Viacheslav Vasilyev avoidik

Cygwin Git + VS Code compatibility

Thanks and credit to mattn and ferreus on GitHub.

Check out wslpath if you're using the Windows Subsystem for Linux.

Our goal is to save sensitive data in a MySQL database in a responsible way, and be able to read/write it programmatically in a PHP web application. Asymmetric encryption would be best, but is not practical here. Symmetric encryption with a strong algorithm and hard-to-guess cipher is acceptable, but not if we store the cipher in plain text on the same server where the database credentials also live in plain text!

This work-in-progress is subject to change if/when I come up with a better scheme, but for now, the plan is to:

store the cipher as a vault secret;
configure TLS authentication so that our PHP application can log in, and then
create a token that allows its bearer to read the secret (our cipher);
use a PHP component and our cipher to encrypt/decrypt our sensitive data.

AWS CLI JMESPath cheatsheet

Random recipes of JMESPath for the AWS CLI tools that I might have written or stumbled upon.

Examples

	#if 0
	#!/bin/bash
	src=$0
	obj=${src%.*}
	gcc -g -Wl,--no-as-needed `pkg-config --cflags --libs libcurl libssl libp11` -o $obj $src
	exit
	#endif

	/* perform HTTPS GET on ssl client verification using curl,OpenSSL ENGINE pkcs11 and libp11
	*

	#!/bin/bash
	#
	# Create Kubernetes user. Require cfssl.
	#
	# Usage:
	# ./create-user.sh <kubernetes api host> <fulle name> <clusterrole>
	#
	# Example:
	# ./create-user.sh k8s-api.my-domain.com "Jane Doe" my-project:admin

	data "aws_iam_policy_document" "fargate-role-policy" {
	statement {
	actions = ["sts:AssumeRole"]

	principals {
	type = "Service"
	identifiers = ["ecs.amazonaws.com", "ecs-tasks.amazonaws.com"]
	}
	}
	}

	# Create all variables used in this Terraform run
	variable "aws_access_key" {}
	variable "aws_access_secret_key" {}
	variable "aws_bucket_name" {}
	variable "aws_region_main" {
	default = "eu-west-1"
	}
	variable "aws_region_replica" {
	default = "eu-central-1"
	}

	#cloud-config
	write-files:
	- path: /etc/conf.d/nfs
	permissions: '0644'
	content: \|
	OPTS_RPC_MOUNTD=""

	coreos:
	units:
	- name: update-engine.service

	name: Release
	on:
	release:
	types:
	- published

	jobs:
	release:
	name: Release
	runs-on: ubuntu-latest

	package main

	import (
	"fmt"
	"log"

	"github.com/hashicorp/vault/api"
	)

	var client *api.Client