Skip to content

SecDevOps Documentation

VPN: 2. Access

Initializing search

SecDevOps Documentation

Welcome 👊
Hetzner Meeting 25.6.2026 — CEO notes
Open file - Security Warning
City Environment
City Environment
Hetzner environment
Hetzner environment
- Road
- City
  City
  - Cost comparison between gcp and hetzner configuration
Incidents
Incidents
- Auth0 SendGrid SMTP authentication failure
  Auth0 SendGrid SMTP authentication failure
  - Auth0 cannot send email through SendGrid — 451 Authentication failed: Could not authenticate
- Wazuh false positive
  Wazuh false positive
  - Issue
  - Runbook: Wazuh Rule 510 "Trojaned version of file detected" — Coreutils False Positives
Internal
Internal
- Devops
  Devops
  - DELL: BIOS update for Linux
  - Mac disk encryption - File Vault
  - Yubikey
  - Ahola Digital User Management
    
    Ahola Digital User Management
    
    Lost or stolen device
    
    Adi New User
    
    Adi New User
    
    Android Mobile device: how to enable work profile
    
    Creating a new admin user to backends
    
    Google's Services "You don't have access" problem (Drive, Gmail, Admin etc.)
  - Alejandro test
    
    Alejandro test
    
    TEST 2 file empty boy
  - Event Product Service notes
    
    Event Product Service notes
    
    Google SRE Masterclass 2024
  - Issuesproblems
    
    Issuesproblems
    
    AO distance and ebooking issue
    
    Untitled Page
    
    Vehco server issues
    
    Incidents
    
    Incidents
    
    25.10.2023 - TMS Stable machine type update
  - License reporting
    
    License reporting
    
    Arrow ArrowSphere
    
    Crayon CloudIQ
  - Machines
    
    Machines
    
    adi-devops-ci-instance-stable-1
    
    devops.4
    
    tms-backend-1b-nightly
    
    Core servers
    
    Core servers
    
    Core servers: creating a new core server
    
    Proxmox (A.I. on prem server)
    
    Proxmox (A.I. on prem server)
    
    Deploy Microsoft Defender Endpoint on Linux
    
    Install Tailscale on LXC
    
    Install Tailscale on workstation
    
    Setting VM/LXC automatic backups
    
    Devops openvpn & devops ca machine details
    
    Devops openvpn & devops ca machine details
    
    Devops OpenVPN Installation process
    
    Pg databases
    
    Pg databases
    
    pg-databases-stable
  - Operating procedures
    
    Operating procedures
    
    Application releases
    
    Cbooking DB transfer
    
    Creating a swap file
    
    Deploy new GCP linux server
    
    Google Drive: Attracs Public [GREEN], Company [YELLOW] and Devops [RED]
    
    How to run bootstraps for server setup
    
    How to start ubuntu via live-ubuntu
    
    Increasing disk size and partitions in a Linux environment
    
    Information requests
    
    Mailboxes for next-booking-assistant
    
    Microsoft AD login
    
    Mounting a GCS bucket to a Linux machine
    
    Running node migrations manually
    
    SLI and SLO
    
    SSH keys
    
    Security updates
    
    Troubleshooting Confidential Computing environment
    
    VM Manager Patching Guide — Taxi Backend (Nightly)
    
    AI Tools
    
    AI Tools
    
    AI Tools: ClickUp AI
    
    AI Tools: Exafunction Codeium
    
    AI Tools: Google Gemini
    
    AI Tools: Microsoft Copilot
    
    AI Tools: OpenAI ChatGPT
    
    Auditing
    
    Auditing
    
    Audit logs review (internal)
    
    Access Reviews (internal)
    
    Access Reviews (internal)
    
    run_access_google_db.yml: GCP Database Access Reviews (internal)
    
    Database stuff
    
    Database stuff
    
    Changing sequences ownership
    
    Queries for db creation
    
    ORY
    
    ORY
    
    Ahola Digital Auth ORY
    
    Azure connection token
    
    tms-booking customers (dev/old) ORY
    
    Security
    
    Security
    
    External Key Management
    
    YubiKey hardware authentication
    
    Terraform
    
    Terraform
    
    Terraform Best Practices
    
    Terraform: How to import existing resources
    
    Terraform Service Account
  - Systems and Services
    
    Systems and Services
    
    AholaDigitalplaybook quartz
    
    Alteryx
    
    Ansible
    
    Big Query
    
    Cargo Safety
    
    Cloud Spanner
    
    Confidential Computing VM
    
    DNS Made Easy
    
    Datastream -> Bigquery -> Power Bi
    
    Fortinet VPN
    
    HAProxy
    
    HERE maps
    
    ISECure / wscli
    
    Memcached
    
    Message Brokers (pub/sub)
    
