{"id":224,"date":"2023-08-28T19:17:38","date_gmt":"2023-08-28T18:17:38","guid":{"rendered":"http:\/\/prof-tim.cstj.qc.ca\/cours\/assemblage\/wp\/?page_id=224"},"modified":"2024-12-09T20:06:37","modified_gmt":"2024-12-09T19:06:37","slug":"cheat-sheets","status":"publish","type":"page","link":"https:\/\/ve2cuy.com\/420-3c3\/?page_id=224","title":{"rendered":"R\u00e9f\u00e9rences"},"content":{"rendered":"\n

1 – Augmentation des limites de PHP via le fichier .htaccess pour WordPress<\/h3>\n\n\n\n
php_value upload_max_filesize 256M\nphp_value post_max_size 256M\nphp_value max_execution_time 300\nphp_value max_input_time 300<\/pre>\n\n\n\n
 2 – Afficher les ports IP qui sont utilis\u00e9s sur Ubuntu<\/h3>\n\n\n\n
sudo lsof -i -P -n | grep LISTEN<\/pre>\n\n\n\n
3 – Augmenter la taille d’un volume d’une VM Ubuntu <\/h2>\n\n\n\n
# \u00c9tape 01 : Augmenter la taille dans les param\u00e8tres de la VM\n\n# \u00c9tape 02 : su -a \n df -h\n cfdisk\n lvdisplay\n pvdisplay\n resize2fs \/dev\/mapper\/ubuntu--vg-ubuntu--lv\n pvresize \/dev\/sda3\n lvextend -l +100%FREE \/dev\/ubuntu-vg\/ubuntu-lv\n resize2fs \/dev\/mapper\/ubuntu--vg-ubuntu--lv\n df -h<\/pre>\n\n\n\n
\n\n\n\n
 4 – \u00c9diter les fichiers d’une connexion ssh avec VS.Code<\/h3>\n\n\n\n
# Utiliser vs code pour l'\u00e9dition de fichiers via sshd\n1 - Installer l'extension Remote - SSH de Microsoft\n2 - Pour l'\u00e9dition des fichiers du syst\u00e8me,\n    - Renseigner un mot de passe sur le compte root : sudo passwd root\n    - Ajouter la ligne suivante au fichier \/etc\/ssh\/sshd_config :   \n        PermitRootLogin yes\n    - recharger la configuration ssh: sudo systemctl reload ssh    \n3 - Dans VSCode, F1 : Remote-SSH: Ajouter un nouvel h\u00f4te ssh : etudiant@192.168... \n                        et enregistrer dans le fichier user\/.ssh\/config\n4 - Optionnel - F1: Remote-SSH : Ouvrir le fichier config pour renseigner un nom significatif \u00e0 la connexion.\n\n5 - Connexion - F1: Remote-SSH: Se connecter \u00e0 l'h\u00f4te.\n6 - Ouvrir un dossier<\/pre>\n\n\n\n
\n\n\n\n
5 – Solution .htaccess<\/h3>\n\n\n\n
ErrorDocument 404 \/404.html\nErrorDocument 403 \/403.html\n\n<RequireAny>\n        Require ip 192.168.2   \n<\/RequireAny>\n\n<IfModule mod_rewrite.c>\n        RewriteEngine On\n        RewriteRule ^ind(.*)$ index.html [L]\n<\/IfModule>\n<\/pre>\n\n\n\n
sudo a2enmod rewrite\nsudo systemctl restart apache2<\/pre>\n\n\n\n
\n\n\n\n
6 – Exemple d’un format log apache2 perso<\/h2>\n\n\n\n
<VirtualHost *:80>\n    ServerName site1.abc\n    DocumentRoot \/var\/www\/site1.abc\/public_html\n    LogFormat \"Une requete de : %a pour -> %f avec les arguments suivants: %q\" perso\n\n    ErrorLog \/var\/www\/site1.abc\/journaux\/erreurs.log\n    CustomLog \/var\/www\/site1.abc\/journaux\/journal.log perso\n<\/VirtualHost><\/pre>\n\n\n\n
\n\n\n\n
7 – Installation de mysql-server<\/h2>\n\n\n\n
sudo apt-get install mysql-server\n\n$ sudo mysql\nALTER USER 'root'@'localhost' IDENTIFIED WITH mysql_native_password BY 'password';\nFLUSH PRIVILEGES;\nexit<\/pre>\n\n\n\n
\n\n\n\n
8 – Virtualisation imbriqu\u00e9e dans vmware<\/h2>\n\n\n\n
1 - D\u00e9sactiver hyper-V\n2 - Ex\u00e9cuter dans powershell Admin: bcdedit \/set hypervisorlaunchtype off\n3 - Dans 'S\u00e9curit\u00e9 Windows: S\u00e9curit\u00e9 des p\u00e9riph\u00e9riques' d\u00e9sactiver : Int\u00e9grit\u00e9 de la m\u00e9moire.\n4- Red\u00e9marrer Windows\n\nDans la VM:\n  - Disque de 200 go\n  - Choisir l'interface r\u00e9seau de type NAT\n\n----\n# Activer la virtualisation imbriqu\u00e9e sous virtualbox\nVBoxManage modifyvm <VirtualMachineName> --nested-hw-virt on<\/pre>\n\n\n\n
