home.social

#snippet — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #snippet, aggregated by home.social.

  1. Hugo | DevOps | Cybersecurity @[email protected] ·

    Control primary component selection in Galera Cluster with node weight configuration. Use pc.weight in wsrep_provider_options to assign higher votes to preferred nodes. During a network partition, the group with the highest total weight wins quorum. #mysql #snippet #node-weight

    valtersit.com/vault/galera-clu

    #mysql #snippet #node
  2. Hugo | DevOps | Cybersecurity @[email protected] ·

    Bash’s `read -s` disables terminal echo via `stty -echo`, reads input, then restores it. Store credentials in a variable cleared after use, and use them only in a subshell to prevent leakage. Secure credential injection for POSIX shells. #bash #snippet #security

    valtersit.com/vault/bash-secur

    #bash #snippet #security
  3. Hugo | DevOps | Cybersecurity @[email protected] ·

    Need to bulk reset AD user passwords from a CSV? This PowerShell snippet processes each user, handles errors, logs success/failure, and forces password change at next logon. Works on Windows Server 2016-2022. #windows #snippet #powershell

    valtersit.com/vault/bulk-reset

    #windows #snippet #powershell
  4. Hugo | DevOps | Cybersecurity @[email protected] ·

    Need to bulk reset AD user passwords from a CSV? This PowerShell snippet processes each user, handles errors, logs success/failure, and forces password change at next logon. Works on Windows Server 2016-2022. #windows #snippet #powershell

    valtersit.com/vault/bulk-reset

    #windows #snippet #powershell
  5. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor your Shodan API rate limits with a simple curl to /api-info. Extract credits, query limits, and scan limits via jq. Works on Linux and macOS. Full snippet: #shodan #snippet #api-rate-limits

    valtersit.com/vault/shodan-api

    #shodan #snippet #api
  6. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor your Shodan API rate limits with a simple curl to /api-info. Extract credits, query limits, and scan limits via jq. Works on Linux and macOS. Full snippet: #shodan #snippet #api-rate-limits

    valtersit.com/vault/shodan-api

    #shodan #snippet #api
  7. Hugo | DevOps | Cybersecurity @[email protected] ·

    Automate compliance fixes: use OpenSCAP's generate-fix to create a Bash remediation script from XCCDF scan results. Maps failed rules to benchmark fixes for RHEL 8/9, CentOS 8, Fedora 36+. #remediation #snippet #openscap

    valtersit.com/vault/remediatio

    #remediation #snippet #openscap
  8. Hugo | DevOps | Cybersecurity @[email protected] ·

    Automate compliance fixes: use OpenSCAP's generate-fix to create a Bash remediation script from XCCDF scan results. Maps failed rules to benchmark fixes for RHEL 8/9, CentOS 8, Fedora 36+. #remediation #snippet #openscap

    valtersit.com/vault/remediatio

    #remediation #snippet #openscap
  9. Hugo | DevOps | Cybersecurity @[email protected] ·

    Need to cap CPU on a legacy system without cgroups? cpulimit attaches to a PID and sends SIGSTOP/SIGCONT at microsecond intervals to enforce a percentage limit. Works on CentOS 7, Ubuntu 20.04, Debian 11. #linux #snippet #cpu-throttling

    valtersit.com/vault/limit-proc

    #linux #snippet #cpu
  10. Hugo | DevOps | Cybersecurity @[email protected] ·

    Need 90th, 95th & 99th percentiles over sliding 1-hour windows for CPU metrics? This Flux script uses window() and quantile() with t-digest for efficient approximate computation. #flux #snippet #percentile

    valtersit.com/vault/flux-query

    #flux #snippet #percentile
  11. Hugo | DevOps | Cybersecurity @[email protected] ·

    Use InfluxDB as an annotation source in Grafana to overlay events like deployments on your graphs. This Flux query maps event data from a measurement into the required _time, title, and text columns, using a host tag matched to a dashboard variable. #grafana #snippet #annotations

    valtersit.com/vault/grafana-an

    #grafana #snippet #annotations
  12. Hugo | DevOps | Cybersecurity @[email protected] ·