    Monitoring and Logging
    
    Office network (aholadigital wifi)
    
    SSO
    
    Slack troubleshooting
    
    Supervisor errors
    
    Systems and Services template
    
    AWX (Ansible)
    
    AWX (Ansible)
    
    AWX (Ansible): 4. AWX Configurations basics
    
    minicube - awx
    
    Archive old instruction for backup restore on new server and upgrading
    
    Archive old instruction for backup restore on new server and upgrading
    
    AWX (Ansible): AWX Install
    
    AWX (Ansible): AWX how to migrate from on-permise to hetzner
    
    AWX: AWX Screen shots before update
    
    AWX restart
    
    AWX (Ansible) 2. AWX Update steps
    
    AWX (Ansible) 2. AWX Update steps
    
    AWX (Ansible): 2. AWX Update steps: preparation
    
    AWX (Ansible) 3. AWX update steps after 17.0.0 minicube
    
    AWX (Ansible) 3. AWX update steps after 17.0.0 minicube
    
    AWX minicube - recreate
    
    Airbyte
    
    Airbyte
    
    Airbyte: Creating new table syncs
    
    Airbyte: modify last sync start time
    
    How to add new tables to an existing Airbyte sync
    
    How to make Airbyte connections
    
    How to re-sync fresh Airbyte data in case of e.g. corrupted or duplicate data
    
    Install update investigate
    
    Install update investigate
    
    Clean install
    
    airbyte update steps
    
    Clean Install AirByte 64.1 helm
    
    Clean Install AirByte 64.1 helm
    
    configurations
    
    Setup with ABCLT Currently in use
    
    Setup with ABCLT Currently in use
    
    plan for testing
    
    Apache camel
    
    Apache camel
    
    Adi-Camel
    
    EDI Helper
    
    Edi-helper nightly and edi-helper-grpc
    
    SFTP service docker
    
    adi-camel configs
    
    Investigations
    
    Investigations
    
    To do 1v:
    
    To do final 2v:
    
    click up logs what I find about camel.
    
    stuff
    
    Apple certificates
    
    Apple certificates
    
    Renew apple cert in Google Admin console
    
    Auth0
    
    Auth0
    
    Auth0: Errors
    
    Auth0: Taksi Helsinki
    
    Auth0: how to fetch API key
    
    Auth0: How to generate API keys for customer org usage
    
    Changing AUTH0 user email
    
    Aleksandar superset tests
    
    Aleksandar superset tests
    
    app give access to login.
    
    CICD
    
    CICD
    
    CI/CD: Github and GCP Artifact Registry
    
    Cloud Run ClamAV
    
    Cloud Run ClamAV
    
    ClamAV with Terraform
    
    Possible Implementations multiple projects
    
    permissions
    
    Databases
    
    Databases
    
    Connecting to a database
    
    Postgres
    
    Postgres
    
    Postgres: Installing a new extension
    
    Postgres PG_STAT_STATEMENTS
    
    Postgres: fix incorrect view table ownership
    
    Postgres: grant yourself superuser privileges
    
    Postgres Manipulate JSON rows
    
    Postgres Manipulate JSON rows
    
    Postgres: Query to remove a single JSON key from an array object
    
    Postgres: SELECT (list) a JSON-type row's keys separately
    
    Dependency Track
    
    Dependency Track
    
    Dependency-Track: Password validator tool
    
    Dependency-Track: Troubleshooting
    
    Dependency-Track: Update portfolio
    
    Updating Dependency-Track
    
    Devops OpenVPN
    
    Devops OpenVPN
    
    Create a Devops VPN identity / certificate
    
    Docker
    
    Docker
    
    Docker: how to save docker images
    
    Docusaurus
    
    Docusaurus
    
    Docusaurus build crash
    
    Github
    
    Github
    
    Adding external users to Github
    
    Google workspace
    
    Google workspace
    
    Gmail
    
    Gmail
    
    Company group incoming restriction gmail
    
    DKIM setup for gmail
    
    DMARC setup for gmail
    
    Gmail footer append
    
    SPF setup for gmail
    
    Grafana
    
    Grafana
    
    Grafana: Add new users
    
    Grafana Alloy
    
    Grafana: Creating new notifications (alerts)
    
    Grafana Faro
    
    Grafana: Steps for implement
    
    Grafana management /setup /deploy/ update/ new server metric.
    
