{"draftJsState":{"blocks":[{"data":{"image":{"id":"69e16ef9820bd801693b928b"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"2gf9j"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"unstyled","key":"89jqc"},{"data":{"image":{"id":"69e16f470588e06d11176332"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"32ndp"},{"data":{"image":{"id":"69e18d0808a16e23f55703ba"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"353kj"},{"data":{"image":{"id":"69e18d23ba05f5544aa8d608"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"ap89e"},{"data":{"image":{"id":"69e18d38d53b004f7a7b909c"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"7gn5"},{"data":{"image":{"id":"69e18d464909ce69ba7507d7"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"fod91"},{"data":{"image":{"id":"69e18d5e7ef8f53a01b53f97"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"e2ukq"},{"data":{"image":{"id":"69e18d739e69c247a0351c3c"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"d4uf6"},{"data":{"image":{"id":"69e18d87b8ef250764c5ab32"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"d21o3"},{"data":{"image":{"id":"69e18da5820bd8016946da6d"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"3kka1"},{"data":{"image":{"id":"69e18dc3cd8cee20fa0cc27a"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"2jpfj"},{"data":{"image":{"id":"69e18de79e69c247a03547bd"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"aai4v"},{"data":{"image":{"id":"69e18df62a4d35049aa8b79f"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"a2m5o"},{"data":{"image":{"id":"69e18e1a7ef8f53a01b58751"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"4cqrn"},{"data":{"image":{"id":"69e18e27d53b004f7a7beb82"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"al7d3"},{"data":{"image":{"id":"69e18e3f2a4d35049aa8d268"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"7kfle"},{"data":{"image":{"id":"69e18e4e1942464031d5a20a"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"88tqq"},{"data":{"image":{"id":"69e18e609e69c247a0357be0"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"ctcet"},{"data":{"image":{"id":"69e18e7eb8ef250764c604c1"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"mepu"},{"data":{"image":{"id":"69e18e8f2a4d35049aa8f3f6"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"config*","type":"atomic:image","key":"7hkda"},{"data":{"image":{"id":"69e18eaafcb08c5cbbc41b57"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"config*","type":"atomic:image","key":"7pnkf"},{"data":{"image":{"id":"69e18ef8a605b70e79f1f7fc"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"1qf6b"},{"data":{"image":{"id":"69e18f0c1d14080e31984249"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"br7i8"},{"data":{"image":{"id":"69e18f1b4909ce69ba75bfd8"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"2sfvf"},{"data":{"image":{"id":"69e18f500588e06d1123c6fa"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"2vqm5"},{"data":{"image":{"id":"69e18f5f4909ce69ba75dd66"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"1ceom"},{"data":{"image":{"id":"69e18f7d820bd80169478866"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"70f9"},{"data":{"image":{"id":"69e18f96285d5013738299cb"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"71mkj"},{"data":{"image":{"id":"69e18fa4ce3ba77687fd191f"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"a3q2t"},{"data":{"image":{"id":"69e18fd42a4d35049aa97c38"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"7vr9i"},{"data":{"image":{"id":"69e18fe94909ce69ba760ecf"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"6op5p"},{"data":{"image":{"id":"69e190223dae3f079987f1af"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"cjbvm"},{"data":{"image":{"id":"69e19030d53b004f7a7cadf4"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"8blso"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"================================","type":"header-two","key":"b0uq8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Модуль 2","type":"header-two","key":"4oac"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"unstyled","key":"17i6h"},{"data":{"image":{"id":"69e19bae9e69c247a03ade8d"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"7v09u"},{"data":{"image":{"id":"69e19bbd379bfe7613d420fd"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"8sku0"},{"data":{"image":{"id":"69e19ce9820bd801694ce9db"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"c5t5c"},{"data":{"image":{"id":"69e19d179e69c247a03b77bf"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"32m0d"},{"data":{"image":{"id":"69e19d253b44e063372f5140"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"ara1h"},{"data":{"image":{"id":"69e19e3ffcb08c5cbbca6d27"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"t84t"},{"data":{"image":{"id":"69e19e4d820bd801694d8fbf"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"9uuhe"},{"data":{"image":{"id":"69e19e60b5174f72ad1b4be0"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"5o7c5"},{"data":{"image":{"id":"69e19e6f08a16e23f55dd428"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"5djdv"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"unstyled","key":"7udst"},{"data":{"image":{"id":"69e1a108ba05f5544ab16e5d"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"4bjpb"},{"data":{"image":{"id":"69e1a10b3dae3f07998f654c"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"679a4"},{"data":{"image":{"id":"69e1a1160588e06d112b8b75"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"35e4e"},{"data":{"image":{"id":"69e1a1203b44e06337313cd0"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"4olir"},{"data":{"image":{"id":"69e1a14693cc65465cb51fc2"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"u17q"},{"data":{"image":{"id":"69e1a15d86c0907199b85cb6"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"9lecf"},{"data":{"image":{"id":"69e1a1701962c75b4a2b97a7"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"7acr7"},{"data":{"image":{"id":"69e1a180d53b004f7a83e220"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"doclf"},{"data":{"image":{"id":"69e1a1a19e69c247a03d9615"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sshpass, никаких портов","type":"atomic:image","key":"8c5lj"},{"data":{"image":{"id":"69e1a1bb3dae3f07998fb99e"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"1r46b"},{"data":{"image":{"id":"69e1a1ce3dae3f07998fc35b"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"hdj2"},{"data":{"image":{"id":"69e1a1f0285d5013738aa13e"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"acjeh"},{"data":{"image":{"id":"69e1a22386c0907199b8bd08"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"client*","type":"atomic:image","key":"dv1ke"},{"data":{"image":{"id":"69e1a254285d5013738ad5f3"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"'::1');","type":"atomic:image","key":"3p1l7"},{"data":{"image":{"id":"69e1a272379bfe7613d753b1"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"2269g"},{"data":{"image":{"id":"69e1a27e48715e5b5d38c84b"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"fmnmi"},{"data":{"image":{"id":"69e1a2a04909ce69ba7e4ef4"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"1-й порт 2026, 2-й - 80","type":"atomic:image","key":"amipj"},{"data":{"image":{"id":"69e1a2ddfcb08c5cbbcc88d4"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"1-й порт 2026, 2-й - 8080","type":"atomic:image","key":"c8rnr"},{"data":{"image":{"id":"69e1a2f348bff53841539383"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"ah5c7"},{"data":{"image":{"id":"69e1a2fcd53b004f7a8496a8"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"6d098"},{"data":{"image":{"id":"69e1a313b5174f72ad1d94b3"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":".conf","type":"atomic:image","key":"9h53b"},{"data":{"image":{"id":"69e1a32dba05f5544ab275d6"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"2t8ir"},{"data":{"image":{"id":"69e1a33c1942464031ded129"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"6b6a7"},{"data":{"image":{"id":"69e1a350ba05f5544ab286d9"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"da1hc"},{"data":{"image":{"id":"69e1a3594720ec2eeeff4729"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"940r3"},{"data":{"image":{"id":"69e1a38c0588e06d112ccb3c"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"wget