Infra on chw㉿world:~$https://chw41.github.io/tags/infra/Recent content in Infra on chw㉿world:~$Hugozh-twMon, 19 Jan 2026 00:00:00 +0000美國國防部 DOD 5220.22-M 標準 銷毀儲存媒體資料https://chw41.github.io/b1og/%E7%BE%8E%E5%9C%8B%E5%9C%8B%E9%98%B2%E9%83%A8-dod-5220.22-m-%E6%A8%99%E6%BA%96-%E9%8A%B7%E6%AF%80%E5%84%B2%E5%AD%98%E5%AA%92%E9%AB%94%E8%B3%87%E6%96%99/Mon, 19 Jan 2026 00:00:00 +0000https://chw41.github.io/b1og/%E7%BE%8E%E5%9C%8B%E5%9C%8B%E9%98%B2%E9%83%A8-dod-5220.22-m-%E6%A8%99%E6%BA%96-%E9%8A%B7%E6%AF%80%E5%84%B2%E5%AD%98%E5%AA%92%E9%AB%94%E8%B3%87%E6%96%99/<h1 id="依據美國國防部-dod-522022-m-標準-銷毀儲存媒體資料"> 依據美國國防部 DOD 5220.22-M 標準 銷毀儲存媒體資料 </h1><h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#依據美國國防部-dod-522022-m-標準-銷毀儲存媒體資料">依據美國國防部 DOD 5220.22-M 標準 銷毀儲存媒體資料</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> <li><a href="#1-製作-wipe-開機碟">1. 製作 wipe 開機碟</a></li> <li><a href="#2-將-image-燒錄至-usb">2. 將 image 燒錄至 USB</a> <ul> <li><a href="#21-linux">2.1 Linux</a></li> <li><a href="#22-macos">2.2 MacOS</a></li> <li><a href="#23-windows">2.3 Windows</a></li> </ul> </li> <li><a href="#3-啟用-systemrescue">3. 啟用 SystemRescue</a> <ul> <li><a href="#31-選擇-boot-systemrescue-using-default-options">3.1 選擇 Boot SystemRescue using default options</a></li> <li><a href="#32-systemrescue-cli">3.2 SystemRescue CLI</a></li> <li><a href="#33-option-1-dod-522022-m">3.3 (Option 1) DoD 5220.22-M</a></li> <li><a href="#34-option-2-nist-sp-800-88">3.4 (Option 2) NIST SP 800-88</a></li> </ul> </li> <li><a href="#4-抹除完成-">4. 抹除完成 ✅</a></li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p> <blockquote><p>利用 SystemRescue 製作 USB 開機碟進行抹除<br> Official Doucument:<br> <a href="https://www.system-rescue.org/">https://www.system-rescue.org/</a> <br> <img src="https://hackmd.io/_uploads/HkeOgVjHWl.png" alt="image"></p>Github Visitor Counter 安裝指南 ｜Cloudflare Workers + KVhttps://chw41.github.io/b1og/github-visitor-counter-%E5%AE%89%E8%A3%9D%E6%8C%87%E5%8D%97-cloudflare-workers-+-kv/Wed, 29 Oct 2025 00:00:00 +0000https://chw41.github.io/b1og/github-visitor-counter-%E5%AE%89%E8%A3%9D%E6%8C%87%E5%8D%97-cloudflare-workers-+-kv/<h1 id="github-visitor-counter-安裝指南-cloudflare-workers--kv"> Github Visitor Counter 安裝指南 ｜Cloudflare Workers + KV </h1><p>使用 Cloudflare Workers + KV 產生可嵌入 GitHub Profile/README 的動態 SVG 訪客計數器。 內含 6 位數前置自動補零、外觀參數計數器，以及透過 GitHub Actions 因應 GitHub Camo 圖片快取的作法。</p> <blockquote><p>KV free tier 1,000 writes/day.</p></blockquote><ul> <li>English Version: <a href="https://hackmd.io/@CHW/r19bRRVRxg">Github-Counter Installation Guide｜Cloudflare Workers + KV</a></li> </ul> <hr> <h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#github-visitor-counter-安裝指南-cloudflare-workers--kv">Github Visitor Counter 安裝指南 ｜Cloudflare Workers + KV</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> <li><a href="#poc-preview">PoC Preview</a></li> <li><a href="#安裝設定-cloudflare-ui">安裝設定 (Cloudflare UI)</a> <ul> <li><a href="#1-建立-worker">1. 