https://wiki.liberasys.com/ 2026-05-02T08:10:04+00:00 https://wiki.liberasys.com/ https://wiki.liberasys.com/lib/tpl/dokuwiki/images/favicon.ico text/html 2019-07-23T14:30:48+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:3cx&rev=1563892248&do=diff Prérequis * 88Kb/s pour G711A (=PCMA =A-LAW) pour 1 sens (176kbs pour les 2 sens, soit 880kbs pour 5 lignes parallèles dans les 2 sens) * Si on veut juste accéder à l'interface WEB depuis l'extérieur et utiliser les conférences, le WebMeeting et l'appli téléphone, on doit ouvrir les ports TCP 443 et TCP/UDP 5090 depuis l'extérieur text/html 2019-01-10T14:46:34+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:ansible&rev=1547131594&do=diff Ansible 1.7.2 (Debian Jessie) <https://github.com/lorin/ansible-quickref> production # inventory file for production servers stage # inventory file for stage environment group_vars/ all # here we assign variables to particular groups boston # "" host_vars/ hostname1 # if systems need specific variables, put them here xyz.boston.example.com # "" site.yml # master playbook webservers.… text/html 2019-01-10T15:18:40+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:diskchecker&rev=1547133520&do=diff Diskchecker.pl #!/usr/bin/perl # # Brad's el-ghetto do-our-storage-stacks-lie?-script # # https://gist.github.com/bradfitz/3172656#file-diskchecker-pl sub usage { die <<'END'; Usage: diskchecker.pl -s <server[:port]> verify <file> diskchecker.pl -s <server[:port]> create <file> <size_in_MB> diskchecker.pl -l [port] END } use strict; use IO::Socket::INET; use IO::Handle; use Getopt::Long; use Socket qw(IPPROTO_TCP TCP_NODELAY); my $server; my $listen; usage() unless GetOptions('server=s… text/html 2018-09-10T11:48:57+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:fail2ban&rev=1536580137&do=diff Fail2ban <http://sysadmindesk.com/how-to-protect-your-server-from-brute-force-attacks-using-fail2ban/> text/html 2019-05-17T13:06:54+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:infrastructure&rev=1558098414&do=diff * 3CX * Ansible * Apache2 * Diskchecker * Fail2ban * named_example * Zabbix sur serveur Hertzner * Proxmox extract backup * Proxmox mount lvm disk * Proxmox NFS * Proxmox - tests cluster et High Availability * Proxmox total nodes memory * Proxmox Windows paravirtualisation * Proxmox Windows virtualisation spice kvm * Proxmox ZFS * Debian Jessie, postfix, dovecot * Debian Jessie, rmilter, rspamd, clamav * horde * Let's Encrypt - par Mattia Vicari * Stagi… text/html 2018-09-10T12:00:31+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:named_example&rev=1536580831&do=diff ; ; BIND data file for local loopback interface ; $TTL 1800 @ IN SOA soa1.mydomain.com. sysadmdns.mydomain.com. ( 2011111501 ; Serial 3600 ; Refresh (1 hour) 900 ; Retry (15 minutes) 1209600 ; Expire (2 weeks) 43200 ) ; Negative Cache TTL or minimum (12 hours) IN NS soa1.mydomain.com. IN NS soa2.mydomain.com. @ IN MX 10 ant… text/html 2019-01-14T14:01:05+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:owncloud&rev=1547474465&do=diff Owncloud export ADMINMAIL="admin@liberasys.com" export ROOTSSLURL="https://owncloud.liberasys.com" export SSLCERTFILE="/etc/ssl/certs/STAR_liberasys_com.chain.pem" export SSLCERTKEY="/etc/ssl/private/STAR_liberasys_com.key" echo 'deb http://download.opensuse.org/repositories/isv:/ownCloud:/community/Debian_8.0/ /' >> /etc/apt/sources.list.d/owncloud.list wget http://download.opensuse.org/repositories/isv:ownCloud:community/Debian_8.0/Release.key apt-key add - < Release.key rm Release.key apt… text/html 