    Stop namespace conflicts in Helm. Use .Release.Namespace to dynamically scope resources to the release’s namespace. Works with Helm 3.x on Kubernetes 1.19+. No more cross-namespace clashes. #helm #snippet #kubernetes

    valtersit.com/vault/helm-chart

    #helm #snippet #kubernetes
  13. Hugo | DevOps | Cybersecurity @[email protected] ·

    Secure your container data: Mount host directories as read-only using Docker volumes. The `:ro` flag enforces kernel-level write protection, preventing container processes from altering the host filesystem. Essential for security. #docker #snippet #volumes #read-only #ValtersIT

    valtersit.com/vault/mount-host

    #docker #snippet #volumes #read #valtersit
  14. Hugo | DevOps | Cybersecurity @[email protected] ·

    Keep Lynis audit logs under control with automated rotation and compression. This snippet configures logrotate to rotate logs weekly, gzip them, and retain 4 weeks of history — preventing disk exhaustion on Ubuntu 22.04, Debian 12, RHEL 9, or CentOS Stream 9. Essential for frequent scans. #lynis #snippet #logrotate

    valtersit.com/vault/lynis-audi

    #lynis #snippet #logrotate
  15. Cédric Delalande :ruby: @[email protected] ·

    I often get frustrated when copy-pasting commands from a website into my Nushell terminal, especially with those line-escaping backslashes...

    Here is a little snippet I found to solve that issue.

    Read more on my blog: moskitohero.com/post/2026-07-1

    #nushell #bash #shell #snippet

    #nushell #bash #shell #snippet
  16. Cédric Delalande :ruby: @[email protected] ·

    I often get frustrated when copy-pasting commands from a website into my Nushell terminal, especially with those line-escaping backslashes...

    Here is a little snippet I found to solve that issue.

    Read more on my blog: moskitohero.com/post/2026-07-1

    #nushell #bash #shell #snippet

    #nushell #bash #shell #snippet
  17. Cédric Delalande :ruby: @[email protected] ·

    I often get frustrated when copy-pasting commands from a website into my Nushell terminal, especially with those line-escaping backslashes...

    Here is a little snippet I found to solve that issue.

    Read more on my blog: moskitohero.com/post/2026-07-1

    #nushell #bash #shell #snippet

    #nushell #bash #shell #snippet
  18. Cédric Delalande :ruby: @[email protected] ·

    I often get frustrated when copy-pasting commands from a website into my Nushell terminal, especially with those line-escaping backslashes...

    Here is a little snippet I found to solve that issue.

    Read more on my blog: moskitohero.com/post/2026-07-1

    #nushell #bash #shell #snippet

    #nushell #bash #shell #snippet
  19. Hugo | DevOps | Cybersecurity @[email protected] ·

    Configure iDRAC for encrypted SNMP v3 traps: racadm sets trap destination, enables alerts, and configures auth/privacy protocols. iDRAC firmware generates traps from Dell MIBs on temperature, power, fan events.

    #idrac #snippet #snmp

    valtersit.com/vault/monitor-id

    #idrac #snippet #snmp
  20. Hugo | DevOps | Cybersecurity @[email protected] ·

    Enforce HTTPS for all S3 data access with this AWS CLI policy, meeting ISO 27001 A.13.2.3 on secure communications. Uses aws:SecureTransport condition to deny non-TLS requests. Scopable to specific principals.
    #iso #snippet #awss3

    valtersit.com/vault/aws-s3-buc

    #iso #snippet #awss3
  21. Hugo | DevOps | Cybersecurity @[email protected] ·

    Analyze per-process page faults with `ps` and `/proc/[pid]/stat`. Track major faults (disk I/O) vs minor faults (cache) via kernel's `task_struct`. Compute delta over time to spot high-impact processes. Production-ready for Ubuntu 22.04, Debian 12, RHEL 8. #linux #snippet #page-fault #major-fault #ValtersIT

    valtersit.com/vault/perprocess

    #linux #snippet #page #major #valtersit
  22. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor ZeroTier with Prometheus: Export peer counts, health & bandwidth stats via ZeroTier JSON API, scraped by node_exporter textfile collector. Script queries /status and /network/[ID] endpoints, outputs gauge metrics. Works on Ubuntu 22.04, Debian 12. #zerotier #prometheus #snippet

    valtersit.com/vault/zerotier-w

    #zerotier #prometheus #snippet
  23. Hugo | DevOps | Cybersecurity @[email protected] ·

