src="http://pages.teamviewer.com/rs/059-OJJ-290/images/icon-instagram-white_v2.png"  

src="https://pages.teamviewer.com/rs/059-OJJ-290/images/TV-logo-white_v2.png"  

Name | Alter | Stadt
-----|-------|-------
Anna | 28    | Berlin
Ben  | 34    | München
Clara| 22    | Hamburg

Name,Alter,Stadt
Anna,28,Berlin
Ben,34,München
Clara,22,Hamburg

"Spalte A","Spalte B","Spalte C"  
"Daten A-Z1","Daten B-Z1","Daten C-Z1"  
"Daten A-Z2","Daten B-Z2","Daten C-Z2"  
"Daten A-Z3","Daten B-Z3","Daten C-Z3"  
"Daten A-Z4","Daten B-Z4","Daten C-Z4"  

Spalte A   | Spalte B   | Spalte C
-----------|------------|-----------
Daten A-Z1 | Daten B-Z1 | Daten C-Z1
Daten A-Z2 | Daten B-Z2 | Daten C-Z2
Daten A-Z3 | Daten B-Z3 | Daten C-Z3
Daten A-Z4 | Daten B-Z4 | Daten C-Z4

Spalte 1        | Spalte 2      | Spalte 3
----------------|---------------|------------
Wert A1         | Wert A2       | Wert A3
Wert B1         | Wert B2       | Wert B3

Spalte1\tSpalte2\tSpalte3
A1\tA2\tA3
B1\tB2\tB3

| Spieler / Max | Durchschnitt / Oben |
|---------------|---------------------|
| 1 / 200       | 1 / 13              |

"Spieler / Max","Durchschnitt / Oben"  
"1 / 200","1 / 13"  

----------|--------------------------|-------------|-----------|----------|----------|-----------|------------
Partition | Name                     | Dateisystem |Bezeichnung|  Größe   | Benutzt  | Unbenutzt |Markierungen
----------|--------------------------|------------ |-----------|----------|----------|-----------|------------
nvme0n1p1 |EFI System Partition      |   fat32     | SYSTEM    |260.00 MB | 36.30 MiB| 223.70 MiB| boot, esp
nvme0n1p2 |Microsoft reserv.Partition|unbekannt    |           |128.00 MB |       ---|        ---| msftres
nvme0n1p3 |Basic data partition      |  ntfs       |disc       | 90.29 GiB| 58.40 GiB|  31.89 GiB| msftdata
nvme0n1p5 |                          |  ext4       |           | 26.85 GiB| 14.51 GiB|  12.35 GiB|
nvme0n1p4 |Basic data partition      |  ntfs       |Windows RE |  1.72 GiB|801.39 MiB| 958.61 MiB| hidden, diag
          |                          |             |Tools      |          |          |           |
----------|--------------------------|-------------|-----------|----------|----------|-----------|-------------

/ip firewall filter
add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked  
add action=accept chain=input comment="wireguard ip input" src-address=192.168.77.0/24  
add action=accept chain=input comment="wireguard udp input" dst-port=63558 protocol=udp  
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp  
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid  
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1  
add action=drop chain=input in-interface=vlan90 protocol=icmp
add action=accept chain=forward comment="iobroker intern erreichbar" dst-address=192.168.111.10 in-interface=vlan1  
add action=accept chain=forward comment="iobroker von wlan erreichbar" dst-address=192.168.111.10 in-interface=vlan70  
add action=accept chain=forward dst-address=192.168.111.10 in-interface=vlan90
add action=accept chain=forward dst-address=192.168.111.11 in-interface=vlan1
add action=accept chain=forward dst-address=192.168.111.12 in-interface=vlan1
add action=accept chain=forward dst-address=192.168.111.40 in-interface=vlan1
add action=accept chain=forward disabled=yes dst-address=192.168.70.2 in-interface=vlan1
add action=accept chain=forward dst-address=192.168.111.11 in-interface=vlan70
add action=accept chain=forward dst-address=192.168.111.27 in-interface=vlan1
add action=drop chain=forward in-interface=vlan200 out-interface=!ether1
add action=drop chain=forward comment="WLAN Gast nur ins Internet" disabled=yes in-interface=vlan90 out-interface=!ether1  
add action=reject chain=forward comment="iot keine Zugriff auf Intern" in-interface=vlan1 out-interface=vlan111 reject-with=icmp-network-unreachable  
add action=reject chain=forward comment=" iot keine Zugriff auf WLAN Intern" in-interface=vlan70 out-interface=vlan111 reject-with=icmp-network-unreachable  
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN  
add action=accept chain=forward comment="defconf: accept in ipsec policy" disabled=yes ipsec-policy=in,ipsec  
add action=accept chain=forward comment="defconf: accept out ipsec policy" disabled=yes ipsec-policy=out,ipsec  
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked  
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes  
add action=accept chain=forward comment="Reverse Proxy" connection-nat-state=dstnat in-interface=ether1  
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid  
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN  
/ip firewall nat
add action=masquerade chain=srcnat comment="defconf: masquerade" ipsec-policy=out,none out-interface-list=WAN  
add action=dst-nat chain=dstnat dst-port=80,443 in-interface=ether1 protocol=tcp to-addresses=192.168.7.11