    Grafana migration from old Hetzner to Hetzner Cloud
    
    Grafana: testing_draft
    
    Manage
    
    Manage
    
    Manage: Troubleshooting users login issues
    
    Manage: re-activating a deleted external user
    
    Manage Creating a new organization
    
    Manage Creating a new organization
    
    Manage: Stable release
    
    Manage: TMS city configuration
    
    Managevisor
    
    Managevisor
    
    Managevisor: Application configs
    
    Managevisor: Creating or updating managevisor information (servers)
    
    Managevisor: Deploying mobile applications
    
    Managevisor: Giving access to a new user
    
    Managevisor: Managevisor restart
    
    Managevisor: New app documentation (needs review)
    
    Managevisor: Starting and stopping services
    
    Managevisor New applications Revised documentation
    
    Managevisor New applications Revised documentation
    
    Managevisor: New applications: Legacy documentation
    
    N8N
    
    N8N
    
    N8N automated DevOps documentation backup
    
    SSL certificates
    
    SSL certificates
    
    SSL Certificate list
    
    SSL certificate usage
    
    SSL certificate renewals
    
    SSL certificate renewals
    
    Renew Digicert Certificate
    
    SSL certificate renewals: *.aholadigital.com
    
    SSL certificate renewals: *.online.aholadigital.com
    
    SSL certificate renewals: Current process (2026 — Let's Encrypt + Vault, all wildcards)
    
    SSL certificate renewals: Meshmoon
    
    SSL certificate renewals: aholatransport.com
    
    SSL certificate renewals: atspecial.fi
    
    SSL certificate renewals: online2.attracs.com
    
    SSL certificate renewals attracs.com
    
    SSL certificate renewals attracs.com
    
    SSL certificate renewals: Updating certificates attracs/ahola in Hetzner
    
    SecurityOnion
    
    SecurityOnion
    
    Admin
    
    Installing
    
    Monitoring
    
    Sendgrid
    
    Sendgrid
    
    How to create API keys in Sendgrid
    
    Sendgrid keys
    
    Create inbound parse and security
    
    Create inbound parse and security
    
    Short summary for creation
    
    Superset
    
    Superset
    
    Adding new superset instances
    
    Adding superset users
    
    Superset installation
    
    Superset upgrade
    
    Updated superset (new deployment)
    
    Updated superset (new deployment)
    
    1. Ansible
    
    Steps to setup
    
    Supervisor
    
    Supervisor
    
    Supervisor: Deploying applications
    
    Supervisor: OOM
    
    Supervisor: Organization-specific application configuration
    
    Supervisor: Updating Managevisor services
    
    Supervisor: Updating an application on host
    
    Supervisor: Updating list of applications on a host
    
    Syncthing
    
    Syncthing
    
    Syncthing: Configuring a new remote device for sharing and syncing
    
    Syncthing: Installation
    
    Teleport Zero trust VPN
    
    Teleport Zero trust VPN
    
    Teleport: Session recording
    
    VPN: 0. Admin Commands cli
    
    Teleport Zero trust VPN 3. Upgrade update
    
    Teleport Zero trust VPN 3. Upgrade update
    
    Cluster update
    
    Teleport Zero trust VPN sec
    
    Teleport Zero trust VPN sec
    
    SSO GitHub
    
    Teleport teleport ssh, awx
    
    Teleport teleport ssh, awx
    
    Teleport Zero trust VPN: teleport ssh, awx: testing1
    
    VPN 1. Create users and rules
    
    VPN 1. Create users and rules
    
    Rules
    
    VPN 2. Access
    
    VPN 2. Access
    
    Teleport Zero trust VPN: 2. Access: Applications: users
    
    VPN 2. Access Applications, API's
    
    VPN 2. Access Applications, API's
    
    Teleport Zero trust VPN: 2. Access: Applications: tsh cli
    
    VPN 2. Access Databases
    
    VPN 2. Access Databases
    
    VPN: 2. Access: Databases: GCP SQL
    
    VPN 2. Access Databases Postgres
    
    VPN 2. Access Databases Postgres
    
    VPN: 2. Access: Databases: Postgres: Database service
    
    VPN 2. Access Databases Postgres pgAdmin access
    
    VPN 2. Access Databases Postgres pgAdmin access
    
    VPN: 2. Access: Databases: Postgres: pgAdmin access: install tsh
    
    VPN 2. Access Machine
    
    VPN 2. Access Machine
    
    VPN: 2. Access: Machine: Ubuntu
    
    VPN 2. Access Machine Windows
    
    VPN 2. Access Machine Windows
    
    VPN: 2. Access: Machine: Windows: Install
    
    VPN 2. Access Machine ID
    
    VPN 2. Access Machine ID
    
    VPN: 2. Access: Machine ID ??: 1
    
    Valhalla & Vroom
    
    Valhalla & Vroom
    
    Known issues
    
    Vault (Hashicorp)
    
