other" end is 172.19.0.0/16. YMMV.
#See http://www.onepwr.org/2012/08/20/link-amazon-vpcs-over-a-ipsec-site-to-site-vpn/ for full atricle.
# Srinivas - 20120820.

fabmorais

#!/usr/bin/env python

import requests
import json
import sys
reload(sys)
sys.setdefaultencoding('utf-8')

# Your PagerDuty API key.  A read-only key will work for this.
api_key = 'ENTER_YOUR_API_KEY'