建立 Worker</a></li> <li><a href="#2-建立-kv-namespace">2. 建立 KV namespace</a></li> <li><a href="#3-將-kv-綁到-worker">3. 將 KV 綁到 Worker</a></li> <li><a href="#4-貼上-worker-程式碼">4. 貼上 Worker 程式碼</a></li> </ul> </li> <li><a href="#outcomes">Outcomes</a></li> <li><a href="#github-actions">GitHub Actions</a></li> <li><a href="#嵌入至-readme">嵌入至 README</a></li> <li><a href="#嵌入完成-">嵌入完成 ✅</a> <ul> <li></li> </ul> </li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p>Github Visitor Counter Installation Guide｜Cloudflare Workers + KVhttps://chw41.github.io/b1og/github-visitor-counter-installation-guidecloudflare-workers-+-kv/Tue, 21 Oct 2025 00:00:00 +0000https://chw41.github.io/b1og/github-visitor-counter-installation-guidecloudflare-workers-+-kv/<h1 id="github-visitor-counter-installation-guidecloudflare-workers--kv"> Github Visitor Counter Installation Guide｜Cloudflare Workers + KV </h1><p>Generate a dynamic SVG visitor counter using Cloudflare Workers + KV, embeddable in your GitHub Profile/README.<br> Includes 6-digit zero-padding, style params, and a GitHub Camo cache workaround via GitHub Actions.</p> <blockquote><p>KV free tier 1,000 writes/day.</p></blockquote><ul> <li>繁體中文安裝教學: <a href="https://hackmd.io/@CHW/HJ4uWyB0xx">Github-Counter 安裝指南 ｜Cloudflare Workers + KV</a></li> </ul> <hr> <h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#github-visitor-counter-installation-guidecloudflare-workers--kv">Github Visitor Counter Installation Guide｜Cloudflare Workers + KV</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> <li><a href="#poc-preview">PoC Preview</a></li> <li><a href="#setup-cloudflare-ui">Setup (Cloudflare UI)</a> <ul> <li><a href="#1-create-a-worker">1. Create a Worker</a></li> <li><a href="#2-create-a-kv-namespace">2. Create a KV namespace</a></li> <li><a href="#3-bind-kv-to-the-worker">3. Bind KV to the Worker</a></li> <li><a href="#4-paste-the-worker-code">4. Paste the Worker code</a></li> </ul> </li> <li><a href="#outcomes">Outcomes</a></li> <li><a href="#github-actions">GitHub Actions</a></li> <li><a href="#embed-into-readme">Embed into README</a></li> <li><a href="#embeded-complete-">Embeded complete ✅</a> <ul> <li></li> </ul> </li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p>Apache SSL 憑證更換https://chw41.github.io/b1og/apache-ssl-%E6%86%91%E8%AD%89%E6%9B%B4%E6%8F%9B/Thu, 13 Mar 2025 00:00:00 +0000https://chw41.github.io/b1og/apache-ssl-%E6%86%91%E8%AD%89%E6%9B%B4%E6%8F%9B/<h1 id="apache-ssl-憑證更換"> Apache SSL 憑證更換 </h1><h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#apache-ssl-憑證更換">Apache SSL 憑證更換</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> </ul> </li> <li><a href="#apache-ssl-憑證申請安裝">Apache SSL 憑證申請安裝</a></li> <li><a href="#向憑證頒發機構-ca-購買新的ssl憑證">向憑證頒發機構 (CA) 購買新的SSL憑證</a> <ul> <li><a href="#原本的私鑰-serverkey-產生新的-csr">原本的私鑰 (server.key) 產生新的 CSR</a></li> <li><a href="#csr-提交給憑證頒發機構-ca">CSR 提交給憑證頒發機構 (CA)</a></li> </ul> </li> <li><a href="#unexpected-twist-ca-審核需要驗證-dns-txt-tag">[Unexpected twist] CA 審核需要驗證 DNS TXT tag</a> <ul> <li><a href="#驗證-txt-tag-設定狀態">驗證 TXT tag 設定狀態</a> <ul> <li><a href="#1-digwebinterface-線上-dns-查詢工具">1. digwebinterface: 線上 DNS 查詢工具</a></li> <li><a href="#2-dig-cmd">2. dig cmd</a></li> </ul> </li> </ul> </li> <li><a href="#取得-ca-核發-ssl-憑證">取得 CA 核發 SSL 憑證</a></li> <li><a href="#根憑證中繼憑證-安裝設定">根憑證/中繼憑證 安裝設定</a> <ul> <li><a href="#1-取得-eca自簽憑證-根憑證-rooteca">1. 取得 eCA自簽憑證 (根憑證 ROOTeCA)</a></li> <li><a href="#2-取得-eca-to-hrca-憑證鏈">2. 取得 eCA to HRCA 憑證鏈</a></li> <li><a href="#3-取得-hipki-ov-tls-ca-憑證鏈">3. 取得 HiPKI OV TLS CA 憑證鏈</a></li> <li><a href="#4-製作憑證鏈">4. 製作憑證鏈</a></li> </ul> </li> <li><a href="#ssl伺服器憑證安裝">SSL伺服器憑證安裝</a> <ul> <li><a href="#1-將-ssl-伺服器憑證-cer-憑證轉換成-sslcrt">1. 將 SSL 伺服器憑證 .cer 憑證轉換成 ssl.crt</a></li> <li><a href="#2-編輯-sslconf">2. 編輯 ssl.conf</a></li> </ul> </li> <li><a href="#重啟-apache-完成安裝">重啟 Apache (完成安裝)</a> <ul> <li> <ul> <li></li> </ul> </li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p>Apache SSL 憑證申請安裝https://chw41.github.io/b1og/apache-ssl-%E6%86%91%E8%AD%89%E7%94%B3%E8%AB%8B%E5%AE%89%E8%A3%9D/Wed, 12 Mar 2025 00:00:00 +0000https://chw41.github.io/b1og/apache-ssl-%E6%86%91%E8%AD%89%E7%94%B3%E8%AB%8B%E5%AE%89%E8%A3%9D/<h1 id="apache-ssl-憑證申請安裝"> Apache SSL 憑證申請安裝 </h1><h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#apache-ssl-憑證申請安裝">Apache SSL 憑證申請安裝</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> </ul> </li> <li><a href="#建立私鑰-serverkey">建立私鑰 Server.key</a> <ul> <li><a href="#openssl-工具">OpenSSL 工具</a> <ul> <li><a href="#download">Download</a></li> <li><a href="#location--version">Location &amp; Version</a></li> </ul> </li> <li><a href="#建立serverkey-私鑰檔案">建立Server.key 私鑰檔案</a> <ul> <li><a href="#1-產生rsa-私鑰">1. 產生RSA 私鑰</a></li> <li><a href="#2-產生憑證請求檔csr">2. 產生憑證請求檔(CSR)</a></li> </ul> </li> </ul> </li> <li><a href="#將certrequesttxt-送至證書頒發機構ca">將certrequest.txt 送至證書頒發機構(CA)</a></li> <li><a href="#根憑證中繼憑證-安裝設定">根憑證/中繼憑證 安裝設定</a> <ul> <li><a href="#取得-eca自簽憑證-根憑證-rooteca">取得 eCA自簽憑證 (根憑證 ROOTeCA)</a></li> <li><a href="#取得-public-ca-憑證鏈-中繼ca憑證">取得 Public CA 憑證鏈 (中繼CA憑證)</a></li> <li><a href="#匯出-rooteca根憑證--public-ca中繼ca憑證">匯出 ROOTeCA(根憑證) &amp; Public CA(中繼CA憑證)</a> <ul> <li><a href="#1-publicca2_64--詳細資料--簽發者">1. PublicCA2_64 &gt; 詳細資料 &gt; 簽發者</a></li> <li><a href="#2-憑證匯出精靈">2. 憑證匯出精靈</a></li> <li><a href="#3-匯出格式設定">3. 匯出格式設定</a></li> <li><a href="#4-另存-p7b-檔">4. 另存 .P7B 檔</a></li> <li><a href="#5-完成憑證匯出">5. 完成憑證匯出</a></li> </ul> </li> <li><a href="#apache-憑證匯入--設定">Apache 憑證匯入 &amp; 設定</a> <ul> <li><a href="#1-將已匯出的-p7b-匯入apache">1. 