Deployed 011287b with MkDocs version: 1.6.1

Заметки/dashy/config.yaml

@@ -0,0 +1,18 @@
+---
+pageInfo:
+  title: Home Lab
+sections: # An array of sections
+- name: Github
+  items: # An array of items
+  - title: GitHub
+    description: Source code and documentation on GitHub
+    icon: fab fa-github
+    url: https://github.com/SailorUpiter/mkdocs
+- name: Services
+  items:
+  - title: DNS
+    icon: favicon
+    url: http://192.168.1.2/
+  - title: Gitea
+    icon: https://icon-icons.com/ru/icon/gitea/146173
+    url: http://192.168.130.3:3000/

Заметки/gitea/gitea.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=Gitea (Git with a cup of tea)
+After=network.target
+Wants=postgresql.service
+After=postgresql.service
+[Service]
+# Uncomment the next line if you have repos with lots of files and get a HTTP 500 error because of that
+# LimitNOFILE=524288:524288
+RestartSec=2s
+Type=simple
+User=git
+Group=git
+WorkingDirectory=/var/lib/gitea/
+ExecStart=/usr/local/bin/gitea web --config /etc/gitea/app.ini
+Restart=always
+Environment=USER=git HOME=/home/git GITEA_WORK_DIR=/var/lib/gitea
+[Install]
+WantedBy=multi-user.target

Заметки/gitea/runners/config.yaml

@@ -0,0 +1,30 @@
+log:
+  level: info
+
+runner:
+  file: .runner
+  capacity: 1
+  timeout: 3h
+  insecure: false
+  fetch_timeout: 5s
+  fetch_interval: 2s
+  labels: ["ubuntu-latest:docker://gitea/runner-images:ubuntu-latest", "ubuntu-22.04:docker://gitea/runner-images:ubuntu-22.04"]
+
+cache:
+  enabled: true
+  dir: ""
+  host: "192.168.1.3"
+  port: 8088
+  external_server: ""
+
+container:
+  network: ""
+  privileged: false
+  options:
+  workdir_parent:
+  valid_volumes: []
+  docker_host: ""
+  force_pull: false
+
+host:
+  workdir_parent:

Заметки/gitea/runners/docker-compose.yaml

@@ -0,0 +1,15 @@
+services:
+  runner-1:
+    image: gitea/act_runner:nightly
+    restart: always
+    environment:
+      - CONFIG_FILE=/config.yaml
+      - GITEA_INSTANCE_URL=http://192.168.1.3:3000/
+      - GITEA_RUNNER_REGISTRATION_TOKEN=token
+    volumes:
+      - ./runner1/config.yaml:/config.yaml
+      - ./runner1/data:/data
+      - ./runner1/cache:/root/.cache
+      - /var/run/docker.sock:/var/run/docker.sock
+    ports:
+      - "8088:8088"

Заметки/gitea/runners/test.yaml

@@ -0,0 +1,17 @@
+name: Test Workflow  
+
+on:  
+  push:  
+
+jobs:  
+  test:  
+    runs-on: ubuntu-latest  
+
+    steps:  
+      - name: Print environment variables  
+        run: |  
+          echo "GITHUB_REPOSITORY: $GITHUB_REPOSITORY"  
+          echo "GITHUB_SHA: $GITHUB_SHA"  
+          echo "GITHUB_REF: $GITHUB_REF"  
+          echo "GITHUB_ACTOR: $GITHUB_ACTOR"  
+          echo "PATH: $PATH"

Заметки/openshearch/release.txt

@@ -0,0 +1,2 @@
+opensearch=3.5.0
+jdk=25.0.2+10-LTS

Заметки/openshearch/templates/opensearch-1.yaml

@@ -0,0 +1,12 @@
+cluster.name: kal-cluster
+node.name: opensearch-1
+node.roles: [ cluster_manager, data ]
+cluster.initial_cluster_manager_nodes: ["opensearch-cluster_manager"]
+discovery.seed_hosts: ["opensearch-1.sailor.com", "opensearch-2.sailor.com", "opensearch-3.sailor.com"]
+network.host: 0.0.0.0
+http.port: 9200
+plugins.security.disabled: true
+# Path to directory where to store the data (separate multiple locations by comma):
+path.data: /var/lib/opensearch
+# Path to log files:
+path.logs: /var/log/opensearch