\n\n\n\n
9 – Acc\u00e8s vSphere<\/h2>\n\n\n\n
administrator@vsphere.local\nEb3n>~=U0C3H<{d]79@~\n\nroot:l*1.59!<\/pre>\n\n\n\n
\n\n\n\n
10 – Mise en place de NFS<\/h2>\n\n\n\n
# 1 - Sur le serveur\n# Installer le service nfs\nsudo apt update\nsudo apt install nfs-kernel-server\n\n# Cr\u00e9er un r\u00e9pertoire de partage\nsudo mkdir \/var\/nfs\/420-3C3 -p\nsudo chown nobody:nogroup \/var\/nfs\/420-3C3\nsudo echo \"Ici la voix des Mist\u00e9rons\" > \/var\/nfs\/420-3C3\/coucou.txt\n\n# Publier le dossier de partage\nsudo nano \/etc\/exports\n\/var\/nfs\/420-3C3  *(rw,sync,no_subtree_check,all_squash,anonuid=65534,anongid=65534,insecure)\n\n# Red\u00e9marrer le service nfs\nsudo systemctl restart nfs-kernel-server\n# Ou:\nsudo exportfs -a\n\n# Si le pare feu est activ\u00e9 alors ouvrir le port nfs:\nsudo ufw allow from client_ip to any port nfs\n\n# -----------------------------------------------------\n\n# 2 - Sur le client\nsudo apt install nfs-common\nsudo mount -t nfs 35.247.98.108:\/var\/nfs\/420-3C3 \/home\/user\/nfs\/<\/pre>\n\n\n\n
\n\n\n\n
11 – Reverse Proxy avec apache2<\/h2>\n\n\n\n
11.1 – H\u00f4te virtuel sur le serveur d’entr\u00e9<\/h3>\n\n\n\n
<VirtualHost *:80>\n    # Fichier de conf pour un site en proxy invers\u00e9\n    # NOTE: Penser \u00e0 d\u00e9finir un DNS dans \/etc\/hosts du serveur d'entr\u00e9, pour le nom de domaine.\n    # Toutes les requ\u00eates pour cet hote virtuel seront transf\u00e9r\u00e9es vers un autre serveur.\n    ServerName notremaison.org\n\n    ErrorLog ${APACHE_LOG_DIR}\/error-notremaison.org.log\n    CustomLog ${APACHE_LOG_DIR}\/access-notremaison.org.log combined\n\n    ProxyPass \/ http:\/\/notremaison.org\/\n    ProxyPassReverse \/ http:\/\/notremaison.org\/\n    ProxyRequests Off\n\n<\/VirtualHost>\n\n<VirtualHost *:443>\n    # Fichier de conf pour un site en proxy invers\u00e9\n    # NOTE: Penser \u00e0 d\u00e9finir une entr\u00e9e dans \/etc\/hosts pour le nom de domaine.\n    # Toutes les requ\u00eates pour cet hote virtuel seront transf\u00e9r\u00e9es vers un autre serveur.\n    ServerName notremaison.org\n\n    ErrorLog ${APACHE_LOG_DIR}\/error-notremaison.org.log\n    CustomLog ${APACHE_LOG_DIR}\/access-notremaison.org.log combined\n\n    SSLProxyEngine on\n    ProxyPass \/ https:\/\/notremaison.org\/\n    ProxyPassReverse \/ https:\/\/notremaison.org\/\n    ProxyRequests Off\n\n<\/VirtualHost><\/pre>\n\n\n\n
11.2 – H\u00f4te virtuel sur le serveur de destination<\/h3>\n\n\n\n
<VirtualHost *:80>\n    ServerName notremaison.org\n\n    DocumentRoot \/notremaison\n    <Directory \/notremaison>\n        Options -Indexes +FollowSymLinks\n        AllowOverride All\n    <\/Directory>\n\n    ErrorLog \/var\/log\/apache2\/notremaison-erreurs.log\n    CustomLog \/var\/log\/apache2\/notremaison-journal.log combined\n<\/VirtualHost><\/pre>\n\n\n\n
11.3 – Reverse proxy sur nginx<\/h2>\n\n\n\n
# \/etc\/nginx\/conf.d\/default.conf\n\nserver {\n\n  listen 80;\n  server_name menu.com;\n\n   location \/ {\n     proxy_pass http:\/\/192.168.2.51:8200;\n   }\n}\n\nserver {\n  listen 443;\n\n  server_name mon-projet.freeddns.org;\n\n   location \/ {\n     proxy_pass https:\/\/mon-projet.freeddns.org;\n   }\n}\n<\/pre>\n\n\n\n
\n\n\n\n
12 – traefik <\/h2>\n\n\n\n
