mattwillsher

#!/usr/bin/env bash
set -e

OUTPUT_DIR=${OUTPUT_DIR:-"out"}
SUBDOMAIN=${1:-"my"}

CA_CERT="certs/ca.cert.pem"
CA_KEY="private/ca.key.pem"
LOCALHOST_CERT="certs/$SUBDOMAIN.localhost.cert.pem"
LOCALHOST_KEY="private/$SUBDOMAIN.localhost.key.pem"

mattwillsher

#!/bin/bash

# A simple script to install Hashicorp tools with GPG key verification

set -euo pipefail

# Set DEST_PATH if not already set
HASHI_DEST_PATH="${HASHI_DEST_PATH:-/usr/local/bin}"
# Clean up downloaded files
HASHI_CLEAN="${HASHI_CLEAN:-true}"

mattwillsher

### Keybase proof

I hereby claim:

  * I am mattwillsher on github.
  * I am mattwillsher (https://keybase.io/mattwillsher) on keybase.
  * I have a public key ASBIrTYeVPdP4MN6h1Klspi7q7ENeowDGtBkt3fJyALm1Ao

To claim this, I am signing this object:

mattwillsher

Keybase proof

I hereby claim:

• I am mattwillsher on github.
• I am mattwillsher (https://keybase.io/mattwillsher) on keybase.
• I have a public key ASC9IclgVf3W1ytoDP4f5MP5PPrFOyQOUifmKeT-8mD2ugo

To claim this, I am signing this object:

mattwillsher

roles/nginx/meta/main.yml

dependencies:
  - update_apt_cache

roles/update_apt_cache/main.yml

mattwillsher

{
  "builders": [
    {
      "type": "vmware-iso",
      "name": "ubuntu-{{ user `ubuntu_release` }}-server-amd64",
      "guest_os_type": "ubuntu-64",
      "iso_url": "http://releases.ubuntu.com/{{ user `ubuntu_release` }}/ubuntu-{{ user `ubuntu_release` }}-server-amd64.iso",
      "iso_checksum": "{{ user `ubuntu_iso_sha256` }}",
      "iso_checksum_type": "sha256",
      "http_directory": "http",

mattwillsher

#!/bin/bash
#
# (c)2014 Matt Willsher <matt@willsherpartners.co.uk>
#
# Licensed under GPLv3 http://www.gnu.org/licenses/gpl.txt
#
umask 077

if [[ $EUID == 0 ]]; then
  echo "This script can't be used as root" >&2

mattwillsher

---
- name: Setup Vagrant environment
  hosts: 127.0.0.1
  connection: local
  vars:
    - vagrantbox: CentOS-6.4-x86_64-v201303090
    - vagrantdir: $ENV(HOME)/Development/ansible/$vagrantbox
  tasks:
    - name: Directory $vagrantdir
      file: path=$vagrantdir

mattwillsher

This playbook, in playbooks/sshd/set_key_value.yml:
---
- name: Set sshd_config $key $value
  hosts: $hosts
  vars_files:
    - [ "vars/$ansible_distribution.yml", "vars/os_defaults.yml" ]
  tasks:
    - include: tasks/set_config_item.yml key=$key value=$value
  handlers:
    - include: handlers/sshd.yml 

mattwillsher

+ Backs up DB
- Poor db permission handling
- Bad data hygiene, db can be copied prod to dev, dev to prod
- dumps assets at the remote end, potentially increasing dependencies (e.g. node, java)
- installs vendors/bundles at the remote end
- installs composer via curl | via shell (even as root!)
- uncontrolled composer versioning for composer itself. update installs the latest via the curl | shell method.
+ Comprehensive control of post installation tasks
+ Can deploy as non-root user
- Symlinks add overhead