Useful commands | Bjørnar Hagen

🔐

Security & privacy

Make a password encrypted backup of a directory

Decrypt an encrypted directory

☸

Kubernetes

Make a Dockerfile run forever so you can debug it

k8s manifest example - certificate

k8s manifest example - deployment

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: bjornar-dev-ingress
namespace: bjornar-dev-ns
annotations:
kubernetes.io/ingress.class: "nginx"
nginx.ingress.kubernetes.io/ssl-redirect: "true"
spec:
tls: - hosts: - bjornar.dev - www.bjornar.dev
secretName: bjornar-dev-tls
rules: - host: bjornar.dev
http: &http_rules
paths: - path: /
pathType: Prefix
backend:
service:
name: bjornar-dev-service
port:
number: 80 - host: www.bjornar.dev
http: \*http_rules

---

apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: bjornar-dev-ingress-admin
namespace: bjornar-dev-ns
annotations:
kubernetes.io/ingress.class: "nginx"
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/use-regex: "true"
nginx.ingress.kubernetes.io/rewrite-target: /admin/$1
nginx.ingress.kubernetes.io/whitelist-source-range: "127.0.0.1" # Replace with public IP
spec:
tls: - hosts: - bjornar.dev - www.bjornar.dev
secretName: bjornar-dev-tls
rules: - host: bjornar.dev
http: &http_rules_admin
paths: - path: /admin
pathType: Exact
backend:
service:
name: bjornar-dev-service
port:
number: 80 - path: /admin/(.*)
pathType: Prefix
backend:
service:
name: bjornar-dev-service
port:
number: 80 - host: www.bjornar.dev
http: *http_rules_admin

k8s manifest example - ingress with a private /admin space

k8s manifest example - service

🐧

Linux

: Add user to www-data
: set www-data to owner of folder
: Change folder permissions
: Change file permissions
: Create symbolic link between sites-available and sites-enabled
#!/bin/sh # For AWS Credentials export HOME=/home/username THEDATE=`date +%Y-%m-%d-%H-%M-%S` prefix="my-prefix" # tar the folder sudo tar czf /backups/${prefix}-www-daily-${THEDATE}.tar.gz -C /var www # sync to amazon /usr/local/bin/aws s3 cp /backups/${prefix}-www-daily-${THEDATE}.tar.gz s3://bucket-name: Backup folder to AWS S3 using the AWS cli
0 0 \* \* _ /backup-daily.sh > /backup.log 2>&1 0 0 _ _ 0 /backup-weekly.sh > /backup.log 2>&1 0 0 1 _ _ /backup-monthly.sh > /backup.log 2>&1 0 0 1 1 _ /backup-yearly.sh > /backup.log 2>&1 0 0 1 1 \* /backup-permanent.sh > /backup.log 2>&1: Cron job schedule for backups

👨‍💻

Web dev & DevOps

: Create self-signed certificate for local use
: Port forward a remote port to a local one; Very handy for using local software with remote data; MySQL example: ssh user@server -L 3307:localhost:3306; localhost:3307 now works locally as localhost:3306 works on the server
const form = document.querySelector('form'); const data = new FormData(form); let xhr = new XMLHttpRequest(); xhr.onreadystatechange = function() { if (this.readyState == 4 && this.status == 200) { let response = null; try { response = JSON.parse(xhr.responseText); } catch (e) { console.error(e); } handleSuccess(input, response); } }; xhr.open("POST", form.action, true); xhr.send(data);: XMLHttpRequest for formdata

🪟

Windows

: Create a self-signed certificate; NOTE: Requires admin
: Install Chocolatey; NOTE: Requires admin