    Calculate P99 latency from structured logs in Loki using LogQL. This query filters for `duration_ms` fields, then applies `quantile_over_time(0.99, [5m])` via the t-digest algorithm for efficient approximation. Works with Loki v2.6+ and LogQL v2.0+. Full guide at #loki #snippet #latency #p99 #ValtersIT

    valtersit.com/vault/logql-quer

    #loki #snippet #latency #p99 #valtersit
  24. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor USB insertion events to detect data exfiltration. Use wevtutil to query System log for Event ID 20001 from Microsoft-Windows-Kernel-PnP, filtering for 'USB\VID_' hardware IDs. Outputs timestamps, device description, and serial number. #windows #snippet #usb-monitoring #dlp #ValtersIT

    valtersit.com/vault/monitor-us

    #windows #snippet #usb #dlp #valtersit
  25. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor USB insertion events to detect data exfiltration. Use wevtutil to query System log for Event ID 20001 from Microsoft-Windows-Kernel-PnP, filtering for 'USB\VID_' hardware IDs. Outputs timestamps, device description, and serial number. #windows #snippet #usb-monitoring #dlp #ValtersIT

    valtersit.com/vault/monitor-us

    #windows #snippet #usb #dlp #valtersit
  26. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor USB insertion events to detect data exfiltration. Use wevtutil to query System log for Event ID 20001 from Microsoft-Windows-Kernel-PnP, filtering for 'USB\VID_' hardware IDs. Outputs timestamps, device description, and serial number. #windows #snippet #usb-monitoring #dlp #ValtersIT

    valtersit.com/vault/monitor-us

    #windows #snippet #usb #dlp #valtersit
  27. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor USB insertion events to detect data exfiltration. Use wevtutil to query System log for Event ID 20001 from Microsoft-Windows-Kernel-PnP, filtering for 'USB\VID_' hardware IDs. Outputs timestamps, device description, and serial number. #windows #snippet #usb-monitoring #dlp #ValtersIT

    valtersit.com/vault/monitor-us

    #windows #snippet #usb #dlp #valtersit
  28. Hugo | DevOps | Cybersecurity @[email protected] ·

    Monitor USB insertion events to detect data exfiltration. Use wevtutil to query System log for Event ID 20001 from Microsoft-Windows-Kernel-PnP, filtering for 'USB\VID_' hardware IDs. Outputs timestamps, device description, and serial number. #windows #snippet #usb-monitoring #dlp #ValtersIT

    valtersit.com/vault/monitor-us

    #valtersit #dlp #usb #snippet #windows
  29. Hugo | DevOps | Cybersecurity @[email protected] ·

    Deploy stateful Workers with Durable Objects using `wrangler deploy --bind`. Achieve strongly consistent state across requests via a single global coordinator with SQLite-based persistence. Automatic failover included. #cloudflare #durable-objects #snippet

    valtersit.com/vault/integrate-

    #cloudflare #durable #snippet
  30. Hugo | DevOps | Cybersecurity @[email protected] ·

    Zero-downtime deployments with Fabric: This snippet implements blue-green swapping by checking a symlink, deploying to the inactive environment, and running health checks via c.run(). Perfect for Ubuntu/Debian. #fabric #snippet #blue-green

    valtersit.com/vault/rolling-de

    #fabric #snippet #blue
  31. Hugo | DevOps | Cybersecurity @[email protected] ·

    Migrate Terraform state from local to S3 without re-importing resources. Use `terraform state mv` combined with a backend migration to rename and transition state files seamlessly. Works on Linux, macOS, Windows (Terraform 0.12+). Details: #terraform #snippet #state-migration #s3 #ValtersIT

    valtersit.com/vault/migrate-te

    #terraform #snippet #state #s3 #valtersit
  32. Hugo | DevOps | Cybersecurity @[email protected] ·