    Vault (Hashicorp)
    
    GCP Vault (old vault)
    
    Hetzner Vault servers
    
    Set up old vault connection
    
    Vault (Hashicorp): Whitelisting new instances
    
    Vault Hetzner GCP
    
    commands
    
    Hetzner Vault (new vault)
    
    Hetzner Vault (new vault)
    
    -vaultHetzner
    
    Wazuh
    
    Wazuh
    
    Auditor explain
    
    Rules
    
    Wazuh API: (delete old agent)
    
    Wazuh: Requirements
    
    Wazuh: install
    
    Wazuh: settings
    
    config file
    
    Troubleshooting
    
    Troubleshooting
    
    steps
    
    Wazuh GCP integration
    
    Wazuh GCP integration
    
    GCP Logs Router sink
    
    Wazuh security
    
    Wazuh security
    
    Wazuh: security: Install add new Agent with password key
    
    Zabbix
    
    Zabbix
    
    Info
    
    Install Zabbix agent 2 to Linux server
    
    Install Zabbix agent 2 to Windows Server
    
    Slack integration configs
    
    Zabbix Server maintaining
    
    e Mail
    
    e Mail
    
    Google: How to create a shared inbox
  - Tools on Local
    
    Tools on Local
    
    Delphi Dev env on VMWARE Workstation
    
    Git pre-commit hook
    
    Git-reviewer with ollama
    
    How to Install Forticlient for Ubuntu 22.04
    
    How to install and use git and Github
    
    Install dock driver for ubuntu
    
    Installing Docker on local
    
    Terraform setup
- Platforms
  Platforms
  - Hetzner on-prem
  - Azure
    
    Azure
    
    Create Azure account
  - GCP
    
    GCP
    
    GCP Systems and Services
    
    GCP Systems and Services
    
    GCP Cloud Source Repositories
    
    GCP Logging
    
    GCP Managed Instance Groups
    
    GCP Secret Manager
    
    GCP Big Query
    
    GCP Big Query
    
    GCP BQ: How to give view permissions to datasets
    
    GCP Cloud Armor
    
    GCP Cloud Armor
    
    GCP Cloud Armor Geoblocking rules
    
    GCP Cloud Armor JSON parsing
    
    GCP Cloud Armor preconfigured WAF rule 8 kb inspection limit
    
    GCP CloudSQL
    
    GCP CloudSQL
    
    GCP CloudSQL Automated Database Backups
    
    GCP CloudSQL: Changing the internal network of a database instance
    
    GCP CloudSQL Database Recovery
    
    GCP CloudSQL: Enterprise vs Enteprise Plus
    
    GCP CloudSQL: Exporting a database from CloudSQL
    
    GCP CloudSQL Manual Database backups
    
    GCP CloudSQL Read-replica instance
    
    GCP CloudSQL database connection
    
    GCP CloudSQL instance
    
    GCP CloudSQL Query Insights
    
    GCP CloudSQL Query Insights
    
    Cloud SQL Query Insights permissions
    
    GCP CloudSQL Active Query Analysis
    
    GCP Confidential Compute (CC)
    
    GCP Confidential Compute (CC)
    
    GCP CC Integrity Monitoring failure modes
    
    GCP Instances (Virtual Machines)
    
    GCP Instances (Virtual Machines)
    
    GCP: Reverting/rollback an instance to a snapshot
    
    GCP Load Balancer
    
    GCP Load Balancer
    
    GCP Load Balancer: HTTP-to-HTTPS redirect
    
    GCP Load Balancer: Migrating from classic to modern LB
    
    GCP Load Balancer Identity Aware Proxy (IAP)
    
    GCP Load Balancer Identity Aware Proxy (IAP)
    
