Very Windy

2026-04-07T14:24:39Z

Xbl:

Configs

2026-04-02T09:33:29Z

Xbl: /* vim */

= PS1 =
<nowiki>PS1="\[$(tput bold)\]\[\033[38;5;51m\][\[$(tput sgr0)\]\[\033[38;5;45m\] \[$(tput sgr0)\]\[\033[38;5;249m\]\u \[$(tput sgr0)\]\[$(tput bold)\]\[\033[38;5;201m\]@\[$(tput sgr0)\] \[$(tput sgr0)\]\[\033[38;5;249m\]\h\[$(tput sgr0)\] \[$(tput sgr0)\]\[$(tput bold)\]\[\033[38;5;51m\]]\[$(tput sgr0)\] \[\033[38;5;249m\]\W \[$(tput sgr0)\]\[$(tput bold)\]\[\033[38;5;51m\]>\[$(tput sgr0)\] \[$(tput sgr0)\]\[$(tput bold)\]\[\033[38;5;201m\]\\$\[$(tput sgr0)\]\[\033[38;5;14m\] \[$(tput sgr0)\]"</nowiki>

= tmux.conf =
<nowiki>
# Extend history limit
set -g history-limit 42069

# Don't rename windows automatically
set -g allow-rename off

# reload config file
bind r source-file ~/.tmux.conf

# Enable 256 color support
set -g default-terminal "tmux-256color"
set -ga terminal-overrides ",*:RGB"

# Enable clipboard
set -g set-clipboard on

# Change keyboard index
set -g base-index 1
set -g pane-base-index 1
set-window-option -g pane-base-index 1
set-option -g renumber-windows on

# Theme colors
thm_bg="#222436"
thm_fg="#c8d3f5"
thm_black="#1b1d2b"
thm_black4="#444a73"
thm_blue="#82aaff"
thm_cyan="#86e1fc"
thm_gray="#3a3f5a"
thm_green="#00ff69"
#thm_green="#c3e88d"
thm_magenta="#c099ff"
thm_orange="#ff9e64"
thm_pink="#ff757f"
thm_red="#ff757f"
thm_yellow="#ffc777"

# Status bar settings
set -g status "on"
set -g status-bg "${thm_bg}"
set -g status-justify "left"
set -g status-left-length "100"
set -g status-right-length "100"
# Messages
set -g message-style "fg=${thm_cyan},bg=${thm_gray},align=centre"
set -g message-command-style "fg=${thm_cyan},bg=${thm_gray},align=centre"

# Panes
set -g pane-border-style "fg=${thm_gray}"
set -g pane-active-border-style "fg=${thm_blue}"

# Windows
set -g window-status-activity-style "fg=${thm_fg},bg=${thm_bg},none"
set -g window-status-separator " |"
set -g window-status-style "fg=${thm_fg},bg=${thm_bg},none"

# Statusline - current window
set -g window-status-current-format "#[fg=${thm_blue},bg=${thm_bg}, bold] #[fg=${thm_green},bg=${thm_bg}]#I:#[fg=${thm_cyan},bg=${thm_bg}]#W"
#set -g window-status-current-format "#[fg=${thm_blue},bg=${thm_bg}, bold] #[fg=${thm_green},bg=${thm_bg}]#I:#[fg=${thm_cyan},bg=${thm_bg}]#(echo '#{pane_current_path}' | rev | cut -d'/' -f-2 | rev)#[fg=${thm_magenta},bg=${thm_bg}]"

# Statusline - other windows
set -g window-status-format "#[fg=${thm_blue},bg=${thm_bg}] #I:#[fg=${thm_fg},bg=${thm_bg}]#W"

# Statusline - right side
set -g status-right "#[fg=${thm_blue},bg=${thm_bg},nobold,nounderscore,noitalics]#[fg=${thm_bg},bg=${thm_blue},nobold,nounderscore,noitalics] #[fg=${thm_fg},bg=${thm_gray}] #W #{?client_prefix,#[fg=${thm_magenta}],#[fg=${thm_cyan}]}#[bg=${thm_gray}]#{?client_prefix,#[bg=${thm_magenta}],#[bg=${thm_cyan}]}#[fg=${thm_bg}] #[fg=${thm_fg},bg=${thm_gray}]"

