baffolobill

Working with ansible-vault

I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.

What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.

Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.

Initialize

gitflow	git
`git flow init`	`git init`
	`git commit --allow-empty -m "Initial commit"`
	`git checkout -b develop master`

Connect to the remote repository

Python script to convert DBF database file to CSV

First download dbfpy: http://sourceforge.net/projects/dbfpy/files/latest/download?source=files
Then install: sudo python setup.py install

To convert DBF file to CSV:

./dbf2csv database.dbf

	#!/bin/bash
	#
	## redis backup script
	## usage
	## redis-backup.sh port backup.dir

	port=${1:-6379}
	backup_dir=${2:-"/data/backup/redis"}

	cli="/usr/local/bin/redis-cli -p $port"

	<!DOCTYPE html>
	<html>
	<head>
	<script src="gzip.js"></script>
	<script>
	function showImg(f) {
	var res = document.getElementById('results');
	var e = document.createElement('div');
	res.appendChild(e);
	var p = document.createElement('p');

	wget http://stedolan.github.io/jq/download/linux64/jq
	aws ec2 describe-instances --filters "Name=tag:Name,Values=$NAME" \
	"Name=instance-state-name,Values=running" \
	\| jq -r \
	".Reservations[] \| .Instances[] \| .InstanceId" \

	aws ec2 describe-volumes --filters \
	"Name=status,Values=available" \
	\| jq -r ".Volumes[] \| .VolumeId" \

	import struct
	import logging

	from pymongo import MongoClient
	import bson
	from bson.errors import InvalidBSON
	from pymongo.mongo_replica_set_client import MongoReplicaSetClient


	logger = logging.getLogger('mongo_dump')

	#!/usr/bin/env python
	import os
	import time

	username = 'root'
	defaultdb = 'postgres'
	port = '5433'
	backupdir='/www/backup/'
	date = time.strftime('%Y-%m-%d')

	# to generate your dhparam.pem file, run in the terminal
	openssl dhparam -out /etc/nginx/ssl/dhparam.pem 2048