Заметки/openshearch/templates/opensearch-2.yaml

@@ -0,0 +1,12 @@
+cluster.name: kal-cluster
+node.name: opensearch-2
+node.roles: [ cluster_manager, data ]
+cluster.initial_cluster_manager_nodes: ["opensearch-cluster_manager"]
+discovery.seed_hosts: ["opensearch-1.sailor.com", "opensearch-2.sailor.com", "opensearch-3.sailor.com"]
+network.host: 0.0.0.0
+http.port: 9200
+plugins.security.disabled: true
+# Path to directory where to store the data (separate multiple locations by comma):
+path.data: /var/lib/opensearch
+# Path to log files:
+path.logs: /var/log/opensearch

Заметки/openshearch/templates/opensearch-3.yaml

@@ -0,0 +1,12 @@
+cluster.name: kal-cluster
+node.name: opensearch-3
+node.roles: [ cluster_manager, data ]
+cluster.initial_cluster_manager_nodes: ["opensearch-cluster_manager"]
+discovery.seed_hosts: ["opensearch-1.sailor.com", "opensearch-2.sailor.com", "opensearch-3.sailor.com"]
+network.host: 0.0.0.0
+http.port: 9200
+plugins.security.disabled: true
+# Path to directory where to store the data (separate multiple locations by comma):
+path.data: /var/lib/opensearch
+# Path to log files:
+path.logs: /var/log/opensearch

Заметки/openshearch/templates/opensearch-certs.yaml

@@ -0,0 +1,40 @@
+cluster.name: kal-cluster
+node.name: opensearch-2
+node.roles: [ cluster_manager, data ]
+cluster.initial_cluster_manager_nodes: ["opensearch-cluster_manager"]
+discovery.seed_hosts: ["opensearch-1.sailor.com", "opensearch-2.sailor.com", "opensearch-3.sailor.com"]
+network.host: 0.0.0.0
+http.port: 9200
+plugins.security.nodes_dn:
+  - "CN=opensearch-1.sailor.com,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+  - "CN=opensearch-2.sailor.com,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+  - "CN=opensearch-3.sailor.com,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+plugins.security.ssl.transport.keystore_filepath: /etc/opensearch/ssl/keystore.jks
+plugins.security.ssl.transport.keystore_password: Passw0rd
+plugins.security.ssl.transport.keystore_keypassword: Passw0rd
+plugins.security.ssl.transport.truststore_filepath: /etc/opensearch/ssl/truststore.jks
+plugins.security.ssl.transport.truststore_password: Passw0rd
+transport.ssl.enforce_hostname_verification: false
+
+plugins.security.ssl.http.enabled: true  #Whether to enable TLS on the REST layer. If enabled, only HTTPS is allowed. Optional. Default is false.
+plugins.security.ssl.http.keystore_filepath: /etc/opensearch/ssl/keystore.jks
+plugins.security.ssl.http.keystore_password: Passw0rd
+plugins.security.ssl.http.keystore_keypassword: Passw0rd
+plugins.security.ssl.http.truststore_filepath: /etc/opensearch/ssl/truststore.jks
+plugins.security.ssl.http.truststore_password: Passw0rd
+plugins.security.authcz.admin_dn:
+    - "EMAILADDRESS=medik19999@mail.ru,CN=grigory,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+
+plugins.security.ssl.transport.pemcert_filepath: /etc/opensearch/ssl/node1.pem
+plugins.security.ssl.transport.pemkey_filepath: /etc/opensearch/ssl/node1-key.pem
+plugins.security.ssl.transport.pemtrustedcas_filepath: /etc/opensearch/ssl/root-ca.pem
+plugins.security.ssl.transport.enforce_hostname_verification: false
+plugins.security.ssl.http.enabled: true
+plugins.security.ssl.http.pemcert_filepath: /etc/opensearch/ssl/node1.pem
+plugins.security.ssl.http.pemkey_filepath: /etc/opensearch/ssl/node1-key.pem
+plugins.security.ssl.http.pemtrustedcas_filepath: /etc/opensearch/ssl/root-ca.pem
+
+# Path to directory where to store the data (separate multiple locations by comma):
+path.data: /var/lib/opensearch
+# Path to log files:
+path.logs: /var/log/opensearch