https://browser.yandex.ru/download/?partner=yabro_corp_full -O yandex-browser-corporate.rpm","type":"atomic:image","key":"ebd3n"},{"data":{"image":{"id":"69e1a3aed55c0e0bd0d87112"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"7pa3f"},{"data":{"image":{"id":"69e1a3c60588e06d112ce91b"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"flo24"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Текстовая версия этого безумия","type":"header-two","key":"32s7g"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"На bash перед каждым блоком забиваем, это издержки производства так сказать","type":"unstyled","key":"arl40"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"----------------------------------------------------------------------------------------------","type":"unstyled","key":"9cnt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Модуль 1","type":"header-two","key":"c2p1q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 1. Базовая настройка устройств: имена, IP-адреса, пользователи","type":"header-two","key":"fr5vb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ ISP","type":"header-three","key":"a89db"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"8ut8q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Имя устройства\nhostnamectl set-hostname isp.au-team.irpo; exec bash\n\n# enp0s8 → к HQ-RTR (ISP-HQ сеть)\nnmcli con mod \"Проводное соединение 2\" \\\n connection.id enp0s8 \\\n ipv4.addresses 172.16.1.1/28 \\\n ipv4.method manual\nnmcli con up enp0s8\n\n# enp0s9 → к BR-RTR (ISP-BR сеть)\nnmcli con mod \"Проводное соединение 3\" \\\n connection.id enp0s9 \\\n ipv4.addresses 172.16.2.1/28 \\\n ipv4.method manual\nnmcli con up enp0s9\n\n# Включить маршрутизацию\necho \"net.ipv4.ip_forward=1\" >> /etc/sysctl.conf\nsysctl -p","type":"unstyled","key":"70ihi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR","type":"header-three","key":"clhtt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"8jdk9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Имя устройства\nhostnamectl set-hostname hq-rtr.au-team.irpo; exec bash\n\n# enp0s3 → к ISP\nnmcli con mod \"Проводное соединение 1\" \\\n connection.id enp0s3 \\\n ipv4.addresses 172.16.1.2/28 \\\n ipv4.gateway 172.16.1.1 \\\n ipv4.method manual\nnmcli con up enp0s3\n\n# enp0s8 → к HQ-SW (физический интерфейс, без IP — будет trunk)\nnmcli con mod \"Проводное соединение 2\" connection.id enp0s8 ipv4.method disabled\nnmcli con up enp0s8\n\n# Включить маршрутизацию\necho \"net.ipv4.ip_forward=1\" >> /etc/sysctl.conf\nsysctl -p\n\n# Создать пользователя net_admin\nuseradd -m -s /bin/bash net_admin\necho \"net_admin:P@\\$\\$word\" | chpasswd\necho \"net_admin ALL=(ALL) NOPASSWD:ALL\" >> /etc/sudoers","type":"unstyled","key":"4dovp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-RTR","type":"header-three","key":"fv777"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"3sgsd"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Имя устройства\nhostnamectl set-hostname br-rtr.au-team.irpo; exec bash\n\n# enp0s3 → к ISP-BR\nnmcli con mod \"Проводное соединение 1\" \\\n connection.id enp0s3 \\\n ipv4.addresses 172.16.2.2/28 \\\n ipv4.gateway 172.16.2.1 \\\n ipv4.method manual\nnmcli con up enp0s3\n\n# enp0s8 → к BR-SRV\nnmcli con mod \"Проводное соединение 2\" \\\n connection.id enp0s8 \\\n ipv4.addresses 192.168.4.1/28 \\\n ipv4.method manual\nnmcli con up enp0s8\n\n# Включить маршрутизацию\necho \"net.ipv4.ip_forward=1\" >> /etc/sysctl.conf\nsysctl -p\n\n# Создать пользователя net_admin\nuseradd -m -s /bin/bash net_admin\necho \"net_admin:P@\\$\\$word\" | chpasswd\necho \"net_admin ALL=(ALL) NOPASSWD:ALL\" >> /etc/sudoers","type":"unstyled","key":"7vv1e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV","type":"header-three","key":"ebolk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"b5hcr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Имя устройства\nhostnamectl set-hostname hq-srv.au-team.irpo; exec bash\n\n# enp0s3 → в VLAN100 (SRV-Net)\nnmcli con mod \"Проводное соединение 1\" \\\n connection.id enp0s3 \\\n ipv4.addresses 192.168.1.2/27 \\\n ipv4.gateway 192.168.1.1 \\\n ipv4.dns 192.168.1.2 \\\n ipv4.method manual\nnmcli con up enp0s3\n\n# Создать пользователя sshuser (uid=1010)\nuseradd -m -u 1010 -s /bin/bash sshuser\necho \"sshuser:P@ssw0rd\" | chpasswd\necho \"sshuser ALL=(ALL) NOPASSWD:ALL\" >> /etc/sudoers","type":"unstyled","key":"5rq3p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-CLI","type":"header-three","key":"9lr97"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"dtmf3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Имя устройства\nhostnamectl set-hostname hq-cli.au-team.irpo; exec bash\n\n# Убеждаемся, что enp0s3 получает адрес по DHCP (настроим DHCP-сервер в Задании 6)\nnmcli con mod \"Проводное соединение 1\" \\\n connection.id enp0s3 \\\n ipv4.method auto\nnmcli con up enp0s3","type":"unstyled","key":"5f9rl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-SRV","type":"header-three","key":"2mimk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"d944g"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Имя устройства\nhostnamectl set-hostname br-srv.au-team.irpo; exec bash\n\n# enp0s3 → в сеть BR\nnmcli con mod \"Проводное соединение 1\" \\\n connection.id enp0s3 \\\n ipv4.addresses 192.168.4.2/28 \\\n ipv4.gateway 192.168.4.1 \\\n ipv4.dns 192.168.1.2 \\\n ipv4.method manual\nnmcli con up enp0s3\n\n# Создать пользователя sshuser (uid=1010)\nuseradd -m -u 1010 -s /bin/bash sshuser\necho \"sshuser:P@ssw0rd\" | chpasswd\necho \"sshuser ALL=(ALL) NOPASSWD:ALL\" >> /etc/sudoers","type":"unstyled","key":"5a2kj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 2. Настройка VLAN (HQ-RTR + HQ-SW)","type":"header-two","key":"41u6r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Сервер HQ-SRV → VLAN100, клиент HQ-CLI → VLAN200, управление → VLAN999.","type":"unstyled","key":"f47lf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR — создание subinterfaces (router-on-a-stick)","type":"header-three","key":"eab1p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"3q16p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# VLAN100 — SRV-Net (192.168.1.0/27)\nnmcli con add type vlan \\\n con-name enp0s8.100 \\\n dev enp0s8 \\\n id 100 \\\n ipv4.addresses 192.168.1.1/27 \\\n ipv4.method manual\nnmcli con up enp0s8.100\n\n# VLAN200 — CLI-Net (192.168.2.0/28)\nnmcli con add type vlan \\\n con-name enp0s8.200 \\\n dev enp0s8 \\\n id 200 \\\n ipv4.addresses 192.168.2.1/28 \\\n ipv4.method manual\nnmcli con up enp0s8.200\n\n# VLAN999 — HQ-Net управление (192.168.3.0/29)\nnmcli con add type vlan \\\n con-name enp0s8.999 \\\n dev enp0s8 \\\n id 999 \\\n ipv4.addresses 192.168.3.1/29 \\\n ipv4.method manual\nnmcli con up enp0s8.999","type":"unstyled","key":"c4dpb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SW — настройка коммутатора (ALT Linux как bridge)","type":"header-three","key":"798l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"18bko"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"hostnamectl set-hostname hq-sw.au-team.irpo; exec bash\n\n# Устанавливаем необходимые утилиты\napt-get install -y bridge-utils\n\n# Создаём bridge с поддержкой VLAN-фильтрации\nip link add name br0 type bridge\nip link set br0 type bridge vlan_filtering 1\nip link set br0 up\n\n# Поднимаем физические интерфейсы и добавляем в bridge:\n# enp0s3 — trunk к HQ-RTR\nip link set enp0s3 up\nip link set enp0s3 master br0\n\n# enp0s4 — access к HQ-SRV (VLAN100)\nip link set enp0s4 up\nip link set enp0s4 master br0\n\n# enp0s5 — access к HQ-CLI (VLAN200)\nip link set enp0s5 up\nip link set enp0s5 master br0\n\n# Настраиваем trunk-порт (enp0s3 → HQ-RTR)\nbridge vlan del dev enp0s3 vid 1\nbridge vlan add dev enp0s3 vid 100\nbridge vlan add dev enp0s3 vid 200\nbridge vlan add dev enp0s3 vid 999\n\n# Настраиваем