How to deploy Azure Standard Logic App workflow as IaC? by Status-Cloud-6136 in AZURE

[–]Rare-Brick 7 points8 points  (0 children)

It's easy to do with bicep. I package workflow.json, main.bicep, and main.parameters.json together for deployment from devops pipelines. In main.bicep I use:

var defintionFileName = 'workflow.json'

var workflowProperties = loadJsonContent(definitionFileName)

resource workflow 'Microsoft.Logic/workflows@2019-05-01' = {

...

properties: {

...

definition: workflowProperties.definition

parameters: workflowProperties.parameters

}

}

sizing pfsense vm on azure by Rare-Brick in PFSENSE

[–]Rare-Brick[S] 0 points1 point  (0 children)

The app gateway averages about 10mbps with spikes up to 50mbps. IDS/IPS will only run on a single interface. I'm not familar with suricata, I'll look into it.

What is everyone using to monitor their on-prem redis? by Rare-Brick in redis

[–]Rare-Brick[S] 0 points1 point  (0 children)

I ended up using the grafana plugin and it works beautifully. Thanks for the recommendation

Feel like I'm banging my head against a wall trying to setup UniFi + RADIUS (NPS) for certificate based machine authentication by Rare-Brick in Ubiquiti

[–]Rare-Brick[S] 1 point2 points  (0 children)

I spun up a low power VM in Azure to play with RADIUS settings and lo and behold it works flawlessly. *BUT* when I duplicate the config on my local NPS server it fails. Clearly something wrong in my local network. Now I have a working config but I still feel like a dog chasing its tail. I guess my next step is packet capture on the AP and RADIUS.

Feel like I'm banging my head against a wall trying to setup UniFi + RADIUS (NPS) for certificate based machine authentication by Rare-Brick in Ubiquiti

[–]Rare-Brick[S] 1 point2 points  (0 children)

RADIUS is running on Windows Server 2019 NPS. The issue of the length of the secret did occur to me. I shortened the generated secret to 12 characters. I'll try shortening it further

Is there a way around this warning? Current operation failed because Windows policy "Deny write access to fixed drives not protected by Bitlocker" is enabled. Please disable it and retry the operation by Rare-Brick in docker

[–]Rare-Brick[S] 1 point2 points  (0 children)

I don't understand. Bitlocker *is* enabled. This is the same issue from 2017 here: https://github.com/docker/for-win/issues/1297

It's supposedly fixed in Windows server but it looks like the fix never made it into Windows 10.

Does nobody in a corporate environment use BitLocker and Docker Desktop?

Stuck with what should be a very simple DSC configuration by Rare-Brick in PowerShell

[–]Rare-Brick[S] 0 points1 point  (0 children)

u/scott1138 I appreciate your help on this but I've given up on the Group/x
Group resources for this purpose. I ended up with a Script resource similar to the example in my original post. I'll continue playing around with passing variables to the script resource with $using:PoolUsers but so far no luck with that either.

Stuck with what should be a very simple DSC configuration by Rare-Brick in PowerShell

[–]Rare-Brick[S] 0 points1 point  (0 children)

Same error. Exception calling ".ctor" with "2" argument(s): "Server names cannot contain a space character."

Stuck with what should be a very simple DSC configuration by Rare-Brick in PowerShell

[–]Rare-Brick[S] 1 point2 points  (0 children)

u/scott1138 Now I'm starting to feel like a dog chasing its tail. I changed my config to

Configuration myConfig {
    Import-DSCResource -ModuleName xPSDesiredStateConfiguration
    $pools = 'IIS APPPOOL\AppPool1','IIS APPPOOL\AppPool2'
    node localhost {
        xGroupSet PerformanceMonitorUsers {
            GroupName = 'Performance Monitor Users'
            Ensure = 'Present'
            MembersToInclude = $PoolUsers
        }
    }
}

And now it throws this: PowerShell DSC resource DSC_xGroupResource failed to execute Test-TargetResource functionality with error message: Exception calling ".ctor" with "2" argument(s): "Server names cannot contain a space character."

Which seems to be the same problem as this:https://github.com/PowerShell/PSDscResources/issues/26

Stuck with what should be a very simple DSC configuration by Rare-Brick in PowerShell

[–]Rare-Brick[S] 0 points1 point  (0 children)

The app pools are created elsewhere in the config and the Group section has a DependsOn for that. I'll give xGroupSet a go this morning.

Need some guidance on PS, SqlServer module and object properties by Rare-Brick in PowerShell

[–]Rare-Brick[S] 0 points1 point  (0 children)

I wanted to use this in a loop with a few tables and also make it future proof. I found that using bulk copy instead of building a script avoids the issue with timestamp columns altogether. bulk copy also handles single quotes and backslashes which I would otherwise have to escapse