# Statusline - left side (empty)
set -g status-left ""

# Modes
set -g clock-mode-colour "${thm_blue}"
set -g mode-style "fg=${thm_blue} bg=${thm_black4} bold"
</nowiki>

= vim =
<code>~./vimrc</code> 
<code>colortheme elflord, industry, </code>

Configs

2026-04-02T09:33:15Z

Xbl:

Very Windy

2026-03-18T16:05:43Z

Xbl:

Very Windy

2026-03-18T09:49:36Z

Xbl: /* New Systems */

= lvm procedure =
<nowiki>Die VM-Disk /dev/sda wurde vergrössert
1. Ist Zustand prüfen
lsblk
2. Disk "sda" neu einlesen
echo 1 > /sys/block/sda/device/rescan
3. Partition vergrössern
growpart /dev/sda 3
4. PV überprüfen
pvs
4a. allenfalls physical volume vergrössern
pvresize /dev/sda3
5. VG überprüfen
vgs
6. LV vergrössern und Filesystem vergrössern
lvresize -rL+50G /dev/mapper/system-docker
lvextend -rl +100%FREE /dev/mapper/vm208-root</nowiki>

== git ==
<code>git submodule update --init</code> Submodule laden 
<code>git submodule update --init --recursive</code> Submodule laden (rekursiv) 
<code>git submodule update --remote</code> Submodule laden (remote) 
 
<code>git submodule update</code> Submodule aktualisieren 
 
Append information after commit: 
<code>git commit --amend --author "Ueli Hans<hans.ueli@uelihans.ch>"</code> 
 
Temporarily store current changes and revert to latest pull: 
<code>git stash</code> 
Go back to stashed changes: 
<code>git stash pop</code>

== openssl ==
Check CSR: 
<code>openssl req -in sample.csr -noout -text</code> 
 
Bash to check private key against certificate (checkssl.sh):
<nowiki>cn=files/reverseproxies/etc/haproxy/certs/www.sexybit.sh
crt="${cn:?Common Name fuer Key und Cert nicht angegebe...}.crt"
key="$cn.key"

crtmd5=$( openssl x509 -noout -modulus -in "$crt" | openssl md5 ) ; \
keymd5=$( openssl rsa -noout -modulus -in "$key" | openssl md5 ) ; \
\
echo "crt: $crtmd5" ; echo "key: $keymd5" ; printf "Dateien: \"$crt\" & \"$key\" -- " ; \
[ "$crtmd5" = "$keymd5" ] && echo "passen zusammen :)" || echo "passen NICHT zusammen :("</nowiki>

== ansible ==
<code>ansible-playbook -C -D playbooks/all.yml -u $USER -t nginx</code> -C (check, dry run), -D (diff, show differences) -u <remote user> -t <tags> 
Tags let you run only specific tagged tasks in a playbook instead of executing everything. Multiple tags can be comma-separated. 
Tags can be skipped with <code>--skip-tags <tags></code> 
Tasks tagged 'always' will run no matter what tags are selected. 
Tasks tagged 'never' only run if explicitly requested with <code>-t never</code> 

== ln ==
<code>ln -s ../files</code>

== curl ==
<code>curl -vvv</code> verbose verbose verbose 
<code>curl -v --resolve windy.verywindy.ch:443:192.168.161.1 https://windy.verywindy.ch</code> check connection with hardcoded dns 
<code>curl -x sexybit.sh https://apod.nasa.gov</code> check connection with proxy 
<code>curl -L https://apod.nasa.gov</code> follow redirects

