Traditional SSL Certificate renewal for occurs every year and yet somehow that proves time and again to be just long enough to forget the process and lose confidence in conducting what should be a simple routine task. Here is a reminder of the step by step process of genenerating the CSR and combining the bundle into key and cert that we can use for an nginx reverse proxy, or whatever...

Continue reading...

To set Gmail in Chrome as the default email client on macOS, follow these steps:


1. Set Gmail as the Default Email Handler in Chrome

Gmail must first be configured as the email handler in Chrome:

  1. Open Google Chrome and go to Gmail.
  2. When you're on Gmail, look for the protocol handle...

Continue reading...

CLI tmux guide

linux cli

tmux is a terminal multiplexer that allows you to create, manage, and navigate multiple terminal windows and panes within a single terminal session. It's particularly useful for working on remote servers or managing multiple tasks simultaneously in a single terminal window.

Here's my brief cheatsheet on how to use tmux:

Continue reading...

Gitlab.com SaaS has a hierarchical group project structure which can be a pain to navigate when you simply want a list of all of your docker container registry paths within it. One way to quickly fetch all of this information is via the Gitlab API

  1. Simply generate a Group Access Token at: http...

Continue reading...

Sometimes you just need to serve a folder over http immediately!

Here are some quick one-liners to start a temporary webserver.

All of the following examples serve pwd, so make sure you cd ~/the-folder-you-wish-to-share first.

Use docker apache httpd:alpine

This will automatically gene...

Continue reading...

Windows built-in L2TP/IPSEC VPN Client fails to connect when either side is behind a NAT firewall

In particular this can occur when connecting from Windows client to a Windows Server L2TP/IPSEC VPN (lol...)

To allow the client to connect in such situations, create a fixvpn.reg file containing:...

Continue reading...

Initial Authentication

assume
aws sso login

Connecting to a linux AWS EC2 instance using SSM

aws ssm start-session --target  $INSTANCE_ID

Port forwarding MongoDB from remote linux AWS EC2 instance to local using SSM

aws ssm start-session --target $INSTANCE_ID --document-name AWS-StartPortF...

Continue reading...

Here are some reminders for securely generating SSH keys.

How to generate a modern ED25519 SSH key

To generate a good default ssh key in the default path ~/.ssh/id_ed25519 :


ssh-keygen -t ed25519 -a 100

To generate a good SSH key with specified output file path ( -f ) and descriptive c...

Continue reading...

Run the following in a command prompt or add to a .bat file and execute it. You might need to execute this for each user on the PC.

winget uninstall Microsoft.OneDrive --accept-source-agreements

Continue reading...

Restic is a fast, secure, and efficient backup program that supports deduplication, encryption, and data integrity verification.

Using Restic:

  1. Installation: Install restic on your system, see restic installation

    apt install restic
  2. Initialization: Initialize a new repository for yo...

Continue reading...