add action=accept chain=forward comment="test" dst-address=192.168.7.5 in-interface=vlan111  

accept established,related, untracked -> forward -> accept

msiexec.exe /i "MicrosoftTeamsMeetingAddinInstaller.msi" /qb  

$account = New-Object System.Security.Principal.NTAccount("mydom\testuser")  
$SID=$account.Translate([System.Security.Principal.SecurityIdentifier]).Value
$TaskScheduler = New-Object -ComObject Schedule.Service
$TaskScheduler.Connect()
$Task = $TaskScheduler.GetFolder("Testordner").GetTask("Testtask")  
$sec=$task.GetSecurityDescriptor(0xF)
$sec=$sec + "(A;;GRGX;;;$SID)"  
$Task.SetSecurityDescriptor($sec, 0)

schtasks /run /tn \Testordner\Testtask

$account = New-Object System.Security.Principal.NTAccount("mydom\testuser")  
$SIDToRemove=$account.Translate([System.Security.Principal.SecurityIdentifier]).Value
$ScheduledTask="Testordner\Testtask"  
$regPath = "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\$ScheduledTask"  
$helper = [wmiclass]"Win32_SecurityDescriptorHelper"  

# Load the binary security descriptor from the registry
$binarySD = (Get-ItemProperty -Path $regPath -Name "SD").SD  
$descriptorObj = $helper.BinarySDToWin32SD($binarySD).Descriptor
$originalDACL = $descriptorObj.DACL

# Filter the DACL to exclude ACEs for the SID we want to remove
$filteredDACL = @()
foreach ($ace in $originalDACL) {
    $trusteeSID = $ace.Trustee.SIDString
    if ($trusteeSID -ne $SIDToRemove) {
        $filteredDACL += $ace
    } else {
        Write-Host "Removing ACE for SID: $trusteeSID"  
    }
}
# Reassign the filtered DACL as a strongly-typed WMI object array
$descriptorObj.DACL = [System.Management.ManagementBaseObject[]]$filteredDACL
# Convert the descriptor back to binary and write it to the registry
$updatedBinarySD = $helper.Win32SDToBinarySD($descriptorObj).BinarySD
Set-ItemProperty -Path $regPath -Name "SD" -Value $updatedBinarySD  

wg genkey > privatekey
wg pubkey < privatekey > publickey

[Interface]
Address = 192.168.77.5/32
PrivateKey = privatekeywurdezensiertgHj+kng=
ListenPort = 13333
DNS = 192.168.77.1

[Peer]
PublicKey = publickeywurdezensiert0FzMSJCM=
Endpoint = mydyndns.net:13333
AllowedIPs = 0.0.0.0/0

ervices:
  wireguard:
    image: lscr.io/linuxserver/wireguard:latest
    container_name: wireguard
    cap_add:
      