將已匯出的 .P7B 匯入Apache</a></li> <li><a href="#2-apache-console">2. Apache console</a></li> <li><a href="#3-編輯-sslconf-中的-sslcertificatechainfile">3 編輯 ssl.conf 中的 SSLCertificateChainFile</a></li> </ul> </li> </ul> </li> <li><a href="#ssl伺服器憑證安裝">SSL伺服器憑證安裝</a> <ul> <li><a href="#1-servercer格式轉換">1. server.cer格式轉換</a></li> <li><a href="#2-將產出的cerpem-憑證移置apacheconfsslcrt">2. 將產出的.cer/.PEM 憑證移置/apache/conf/ssl.crt</a></li> <li><a href="#3-編輯-sslconf">3. 編輯 ssl.conf</a> <ul> <li><a href="#31-編輯-sslconf-中的-sslcertificatefile">3.1 編輯 ssl.conf 中的 SSLCertificateFile</a></li> <li><a href="#31-編輯-sslconf-中的-sslcertificatekeyfile">3.1 編輯 ssl.conf 中的 SSLCertificateKeyFile</a></li> </ul> </li> </ul> </li> <li><a href="#重啟-apache-完成安裝">重啟 Apache (完成安裝)</a></li> <li><a href="#apache-ssl-憑證更換">Apache SSL 憑證更換</a> <ul> <li> <ul> <li></li> </ul> </li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p>Elastic stack(ELK) 安裝 on docker [一鍵安裝]https://chw41.github.io/b1og/elastic-stackelk-%E5%AE%89%E8%A3%9D-on-docker-%E4%B8%80%E9%8D%B5%E5%AE%89%E8%A3%9D/Thu, 30 Jan 2025 00:00:00 +0000https://chw41.github.io/b1og/elastic-stackelk-%E5%AE%89%E8%A3%9D-on-docker-%E4%B8%80%E9%8D%B5%E5%AE%89%E8%A3%9D/<h1 id="elastic-stackelk-安裝-on-docker-一鍵安裝"> Elastic stack(ELK) 安裝 on docker [一鍵安裝] </h1><h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#elastic-stackelk-安裝-on-docker-一鍵安裝">Elastic stack(ELK) 安裝 on docker [一鍵安裝]</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> </ul> </li> <li><a href="#elk-介紹">ELK 介紹</a></li> <li><a href="#安裝">安裝</a></li> <li><a href="#初始設定">初始設定</a> <ul> <li><a href="#更改預設密碼">更改預設密碼</a></li> </ul> </li> <li><a href="#設定區網固定-ip">設定區網固定 IP</a> <ul> <li><a href="#編輯-docker-composeyml">編輯 docker-compose.yml</a></li> <li><a href="#設定-vpn">設定 VPN</a></li> </ul> </li> <li><a href="#reference">Reference</a> <ul> <li> <ul> <li></li> </ul> </li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p> <p>:::info :bulb: ELK = Elasticsearch + Logstash + Kibana :::</p> <h1 id="elk-介紹"> ELK 介紹 </h1><blockquote><p><strong>資料來源 → Logstash → Elasticsearch → Kibana</strong><br> Logstash 收集並處理資料。<br> 將處理好的資料送入 Elasticsearch 進行儲存和索引。<br> Kibana 從 Elasticsearch 獲取資料，進行可視化和分析。</p></blockquote><p>● <strong>Elasticsearch</strong>： Elasticsearch為分散式、RESTful 的搜尋及分析的搜尋引擎，能解決與日俱增的使用案例 ，做為 ELK 的核心，Elasticsearch 能集中儲存資料以便於做快速搜尋，並做關聯性的微調，及能輕易擴展的分析功能。如此強大的性能使 Elasticsearch 在用戶中獲得很高的評價跟人氣，公司也因此聲名大噪 。<br> <img src="https://hackmd.io/_uploads/HJegyXU5p.png" alt="image"></p>Elastic stack(ELK) 安裝與教學https://chw41.github.io/b1og/elastic-stackelk-%E5%AE%89%E8%A3%9D%E8%88%87%E6%95%99%E5%AD%B8/Wed, 29 Jan 2025 00:00:00 +0000https://chw41.github.io/b1og/elastic-stackelk-%E5%AE%89%E8%A3%9D%E8%88%87%E6%95%99%E5%AD%B8/<h1 id="elastic-stackelk-安裝與教學"> Elastic stack(ELK) 安裝與教學 </h1><h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#elastic-stackelk-安裝與教學">Elastic stack(ELK) 安裝與教學</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> </ul> </li> <li><a href="#elk-介紹">ELK 介紹</a></li> <li><a href="#elasticsearch">Elasticsearch</a> <ul> <li><a href="#下載安裝">下載安裝</a></li> <li><a href="#啟動">啟動</a></li> </ul> </li> <li><a href="#logstash">Logstash</a> <ul> <li><a href="#下載安裝-1">下載安裝</a></li> <li><a href="#更改設定檔">更改設定檔</a></li> <li><a href="#啟動-1">啟動</a></li> </ul> </li> <li><a href="#kibana">Kibana</a> <ul> <li><a href="#下載安裝-2">下載安裝</a></li> <li><a href="#更改設定檔-1">更改設定檔</a></li> <li><a href="#啟動-2">啟動</a></li> </ul> </li> <li><a href="#heading">[ETC.] 