    Can't trust a scan from within an infected OS. This snippet triggers Windows Defender Offline Scan via WinRE, booting into a minimal PE environment with updated signatures to catch persistent, hidden malware. Windows 10/11, Server 2016+. #windows #snippet #offline-scan #winre #ValtersIT

    valtersit.com/vault/offline-sc

    #windows #snippet #offline #winre #valtersit
  33. Hugo | DevOps | Cybersecurity @[email protected] ·

    Protect your VLAN configs! Backup vlan.dat on Cisco IOS/IOS-XE switches with `copy flash:vlan.dat flash:vlan-backup.dat`. Restore via `copy flash:vlan-backup.dat flash:vlan.dat` and reload. Essential for disaster recovery or cloning setups. #cisco #snippet #ValtersIT

    valtersit.com/vault/vlan-datab

    #cisco #snippet #valtersit
  34. Hugo | DevOps | Cybersecurity @[email protected] ·

    Need to route multiple subnets through a single IPSec tunnel on VyOS 1.4? This snippet shows how to configure multiple traffic selectors (TS) with strongSwan and XFRM for efficient site-to-site connections. #vyos #snippet #ipsec #traffic-selector #ValtersIT

    valtersit.com/vault/ipsec-tunn

    #vyos #snippet #ipsec #traffic #valtersit
  35. Hugo | DevOps | Cybersecurity @[email protected] ·

    Streamline your LLMNR poisoning workflow: Use Responder's -o and -F flags to output NTLMv1 hashes in Hashcat-compatible format for offline cracking with mode 5500. Works on Kali, Ubuntu, Parrot. #responder #snippet #hashcat #llmnr #ValtersIT

    valtersit.com/vault/llmnr-pois

    #responder #snippet #hashcat #llmnr #valtersit
  36. Hugo | DevOps | Cybersecurity @[email protected] ·

    SCAP drift detection via timestamp-based differential scanning: compare current scan start-time to baseline ARF using oscap info. If delta > 24h, full scan; else quick OVAL delta check. Works on RHEL 8, Ubuntu 22.04, Debian 12. #openscap #snippet #drift

    valtersit.com/vault/scap-times

    #openscap #snippet #drift
  37. Hugo | DevOps | Cybersecurity @[email protected] ·

    Detect stealth port knocking with NSE. Use knock.nse to analyze packet captures or simulate knocks, probing sequences like 7000,8000 to uncover hidden firewall openings. Works on Linux, macOS. #nmap #snippet #port-knocking #nse #ValtersIT

    valtersit.com/vault/port-knock

    #nmap #snippet #port #nse #valtersit
  38. Hugo | DevOps | Cybersecurity @[email protected] ·

    Bridge Tailscale and WireGuard VPNs on a Linux host with dual-stack routing. Use `tailscale up --accept-routes --advertise-routes=10.0.1.0/24` and `wg-quick up`, plus iptables forwarding. Full guide on Ubuntu/Debian. #bridge #snippet #wireguard #interoperability #ValtersIT

    valtersit.com/vault/tailscale-

    #bridge #snippet #wireguard #interoperability #valtersit
  39. Hugo | DevOps | Cybersecurity @[email protected] ·

    Deploy the Tailscale Kubernetes operator with Helm, then expose services directly via Tailscale ingress — no load balancer needed. Create a ProxyClass for tags, annotate your service, and get per-pod node connectivity. Kubernetes 1.24+, Helm 3.8+. #kubernetes #snippet #operator

    valtersit.com/vault/tailscale-

    #kubernetes #snippet #operator
  40. Hugo | DevOps | Cybersecurity @[email protected] ·

    Deploy the Tailscale Kubernetes operator with Helm, then expose services directly via Tailscale ingress — no load balancer needed. Create a ProxyClass for tags, annotate your service, and get per-pod node connectivity. Kubernetes 1.24+, Helm 3.8+. #kubernetes #snippet #operator

    valtersit.com/vault/tailscale-

    #kubernetes #snippet #operator
  41. Hugo | DevOps | Cybersecurity @[email protected] ·