access-порт для HQ-SRV (VLAN100)\nbridge vlan del dev enp0s4 vid 1\nbridge vlan add dev enp0s4 vid 100 pvid untagged\n\n# Настраиваем access-порт для HQ-CLI (VLAN200)\nbridge vlan del dev enp0s5 vid 1\nbridge vlan add dev enp0s5 vid 200 pvid untagged\n\n# Добавляем IP для управления коммутатором (VLAN999)\nip link add link br0 name br0.999 type vlan id 999\nip addr add 192.168.3.2/29 dev br0.999\nip link set br0.999 up\nip route add default via 192.168.3.1\n\n# Сохраняем конфигурацию через rc.local или systemd\ncat >> /etc/rc.local << 'EOF'\nip link add name br0 type bridge\nip link set br0 type bridge vlan_filtering 1\nip link set br0 up\nip link set enp0s3 up\nip link set enp0s3 master br0\nip link set enp0s4 up\nip link set enp0s4 master br0\nip link set enp0s5 up\nip link set enp0s5 master br0\nbridge vlan del dev enp0s3 vid 1\nbridge vlan add dev enp0s3 vid 100\nbridge vlan add dev enp0s3 vid 200\nbridge vlan add dev enp0s3 vid 999\nbridge vlan del dev enp0s4 vid 1\nbridge vlan add dev enp0s4 vid 100 pvid untagged\nbridge vlan del dev enp0s5 vid 1\nbridge vlan add dev enp0s5 vid 200 pvid untagged\nip link add link br0 name br0.999 type vlan id 999\nip addr add 192.168.3.2/29 dev br0.999\nip link set br0.999 up\nEOF\nchmod +x /etc/rc.local","type":"unstyled","key":"71h84"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 3. Настройка GRE-туннеля между HQ-RTR и BR-RTR","type":"header-two","key":"4iv49"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Туннель: 10.10.10.0/30 — HQ-RTR: 10.10.10.1, BR-RTR: 10.10.10.2.","type":"unstyled","key":"f7hb2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR","type":"header-three","key":"ap96f"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"a26qt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём GRE-туннель\nip tunnel add tun0 mode gre \\\n local 172.16.1.2 \\\n remote 172.16.2.2 \\\n ttl 64\n\nip link set tun0 up\nip addr add 10.10.10.1/30 dev tun0\n\n# Делаем постоянным через файл конфигурации nmcli\nnmcli con add type ip-tunnel \\\n con-name tun0 \\\n ifname tun0 \\\n tunnel.mode gre \\\n tunnel.local 172.16.1.2 \\\n tunnel.remote 172.16.2.2 \\\n ipv4.addresses 10.10.10.1/30 \\\n ipv4.method manual\nnmcli con up tun0","type":"unstyled","key":"c7kqj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-RTR","type":"header-three","key":"3j4r2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"28gnj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём GRE-туннель\nip tunnel add tun0 mode gre \\\n local 172.16.2.2 \\\n remote 172.16.1.2 \\\n ttl 64\n\nip link set tun0 up\nip addr add 10.10.10.2/30 dev tun0\n\n# Делаем постоянным\nnmcli con add type ip-tunnel \\\n con-name tun0 \\\n ifname tun0 \\\n tunnel.mode gre \\\n tunnel.local 172.16.2.2 \\\n tunnel.remote 172.16.1.2 \\\n ipv4.addresses 10.10.10.2/30 \\\n ipv4.method manual\nnmcli con up tun0\n\n# Проверка туннеля\nping -c 3 10.10.10.1","type":"unstyled","key":"arrjv"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 4. Динамическая маршрутизация OSPF (через FRR)","type":"header-two","key":"9edj0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":33,"offset":113,"style":"BOLD"}],"text":"Выбор обоснован: OSPF — link-state протокол, масштабируемый, поддерживает разбиение на зоны. Маршруты передаются только через туннельный интерфейс, с парольной защитой.","type":"unstyled","key":"40bgs"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR","type":"header-three","key":"dnkqu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"6mvem"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем FRR\napt-get install -y frr\n\n# Включаем ospfd\nsed -i 's/ospfd=no/ospfd=yes/' /etc/frr/daemons\n\nsystemctl enable --now frr\n\n# Настраиваем OSPF\nvtysh << 'EOF'\nconf t\nrouter ospf\n passive-interface default\n network 192.168.1.0/27 area 0\n network 192.168.2.0/28 area 0\n network 192.168.3.0/29 area 0\n network 10.10.10.0/30 area 0\nexit\n\ninterface tun0\n no ip ospf passive\n ip ospf authentication message-digest\n ip ospf message-digest-key 1 md5 P@ssw0rd\n ip ospf network point-to-point\nexit\n\ndo write memory\nexit\nEOF","type":"unstyled","key":"3btet"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-RTR","type":"header-three","key":"fjdbi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"ato2f"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем FRR\napt-get install -y frr\n\n# Включаем ospfd\nsed -i 's/ospfd=no/ospfd=yes/' /etc/frr/daemons\n\nsystemctl enable --now frr\n\n# Настраиваем OSPF\nvtysh << 'EOF'\nconf t\nrouter ospf\n passive-interface default\n network 192.168.4.0/28 area 0\n network 10.10.10.0/30 area 0\nexit\n\ninterface tun0\n no ip ospf passive\n ip ospf authentication message-digest\n ip ospf message-digest-key 1 md5 P@ssw0rd\n ip ospf network point-to-point\nexit\n\ndo write memory\nexit\nEOF\n\n# Проверка\nvtysh -c \"show ip ospf neighbor\"\nvtysh -c \"show ip route ospf\"","type":"unstyled","key":"8mtai"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 5. NAT (Masquerade) — выход в интернет","type":"header-two","key":"dkr2k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ ISP — NAT для HQ-RTR и BR-RTR","type":"header-three","key":"ducog"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"3munq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем nftables\napt-get install -y nftables\nsystemctl enable --now nftables\n\n# Создаём правила NAT\nnft add table ip nat\nnft add chain ip nat POSTROUTING '{ type nat hook postrouting priority 100; }'\n\n# Masquerade для HQ-RTR (172.16.1.0/28 → интернет через enp0s3)\nnft add rule ip nat POSTROUTING oif \"enp0s3\" ip saddr 172.16.1.0/28 masquerade\n\n# Masquerade для BR-RTR (172.16.2.0/28 → интернет через enp0s3)\nnft add rule ip nat POSTROUTING oif \"enp0s3\" ip saddr 172.16.2.0/28 masquerade\n\n# Сохраняем\nnft list ruleset > /etc/nftables/nftables.nft","type":"unstyled","key":"c59si"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR — NAT для внутренних сетей HQ","type":"header-three","key":"oo76"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"5gu46"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# NAT для выхода клиентов HQ в интернет через enp0s3\nnft add table ip nat\nnft add chain ip nat POSTROUTING '{ type nat hook postrouting priority 100; }'\nnft add rule ip nat POSTROUTING oif \"enp0s3\" ip saddr 192.168.1.0/27 masquerade\nnft add rule ip nat POSTROUTING oif \"enp0s3\" ip saddr 192.168.2.0/28 masquerade\nnft add rule ip nat POSTROUTING oif \"enp0s3\" ip saddr 192.168.3.0/29 masquerade\n\nsystemctl enable --now nftables\nnft list ruleset > /etc/nftables/nftables.nft","type":"unstyled","key":"99tis"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-RTR — NAT для внутренней сети BR","type":"header-three","key":"5iarm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"e6snk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# NAT для выхода BR-SRV в интернет\nnft add table ip nat\nnft add chain ip nat POSTROUTING '{ type nat hook postrouting priority 100; }'\nnft add rule ip nat POSTROUTING oif \"enp0s3\" ip saddr 192.168.4.0/28 masquerade\n\nsystemctl enable --now nftables\nnft list ruleset > /etc/nftables/nftables.nft","type":"unstyled","key":"dut9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 6. DHCP-сервер на HQ-RTR (для HQ-CLI, VLAN200)","type":"header-two","key":"16j2k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR","type":"header-three","key":"4dq8n"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"2idui"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем DHCP-сервер\napt-get install -y dhcp-server\n\n# Редактируем конфигурацию DHCP\ncat > /etc/dhcp/dhcpd.conf << 'EOF'\ndefault-lease-time 600;\nmax-lease-time 7200;\n\nsubnet 192.168.2.0 netmask 255.255.255.240 {\n range 192.168.2.2 192.168.2.14;\n option routers 192.168.2.1;\n option domain-name-servers 192.168.1.2;\n option domain-name \"au-team.irpo\";\n}\nEOF\n\n# Указываем интерфейс для DHCP (enp0s8.200 — VLAN200)\n# В ALT Linux указывается в /etc/sysconfig/dhcpd\necho 'DHCPDARGS=\"enp0s8.200\"' > /etc/sysconfig/dhcpd\n\nsystemctl enable --now