使用 docker 一鍵安裝 Elastic stack(ELK)</a></li> <li><a href="#設定區網固定-ip">設定區網固定 IP</a> <ul> <li> <ul> <li></li> </ul> </li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p> <p>:::info :bulb: ELK = Elasticsearch + Logstash + Kibana :::</p> <h1 id="elk-介紹"> ELK 介紹 </h1><blockquote><p><strong>資料來源 → Logstash → Elasticsearch → Kibana</strong><br> Logstash 收集並處理資料。 將處理好的資料送入 Elasticsearch 進行儲存和索引。 Kibana 從 Elasticsearch 獲取資料，進行可視化和分析。</p></blockquote><p>● <strong>Elasticsearch</strong>： Elasticsearch為分散式、RESTful 的搜尋及分析的搜尋引擎，能解決與日俱增的使用案例 ，做為 ELK 的核心，Elasticsearch 能集中儲存資料以便於做快速搜尋，並做關聯性的微調，及能輕易擴展的分析功能。如此強大的性能使 Elasticsearch 在用戶中獲得很高的評價跟人氣，公司也因此聲名大噪 。<br> <img src="https://hackmd.io/_uploads/HJegyXU5p.png" alt="image"></p>LNMP (Linux + Nginx + MySQL + PHP) 架設伺服器https://chw41.github.io/b1og/lnmp-linux-+-nginx-+-mysql-+-php-%E6%9E%B6%E8%A8%AD%E4%BC%BA%E6%9C%8D%E5%99%A8/Fri, 26 Jan 2024 00:00:00 +0000https://chw41.github.io/b1og/lnmp-linux-+-nginx-+-mysql-+-php-%E6%9E%B6%E8%A8%AD%E4%BC%BA%E6%9C%8D%E5%99%A8/<h1 id="lnmp-linux--nginx--mysql--php-架設伺服器"> LNMP (Linux + Nginx + MySQL + PHP) 架設伺服器 </h1><h2 id="table-of-contents"> Table of Contents </h2><nav class="chw-toc"> <details open> <nav id="TableOfContents"> <ul> <li><a href="#lnmp-linux--nginx--mysql--php-架設伺服器">LNMP (Linux + Nginx + MySQL + PHP) 架設伺服器</a> <ul> <li><a href="#table-of-contents">Table of Contents</a></li> <li><a href="#general-setup">General Setup</a></li> <li><a href="#server-demo">Server DEMO</a> <ul> <li><a href="#1-login">1. Login</a></li> <li><a href="#2-show-mysql-database-contacts-information">2. Show MySQL Database (contacts information)</a></li> <li><a href="#3-contacts-information-page">3. Contacts Information Page</a></li> <li><a href="#4-addedit-contacts">4. Add/Edit Contacts</a></li> <li><a href="#5-delete-contacts">5. Delete Contacts</a></li> <li><a href="#6-nginx-load-balance">6. Nginx Load Balance</a></li> </ul> </li> <li><a href="#vulnerability-scan--fix">Vulnerability Scan &amp; Fix</a> <ul> <li><a href="#1-owasp-zap-scanner">1. OWASP ZAP scanner</a></li> <li><a href="#2-fix-vulnerabilities">2. Fix vulnerabilities</a></li> </ul> </li> <li><a href="#database-audit-enable-mysql-query-log">Database Audit (Enable MySQL Query Log)</a> <ul> <li><a href="#the-time-difference-between-database-audit-is-enabled-or-not">The time difference between database audit is enabled or not.</a></li> </ul> </li> </ul> </li> </ul> </nav> </details> </nav><p>[TOC]</p>