Andreas Olsson andreaso
andreaso
/ github-oidc.tf
Created
November 20, 2021 14:31
Simple https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/configuring-openid-connect-in-hashicorp-vault example
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| data "vault_policy_document" "gha_test" { | |
| rule { | |
| path = "${vault_mount.secrets.path}/data/test/oidc" | |
| capabilities = ["read"] | |
| } | |
| } | |
| resource "vault_policy" "gha_test" { | |
| name = "gha-test-read" | |
| policy = data.vault_policy_document.gha_test.hcl |
andreaso
/ listen-on-totp-range.network
Created
May 22, 2021 06:45
Not-entirely-serious SSH TOTP implementation, inspired by https://twitter.com/kistel/status/1395375108315824130.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # /etc/systemd/network/listen-on-totp-range.network | |
| [Match] | |
| Name = lo | |
| [Route] | |
| Destination = 2001:db8:67c1:22::/64 | |
| Type = local |
andreaso
/ folding-at-home.service
Created
June 29, 2020 17:34
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| [Unit] | |
| Description=Proper folding at home service unit | |
| After=network.target | |
| [Service] | |
| Type=simple | |
| User=fahclient | |
| WorkingDirectory=/var/lib/fahclient | |
| ExecStart=/usr/bin/FAHClient /etc/fahclient/config.xml | |
| NoNewPrivileges=yes |