dhcpd\n\n# Проверка\nsystemctl status dhcpd","type":"unstyled","key":"8eoe1"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 7. Настройка SSH на всех устройствах","type":"header-two","key":"13m2k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":4,"offset":34,"style":"BOLD"}],"text":"На серверах SSH работает на порту 2026.","type":"unstyled","key":"3qsgq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV","type":"header-three","key":"9bick"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"7hi29"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Редактируем конфиг SSH\nsed -i 's/#Port 22/Port 2026/' /etc/ssh/sshd_config\nsed -i 's/#PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config\nsed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config\nsed -i 's/#PubkeyAuthentication yes/PubkeyAuthentication yes/' /etc/ssh/sshd_config\n\nsystemctl enable --now sshd\nsystemctl restart sshd\n\n# Проверка\nss -tlnp | grep 2026","type":"unstyled","key":"cuas7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-SRV","type":"header-three","key":"3ct19"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"4emqp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sed -i 's/#Port 22/Port 2026/' /etc/ssh/sshd_config\nsed -i 's/#PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config\nsed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config\n\nsystemctl enable --now sshd\nsystemctl restart sshd\n\nss -tlnp | grep 2026","type":"unstyled","key":"94svh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR и BR-RTR (стандартный порт 22, только для net_admin)","type":"header-three","key":"15t9i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"6mem5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Оба маршрутизатора — одинаковая настройка\nsed -i 's/#PermitRootLogin.*/PermitRootLogin no/' /etc/ssh/sshd_config\nsed -i 's/#PasswordAuthentication yes/PasswordAuthentication yes/' /etc/ssh/sshd_config\n# Оставляем порт 22 на маршрутизаторах\nsystemctl enable --now sshd\nsystemctl restart sshd","type":"unstyled","key":"bhdk9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 8. Синхронизация времени (Chrony)","type":"header-two","key":"1pjmj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":20,"offset":9,"style":"BOLD"}],"text":"HQ-RTR — NTP-сервер stratum 5. Клиенты: HQ-SRV, HQ-CLI, BR-RTR, BR-SRV.","type":"unstyled","key":"24ume"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR — сервер chrony","type":"header-three","key":"b1hb7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"b7u4k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt-get install -y chrony\n\ncat > /etc/chrony.conf << 'EOF'\n# Публичные NTP-серверы для синхронизации самого HQ-RTR\npool pool.ntp.org iburst\n\n# Локальный stratum 5 (если нет внешнего времени)\nlocal stratum 5\n\n# Разрешаем клиентам из внутренних сетей\nallow 192.168.1.0/27\nallow 192.168.2.0/28\nallow 192.168.3.0/29\nallow 192.168.4.0/28\nallow 10.10.10.0/30\n\nmakestep 1.0 3\nrtcsync\nEOF\n\nsystemctl enable --now chronyd\nsystemctl restart chronyd\n\n# Проверка\nchronyc tracking\nchronyc sources","type":"unstyled","key":"39jnq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV — клиент chrony","type":"header-three","key":"1r9vf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"9b44"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt-get install -y chrony\n\ncat > /etc/chrony.conf << 'EOF'\nserver 192.168.1.1 iburst\nmakestep 1.0 3\nrtcsync\nEOF\n\nsystemctl enable --now chronyd\nsystemctl restart chronyd\nchronyc sources","type":"unstyled","key":"f1c88"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-CLI — клиент chrony","type":"header-three","key":"8k3gg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"9ru32"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt-get install -y chrony\n\ncat > /etc/chrony.conf << 'EOF'\nserver 192.168.2.1 iburst\nmakestep 1.0 3\nrtcsync\nEOF\n\nsystemctl enable --now chronyd\nsystemctl restart chronyd","type":"unstyled","key":"fag4b"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-RTR — клиент chrony (через туннель)","type":"header-three","key":"3mdj6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"9h7nh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt-get install -y chrony\n\ncat > /etc/chrony.conf << 'EOF'\nserver 10.10.10.1 iburst\nmakestep 1.0 3\nrtcsync\nEOF\n\nsystemctl enable --now chronyd\nsystemctl restart chronyd\nchronyc sources","type":"unstyled","key":"533eb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-SRV — клиент chrony","type":"header-three","key":"16rse"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"36qfi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt-get install -y chrony\n\ncat > /etc/chrony.conf << 'EOF'\nserver 192.168.4.1 iburst\nmakestep 1.0 3\nrtcsync\nEOF\n\nsystemctl enable --now chronyd\nsystemctl restart chronyd","type":"unstyled","key":"fmnrg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 9. Настройка DNS-сервера на HQ-SRV (bind9)","type":"header-two","key":"dqji3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":12,"offset":20,"style":"BOLD"}],"text":"DNS-сервер для зоны au-team.irpo, обратное разрешение, пересылка на 8.8.8.8.","type":"unstyled","key":"7asm5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV","type":"header-three","key":"7qqgc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"bd44e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt-get install -y bind bind-utils\n\n# Основной конфиг named.conf\ncat > /etc/bind/named.conf << 'EOF'\noptions {\n directory \"/var/bind\";\n forwarders { 8.8.8.8; };\n listen-on { any; };\n allow-query { any; };\n recursion yes;\n};\n\nzone \"au-team.irpo\" IN {\n type master;\n file \"/etc/bind/au-team.irpo.zone\";\n};\n\nzone \"1.168.192.in-addr.arpa\" IN {\n type master;\n file \"/etc/bind/192.168.1.rev\";\n};\n\nzone \"2.168.192.in-addr.arpa\" IN {\n type master;\n file \"/etc/bind/192.168.2.rev\";\n};\n\nzone \"4.168.192.in-addr.arpa\" IN {\n type master;\n file \"/etc/bind/192.168.4.rev\";\n};\nEOF\n\n# Прямая зона au-team.irpo\ncat > /etc/bind/au-team.irpo.zone << 'EOF'\n$TTL 86400\n@ IN SOA hq-srv.au-team.irpo. admin.au-team.irpo. (\n 2026041701 ; Serial\n 3600 ; Refresh\n 1800 ; Retry\n 604800 ; Expire\n 86400 ) ; Minimum TTL\n\n@ IN NS hq-srv.au-team.irpo.\n\nisp IN A 172.16.1.1\nhq-rtr IN A 172.16.1.2\nhq-srv IN A 192.168.1.2\nhq-cli IN A 192.168.2.2\nbr-rtr IN A 172.16.2.2\nbr-srv IN A 192.168.4.2\nEOF\n\n# Обратная зона для сети 192.168.1.0/27\ncat > /etc/bind/192.168.1.rev << 'EOF'\n$TTL 86400\n@ IN SOA hq-srv.au-team.irpo. admin.au-team.irpo. (\n 2026041701\n 3600\n 1800\n 604800\n 86400 )\n\n@ IN NS hq-srv.au-team.irpo.\n1 IN PTR hq-rtr.au-team.irpo.\n2 IN PTR hq-srv.au-team.irpo.\nEOF\n\n# Обратная зона для сети 192.168.2.0/28\ncat > /etc/bind/192.168.2.rev << 'EOF'\n$TTL 86400\n@ IN SOA hq-srv.au-team.irpo. admin.au-team.irpo. (\n 2026041701\n 3600\n 1800\n 604800\n 86400 )\n\n@ IN NS hq-srv.au-team.irpo.\n1 IN PTR hq-rtr.au-team.irpo.\n2 IN PTR hq-cli.au-team.irpo.\nEOF\n\n# Обратная зона для сети 192.168.4.0/28\ncat > /etc/bind/192.168.4.rev << 'EOF'\n$TTL 86400\n@ IN SOA hq-srv.au-team.irpo. admin.au-team.irpo. (\n 2026041701\n 3600\n 1800\n 604800\n 86400 )\n\n@ IN NS hq-srv.au-team.irpo.\n1 IN PTR br-rtr.au-team.irpo.\n2 IN PTR br-srv.au-team.irpo.