$ docker network create traefik_net\n$ touch data\/acme.json\n$ chmod 600 data\/acme.json\n$ docker-compose [-f fichier.yml] up -d<\/pre>\n\n\n\n
docker-compose.yml<\/strong><\/p>\n\n\n\n
version: \"3.8\"\n\nservices:\n  traefik:\n    image: traefik:latest\n    container_name: traefik3\n    restart: unless-stopped\n#    security_opt:\n#      - no-new-privileges:true\n    networks:\n      - traefik_net\n    ports:\n      - 80:80\n      - 443:443\n      - 8080:8080\n    environment:      \n      TRAEFIK_DASHBOARD_CREDENTIALS: ${TRAEFIK_DASHBOARD_CREDENTIALS}\n      GODADDY_API_KEY: ${GODADDY_API_KEY}\n      GODADDY_API_SECRET: ${GODADDY_API_SECRET}\n    \n    env_file: .env\n\n    volumes:\n      - \/etc\/localtime:\/etc\/localtime:ro\n      - \/var\/run\/docker.sock:\/var\/run\/docker.sock:ro\n      - .\/data\/traefik.yml:\/traefik.yml:ro\n      - .\/data\/acme.json:\/acme.json\n      - .\/data\/config.yml:\/config.yml:ro\n    labels:\n      - \"traefik.enable=true\"\n      - \"traefik.http.routers.traefik.entrypoints=http\"\n      - \"traefik.http.routers.traefik.rule=Host(`traefik-dashboard.notremaison.org`)\"\n      - \"traefik.http.middlewares.traefik-auth.basicauth.users=${TRAEFIK_DASHBOARD_CREDENTIALS}\"\n      - \"traefik.http.middlewares.traefik-https-redirect.redirectscheme.scheme=https\"\n      - \"traefik.http.middlewares.sslheader.headers.customrequestheaders.X-Forwarded-Proto=https\"\n      - \"traefik.http.routers.traefik.middlewares=traefik-https-redirect\"\n      - \"traefik.http.routers.traefik-secure.entrypoints=https\"\n      - \"traefik.http.routers.traefik-secure.rule=Host(`traefik-dashboard.notremaison.org`)\"\n      - \"traefik.http.routers.traefik-secure.middlewares=traefik-auth\"\n      - \"traefik.http.routers.traefik-secure.tls=true\"\n      - \"traefik.http.routers.traefik-secure.tls.certresolver=letsencrypt\"\n      - \"traefik.http.routers.traefik-secure.tls.domains[0].main=notremaison.org\"\n      - \"traefik.http.routers.traefik-secure.tls.domains[0].sans=*.notremaison.org\"\n      - \"traefik.http.routers.traefik-secure.service=api@internal\"\n\nnetworks:\n  traefik_net:\n    external: true<\/pre>\n\n\n\n
# data\/config.yml\n# Note: Il n'est pas requis de red\u00e9marrer traefik suite \u00e0 une modification de ce fichier.\nhttp:\n #region routers \n  routers:\n    esxi:\n      entryPoints:\n        - \"https\"\n      rule: \"Host(`esxi.notremaison.org`)\"\n      middlewares:\n        - default-headers\n        - https-redirectscheme\n      tls: {}\n      service: esxi\n\n    menu:\n      entryPoints:\n        - \"https\"\n      rule: \"Host(`menu.notremaison.org`)\"\n      middlewares:\n        - default-headers\n        - https-redirectscheme\n      tls: {}\n      service: menu\n\n    notremaison:\n      entryPoints:\n        - \"https\"\n      rule: \"Host(`notremaison.org`)\"\n      middlewares:\n        - default-headers\n        - https-redirectscheme\n      tls: {}\n      service: notremaison\n\n    pihole:\n      entryPoints:\n        - \"https\"\n      rule: \"Host(`pihole.notremaison.org`)\"\n      middlewares:\n        - default-headers\n        - https-redirectscheme\n      tls: {}\n      service: pihole\n\n#endregion\n#region services\n  services:\n    esxi:\n      loadBalancer:\n        servers:\n          - url: \"https:\/\/192.168.2.117:443\"\n        passHostHeader: true\n\n    menu:\n      loadBalancer:\n        servers:\n          - url: \"http:\/\/192.168.2.51:8200\"\n        passHostHeader: true\n\n    notremaison:\n      loadBalancer:\n        servers:\n          - url: \"http:\/\/192.168.2.189:80\"\n        passHostHeader: true\n    # NOTE: La redirection vers https est activ\u00e9.