NET_ADMIN
SYS_MODULE #optional
environment:
PUID=1000
PGID=1000
TZ=Europe/Berlin

volumes:
/root/docker/wg-client/config:/config
/lib/modules:/lib/modules #optional
ports:
13333:51820/udp
sysctls:
net.ipv4.conf.all.src_valid_mark=1
restart: unless-stopped

ports:
13333:51820/udp

ports:
13333:13333/udp

Found WG conf /config/wg_confs/peer.conf, adding to list 
Activating tunnel /config/wg_confs/peer.conf 
Warning: `/config/wg_confs/peer.conf' is world accessible  
[#] ip link add peer type wireguard
[#] wg setconf peer /dev/fd/63
[#] ip -4 address add 192.168.77.5/32 dev peer
[#] ip link set mtu 1420 up dev peer
[#] resolvconf -a peer -m 0 -x
s6-rc: fatal: unable to take locks: Resource busy
[#] wg set peer fwmark 51820
[#] ip -4 route add 0.0.0.0/0 dev peer table 51820
[#] ip -4 rule add not fwmark 51820 table 51820
[#] ip -4 rule add table main suppress_prefixlength 0
[#] iptables-restore -n

#!/bin/bash

# connect_prometheus.sh
# Funktion: Verbindet Port-Forward zu Prometheus und öffnet localhost:9090.
# Zeigt Warnseite, wenn kein Zugriff möglich ist (z. B. fehlende SSH-Verbindung).

PORT=9090
NAMESPACE="prometheus"  
SERVICE="prometheus"  
URL="http://localhost:$PORT"  
HTML_FEHLERDATEI="/tmp/prometheus_ssh_hinweis.html"  
MAX_RETRIES=20   # insgesamt 10 Sekunden (0.5s Schritte)

echo "Starte Port-Forwarding für $SERVICE im Namespace $NAMESPACE..."  

# Starte Port-Forwarding im Hintergrund
kubectl -n "$NAMESPACE" port-forward service/"$SERVICE" $PORT:$PORT >/dev/null 2>&1 &  
PID=$!

# Warten und prüfen, ob Prometheus erreichbar wird
echo "Warte auf Verbindung zu $URL ..."  
for i in $(seq 1 $MAX_RETRIES); do
    if curl -s --head "$URL" | grep -q "200 OK"; then  
        echo "✅ Prometheus ist erreichbar unter $URL"  
        xdg-open "$URL" >/dev/null 2>&1 &  
        
        # Port-Forwarding nach 60 Sekunden automatisch beenden
        (
            sleep 60
            if ps -p $PID > /dev/null; then
                kill $PID
                echo "⏹ Port-Forwarding nach 60 Sekunden beendet."  
            fi
        ) &
        exit 0
    fi
    sleep 0.5
done

# Wenn hier angekommen: Verbindung fehlgeschlagen
echo "❌ Verbindung zu Prometheus fehlgeschlagen."  
echo "👉 Vermutlich fehlt eine SSH-Verbindung zum Kubernetes-Cluster."  

# HTML-Seite zur Warnung erzeugen
cat > "$HTML_FEHLERDATEI" <<EOF  
<!DOCTYPE html>
<html lang="de">  
<head>
    <meta charset="UTF-8">  
    <title>SSH-Verbindung erforderlich</title>
</head>
<body style="font-family: sans-serif; text-align: center; margin-top: 50px;">  
    <h1 style="color: red;">⚠ Verbindung zum Prometheus fehlgeschlagen ⚠</h1>  
    <p>Bitte stelle eine SSH-Verbindung zum Kubernetes-Cluster her.</p>
    <p style="font-weight: bold;">Befehl:</p>  
    <pre style="font-size: 1.2em; background: #f0f0f0; display: inline-block; padding: 10px; border-radius: 8px;">  
ssh kubernetescluster -N
    </pre>
</body>
</html>
EOF

xdg-open "$HTML_FEHLERDATEI" >/dev/null 2>&1 &  

# Hintergrundprozess beenden, falls gestartet
if ps -p $PID > /dev/null; then
    kill $PID
fi

exit 1

kubectl -n prometheus port-forward service/prometheus 9090:9090

 kubectl -n prometheus port-forward service/prometheus 9090:9090
Forwarding from 127.0.0.1:9090 -> 9090
Forwarding from [::1]:9090 -> 9090

http://localhost:9090