\nEOF\n\n# Проверяем конфигурацию и запускаем\nnamed-checkconf /etc/bind/named.conf\nnamed-checkzone au-team.irpo /etc/bind/au-team.irpo.zone\nnamed-checkzone 1.168.192.in-addr.arpa /etc/bind/192.168.1.rev\n\nsystemctl enable --now named\nsystemctl restart named\n\n# Проверка\nnslookup hq-srv.au-team.irpo 127.0.0.1\nnslookup 192.168.1.2 127.0.0.1","type":"unstyled","key":"amm8s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 10. Настройка брандмауэра (nftables) — ограничение доступа по SSH","type":"header-two","key":"b9ljf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Доступ к HQ-SRV по SSH (порт 2026) — только с разрешённых адресов, не с HQ-CLI.","type":"unstyled","key":"bu9tn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV","type":"header-three","key":"7b08b"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"4n1u0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt-get install -y nftables\nsystemctl enable --now nftables\n\n# Создаём таблицу фильтрации\nnft add table inet filter\nnft add chain inet filter INPUT '{ type filter hook input priority 0; policy accept; }'\n\n# Запрещаем SSH к HQ-SRV с HQ-CLI (сеть 192.168.2.0/28)\nnft add rule inet filter INPUT \\\n ip saddr 192.168.2.0/28 tcp dport 2026 counter drop\n\n# Разрешаем SSH со всех остальных\nnft add rule inet filter INPUT \\\n tcp dport 2026 counter accept\n\n# Разрешаем ICMP (ping)\nnft add rule inet filter INPUT icmp type echo-request counter accept\n\n# Разрешаем установленные соединения\nnft add rule inet filter INPUT ct state established,related counter accept\n\n# Сохраняем\nnft list ruleset > /etc/nftables/nftables.nft\nsystemctl restart nftables\n\n# Проверка\nnft list ruleset","type":"unstyled","key":"d6j4b"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 11. Статическая трансляция портов (DNAT) на маршрутизаторах","type":"header-two","key":"apehc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR — проброс портов к HQ-SRV","type":"header-three","key":"atao8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":11,"offset":5,"style":"BOLD"},{"length":9,"offset":25,"style":"BOLD"}],"text":"Порт 2026 → 2026 (SSH) и 8080 → 80 (веб).","type":"unstyled","key":"ctcng"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"bcfil"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём таблицу NAT если ещё нет\nnft add table ip nat\nnft add chain ip nat PREROUTING '{ type nat hook prerouting priority 0; }'\n\n# Проброс SSH: внешний 172.16.1.2:2026 → HQ-SRV 192.168.1.2:2026\nnft add rule ip nat PREROUTING \\\n ip daddr 172.16.1.2 tcp dport 2026 dnat to 192.168.1.2:2026\n\n# Проброс веб-приложения: внешний 172.16.1.2:8080 → HQ-SRV 192.168.1.2:80\nnft add rule ip nat PREROUTING \\\n ip daddr 172.16.1.2 tcp dport 8080 dnat to 192.168.1.2:80\n\n# Сохраняем\nnft list ruleset > /etc/nftables/nftables.nft\nsystemctl restart nftables\n\n# Проверка\nnft list ruleset","type":"unstyled","key":"3l4jo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-RTR — проброс портов к BR-SRV","type":"header-three","key":"5r8qd"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":11,"offset":5,"style":"BOLD"},{"length":11,"offset":25,"style":"BOLD"}],"text":"Порт 2026 → 2026 (SSH) и 8080 → 8080 (testapp).","type":"unstyled","key":"bjsve"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"1j67r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём таблицу NAT\nnft add table ip nat\nnft add chain ip nat PREROUTING '{ type nat hook prerouting priority 0; }'\n\n# Проброс SSH: внешний 172.16.2.2:2026 → BR-SRV 192.168.4.2:2026\nnft add rule ip nat PREROUTING \\\n ip daddr 172.16.2.2 tcp dport 2026 dnat to 192.168.4.2:2026\n\n# Проброс testapp: внешний 172.16.2.2:8080 → BR-SRV 192.168.4.2:8080\nnft add rule ip nat PREROUTING \\\n ip daddr 172.16.2.2 tcp dport 8080 dnat to 192.168.4.2:8080\n\n# Сохраняем\nnft list ruleset > /etc/nftables/nftables.nft\nsystemctl restart nftables","type":"unstyled","key":"915fs"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"unstyled","key":"4f860"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"======================================================","type":"unstyled","key":"b142e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Модуль 2","type":"header-two","key":"1e20q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 1. Контроллер домена Samba DC на сервере BR-SRV","type":"header-two","key":"cm543"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":12,"offset":18,"style":"BOLD"}],"text":"Настраиваем домен au-team.irpo, вводим в него HQ-CLI, создаём 5 пользователей hquser1–hquser5, группу hq, настраиваем привилегии sudo только для команд cat, grep, id.","type":"unstyled","key":"5su5f"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-SRV","type":"header-three","key":"fbu4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"bhuhv"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем пакеты Samba DC\napt-get install -y task-samba-dc\n\n# Останавливаем службы, которые будут мешать\nsystemctl stop samba smb nmb winbind\nsystemctl disable samba smb nmb winbind\n\n# Удаляем старые конфиги\nrm -f /etc/samba/smb.conf\nrm -rf /var/lib/samba/*\nrm -rf /var/cache/samba/*\nmkdir -p /var/lib/samba/sysvol\n\n# Настраиваем hostname с FQDN\nhostnamectl set-hostname br-srv.au-team.irpo; exec bash","type":"unstyled","key":"e7en6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"7san7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Редактируем /etc/hosts\ncat > /etc/hosts << 'EOF'\n127.0.0.1 localhost\n192.168.4.2 br-srv.au-team.irpo br-srv\nEOF\n\n# Настройка DNS — указываем себя\ncat > /etc/resolv.conf << 'EOF'\nsearch au-team.irpo\nnameserver 192.168.4.2\nEOF\n\n# Запрещаем NetworkManager перезаписывать resolv.conf\nchattr +i /etc/resolv.conf","type":"unstyled","key":"au68l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"cbjhp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Провижинг домена\nsamba-tool domain provision \\\n --realm=AU-TEAM.IRPO \\\n --domain=AU-TEAM \\\n --adminpass='P@ssw0rd' \\\n --server-role=dc \\\n --dns-backend=SAMBA_INTERNAL \\\n --use-rfc2307\n\n# Копируем Kerberos-конфиг\ncp /var/lib/samba/private/krb5.conf /etc/krb5.conf\n\n# Включаем автозапуск\nsystemctl enable --now samba\nsystemctl status samba","type":"unstyled","key":"534s8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"csup4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём 5 пользователей hquser1...hquser5\nfor i in 1 2 3 4 5; do\n samba-tool user create hquser$i P@ssw0rd --given-name=\"HQ User $i\"\ndone\n\n# Создаём группу hq\nsamba-tool group add hq\n\n# Добавляем пользователей в группу\nfor i in 1 2 3 4 5; do\n samba-tool group addmembers hq hquser$i\ndone\n\n# Проверка\nsamba-tool user list\nsamba-tool group listmembers hq","type":"unstyled","key":"5jkun"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"c4ndq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Проверка DNS\nhost -t SRV _kerberos._udp.au-team.irpo 127.0.0.1\nhost -t SRV _ldap._tcp.au-team.irpo 127.0.0.1\nhost -t A br-srv.au-team.irpo 127.0.0.1","type":"unstyled","key":"7ag8r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-CLI — ввод в домен","type":"header-three","key":"b8p5d"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"8aj7m"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем пакеты клиента\napt-get install -y task-auth-ad-sssd admc samba-client\n\n# Редактируем /etc/hosts\ncat > /etc/hosts << 'EOF'\n127.0.0.1 localhost\n192.168.4.2 br-srv.au-team.irpo br-srv\nEOF\n\n# Указываем DNS-сервер домена\ncat > /etc/resolv.conf << 'EOF'\nsearch au-team.irpo\nnameserver 192.168.4.2\nEOF\nchattr +i /etc/resolv.conf\n\n# Настройка hostname\nhostnamectl set-hostname hq-cli.au-team.irpo; exec bash","type":"unstyled","key":"ftn07"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"921pf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Присоединение к домену\nsystem-auth write ad au-team.irpo hq-cli au-team 'Administrator' 'P@ssw0rd'\n\n# Включаем автомонтирование домашних папок и создание директории\ncontrol system-auth sss\nsystemctl enable --now sssd","type":"unstyled","key":"bkdm5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"bdeac"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Проверяем, что пользователь домена виден\ngetent passwd hquser1@au-team.irpo\nid hquser1@au-team.irpo","type":"unstyled","key":"b6qv4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"admle"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Настраиваем sudoers для группы hq — только cat, grep, id\ncat > /etc/sudoers.d/hq-group << 'EOF'\n%hq@au-team.irpo ALL=(ALL) NOPASSWD: /usr/bin/cat, /usr/bin/grep, /usr/bin/id\nEOF\nchmod 440 /etc/sudoers.d/hq-group","type":"unstyled","key":"220h6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 2. Файловое хранилище RAID 0 на сервере