119 lines
2.1 KiB
Markdown
119 lines
2.1 KiB
Markdown
# Commandes utiles
|
|
|
|
## Docker
|
|
|
|
```bash
|
|
# Status de tous les containers
|
|
docker ps -a
|
|
|
|
# Logs dun service
|
|
docker logs -f <container>
|
|
|
|
# Redémarrer un service
|
|
docker restart <container>
|
|
|
|
# Recréer un service (après modif compose)
|
|
cd ~/docker/talloires && docker compose up -d <service>
|
|
|
|
# Tout redémarrer
|
|
cd ~/docker/talloires && docker compose down && docker compose up -d
|
|
|
|
# Shell dans un container
|
|
docker exec -it <container> sh
|
|
```
|
|
|
|
## Caddy
|
|
|
|
```bash
|
|
# Recharger la config
|
|
docker exec caddy caddy reload --config /etc/caddy/Caddyfile
|
|
|
|
# Voir les logs
|
|
docker logs caddy -f
|
|
|
|
# Tester la config
|
|
docker exec caddy caddy validate --config /etc/caddy/Caddyfile
|
|
```
|
|
|
|
## Authelia
|
|
|
|
```bash
|
|
# Logs
|
|
docker logs authelia -f
|
|
|
|
# Générer un hash de mot de passe
|
|
docker exec authelia authelia crypto hash generate argon2 --password "motdepasse"
|
|
|
|
# Générer un hash pour OIDC secret
|
|
docker exec authelia authelia crypto hash generate pbkdf2 --password "secret"
|
|
```
|
|
|
|
## Backup
|
|
|
|
```bash
|
|
# Lancer un backup manuel
|
|
~/backup-to-annecy.sh
|
|
|
|
# Voir le log
|
|
cat ~/backup.log
|
|
|
|
# Lister les backups sur Annecy
|
|
sudo ssh -i /root/.ssh/id_ed25519 rsync-talloires@10.171.171.50 "ls -lh /volume1/Backups/talloires/"
|
|
```
|
|
|
|
## Système
|
|
|
|
```bash
|
|
# Espace disque
|
|
df -h
|
|
|
|
# Mémoire
|
|
free -h
|
|
|
|
# Température CPU
|
|
vcgencmd measure_temp
|
|
|
|
# Services systemd
|
|
sudo systemctl status docker
|
|
sudo systemctl status cockpit
|
|
|
|
# Logs système
|
|
journalctl -f
|
|
```
|
|
|
|
## Réseau
|
|
|
|
```bash
|
|
# IP des containers
|
|
docker network inspect talloires_net | grep -A2 Name
|
|
|
|
# Test DNS Docker
|
|
docker exec caddy nslookup authelia
|
|
|
|
# Connecter un container au réseau
|
|
docker network connect talloires_net <container>
|
|
```
|
|
|
|
## CrowdSec
|
|
|
|
```bash
|
|
# Status
|
|
docker exec crowdsec cscli metrics
|
|
|
|
# Décisions actives (bans)
|
|
docker exec crowdsec cscli decisions list
|
|
|
|
# Ajouter un ban manuel
|
|
docker exec crowdsec cscli decisions add --ip 1.2.3.4 --reason "test"
|
|
```
|
|
|
|
## Certificats
|
|
|
|
```bash
|
|
# Exporter le CA Caddy (pour clients)
|
|
docker exec caddy cat /data/caddy/pki/authorities/local/root.crt > caddy-ca.crt
|
|
|
|
# Installer sur Mac
|
|
security add-trusted-cert -d -r trustRoot -k ~/Library/Keychains/login.keychain-db caddy-ca.crt
|
|
```
|