== New Systems ==
Size: 2CPU, 2G RAM, 40G Disk 
VG Name: system 
/: 10G 
Swap: 4G 
/var-log: 4G 

dns: 10.8.3.74 / 10.8.3.174 
http://mirror.nat.srv.ch/2025/q4/ubuntu

== IPTables / firewalld ==
<nowiki><?xml version="1.0" encoding="utf-8"?>
<direct>
<rule ipv="ipv4" table="filter" chain="INPUT" priority="0">-p tcp --dport 22 -m state --state NEW,ESTABLISHED -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="INPUT" priority="1">-p tcp --dport 21022 -m state --state NEW,ESTABLISHED -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="INPUT" priority="5">-p icmp -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="INPUT" priority="8">-p udp --sport 53 -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="0">-p tcp --sport 22 -m state --state ESTABLISHED -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="1">-p tcp --sport 21022 -m state --state ESTABLISHED -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="5">-p icmp -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="6">-p udp --dport 53 -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="8">-p tcp --dport 80 -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="9">-p tcp --dport 443 -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="12">-p udp --dport 123 -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="56">-p tcp --dport 5665 -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="67">-p udp --dport 67:68 -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="69">-m state --state ESTABLISHED,RELATED -j ACCEPT</rule>
<rule ipv="ipv4" table="filter" chain="OUTPUT" priority="99">-j DROP</rule>
</direct></nowiki>

Show all direct rules (/etc/firewalld/direct.xml): 
<code>firewall-cmd --get-all-rules --direct</code>

== Clear root Password / disable root login ==
-d --delete: delete user's password 
-l --lock: lock user's password 
<code># passwd -dl root</code>

== Start new git project ==
Create blank repo without README.md 
Run ansible-init script (cs) 

== Monitoring ==
icinga-Server verbindet sich zum Agent über Port 5665. 
Bei Wartungen Downtime erstellen. 

== Wartung ==
Snapshots nach 1w löschen.

== upremote ==
<code>$HOME/scripts/</code> 
<code>$HOME/log/</code>

= Check yo shit front to back =

== Remount /tmp without noexec flag ==
<code>mount -o remount,exec /tmp</code>

== tmux ==
Move window to other pane: 
<nowiki>Ctrl + b
:move-pane -t X</nowiki>
Move window to new pane: 
<code>Ctrl + b !</code>

== icinga2 ==
Check available commands in Icinga Director / Commands. 
 
After editing monitoring parameters in ansible: 
<code>ansible-playbook -D playbooks/all.yml -t icinga2_agent:update-host</code>

== pfx/pem conversion ==
# Extract the private key (you will be prompted to enter the PFX file password and to set a password for the private key) 
<code>openssl pkcs12 -in your_certificate.pfx -nocerts -out private_key.key</code> 
 
# Extract the CRT certificate (you will be prompted to enter the PFX file password) 
<code>openssl pkcs12 -in your_certificate.pfx -clcerts -nokeys -out certificate.crt</code> 
 
# (Optional) Remove the password from the private key (you will be prompted to enter the password set for the private key) 
<code>openssl rsa -in private_key.key -out private_key_nopass.key</code> 
 
Encryption of private key can be checked with <code># cat private.key</code> (first line)
 
Use argument <code>-legacy</code> for deprecated ciphers. 

== SFTP für Endkunden freischalten ==
Find high port on mgmt01: <code>nft list ruleset | grep target_host_ip</code> 
Horizon Security Group Rules (mgmt-ssh-forwarding), allow ingress from client_ip 

== openstack cli ==
<code>export OS_CLOUD="name"</code>

== icinga2 host vars ==
<code>host_vars/host_name/icinga2.yml</code>: 
<nowiki>icinga2_agent__host_vars:
mailq:
mailq_servertype: "sendmail"</nowiki>

== mysql ==
<code>mysql <dbname> < /home/doobiean/anUpdate.sql</code> Apply sql stuffs to <dbname> database 
<code>mysql -e "SHOW DATABASES" | grep 0109</code> look for databases 

== ansible-vault ==
<code>ansible-vault encrypt_string <string></code> encrypt <string>

== splunk ==
<code>grep -i "connected to" /opt/splunkforwarder/var/log/splunk/splunkd.log</code> Check connected servers.

== openDKIM ==
<code>chmod -R ug+x /etc/opendkim</code> If key-permissions are denied, even though they appear to be correct.

== n1 ==
<code>dig 6bit.ch +short</code> 
<code>whois $(!!)</code>

2026-02-18T10:07:13Z

Xbl: /* openssl */