HQ-SRV","type":"header-two","key":"fh54c"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":6,"offset":39,"style":"BOLD"},{"length":3,"offset":62,"style":"BOLD"},{"length":4,"offset":84,"style":"BOLD"},{"length":5,"offset":109,"style":"BOLD"}],"text":"Из двух дисков по 1 Гб собираем массив RAID 0, имя устройства md0, файловая система ext4, автомонтирование в /raid.","type":"unstyled","key":"88bl4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV","type":"header-three","key":"av4bn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"8a2am"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем утилиту mdadm\napt-get install -y mdadm\n\n# Смотрим доступные диски\nlsblk\nfdisk -l","type":"unstyled","key":"9qcme"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"1l8u5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём RAID 0 массив из дисков /dev/sdb и /dev/sdc\nmdadm --create --verbose /dev/md0 \\\n --level=0 \\\n --raid-devices=2 \\\n /dev/sdb /dev/sdc\n\n# Проверяем статус\ncat /proc/mdstat\nmdadm --detail /dev/md0","type":"unstyled","key":"dslfc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"90eba"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Сохраняем конфигурацию массива\nmdadm --detail --scan >> /etc/mdadm.conf\ncat /etc/mdadm.conf","type":"unstyled","key":"2h4fa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"esski"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём раздел на md0\nparted /dev/md0 --script mklabel gpt\nparted /dev/md0 --script mkpart primary ext4 0% 100%\n\n# Форматируем в ext4\nmkfs.ext4 /dev/md0p1","type":"unstyled","key":"3as4i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"f4tal"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём точку монтирования\nmkdir -p /raid\n\n# Добавляем в /etc/fstab для автомонтирования\necho \"/dev/md0p1 /raid ext4 defaults 0 0\" >> /etc/fstab\n\n# Монтируем\nmount -a\ndf -h /raid","type":"unstyled","key":"938ls"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 3. NFS-сервер на HQ-SRV","type":"header-two","key":"c7snp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":9,"offset":21,"style":"BOLD"},{"length":8,"offset":119,"style":"BOLD"}],"text":"Папка общего доступа /raid/nfs, доступ только для сети HQ-CLI (VLAN200 — 192.168.2.0/28), на HQ-CLI автомонтирование в /mnt/nfs.","type":"unstyled","key":"b0dp2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV — сервер NFS","type":"header-three","key":"e16bd"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"6ptu2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем пакеты NFS\napt-get install -y nfs-server nfs-utils\n\n# Создаём каталог общего доступа\nmkdir -p /raid/nfs\nchmod 777 /raid/nfs\nchown nobody:nobody /raid/nfs","type":"unstyled","key":"99vvo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"2c5i4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Настраиваем /etc/exports\ncat > /etc/exports << 'EOF'\n/raid/nfs 192.168.2.0/28(rw,sync,no_subtree_check,no_root_squash)\nEOF\n\n# Применяем экспорты\nexportfs -arv\n\n# Запускаем сервер\nsystemctl enable --now nfs-server\nsystemctl enable --now rpcbind\n\n# Проверка\nshowmount -e localhost","type":"unstyled","key":"304id"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"j7oq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Разрешаем NFS в firewall (если нужно)\nnft add rule inet filter INPUT ip saddr 192.168.2.0/28 tcp dport {111,2049} accept\nnft add rule inet filter INPUT ip saddr 192.168.2.0/28 udp dport {111,2049} accept\nnft list ruleset > /etc/nftables/nftables.nft","type":"unstyled","key":"1qp3n"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-CLI — клиент NFS (автомонтирование)","type":"header-three","key":"8o8m3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"7icn9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем пакеты клиента\napt-get install -y nfs-clients autofs\n\n# Создаём точку монтирования\nmkdir -p /mnt/nfs","type":"unstyled","key":"8cm6t"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"4noih"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Настраиваем autofs\ncat >> /etc/auto.master << 'EOF'\n/mnt /etc/auto.nfs --timeout=60\nEOF\n\ncat > /etc/auto.nfs << 'EOF'\nnfs -fstype=nfs,rw,soft,intr 192.168.1.2:/raid/nfs\nEOF\n\n# Перезапускаем autofs\nsystemctl enable --now autofs\nsystemctl restart autofs\n\n# Проверка — доступ к каталогу инициирует автомонтирование\nls /mnt/nfs\nmount | grep nfs","type":"unstyled","key":"ernt8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 4. DNS-сервер на HQ-SRV — дополнительные зоны","type":"header-two","key":"do7lp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":12,"offset":27,"style":"BOLD"}],"text":"Настраиваем DNS для домена au-team.irpo с записями о веб-сервисах (web, docker, moodle).","type":"unstyled","key":"2f70n"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV","type":"header-three","key":"2jdjr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"8n8k7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем BIND\napt-get install -y bind bind-utils\n\n# Настраиваем options.conf\ncat > /etc/bind/options.conf << 'EOF'\noptions {\n directory \"/var/lib/bind/zone\";\n forwarders { 8.8.8.8; 1.1.1.1; };\n listen-on { any; };\n allow-query { any; };\n recursion yes;\n dnssec-validation no;\n allow-transfer { none; };\n};\nEOF","type":"unstyled","key":"1tc4e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"10lk1"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Описываем зоны\ncat > /etc/bind/local.conf << 'EOF'\nzone \"au-team.irpo\" IN {\n type master;\n file \"au-team.irpo.zone\";\n allow-update { none; };\n};\n\nzone \"1.168.192.in-addr.arpa\" IN {\n type master;\n file \"192.168.1.rev\";\n};\nEOF","type":"unstyled","key":"4f6j1"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"f244p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Прямая зона\ncat > /var/lib/bind/zone/au-team.irpo.zone << 'EOF'\n$TTL 86400\n@ IN SOA hq-srv.au-team.irpo. admin.au-team.irpo. (\n 2026041701 ; Serial\n 3600 ; Refresh\n 1800 ; Retry\n 604800 ; Expire\n 86400 ) ; Minimum\n\n@ IN NS hq-srv.au-team.irpo.\n\nisp IN A 172.16.1.1\nhq-rtr IN A 192.168.1.1\nhq-srv IN A 192.168.1.2\nhq-cli IN A 192.168.2.2\nbr-rtr IN A 192.168.4.1\nbr-srv IN A 192.168.4.2\n\n; Веб-сервисы\nweb IN A 172.16.1.1\ndocker IN A 172.16.1.1\nmoodle IN CNAME hq-srv.au-team.irpo.\nwiki IN CNAME br-srv.au-team.irpo.\nEOF","type":"unstyled","key":"ff6qb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"alnia"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Обратная зона\ncat > /var/lib/bind/zone/192.168.1.rev << 'EOF'\n$TTL 86400\n@ IN SOA hq-srv.au-team.irpo. admin.au-team.irpo. (\n 2026041701 3600 1800 604800 86400 )\n@ IN NS hq-srv.au-team.irpo.\n1 IN PTR hq-rtr.au-team.irpo.\n2 IN PTR hq-srv.au-team.irpo.\nEOF","type":"unstyled","key":"aj7eu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"f3187"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Меняем владельца и запускаем службу\nchown -R named:named /var/lib/bind/zone\n\nnamed-checkconf\nnamed-checkzone au-team.irpo /var/lib/bind/zone/au-team.irpo.zone\n\nsystemctl enable --now bind\nsystemctl restart bind\n\n# Проверка\nnslookup hq-srv.au-team.irpo 127.0.0.1\nnslookup web.au-team.irpo 127.0.0.1","type":"unstyled","key":"1us4t"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 5. Ansible на сервере BR-SRV","type":"header-two","key":"1du6j"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":30,"offset":11,"style":"BOLD"},{"length":12,"offset":59,"style":"BOLD"}],"text":"Инвентарь: HQ-SRV, HQ-CLI, HQ-RTR, BR-RTR. Рабочий каталог /etc/ansible. Проверка: ansible all -m ping → pong от всех машин.","type":"unstyled","key":"9j8sh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-SRV — установка и настройка Ansible","type":"header-three","key":"6tjq3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"8h7u0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем Ansible\napt-get install -y ansible sshpass\n\n# Генерируем SSH-ключ (если ещё нет)\nssh-keygen -t rsa -b 2048 -N \"\" -f /root/.ssh/id_rsa","type":"unstyled","key":"7pfdf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"c8u34"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём рабочий каталог\nmkdir -p /etc/ansible\n\n# Формируем файл инвентаря\ncat > /etc/ansible/hosts << 'EOF'\n[HQ]\nhq-srv ansible_host=192.168.1.2 ansible_user=sshuser ansible_ssh_pass=P@ssw0rd ansible_become=yes ansible_become_pass=P@ssw0rd ansible_port=2026\nhq-cli ansible_host=192.168.2.2 ansible_user=user ansible_ssh_pass=P@ssw0rd\n\n[RTR]\nhq-rtr ansible_host=10.10.10.1 ansible_user=net_admin ansible_ssh_pass=P@$$word ansible_become=yes ansible_become_pass=P@$$word\nbr-rtr ansible_host=10.10.10.2 ansible_user=net_admin ansible_ssh_pass=P@$$word ansible_become=yes ansible_become_pass=P@$$word\n\n[all:vars]\nansible_python_interpreter=/usr/bin/python3\nansible_ssh_common_args='-o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'\nEOF","type":"unstyled","key":"7a9ra"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"1tgoh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Конфигурация ansible.cfg\ncat > /etc/ansible/ansible.cfg << 'EOF'\n[defaults]\ninventory = /etc/ansible/hosts\nhost_key_checking = False\nretry_files_enabled = False\ndeprecation_warnings = False\ncommand_warnings = False\n\n[ssh_connection]\npipelining = True\nEOF","type":"unstyled","key":"a48ri"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"ft919"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Копируем SSH-ключ на целевые хосты (чтобы не вводить пароль каждый раз)\nsshpass -p 'P@ssw0rd' ssh-copy-id -o StrictHostKeyChecking=no -p 2026 sshuser@192.168.1.2\nsshpass -p 'P@$$word' ssh-copy-id -o StrictHostKeyChecking=no net_admin@10.10.10.1\nsshpass -p 'P@$$word' ssh-copy-id -o StrictHostKeyChecking=no net_admin@10.10.10.2","type":"unstyled","key":"a4n9p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"dfvbf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Проверка\nansible all -m ping","type":"unstyled","key":"e4drt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Результат должен выглядеть так:","type":"unstyled","key":"6vltq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"hq-srv | SUCCESS => { \"ping\": \"pong\" }\nhq-rtr | SUCCESS => { \"ping\": \"pong\" }\nbr-rtr | SUCCESS => { \"ping\": \"pong\" }\nhq-cli | SUCCESS => { \"ping\": \"pong\" }","type":"unstyled","key":"1no91"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 6. Docker: стек контейнеров на BR-SRV","type":"header-two","key":"atudo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":7,"offset":26,"style":"BOLD"},{"length":2,"offset":66,"style":"BOLD"},{"length":6,"offset":90,"style":"BOLD"},{"length":4,"offset":111,"style":"BOLD"},{"length":8,"offset":126,"style":"BOLD"},{"length":4,"offset":152,"style":"BOLD"}],"text":"Стек из двух контейнеров: testapp (веб-приложение, site_latest) и db (mariadb_latest). БД testdb, пользователь test с паролем Passw0rd, порт приложения 8080.","type":"unstyled","key":"8peid"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-SRV","type":"header-three","key":"c6cpi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"8ruc5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем Docker и docker-compose\napt-get install -y docker-engine docker-compose\nsystemctl enable --now docker","type":"unstyled","key":"2ncoq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"apl2q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Монтируем Additional.iso\nmkdir -p /mnt/iso\nmount -o loop /root/Additional.iso /mnt/iso\nls /mnt/iso/docker","type":"unstyled","key":"7ua54"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"erlc3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Импортируем образы в Docker\ndocker load < /mnt/iso/docker/site_latest.tar\ndocker load < /mnt/iso/docker/mariadb_latest.tar\n\n# Смотрим список образов\ndocker images","type":"unstyled","key":"etius"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"e1spl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём рабочий каталог\nmkdir -p /opt/testapp\ncd /opt/testapp\n\n# Формируем docker-compose.yml\ncat > docker-compose.yml << 'EOF'\nversion: '3.8'\n\nservices:\n testapp:\n image: site_latest:latest\n container_name: testapp\n ports:\n - \"8080:8080\"\n environment:\n - DB_HOST=db\n - DB_NAME=testdb\n - DB_USER=test\n - DB_PASSWORD=Passw0rd\n depends_on:\n - db\n restart: unless-stopped\n\n db:\n image: mariadb_latest:latest\n container_name: db\n environment:\n - MYSQL_ROOT_PASSWORD=Passw0rd\n - MYSQL_DATABASE=testdb\n - MYSQL_USER=test\n - MYSQL_PASSWORD=Passw0rd\n volumes:\n - db_data:/var/lib/mysql\n restart: unless-stopped\n\nvolumes:\n db_data:\nEOF","type":"unstyled","key":"172k2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"5cskh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Запускаем стек\ndocker-compose up -d\n\n# Проверка\ndocker ps\ndocker-compose logs testapp\ncurl http://localhost:8080","type":"unstyled","key":"8f65c"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 7. Веб-приложение на HQ-SRV (Apache + MariaDB)","type":"header-two","key":"8i1rb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":8,"offset":25,"style":"BOLD"},{"length":5,"offset":41,"style":"BOLD"},{"length":3,"offset":61,"style":"BOLD"},{"length":8,"offset":75,"style":"BOLD"}],"text":"Apache + MariaDB, импорт dump.sql в базу webdb, пользователь web с паролем P@ssw0rd.","type":"unstyled","key":"dp5j2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-SRV","type":"header-three","key":"bkg22"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"fmfo9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем Apache, PHP, MariaDB\napt-get install -y apache2 apache2-mod_php7 php7 php7-mysqli mariadb-server mariadb-client\n\n# Запускаем службы\nsystemctl enable --now httpd2\nsystemctl enable --now mariadb","type":"unstyled","key":"df592"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"dngja"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Безопасная настройка MariaDB\nmysql -u root << 'EOF'\nUPDATE mysql.user SET Password=PASSWORD('P@ssw0rd') WHERE User='root';\nDELETE FROM mysql.user WHERE User='';\nDELETE FROM mysql.user WHERE User='root' AND Host NOT IN ('localhost', '127.0.0.1', '::1');\nFLUSH PRIVILEGES;\nEOF","type":"unstyled","key":"eq20e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"b4fqk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Монтируем образ Additional.iso\nmkdir -p /mnt/iso\nmount -o loop /root/Additional.iso /mnt/iso\nls /mnt/iso/web","type":"unstyled","key":"61p8q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"fm77i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём БД и пользователя web\nmysql -u root -p'P@ssw0rd' << 'EOF'\nCREATE DATABASE webdb CHARACTER SET utf8mb4 COLLATE utf8mb4_general_ci;\nCREATE USER 'web'@'localhost' IDENTIFIED BY 'P@ssw0rd';\nGRANT ALL PRIVILEGES ON webdb.* TO 'web'@'localhost';\nFLUSH PRIVILEGES;\nEOF\n\n# Импортируем дамп\nmysql -u web -p'P@ssw0rd' webdb < /mnt/iso/web/dump.sql","type":"unstyled","key":"9ar2r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"nkp8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Копируем файлы веб-приложения\ncp /mnt/iso/web/index.php /var/www/html/\ncp -r /mnt/iso/web/images /var/www/html/\nchown -R apache:apache /var/www/html/\nchmod -R 755 /var/www/html/","type":"unstyled","key":"fmrdu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"b5hmk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Корректируем учётные данные в index.php\nsed -i \"s/\\$db_user.*/\\$db_user = 'web';/\" /var/www/html/index.php\nsed -i \"s/\\$db_pass.*/\\$db_pass = 'P@ssw0rd';/\" /var/www/html/index.php\nsed -i \"s/\\$db_name.*/\\$db_name = 'webdb';/\" /var/www/html/index.php\nsed -i \"s/\\$db_host.