    GCP LB IAP: Troubleshooting
    
    GCP Ops Agent
    
    GCP Ops Agent
    
    GCP Ops Agent Logging
    
    GCP Ops Agent: Troubleshooting
    
    GCP: Updating the agent
    
    GCP management
    
    GCP management
    
    GCP AO Plan
    
    GCP: Connecting to instances
    
    GCP projects
  - Hetzner Cloud
    
    Hetzner Cloud
    
    Hetzner Could Servers
    
    Hetzner configs
    
    Untitled Page
    
    Disk space clean up
    
    Disk space clean up
    
    hetzner-backend1 free disk clear
    
    hetzner-backend2 free disk space
R&D environment
R&D environment
- Palbassador
- Tailorframe
  Tailorframe
  - Database sync to bigquery
- Moreutils
  Moreutils
  - moreutils — Research & Recommendation
Road Environment
Road Environment
- Database Creation, Ownership, and Permissions Automation Guide
- Database migration
- AO
  AO
  - AO MSSQL Database restore (Azure)
  - AO Rclone
  - AO monitoring
  - AO online-api.attracs.com
  - AVD Login Instructions to Attracs Online
  - AO External
    
    AO External
    
    AO Patch
    
    AO update
  - AO GCP
    
    AO GCP
    
    Elisa Terraform onboarding
    
    AO GCP Environment
    
    AO GCP Environment
    
    AO Access
    
    AO Architect
    
    AO DB Validator
    
    AO Introduction
    
    AO Monitoring & Alerting
    
    Building AO
    
    Create AO RestServer and Load Balancer
    
    Create new host server
    
    Environment permissions
    
    Evolution script
    
    Update EdgeWebview2
    
    Windows license activation problem
    
    AO Clients
    
    AO Clients
    
    Ahola & Special
    
    Apps what client uses
    
    Externals
    
    AO File and Database backup
    
    AO File and Database backup
    
    DB Backup
    
    GCP AO File backups
    
    AO GCP Infrastructure
    
    AO GCP Infrastructure
    
    AO Cloud Armor
    
    AO Firewall
    
    AO Integrations
    
    AO Load Balancers
    
    AO Port Definitions
    
    AO Servers
    
    AO Update management
    
    Cloud SQL
    
    Cloud SQL
    
    AO Database datamasking
    
    AO Database optimization
    
    AO SQL Instances and Databases
    
    Cloud SQL Automated Database Backups
    
    Cloud SQL Manual Database backups
    
    SQL Database Recovery
    
    Policies
    
    Policies
    
    2-way trust
    
    GCP AD - Password policy
    
    RDS policies
    
    AO GCP Release Deployments
    
    AO GCP Release Deployments
    
    Release task template
    
    AO Logging, Monitoring, Alerting
    
    AO Logging, Monitoring, Alerting
    
    AO Logging
    
    AO-logs
    
    Resolving alerts
    
    ToDo List of AO monitoring and alerting
    
    Windows logs with OPS-Agent
    
    AO Patch
    
    AO Patch
    
    Automated build and patch (Ahola TIP)
    
    AO Problems
    
    AO Problems
    
    Client Problems with MAPS
    
    How to end user session and process when patching client
    
    Open .xml files in IE with client
    
    Reset AO user RDP-Profile
    
    Windows Protected your PC
    
    AO SMB Volume
    
    AO SMB Volume
    
    How to create and connect NetApp-Volumes
    
    AO VPN tunnel
    
    AO VPN tunnel
    
    GCP - Azure tunnel
    
    Attracs Online
    
    Attracs Online
    
    Datapump
    
    Datapump
    
    Licensing Server
    
    List of Datapumps
    
    Run Datapump
    
    User Profile Disk
    
    RDS Collections
    
    RDS Collections
    
    Can't publish RemoteApp
    
    Software
    
    Software
    
    AO Servers
    
    Client
    
    Distance Calculator
    
    Forklift
    
    Service ID & OSS
    
    Biztalk
    
    Biztalk
    
    Biztalk -> Camel SFTP
    
    Biztalk Integration Customs
    
    Biztalk Integrations Firewall & Cloud Armor configurations (Whitelist)
    
    Extend windows local disk
    
    Broker and GW's
    
    Broker and GW's
    
    RDP - Gateway connection handling
    
    PTVxServer
    
    PTVxServer
    
    Backend configurations for PTVx
    
    Configure PTV Service for used by AO
    
    PTV web service configs in AO servers/netapp
    
    AO GCP nightly env.
    
    AO GCP nightly env.
    
    Server as a service in GCP AO
- EazyTMS
  EazyTMS
- ROAD PTV xServer
  ROAD PTV xServer
- Road web applications
  Road web applications
Security
Security
- Statement of Applicability — Use of Cryptography

Table of contents

Subpages

VPN: 2. Access

Subpages

Teleport Zero trust VPN 2. Access Applications users
VPN 2. Access Applications, API's
VPN 2. Access Databases
VPN 2. Access Machine
VPN 2. Access Machine ID

Made with Material for MkDocs