Carl Bennett carlbennett

Normally, when you diff an [Ansible vault][], all you see is gibberish.

$ git diff -- group_vars/all/vault.yml
diff --git a/group_vars/all/vault.yml b/group_vars/all/vault.yml
index 245ccf4..90bf9ee 100644
--- a/group_vars/all/vault.yml
+++ b/group_vars/all/vault.yml
@@ -1,111 +1,111 @@
 $ANSIBLE_VAULT;1.1;AES256

[attaching this to a CloudFlare survey why I left them (for DNSimple)]

I was a free user using CloudFlare only for DNS, chiefly because it can simulate CNAME at an apex domain. The apex domains mathdown.net,mathdown.com point to mathdown-cben.rhcloud.com. Cloudflare "CNAME-flattening" nicely returns an A record; unfortunately it's served with a huge TTL of 7 days(!), which causes a long outage when the underlying IP changes.

I asked support how I can lower the TTL (BTW it's great that you provide free support at all) and was told [https://support.cloudflare.com/hc/en-us/requests/522551, emphasis mine]:

This is based on the TTL of your authoritative provider for mathdown-cben.rhcloud.com:

	#!/bin/bash

	unset URL TICKET STUB GROUP CERTHASH LANGSELEN
	shift
	while [ "$1" ]; do
	if [ "$1" == "-ticket" ]; then shift; TICKET=$1; fi
	if [ "$1" == "-stub" ]; then shift; STUB=$1; fi
	if [ "$1" == "-group" ]; then shift; GROUP=$1; fi
	if [ "$1" == "-certhash" ]; then shift; CERTHASH=$1; fi
	if [ "$1" == "-url" ]; then shift; URL=$1; fi

	<?php

	// simple proxy from Grafana to Pushbullet. Bare minimum.
	// please update Access-token to your liking. Feel free to use device_iden if
	// you want to send to a specific device. Default is all.
	// usage: example.com/pushbullet-proxy.php?title=test&body=testbody

	// Find your token here: https://www.pushbullet.com/#settings/account
	$access_token = '<my token>';

-// Turn on Developer Mode under User Settings > Appearance > Developer Mode (at the bottom)
-// Then open the channel you wish to delete all of the messages (could be a DM) and click the three dots on the far right.
-// Click "Copy ID" and paste that instead of LAST_MESSAGE_ID.
-// Copy / paste the below script into the JavaScript console.
-// If you're in a DM you will receive a 403 error for every message the other user sent (you don't have permission to delete their messages).
-var before = 'LAST_MESSAGE_ID';
-clearMessages = function(){
-	const authToken = document.body.appendChild(document.createElement`iframe`).contentWindow.localStorage.token.replace(/"/g, "");
-	const channel = window.location.href.split('/').pop();

	const express = require('express'),
	bodyParser = require('body-parser'),
	request = require('unirest'),
	app = express();

	app.disable('x-powered-by');
	app.set('env', 'production');

	app.use(bodyParser.json());
	app.use(bodyParser.urlencoded({ extended: true }));

	; Google DNS:
	nameserver 8.8.8.8
	nameserver 8.8.4.4
	nameserver 2001:4860:4860::8888
	nameserver 2001:4860:4860::8844
	; OpenDNS:
	nameserver 208.67.222.222
	nameserver 208.67.222.220
	nameserver 2620:0:ccc::2
	nameserver 2620:0:ccd::2

	###
	###
	### UPDATE: For Win 11, I recommend using this tool in place of this script:
	### https://christitus.com/windows-tool/
	### https://github.com/ChrisTitusTech/winutil
	### https://www.youtube.com/watch?v=6UQZ5oQg8XA
	### iwr -useb https://christitus.com/win \| iex
	###
	###

	# Fix user and directory permissions:
	find . -type f -print0 \| sudo xargs -0 chmod 664
	find . -type d -print0 \| sudo xargs -0 chmod 775

	# Copy user permissions to group permissions:
	chmod -R g=u .

	# Make new files inherit the group of the container directory
	chmod g+s <directory>