2019-01-14T14:02:03+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:proxmox_-_firewall&rev=1547474523&do=diff Proxmox - firewall conf cluster : /etc/pve/firewall/cluster.fw IP set definitions alias definitions security group definitions cluster wide firewall rule for all nodes conf vm : /etc/pve/firewall/<vm>.fw IP set definitions alias definitions firewall rules for this VM VM specific options text/html 2019-01-10T15:24:02+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:proxmox_mount_lvm_disk&rev=1547133842&do=diff export LVMPATH="/dev/vg-sdb/vm-130-disk-1" lvchange -a y $LVMPATH /sbin/fdisk -lu $LVMPATH losetup /dev/loop0 $LVMPATH -o $((XXXXX * 512)) # replace XXXXX by the offset of the partition mkdir /mnt/tmp mount /dev/loop0 /mnt/tmp # do cd umount /mnt/tmp losetup -d /dev/loop0 lvchange -a n $LVMPATH text/html 2019-01-10T15:25:18+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:proxmox_nfs&rev=1547133918&do=diff NFS on Debian Stretch Server installation apt install nfs-kernel-server cd /usr/share mkdir nfs-shared chmod 757 nfs-shared echo "/usr/share/nfs-shared/ <IP_client>(rw,root_squash)" >> /etc/exports service nfs-kernel-server reload Client configuration (Proxmox) text/html 2018-09-11T08:35:06+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:proxmox_total_nodes_memory&rev=1536654906&do=diff TOTAL=0; for mem in $(cat /etc/pve/nodes/ddb01/qemu-server/* | grep memory | cut -d " " -f 2); do TOTAL=$(($TOTAL+$mem)); done; echo "Total : $TOTAL" text/html 2018-08-01T15:31:50+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:proxmox_windows_paravirtualisation&rev=1533137510&do=diff Telecharger la dernière version stable des drivers : <https://fedorapeople.org/groups/virt/virtio-win/direct-downloads/stable-virtio/virtio-win.iso> Sur une VM existante : * installer le driver depuis le dossier vioscsi * arrêter la VM * créer un nouveau disque SCSI/VirtIO SCSI * démarrer la VM windows * voir que le disque est bien reconnu text/html 2018-09-11T08:35:55+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:proxmox_windows_virtualisation_spice_kvm&rev=1536654955&do=diff Package agent spice et drivers de paravirtualisation windows <https://www.spice-space.org/download/windows/spice-guest-tools/spice-guest-tools-latest.exe> text/html 2023-04-04T13:24:21+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:proxmox_zfs&rev=1680614661&do=diff Proxmox ZFS From <https://pve.proxmox.com/wiki/ZFS_on_Linux> ZFS modes RAID0 Also called “striping”. The capacity of such volume is the sum of the capacities of all disks. But RAID0 does not add any redundancy, so the failure of a single drive makes the volume unusable. RAID1 Also called “mirroring”. Data is written identically to all disks. This mode requires at least 2 disks with the same size. The resulting capacity is that of a single disk. text/html 2019-01-10T15:35:09+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:staging_debian_stretch&rev=1547134509&do=diff Staging nouveau serveur Debian Jessie Fichier /etc/ssh/sshd_config vi /etc/ssh/sshd_config change “Port 22” if needed add “PermitRootLogin yes” service sshd stop service sshd start apt-get update apt-get upgrade apt-get dist-upgrade text/html 2018-08-02T10:43:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.liberasys.com/doku.php?id=infrastructure:zabbix_utilisation&rev=1533206613&do=diff Découverte automatique des agents actifs Configuration -> actions “Enregistrement automatique” cliquer “Créer une action”. Nom : “Auto-discover active agents” Vérifier “Activé” coché Onglet Conditions : * Métadonnées de l'hôte