Our Smart Products

Lorem ipsum dolor sit amet, consectetur adipisicing elit. Dolores quae porro consequatur aliquam, incidunt eius magni provident, doloribus omnis minus ovident, doloribus omnis minus temporibus perferendis nesciunt. Sed ut perspiciatis unde omnis iste natus error sit voluptatem accusantium doloremque laudantium, totam rem aperiam

Включить сквозной трафик: net.ipv4.ip_forward = 1 Настройка статического сетевого интерфейса: BOOTPROTO=static TYPE=eth NM_CONTROLLED=no SYSTEMD_CONTROLLED=yes DISABLED=no CONFIG_WIRELESS=no SYSTEMD_BOOTPROTO=dhcp4 CONFIG_IPV4=yes Настройка NAT: modprobe iptable_nat iptables -t nat -A POSTROUTING -o enp3s0 -j MASQUERADE iptables -A FORWARD -i enp1s0 -j ACCEPT iptables-save > /etc/sysconfig/iptables systemctl enable iptables.service Настройка VLAN: TYPE=vlan BOOTPROTO=static DISABLED=no VID=100 HOST=ens33 Права root: WHEEL_USERS ALL=(ALL:ALL) NOPASSWD: ALL Настройка shh: Port 228 AllowUsers user MaxAuthTries 7 Banner /etc/ssh/banner Настройка OSPF: apt-get install frr nano /etc/frr/daemons ospfd=yes systemctl restart frr vtysh conf t router ospf network 192.168.1.0/24 area 0 network 192.168.2.0/24 area 0 do wr Настройка DNS: Listen-on { any; }; Forwarders { 77.88.8.8; }; Allow-query { any; }; Allow-recursion { any }; dnssec-validation no; zone “au-team.irpo/17.168.192.in-addr.arpa” { type master; file “au-team.irpo” };

			 
			Apt-get install task-samba-dc 
Rm /etc/samba/samba.conf
Rm -rf /var/lib/samba/
Rm -rf /var/cache/samba
Mkdir -p /var/lib/samba/sysvol
Vim /etc/resolv.conf
Nameserver 127.0.0.1
Samba-tool domain provision --realm=au-team.irpo --domain=au-team 
--adminpass=’P@ssw0rd’ --dns-backend=SAMBA_INTERNAL
 --option=”dns forwarder = 192.168.17.2” --server-role=dc --use-rfc2307
Samba-tool domain provision
Cp /var/lib/samba/private/krb5.conf /etc/krb5.conf
Systemctl enable --now samba
Samba-tool domain info 127.0.0.1
Kinit administrator@AU-TEAM.IRPO
Klist
Samba-tool user add hquser1
Samba-tool computer add hq-srv --ip-address=192.168.17.2
Клиент:
Apt-get install task-auth-ad-sssd admc 
Apt-get install sudo
Control sudo public
%hq ALL=(root) NOPASSWD: /usr/bin/id, /bin/grep, /bin/cat
[libdefaults]
default_realm = PETR.RU
dns_lookup_realm = false
dns_lookup_kdc = true
samba-tool domain join petr.ru DC -Uadministrator --realm=petr.ru
samba-tool dns query  domen.loc @ ALL -U администратор
samba-tool dns delete 127.0.0.1 au-team.irpo hq-cli A 192.168.17.35 -U administrator
samba-tool dns zonecreate 127.0.0.1 17.168.192.in-addr.arpa -U administrator
samba-tool dns add 127.0.0.1 17.168.192.in-addr.arpa 35 PTR hq-cli.au-team.irpo -U administrator

mdadm --zero-superblock --force /dev/sdb /dev/sdc
mdadm --create --verbose /dev/md0 -l 0 -n 2 /dev/sdb /dev/sdс
mkfs.ext4 /dev/md0
apt-get install -y nfs-server nfs-utils
Chmod 777 -R /raid/nfs
/raid/nfs     192.168.200.0/24(rw,no_root_squash)
exportfs -arv
apt-get install -y nfs-utils nfs-clients
Ip_srv:/raid/nfs   /mnt/nfs nfs defaults 0 0
vim /etc/chrony.conf

nano /etc/chrony.conf
pool 2.ru.pool.ntp.org iburst
allow 0/0
local stratum 5
apt-get install –y ansible sshpass

[boom]
Hq-rtr ansible_host=192.168.17.1
[boom:vars]
Ansible_user=sshuser
Ansible_password=P@ssw0rd
Ansible_port=22
[all:vars]
Ansible_python_interpreter=/usr/bin/python3

Host_key_cheking = fals
Intventory =/etc/ansible/hosts

Ansible -m ping all
Iptables -t nat -A PREROUTING -p tcp –dport 8080 -j SNAT –to-destination 192.168.2.2:8080
sudo iptables -t nat -L -n -v



Apt-get install lamp-server
mysql -u root webdb < /mnt/web/dump.sql -p
sudo mysql_secure_installation

# Подключитесь к MariaDB
sudo mysql

# Внутри MySQL:
CREATE DATABASE webdb;
CREATE USER 'webc'@'localhost' IDENTIFIED BY 'P@ssw0rd';
GRANT ALL PRIVILEGES ON webdb.* TO 'webc'@'localhost';
FLUSH PRIVILEGES;
EXIT;





apt-get install -y apache2-htpasswd
htpasswd –c /etc/nginx/.htpasswd WEB

server {
              listen 80;
              server_name web.au-team. irpo;
              location /  {
                            proxy_pass http://172.16.1.2:8080;
                            proxy_set_header Host $host;
                            proxy_set_header X-Real-IP $remote_addr;
                            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                            proxy_set_header X-Forwarded-Proto $scheme;
                            auth_basic "Restricted area";
                            auth_basic_user_file /etc/nginx/.htpasswd;
               }
}

server {
             listen 80;
             server_name docker.au-team. irpo;

             location /  {
                            proxy_pass http://172.16.2.2:8080;
                            proxy_set_header Host $host;
                            proxy_set_header X-Real-IP $remote_addr;
                            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
                            proxy_set_header X-Forwarded-Proto $scheme;
             }
}





services:
  testapp:
    image: site:latest
    container_name: testapp
    ports:
      - "8080:8080"
    environment:
      DB_HOST: db
      DB_NAME: testdb
      DB_TYPE: maria
      DB_USER: testc
      DB_PASS: hjk
      DB_PORT: 3306
    depends_on:
      - db
    restart: always

  db:
    image: mariadb:latest
    container_name: db
    environment:
      MARIADB_ROOT_PASSWORD: hjk
      MARIADB_DATABASE: testdb
      MARIADB_USER: testc
      MARIADB_PASSWORD: hjk
    restart: always
    ports:
      - 3306:3306






apt-get install -y cups cups-pdf
cupsctl --share-printers --remote-any
631 порт
ls -l/var/spool/cups