dotnet package add Install-Package NetEscapades.AspNetCore.SecurityHeaders
public void Configure(IApplicationBuilder app)
{
app.UseSecurityHeaders();
// other middleware e.g. static files, MVC etc
}
References
https://github.com/andrewlock/NetEscapades.AspNetCore.SecurityHeaders
dotnet add package OwaspHeaders.Core
app.UseSecureHeadersMiddleware(
SecureHeadersMiddlewareExtensions
.BuildDefaultConfiguration()
);
References
https://github.com/GaProgMan/OwaspHeaders.Core
https://owasp.org/www-project-secure-headers/
bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh)
/etc/systemd/system/v2ray.service
[Unit] Description=V2Ray Service Documentation=https://www.v2fly.org/ After=network.target nss-lookup.target [Service] User=nobody CapabilityBoundingSet=CAP_NET_ADMIN CAP_NET_BIND_SERVICE AmbientCapabilities=CAP_NET_ADMIN CAP_NET_BIND_SERVICE NoNewPrivileges=true ExecStart=/usr/local/bin/v2ray run -config /usr/local/etc/v2ray/config.json Restart=on-failure RestartPreventExitStatus=23 [Install] WantedBy=user. Target
installed: /usr/local/bin/v2ray installed: /usr/local/share/v2ray/geoip.dat installed: /usr/local/share/v2ray/geosite.dat installed: /usr/local/etc/v2ray/config.json installed: /var/log/v2ray/ installed: /var/log/v2ray/access.log installed: /var/log/v2ray/error.log installed: /etc/systemd/system/v2ray.service installed: /etc/systemd/system/v2ray@.service
systemctl enable v2ray; systemctl start v2ray
Remove V2Ray
# bash <(curl -L https://raw.githubusercontent.com/v2fly/fhs-install-v2ray/master/install-release.sh) --remove
References
https://github.com/v2fly/fhs-install-v2ray
vi /etc/sysctl.conf
vm.panic_on_oom=1 ;enables panic on OOM kernel.panic=10 ;tells the kernel to reboot ten seconds after panicking
Delete Local Branch
git branch -d <branch_name> git branch -D <branch_name>
Delete Remote Branch
git push <remote_name> --delete <branch_name>
References
https://stackoverflow.com/questions/2003505/how-do-i-delete-a-git-branch-locally-and-remotely
0.0.0.0/0 is the IPv4 everything – all possible IPv4 addresses.
::/0 is the IPv6 equivalent of that.
It should be noted that depending on implementation ::/0 can mean either all IPv6 addresses or all IPv4 and IPv6 addresses. That’s because IPv4 addresses can be mapped into IPv6 addresses ::ffff:0:0/96
References
https://serverfault.com/questions/874407/difference-between-0-0-0-0-0-and-0-in-access-control-lists
sudo apt install fail2ban -y
sudo systemctl enable fail2ban sudo systemctl start fail2ban
sudo systemctl status fail2ban
Configuring Fail2ban
sudo cp /etc/fail2ban/jail.conf /etc/fail2ban/jail. Local
sudo nano /etc/fail2ban/jail. Local
References
https://www.howtoforge.com/how-to-install-fail2ban-on-ubuntu-22-04/
public class StartupWorker: BackgroundService
{
private readonly IServiceProvider _serviceProvider;
private static readonly string[] Roles = { "Admin", "Manager", "Member" };
public StartupWorker(IServiceProvider serviceProvider)
{
_serviceProvider = serviceProvider;
}
protected override async Task ExecuteAsync(CancellationToken stoppingToken)
{
await CreateRoles();
await CreateAdmin();
}
private async Task CreateRoles()
{
using var serviceScope = _serviceProvider.GetRequiredService<IServiceScopeFactory>().CreateScope();
var roleManager = serviceScope.ServiceProvider.GetRequiredService<RoleManager<IdentityRole>>();
foreach (var role in Roles)
{
if (!await roleManager.RoleExistsAsync(role))
{
await roleManager.CreateAsync(new IdentityRole(role));
}
}
}
private async Task CreateAdmin()
{
using var serviceScope = _serviceProvider.GetRequiredService<IServiceScopeFactory>().CreateScope();
var userManager = serviceScope.ServiceProvider.GetRequiredService<UserManager<ApplicationUser>>();
var user = await userManager.FindByNameAsync("admin");
if (user == null)
{
var identity = new ApplicationUser("admin") { FirstName = "Admin", LastName = "" };
var password = "12345";
await userManager.CreateAsync(identity, password);
await userManager.AddToRoleAsync(identity, "Admin");
}
}
}
References
https://learn.microsoft.com/en-us/aspnet/core/security/authorization/secure-data?view=aspnetcore-7.0
var builder = WebApplication.CreateBuilder(args);
var connectionString = builder.Configuration.GetConnectionString("DefaultConnection");
builder.Services.AddDbContext<ApplicationDbContext>(options =>
options.UseSqlServer(connectionString));
builder.Services.AddDatabaseDeveloperPageExceptionFilter();
builder.Services.AddDefaultIdentity<IdentityUser>(
options => options.SignIn.RequireConfirmedAccount = true)
.AddRoles<IdentityRole>()
.AddEntityFrameworkStores<ApplicationDbContext>();
References
https://learn.microsoft.com/en-us/aspnet/core/security/authorization/secure-data?view=aspnetcore-7.0
https://stackoverflow.com/questions/52522248/store-does-not-implement-iuserrolestoretuser-asp-net-core-identity
sudo apt-get install php8.1-fpm sudo a2dismod php8.1 sudo a2enconf php8.1-fpm sudo a2enmod proxy_fcgi
sudo a2dismod mpm_prefork
sudo a2enmod mpm_event
sudo a2enmod ssl
sudo a2enmod http2
sudo systemctl restart apache2
After enabling and loading necessary Apache modules, navigate to your Apache configuration directory and edit Apache configuration.
To enable HTTP/2 on your Apache web server add one of the following to your global Apache configuration or inside of a particular virtual host.
Protocols h2 http/1.1
Here is the minimal virtual server configuration that can be used to enable HTTP/2 in some virtual host:
<VirtualHost *:443> ServerName example.com ServerAlias www.example.com DocumentRoot /var/www/public_html/example.com SSLEngine on SSLCertificateKeyFile /path/to/private.pem SSLCertificateFile /path/to/cert.pem SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1 Protocols h2 http/1.1 </VirtualHost>
References
https://www.howtoforge.com/how-to-enable-http-2-in-apache