    Deploy the Tailscale Kubernetes operator with Helm, then expose services directly via Tailscale ingress — no load balancer needed. Create a ProxyClass for tags, annotate your service, and get per-pod node connectivity. Kubernetes 1.24+, Helm 3.8+. #kubernetes #snippet #operator

    valtersit.com/vault/tailscale-

    #kubernetes #snippet #operator
  42. Hugo | DevOps | Cybersecurity @[email protected] ·

    Deploy the Tailscale Kubernetes operator with Helm, then expose services directly via Tailscale ingress — no load balancer needed. Create a ProxyClass for tags, annotate your service, and get per-pod node connectivity. Kubernetes 1.24+, Helm 3.8+. #kubernetes #snippet #operator

    valtersit.com/vault/tailscale-

    #operator #snippet #kubernetes
  43. Hugo | DevOps | Cybersecurity @[email protected] ·

    Auditd can now monitor LXC container events like mounts, syscalls, and privilege escalation. Filter rules by PID namespaces or UID ranges on Ubuntu 22.04, Debian 12, or RHEL 9. Track suspicious activity via the kernel audit subsystem. #auditd #snippet #forensics #ValtersIT

    valtersit.com/vault/auditd-mon

    #auditd #snippet #forensics #valtersit
  44. Hugo | DevOps | Cybersecurity @[email protected] ·

    Need to remove a sensitive resource from Terraform state without destroying it? `terraform state rm` deletes the entry from your state file while keeping the actual infrastructure untouched. Useful for cleaning up state in production. #terraform #snippet #state-rm #sensitive-data #ValtersIT

    valtersit.com/vault/purge-sens

    #terraform #snippet #state #sensitive #valtersit
  45. Hugo | DevOps | Cybersecurity @[email protected] ·

    Master multi-WAN load balancing with nftables mark-based policy routing. Mark traffic from 10.0.1.0/24 as 1 and 10.0.2.0/24 as 2, then use ip rule to route via separate tables. Works on Ubuntu 22.04, Debian 12, RHEL 9, Fedora 38+. #linux #snippet #nftables

    valtersit.com/vault/nftables-m

    #linux #snippet #nftables
  46. Hugo | DevOps | Cybersecurity @[email protected] ·

    Need CORS for your S3 bucket that allows all origins except one malicious domain? Standard S3 CORS doesn't support wildcard exclusions, but you can combine AllowedOrigins with a bucket policy Condition element to deny specific origins. Here's the workaround. #cors #snippet #aws-s3 #bucket-policy #ValtersIT

    valtersit.com/vault/cors-with-

    #cors #snippet #aws #bucket #valtersit
  47. Hugo | DevOps | Cybersecurity @[email protected] ·

    Samhain HIDS with centralized Yubikey-signed database for file integrity monitoring. Scan files, compare checksums, encrypted TCP reports to server. Agent runs as daemon or cron. Ubuntu 22.04, Debian 12, RHEL 9. #linux #snippet #samhain #centralized #ValtersIT

    valtersit.com/vault/samhain-ce

    #linux #snippet #samhain #centralized #valtersit
  48. Hugo | DevOps | Cybersecurity @[email protected] ·

    Spot anomalous DNS queries from systemd-resolved logs with this journalctl + grep pipeline for frequency analysis. Filters 'type=A' and 'result=success' to detect C2 or exfiltration patterns. #linux #snippet #dns #ValtersIT

    valtersit.com/vault/detecting-

    #linux #snippet #dns #valtersit
  49. Hugo | DevOps | Cybersecurity @[email protected] ·

    Upgrade BMC firmware via IPMI with rollback support. Use ipmitool fwupdate with raw binary, sending chunks over Update Firmware command (0x0C 0x01). Save current image to flash partition for recovery. Works on Linux with ipmitool 1.8.18+ and Dell iDRAC 9+. #ipmi #firmware #snippet

    valtersit.com/vault/bmc-firmwa

    #ipmi #firmware #snippet
  50. Hugo | DevOps | Cybersecurity @[email protected] ·

    Audit and clean up BMC user accounts with this ipmitool snippet. Enumerate all IPMI users (IDs 1-15), check privilege levels, and remove unauthorized accounts. Works on Linux and Windows. #ipmi #snippet #audit

    valtersit.com/vault/bmc-user-a

    #ipmi #snippet #audit