*/\\$db_host = 'localhost';/\" /var/www/html/index.php\n\n# Перезапускаем Apache\nsystemctl restart httpd2\n\n# Проверка\ncurl http://localhost/","type":"unstyled","key":"5g0ge"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 8. Статическая трансляция портов (DNAT) на маршрутизаторах","type":"header-two","key":"ad80s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-RTR — проброс к HQ-SRV","type":"header-three","key":"4ifpm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":11,"offset":5,"style":"BOLD"},{"length":9,"offset":35,"style":"BOLD"}],"text":"Порт 2026 → 2026 (SSH на HQ-SRV) и 8080 → 80 (веб-приложение).","type":"unstyled","key":"cdebo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"alflo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём таблицу NAT и цепочку PREROUTING\nnft add table ip nat\nnft add chain ip nat PREROUTING '{ type nat hook prerouting priority -100 ; }'\n\n# Проброс SSH: 172.16.1.2:2026 → HQ-SRV 192.168.1.2:2026\nnft add rule ip nat PREROUTING ip daddr 172.16.1.2 tcp dport 2026 dnat to 192.168.1.2:2026\n\n# Проброс веб-приложения: 172.16.1.2:8080 → HQ-SRV 192.168.1.2:80\nnft add rule ip nat PREROUTING ip daddr 172.16.1.2 tcp dport 8080 dnat to 192.168.1.2:80\n\n# Сохраняем\nnft list ruleset > /etc/nftables/nftables.nft\nsystemctl restart nftables\nnft list ruleset","type":"unstyled","key":"49epm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ BR-RTR — проброс к BR-SRV","type":"header-three","key":"60mhb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":11,"offset":5,"style":"BOLD"},{"length":11,"offset":35,"style":"BOLD"}],"text":"Порт 2026 → 2026 (SSH на BR-SRV) и 8080 → 8080 (testapp Docker).","type":"unstyled","key":"1fcn8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"4bbc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"nft add table ip nat\nnft add chain ip nat PREROUTING '{ type nat hook prerouting priority -100 ; }'\n\n# Проброс SSH: 172.16.2.2:2026 → BR-SRV 192.168.4.2:2026\nnft add rule ip nat PREROUTING ip daddr 172.16.2.2 tcp dport 2026 dnat to 192.168.4.2:2026\n\n# Проброс testapp: 172.16.2.2:8080 → BR-SRV 192.168.4.2:8080\nnft add rule ip nat PREROUTING ip daddr 172.16.2.2 tcp dport 8080 dnat to 192.168.4.2:8080\n\n# Сохраняем\nnft list ruleset > /etc/nftables/nftables.nft\nsystemctl restart nftables\nnft list ruleset","type":"unstyled","key":"9k086"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 9. Nginx как обратный прокси-сервер на ISP","type":"header-two","key":"58fie"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":16,"offset":0,"style":"BOLD"}],"text":"web.au-team.irpo → веб-приложение на HQ-SRV (через HQ-RTR)","type":"unordered-list-item","key":"2jd6k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":19,"offset":0,"style":"BOLD"}],"text":"docker.au-team.irpo → testapp на BR-SRV (через BR-RTR)","type":"unordered-list-item","key":"fj2uq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ ISP","type":"header-three","key":"dm98k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"2r4fo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем nginx\napt-get install -y nginx\n\n# Создаём директорию для конфигов сайтов, если её ещё нет\nmkdir -p /etc/nginx/sites-available\nmkdir -p /etc/nginx/sites-enabled","type":"unstyled","key":"8ufl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"297hp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Конфиг для web.au-team.irpo\ncat > /etc/nginx/sites-available/web.conf << 'EOF'\nserver {\n listen 80;\n server_name web.au-team.irpo;\n\n location / {\n proxy_pass http://172.16.1.2:8080;\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n }\n}\nEOF","type":"unstyled","key":"1o97s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"afur7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Конфиг для docker.au-team.irpo\ncat > /etc/nginx/sites-available/docker.conf << 'EOF'\nserver {\n listen 80;\n server_name docker.au-team.irpo;\n\n location / {\n proxy_pass http://172.16.2.2:8080;\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n }\n}\nEOF","type":"unstyled","key":"77dnu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"dp1ec"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Активируем сайты (создаём симлинки)\nln -sf /etc/nginx/sites-available/web.conf /etc/nginx/sites-enabled/\nln -sf /etc/nginx/sites-available/docker.conf /etc/nginx/sites-enabled/\n\n# Проверяем, что в /etc/nginx/nginx.conf есть подключение sites-enabled\ngrep -q \"sites-enabled\" /etc/nginx/nginx.conf || \\\n sed -i '/http {/a \\ include /etc/nginx/sites-enabled/*.conf;' /etc/nginx/nginx.conf\n\n# Проверяем конфиг и запускаем\nnginx -t\nsystemctl enable --now nginx\nsystemctl restart nginx","type":"unstyled","key":"ccod4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"eupj4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Проверка\ncurl -H \"Host: web.au-team.irpo\" http://localhost/\ncurl -H \"Host: docker.au-team.irpo\" http://localhost/","type":"unstyled","key":"fp7te"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 10. Web-based аутентификация на ISP","type":"header-two","key":"9qlec"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":16,"offset":16,"style":"BOLD"},{"length":14,"offset":57,"style":"BOLD"},{"length":20,"offset":87,"style":"BOLD"}],"text":"При обращении к web.au-team.irpo — запрос логина/пароля: WEB / P@ssw0rd. Файл паролей: /etc/nginx/.htpasswd.","type":"unstyled","key":"3gr88"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ ISP","type":"header-three","key":"7u2f3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"aa3rp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Устанавливаем утилиту для создания .htpasswd\napt-get install -y apache2-htpasswd\n\n# Создаём файл учёток (флаг -c создаёт файл, -b — пароль в командной строке)\nhtpasswd -b -c /etc/nginx/.htpasswd WEB P@ssw0rd\n\n# Проверяем\ncat /etc/nginx/.htpasswd","type":"unstyled","key":"2bs52"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"4bgom"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Обновляем конфиг web.au-team.irpo, добавив basic auth\ncat > /etc/nginx/sites-available/web.conf << 'EOF'\nserver {\n listen 80;\n server_name web.au-team.irpo;\n\n auth_basic \"Restricted Area\";\n auth_basic_user_file /etc/nginx/.htpasswd;\n\n location / {\n proxy_pass http://172.16.1.2:8080;\n proxy_set_header Host $host;\n proxy_set_header X-Real-IP $remote_addr;\n proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;\n proxy_set_header X-Forwarded-Proto $scheme;\n }\n}\nEOF\n\n# Проверяем и перезапускаем nginx\nnginx -t\nsystemctl restart nginx","type":"unstyled","key":"dllbf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"c8o7u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Проверка — без авторизации должно вернуть 401\ncurl -H \"Host: web.au-team.irpo\" http://localhost/\n\n# С авторизацией\ncurl -H \"Host: web.au-team.irpo\" -u WEB:P@ssw0rd http://localhost/","type":"unstyled","key":"8ntlt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задание 11. Установка Яндекс Браузера для организаций на HQ-CLI","type":"header-two","key":"96vt4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\uD83D\uDDA5️ HQ-CLI","type":"header-three","key":"766kg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"7e2so"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Создаём временный каталог\nmkdir -p /tmp/yandex\ncd /tmp/yandex\n\n# Скачиваем deb-пакет Яндекс Браузера для организаций\nwget https://browser.yandex.ru/download/?partner=yabro_corp_full -O yandex-browser-corporate.rpm\n\n# Либо — конвертация из deb в rpm через alien (для ALT Linux)\napt-get install -y alien rpm-build\n\n# Если скачан deb:\n# alien --to-rpm yandex-browser-corporate.deb\n# rpm -ivh yandex-browser-corporate.rpm\n\n# Установка rpm-пакета\nrpm -ivh --nodeps yandex-browser-corporate.rpm\n\n# Либо установка через epm (если доступно)\nepm -i yandex-browser-corporate.rpm","type":"unstyled","key":"a866s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"bash","type":"unstyled","key":"44t1i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Проверка установки\nwhich yandex-browser\nyandex-browser --version\n\n# Запуск браузера от имени пользователя (не от root)\nsudo -u user yandex-browser &","type":"unstyled","key":"6u93s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"unstyled","key":"45f0a"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"unstyled","key":"59emu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"marker","key":"9qvVTJmkc84nYW6dCrXD"}],"entityMap":{}},"mentions":[]}