Заметки/openshearch/templates/opensearch-truststore.yml

@@ -0,0 +1,32 @@
+cluster.name: kal-cluster
+node.name: opensearch-2
+node.roles: [ cluster_manager, data ]
+cluster.initial_cluster_manager_nodes: ["opensearch-cluster_manager"]
+discovery.seed_hosts: ["opensearch-1.sailor.com", "opensearch-2.sailor.com", "opensearch-3.sailor.com"]
+network.host: 0.0.0.0
+http.port: 9200
+plugins.security.nodes_dn:
+  - "CN=opensearch-1.sailor.com,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+  - "CN=opensearch-2.sailor.com,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+  - "CN=opensearch-3.sailor.com,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+plugins.security.ssl.transport.keystore_filepath: /etc/opensearch/ssl/keystore.jks
+plugins.security.ssl.transport.keystore_password: Passw0rd
+plugins.security.ssl.transport.keystore_keypassword: Passw0rd
+plugins.security.ssl.transport.truststore_filepath: /etc/opensearch/ssl/truststore.jks
+plugins.security.ssl.transport.truststore_password: Passw0rd
+
+plugins.security.ssl.http.enabled: true  #Whether to enable TLS on the REST layer. If enabled, only HTTPS is allowed. Optional. Default is false.
+plugins.security.ssl.http.keystore_filepath: /etc/opensearch/ssl/keystore.jks
+plugins.security.ssl.http.keystore_password: Passw0rd
+plugins.security.ssl.http.keystore_keypassword: Passw0rd
+plugins.security.ssl.http.truststore_filepath: /etc/opensearch/ssl/truststore.jks
+plugins.security.ssl.http.truststore_password: Passw0rd
+plugins.security.authcz.admin_dn:
+    - "EMAILADDRESS=medik19999@mail.ru,CN=grigory,OU=Lab,O=Sailor Lab,L=Moscow,ST=Moscow,C=RU"
+
+
+
+# Path to directory where to store the data (separate multiple locations by comma):
+path.data: /var/lib/opensearch
+# Path to log files:
+path.logs: /var/log/opensearch

