How to Fix This Installation is Forbidden by System Policy. Contact Your System Administrator

regedit:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\installer

DWORD(32-bit) 'DisableMSI' set value to '0'

Remote Desktop "This could be due to CredSSP encryption oracle remediation."

- ไปที่ run พิมพ์ CMD กด Ctrl+Shift+Enter (เป็นการเข้า cmd administrotor mode)
- พิมพ์คำสั่ง REG ADD HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters\ /v AllowEncryptionOracle /t REG_DWORD /d 2 ลงไป
- กด enter
- restart computer

Delete Docker images filter by Name

docker images  | grep -E "name_of_images" | awk '{print $1}' | xargs docker rmi

KONG & KONGA

#!/bin/sh
export VERSION=latest
docker network create kong-net
docker run -d --name kong-database \
     --network=kong-net \
     -p 5432:5432 \
     -e "POSTGRES_USER=kong" \
     -e "POSTGRES_DB=kong" \
     -e "POSTGRES_HOST_AUTH_METHOD=trust" \
     postgres:9.6

sleep 5

docker run --rm \
     --network=kong-net \
     -e "KONG_DATABASE=postgres" \
     -e "KONG_PG_HOST=kong-database" \
     kong:$VERSION kong migrations bootstrap

docker run -d --name kong \
     --network=kong-net \
     -e "KONG_DATABASE=postgres" \
     -e "KONG_PG_HOST=kong-database" \
     -e "KONG_PROXY_ACCESS_LOG=/dev/stdout" \
     -e "KONG_ADMIN_ACCESS_LOG=/dev/stdout" \
     -e "KONG_PROXY_ERROR_LOG=/dev/stderr" \
     -e "KONG_ADMIN_ERROR_LOG=/dev/stderr" \
     -e "KONG_ADMIN_LISTEN=0.0.0.0:8001, 0.0.0.0:8444 ssl" \
     -p 8000:8000 \
     -p 8443:8443 \
     -p 8001:8001 \
     -p 8444:8444 \
     kong:$VERSION

docker run -d --name konga-database \
     --network=kong-net \
     -e "POSTGRES_USER=kong" \
     -e "POSTGRES_DB=kong" \
     -e "POSTGRES_HOST_AUTH_METHOD=trust" \
     postgres:9.6

sleep 5

docker run --rm --network=kong-net pantsel/konga -c prepare -a postgres -u postgresql://kong@konga-database:5432/konga_db
docker run -d -p 1337:1337 \
     --network=kong-net \
     -e "DB_ADAPTER=postgres" \
     -e "DB_HOST=konga-database" \
     -e "DB_USER=kong" \
     -e "DB_DATABASE=konga_db" \
     -e "KONGA_HOOK_TIMEOUT=120000" \
     -e "NODE_ENV=production" \
     --name konga \
     pantsel/konga

Monitor Docker Services

docker volume create portainer_data

docker run \

    --name portainer-docker-info \

    --restart always\

    -d \

    -p 80:9000 \

    -v /var/run/docker.sock:/var/run/docker.sock \

    -v portainer_data:/data \

    portainer/portainer

netsh portproxy WSL2

netsh interface portproxy show all
netsh interface portproxy add v4tov4 listenport=HOST_PublishPort listenaddress=0.0.0.0 connectport=WSL_Port connectaddress=WSL_IPAddress

ex:
netsh interface portproxy add v4tov4 listenport=8000 listenaddress=0.0.0.0 connectport=8000 connectaddress=172.28.81.216
netsh interface portproxy add v4tov4 listenport=8080 listenaddress=0.0.0.0 connectport=8080 connectaddress=172.28.81.216
netsh interface portproxy add v4tov4 listenport=3000 listenaddress=0.0.0.0 connectport=3000 connectaddress=172.28.81.216
netsh interface portproxy add v4tov4 listenport=5000 listenaddress=0.0.0.0 connectport=5000 connectaddress=172.28.81.216

Nginx redirect from http to https non-standard Port

create nginx config file on /etc/nginx/conf.d

ex. /etc/nginx/conf.d/redirect.conf

server {

        listen 80;

        server_name localhost;

        return 301 https://$host$request_uri;

}

server {

        listen 443 ssl;

        server_name localhost;

        ssl_certificate /etc/nginx/ssl/certs.crt;

        ssl_certificate_key /etc/nginx/ssl/key.key;

        ssl_dhparam /etc/nginx/ssl/dhparam.pem;

        ssl_ciphers 'kEECDH+ECDSA+AES128 kEECDH+ECDSA+AES256 kEECDH+AES128 kEECDH+AES256 kEDH+AES128 kEDH+AES256 DES-CBC3-SHA +SHA !aNULL !eNULL !LOW !kECDH !DSS !MD5 !RC4 !EXP !PSK !SRP !CAMELLIA !SEED';

        ssl_protocols TLSv1.2;

        ssl_session_timeout 1d;

        ssl_session_cache shared:SSL:50m;

        ssl_stapling on;

        ssl_stapling_verify on;

        add_header Strict-Transport-Security max-age=15768000;

return 301 $scheme://$host:6081$request_uri;

}

server {

        listen 6081 ssl;

        server_name localhost;

        ssl_certificate /etc/nginx/ssl/certs.crt;

        ssl_certificate_key /etc/nginx/ssl/key.key;

        ssl_dhparam /etc/nginx/ssl/dhparam.pem;

        ssl_ciphers 'kEECDH+ECDSA+AES128 kEECDH+ECDSA+AES256 kEECDH+AES128 kEECDH+AES256 kEDH+AES128 kEDH+AES256 DES-CBC3-SHA +SHA !aNULL !eNULL !LOW !kECDH !DSS !MD5 !RC4 !EXP !PSK !SRP !CAMELLIA !SEED';

        ssl_protocols TLSv1.2;

        ssl_session_timeout 1d;

        ssl_session_cache shared:SSL:50m;

        ssl_stapling on;

        ssl_stapling_verify on;

        add_header Strict-Transport-Security max-age=15768000;

        location / {

                include /etc/nginx/conf.d/common_location.conf;

                root /usr/share/nginx/html;

                index index.html index.htm;

                # proxy_pass http://11.11.11.250:5000; #pass_to_backendserver

        

        }

}