Google Domains, no API and a lot of collab edge sadness

Not that it's not something that can't be worked around, but I was enjoying using Google Domains' own name servers and not having to manage my own.  However, given the fact I use Let's Encrypt and I would rather not renew my own certs every 90 days and the fact you need A records for each SAN... well, I guess I have to spin up my own External DNS server.  Luckily, Google Domains use DNS SEC, so I will have to do that this weekend.

I found that my old ASA Let's Encrypt script was not perfect, I will also update that this weekend with more logical checks.  It will need to be ran as a sudoer as well, as there is some mkdir commands that need to happen.  I have gotten to a point, where I will test it as a cron job. 

In the mean time, someone has asked me to automate Windows Server 2016 installs for their lab, so I guess I will do that tonight.

I haven't been posting lately, because I am leading a game development team outside of work, studying for the lab and frankly, no clue where I have any time to do even this post.

Comments

Post a Comment

Popular posts from this blog

Cloudflare Calls API to SIP broker

Update: Given the amount of time I sacrifice to game development outside of collaboration work, my site has become defunct. Cloudflare has a calls beta. My intention is to create a SIP to API broker for the CMS and try to get their CDN working with it's anycast to beat out GeoDNS solutions. I will probably post more about this later here, however, don't expect me to be overly timely on it. Also, why is the Cisco Meeting Server doesn't grey out UI items that have been configured in the API so people don't make mistakes and cause conflicts? Why is it that Cisco doesn't publish the methodology by which all cospaces are assigned to callbridges/nodes at the time of build. I have many questions for many things that don't make sense these days and a lot of rants, but I will save those for some knowledge drops in the future. Take care everyone!
Read more

Replacing default paste behavior in Windows 11

Clipboard URL Shortener Implementation Guide Clipboard URL Shortener Implementation Guide Powershell Script This PowerShell script checks the clipboard for a YouTube URL. If it finds one, it converts it to a shortened youtu.be URL and updates the clipboard with this new URL. Add-Type -AssemblyName System.Windows.Forms $clipboardText = Get-Clipboard if ($clipboardText -match 'https://(www\.|music\.)?youtube\.com/watch\?v=([a-zA-Z0-9_-]+)') { $videoID = $matches[2] $shortUrl = "https://youtu.be/$videoID" Set-Clipboard -Value $shortUrl # Update the clipboard with the shortened URL } else { Set-Clipboard -Value $clipboardText # Retain the original clipboard text if it's not a YouTube URL } AutoHotkey Script This AutoHotkey script intercepts the Ctrl+V keystroke to execute the PowerShell script and then perform a paste ope...
Read more

Policy Based Routing on a Nexus

First of all, let's just admit, I am a collab guy, doing work on a Nexus is a foreign experience. While some things are intuitive not everything follows RFC's and the Nexus platform is a bit more restrictive. First of all, to get PBR going, I had to change the hardware profile, since I have no intention of using QoS internally in my lab, I decided to steal from it: hardware profile tcam region qos 0 hardware profile tcam region pbr 256 This then requires a reboot.  After this is done and the pbr feature is enabled: feature pbr You can get into creating the route-maps.  However, unlike IOS devices you can only use permits in your acl's and then use a deny statement on the route map itself: ip access-list PBR_DENY statistics per-entry 10 permit ip any 192.168.1.0/24 ip access-list PBR_PERMIT  statistics per-entry  10 permit ip any any route-map PBR_RULE pbr-statistics route-map PBR_RULE deny 10  match ip address PBR_DENY route-map PBR_R...
Read more