\n    # Par contre, il faut renseigner le protocol (port) d'\u00e9coute sur le serveur cible.\n    pihole:\n      loadBalancer:\n        servers:\n          - url: \"http:\/\/192.168.2.51:80\"\n        passHostHeader: true\n\n#endregion\n  middlewares:\n    https-redirectscheme:\n      redirectScheme:\n        scheme: https\n        permanent: true\n    default-headers:\n      headers:\n        frameDeny: true\n        browserXssFilter: true\n        contentTypeNosniff: true\n        forceSTSHeader: true\n        stsIncludeSubdomains: true\n        stsPreload: true\n        stsSeconds: 15552000\n        customFrameOptionsValue: SAMEORIGIN\n        customRequestHeaders:\n          X-Forwarded-Proto: https\n\n    default-whitelist:\n      ipAllowList:\n        sourceRange:\n        - \"10.0.0.0\/8\"\n        - \"192.168.0.0\/16\"\n        - \"172.16.0.0\/12\"\n\n    secured:\n      chain:\n        middlewares:\n        - default-whitelist\n        - default-headers<\/pre>\n\n\n\n
# data\/traefik.yml\napi:\n  dashboard: true\n  debug: true\n  insecure: true\nentryPoints:\n  http:\n    address: \":80\"\n    http:\n      redirections:\n        entryPoint:\n          to: https\n          scheme: https\n  https:\n    address: \":443\"\nserversTransport:\n  insecureSkipVerify: true\nproviders:\n  docker:\n    endpoint: \"unix:\/\/\/var\/run\/docker.sock\"\n    exposedByDefault: false\n  file:\n    filename: \/config.yml\ncertificatesResolvers:\n  letsencrypt:\n    acme:\n      email: alain.boudreault@me.com\n      storage: acme.json\n      caServer: https:\/\/acme-v02.api.letsencrypt.org\/directory # prod (default)\n      #caServer: https:\/\/acme-staging-v02.api.letsencrypt.org\/directory # staging\n      dnsChallenge:\n        provider: godaddy\n        #disablePropagationCheck: true\n        delayBeforeCheck: 90s\n        resolvers:\n          - \"1.1.1.1:53\"\n          - \"8.8.8.8:53\"<\/pre>\n\n\n\n
# .env\nMY_DOMAIN=notremaison.org\nDEFAULT_NETWORK=traefik_net\nGODADDY_API_KEY=\nGODADDY_API_SECRET=\nGODADDY_SEQUENCE_INTERVAL=120\nTRAEFIK_DASHBOARD_CREDENTIALS=<\/pre>\n\n\n\n
\n\n\n\n
13 – Activation de Windows<\/h2>\n\n\n\n
# Sous powershell:\nirm https:\/\/get.activated.win | iex <\/pre>\n","protected":false},"excerpt":{"rendered":"
1 – Augmentation des limites de PHP via le fichier .htaccess pour WordPress 2 – Afficher les ports IP qui sont utilis\u00e9s sur Ubuntu 3 – Augmenter la taille d’un volume d’une VM Ubuntu 4 – \u00c9diter les fichiers d’une connexion ssh avec VS.Code 5 – Solution .htaccess 6 – Exemple d’un format log apache2 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":9,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"footnotes":""},"_links":{"self":[{"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=\/wp\/v2\/pages\/224"}],"collection":[{"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=224"}],"version-history":[{"count":44,"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=\/wp\/v2\/pages\/224\/revisions"}],"predecessor-version":[{"id":2749,"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=\/wp\/v2\/pages\/224\/revisions\/2749"}],"wp:attachment":[{"href":"https:\/\/ve2cuy.com\/420-3c3\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}