How to Enable ssl nginx on Ubuntu 22.04

sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/ssl-cert-snakeoil.key -out /etc/ssl/certs/ssl-cert-snakeoil.pem

sudo openssl dhparam -out /etc/nginx/dhparam.pem 4096

sudo nano /etc/nginx/snippets/ssl-params.conf

cd /etc/nginx/sites-available

sudo cp defaul ssl-default

sudo nano ssl-default

---> enable port 443

include snippets/snakeoil.conf;

include snippets/ssl-params.conf;

save and exit nano

sudo ln -s /etc/nginx/sites-available/ssl-default /etc/nginx/sites-enabled/ssl-default

sudo nginx -t

sudo systemctl restart nginx

ssl_protocols TLSv1.3;
ssl_prefer_server_ciphers on;
ssl_dhparam /etc/nginx/dhparam.pem; 
ssl_ciphers EECDH+AESGCM:EDH+AESGCM;
ssl_ecdh_curve secp384r1;
ssl_session_timeout  10m;
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off;
ssl_stapling on;
ssl_stapling_verify on;
resolver 8.8.8.8 8.8.4.4 valid=300s;
resolver_timeout 5s;
# Disable strict transport security for now. You can uncomment the following
# line if you understand the implications.
#add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";

Read More

How to Install Docker on Ubuntu 22.04

cd ~

sudo apt update

sudo apt install apt-transport-https ca-certificates curl software-properties-common

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo gpg --dearmor -o /usr/share/keyrings/docker-archive-keyring.gpg

echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/docker-archive-keyring.gpg] https://download.docker.com/linux/ubuntu $(lsb_release -cs) stable" | sudo tee /etc/apt/sources.list.d/docker.list > /dev/null

sudo apt update

apt-cache policy docker-ce

sudo apt install docker-ce

sudo systemctl status docker

sudo usermod -aG docker ${USER}

su - ${USER}

Source:
https://www.digitalocean.com/community/tutorials/how-to-install-and-use-docker-on-ubuntu-22-04

Read More

How to Enable snmp Daemon

$ sudo apt update

$ sudo apt install snmp snmpd snmp-mibs-downloader

$ sudo nano /etc/snmp/snmpd.conf

Then set rocommunity password securely:

agentaddress  udp:161

view   systemonly  included   .1.3.6.1.2.1

view   systemonly  included   .1.3.6.1.4.1
rocommunity  public1234xA12 default -V systemonly

$ sudo systemctl restart snmpd

Securing SNMP Configuration

Security is a critical aspect when configuring SNMP. Always ensure that community strings are complex and not easily guessable. Additionally, restrict access to your SNMP service to trusted hosts only.

Cikarang, West Java - 20240810/06:11AM.

Read More