Заметки/openshearch/templates/ssl.sh

@@ -0,0 +1,61 @@
+#!/bin/sh
+# Root CA
+openssl genrsa -out root-ca-key.pem 2048
+openssl req -new -x509 -sha256 -key root-ca-key.pem -subj "/C=RU/ST=Moscow/L=Moscow/O=Sailor Lab/OU=Lab/CN=opensearch-1.sailor.com" -out root-ca.pem -days 730 \
+  -addext 'basicConstraints = critical, CA:TRUE, pathlen:0' \
+  -addext 'keyUsage = critical, keyCertSign, cRLSign' \
+  -addext 'authorityKeyIdentifier = keyid'
+# Admin cert
+openssl genrsa -out admin-key-temp.pem 2048
+openssl pkcs8 -inform PEM -outform PEM -in admin-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out admin-key.pem
+openssl req -new -key admin-key.pem -subj "/C=RU/ST=Moscow/L=Moscow/O=Sailor Lab/OU=Lab/CN=grigory/emailAddress=medik19999@mail.ru" -out admin.csr
+openssl x509 -req -in admin.csr -CA root-ca.pem -CAkey root-ca-key.pem -CAcreateserial -sha256 -out admin.pem -days 730
+# Node cert 1
+openssl genrsa -out node1-key-temp.pem 2048
+openssl pkcs8 -inform PEM -outform PEM -in node1-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node1-key.pem
+openssl req -new -key node1-key.pem -subj "/C=RU/ST=Moscow/L=Moscow/O=Sailor Lab/OU=Lab/CN=opensearch-1.sailor.com" -out node1.csr
+echo 'subjectAltName=DNS:opensearch-1.sailor.com' > node1.ext
+openssl x509 -req -in node1.csr -CA root-ca.pem -CAkey root-ca-key.pem -CAcreateserial -sha256 -out node1.pem -days 730 -extfile node1.ext
+# Node cert 2
+openssl genrsa -out node2-key-temp.pem 2048
+openssl pkcs8 -inform PEM -outform PEM -in node2-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out node2-key.pem
+openssl req -new -key node2-key.pem -subj "/C=RU/ST=Moscow/L=Moscow/O=Sailor Lab/OU=Lab/CN=opensearch-2.sailor.com" -out node2.csr
+echo 'subjectAltName=DNS:opensearch-2.sailor.com' > node2.ext
+openssl x509 -req -in node2.csr -CA root-ca.pem -CAkey root-ca-key.pem -CAcreateserial -sha256 -out node2.pem -days 730 -extfile node2.ext
+# Client cert
+openssl genrsa -out client-key-temp.pem 2048
+openssl pkcs8 -inform PEM -outform PEM -in client-key-temp.pem -topk8 -nocrypt -v1 PBE-SHA1-3DES -out client-key.pem
+openssl req -new -key client-key.pem -subj "/C=RU/ST=Moscow/L=Moscow/O=Sailor Lab/OU=Lab/CN=opensearch-2.sailor.com" -out client.csr
+echo 'subjectAltName=DNS:opensearch-3.sailor.com' > client.ext
+openssl x509 -req -in client.csr -CA root-ca.pem -CAkey root-ca-key.pem -CAcreateserial -sha256 -out client.pem -days 730 -extfile client.ext
+# Convert node certificate
+cat root-ca.pem node1.pem node1-key.pem > combined-node1.pem
+echo "Enter password for node1-cert.p12"
+openssl pkcs12 -export -in combined-node1.pem -out node1-cert.p12 -name node1
+echo "Enter password for keystore.jks"
+keytool -importkeystore -srckeystore node1-cert.p12 -srcstoretype pkcs12 -destkeystore keystore.jks
+
+# Convert admin certificate
+cat root-ca.pem admin.pem admin-key.pem > combined-admin.pem
+echo "Enter password for admin-cert.p12"
+openssl pkcs12 -export -in combined-admin.pem -out admin-cert.p12 -name admin
+echo "Enter password for keystore.jks"
+keytool -importkeystore -srckeystore admin-cert.p12 -srcstoretype pkcs12 -destkeystore keystore.jks
+
+# Import certificates to truststore
+keytool -importcert -keystore truststore.jks -file root-ca.pem -storepass changeit -trustcacerts -deststoretype pkcs12 # Сменить пароль
+
+# Cleanup
+rm admin-key-temp.pem
+rm admin.csr
+rm node1-key-temp.pem
+rm node1.csr
+rm node1.ext
+rm node2-key-temp.pem
+rm node2.csr
+rm node2.ext
+rm client-key-temp.pem
+rm client.csr
+rm client.ext
+rm combined-admin.pem
+rm combined-node1.pem

Заметки/vault/vault.hcl

@@ -0,0 +1,11 @@
+storage "file" { # Указываем что храним секреты в файле, а не БД
+  path = "/mnt/vault/data" # Путь до файла с данным
+}
+listener "tcp" { # Указываем какой сервер слушаем
+  address     = "0.0.0.0:8200" 
+  # tls_cert_file = "/etc/vault/vault-cert.pem"
+  # tls_key_file  = "/etc/vault/vault-key.pem"
+  tls_disable = 1 # Отключение https://
+}
+ui = true # Включить UI
+disable_mlock = true

Заметки/vault/vault.service

@@ -0,0 +1,29 @@
+[Unit]
+Description="HashiCorp Vault - A tool for managing secrets"
+Documentation=https://www.vaultproject.io/docs/
+Requires=network-online.target
+After=network-online.target
+ConditionFileNotEmpty=/etc/vault/config.hcl
+
+[Service]
+User=vault
+Group=vault
+ProtectSystem=full
+ProtectHome=read-only
+PrivateTmp=yes
+PrivateDevices=yes
+SecureBits=keep-caps
+AmbientCapabilities=CAP_IPC_LOCK
+NoNewPrivileges=yes
+ExecStart=/usr/local/bin/vault server -config=/etc/vault/config.hcl
+ExecReload=/bin/kill --signal HUP
+KillMode=process
+KillSignal=SIGINT
+Restart=on-failure
+RestartSec=5
+TimeoutStopSec=30
+StartLimitBurst=3
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target