Fabio M. fabmorais

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

Nginx FastCGI cache

Example /etc/nginx/nginx.conf using FastCGI (e.g. to PHP-FPM) with FastCGI cache enabled. This will capture returned data and persist it to a disk based cache store for a configurable amount of time, great for robust full page caching.

Will need to create a directory to hold cache files, for the example given here that would be:

$ sudo mkdir -p /var/cache/nginxfastcgi
$ chown www-data: /var/cache/nginxfastcgi

	#!/bin/bash

	# Configure the instance to run as a Port Address Translator (PAT) to provide
	# Internet connectivity to private instances.
	# This is pretty much the same as the configure-pat.sh script from a AWS AmazonLinux NAT instance except that we tweak
	#the iptables rule to NOT NAT traffic that has to flow over the VPN but NAT anything that does'nt match our remote ends
	#VPC CIDR value. This way access to remote subnet over VPN will be normally routed and not NATted to IP of our NAT instance.
	#E.g. in this script, the assumption is that the VPC CIDR for the "other" end is 172.19.0.0/16. YMMV.
	#See http://www.onepwr.org/2012/08/20/link-amazon-vpcs-over-a-ipsec-site-to-site-vpn/ for full atricle.
	# Srinivas - 20120820.

	#!/usr/bin/env python

	import requests
	import json
	import sys
	reload(sys)
	sys.setdefaultencoding('utf-8')

	# Your PagerDuty API key. A read-only key will work for this.
	api_key = 'ENTER_YOUR_API_KEY'