Ịdọ Aka Ná Ntị Nche SlickStack

Peeji a na-eme nchịkọta nchegbu nchekwa gbasara SlickStack na ihe kpatara na nhazi ndabara ya nwere ike ime ka sava pụta ìhè nye ịgba koodu site n'ebe dịpụrụ adịpụ na mwakpo man-in-the-middle. Ọ na-enye nzọụkwụ mgbochi na ụzọ ndị dị nchebe karịa.

Nchịkọta

  • Nbudata dịpụrụ adịpụ a na-emekarị, haziri ka ọ gbaa dịka root site na cron.
  • A na-agafe nkwenye SSL site n'iji --no-check-certificate
  • Enweghị checksums/signatures na scripts e budatara
  • Njikwa root na ikike etinyere na skrip ndị e bufere

Ihe Akaebe: Cron na Ikikere

Nbudata cron (kwa awa 3 na nkeji 47)

47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/08-cron-half-daily https://slick.fyi/crons/08-cron-half-daily.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/09-cron-daily https://slick.fyi/crons/09-cron-daily.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/10-cron-half-weekly https://slick.fyi/crons/10-cron-half-weekly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/11-cron-weekly https://slick.fyi/crons/11-cron-weekly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/12-cron-half-monthly https://slick.fyi/crons/12-cron-half-monthly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/13-cron-monthly https://slick.fyi/crons/13-cron-monthly.txt' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'wget --no-check-certificate -q -4 -t 3 -T 30 -O /var/www/crons/14-cron-sometimes https://slick.fyi/crons/14-cron-sometimes.txt' > /dev/null 2>&1

Njikwa root na ikike siri ike (etinyere ugboro ugboro)

47 */3 * * * /bin/bash -c 'chown root:root /var/www/crons/*cron*' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'chown root:root /var/www/crons/custom/*cron*' > /dev/null 2>&1
47 */3 * * * /bin/bash -c 'chmod 0700 /var/www/crons/*cron*' > /dev/null 2>&1

Ụdị a na-enye ohere ịgba koodu n'enweghị oke site na ngalaba dịpụrụ adịpụ ma na-abawanye ihe ize ndụ MITM site n'ịghara ịlele nkwenye asambodo.

Hụkwa commit ebe a gbanwere URLs cron site na GitHub CDN gaa slick.fyi: Ntụnyere commit.

Ntuziaka Ibelata

  1. Gbochie ọrụ cron SlickStack ma wepụ scripts e budatara n'ime ndekọ cron.
  2. Nyocha maka ntụaka fọdụrụ na slick.fyi na ịdọpụ scripts si ebe dịpụrụ adịpụ; dochie ha na ihe edere ụdị nwere checksum ma ọ bụ wepu kpamkpam.
  3. Gbanwee asambodo na igodo ma ọ bụrụ na SlickStack rụrụ na ikike root na sistemụ gị.
  4. Wughachi sava ndị metụtara mgbe o kwe omume iji hụ na ọnọdụ dị ọcha.

Nhọrọ dị nchebe

Tụlee WordOps ma ọ bụ ngwá ọrụ ndị ọzọ nke na-ezere ịrụ koodu dị ka root site na ebe dịpụrụ adịpụ ma na-enye ntọhapụ a pụrụ ịlele, nke nwere nsụgharị (versioned) yana checksums/signatures.

Isi iyi