Skip to content

Instantly share code, notes, and snippets.

View jjtroberts's full-sized avatar

Joe Roberts jjtroberts

View GitHub Profile
@jjtroberts
jjtroberts / osx_cli_tools_installer.sh
Last active June 1, 2023 15:04
Tests MacOS for xcode and installs devops tools.
#!/usr/bin/env bash
# Install all the things
function install {
xcode-select --install
if ! type "brew" > /dev/null; then
/bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"
echo 'eval "$(/opt/homebrew/bin/brew shellenv)"' >> /Users/$(whoami)/.zprofile
eval "$(/opt/homebrew/bin/brew shellenv)"
@jjtroberts
jjtroberts / openscap_setup.sh
Created May 4, 2022 05:31
OpenSCAP scanner setup on UBI8
#!/usr/bin/env bash
dnf install -y openscap-scanner bzip2 wget unzip && \
wget https://github.com/ComplianceAsCode/content/releases/download/v0.1.61/scap-security-guide-0.1.61-oval-5.10.zip && \
unzip scap-security-guide-0.1.61-oval-5.10.zip && \
oscap xccdf eval \
--verbose ERROR \
--fetch-remote-resources \
--profile "xccdf_org.ssgproject.content_profile_stig" \
--results compliance_output_report.xml \
--report report.html "scap-security-guide-0.1.61-oval-5.10/ssg-rhel8-ds.xml"
@jjtroberts
jjtroberts / Makefile
Created August 1, 2022 20:43
Defect Dojo Docker Compose Files
.PHONY: run
run:
docker-compose --profile postgres-redis --env-file ./docker/environments/postgres-redis.env up --no-deps
@jjtroberts
jjtroberts / renovate.json
Created August 2, 2022 14:43
MVP renovate configuration
{
"assignees": [
"@gitlabusername"
],
"baseBranches": [
"development"
],
"automerge": false
}
@jjtroberts
jjtroberts / brew-updates.md
Created August 22, 2022 16:08
macOS homebrew updates

Get everything

brew upgrade --cask --greedy --verbose

Automate

brew update
brew upgrade
brew install terminal-notifier
brew tap domt4/autoupdate
brew autoupdate start --upgrade --enable-notification
@jjtroberts
jjtroberts / cli53-zone-export.sh
Last active October 12, 2022 20:20
Route53 zone export
#!/usr/bin/env bash
# Enter Bash "strict mode"
set -o errexit # Exit immediately on any non-zero error exit status
set -o nounset # Trigger error when expanding unset variables
set -o pipefail # Prevent errors in a pipeline from being masked
IFS=\$'\n\t' # Internal Field Separator controls Bash word splitting
# Declare backup path & master zone files
BACKUP_PATH="$(date +%F)"
@jjtroberts
jjtroberts / drupal-cron.sh
Created October 12, 2022 20:25
Kubernetes Drupal Cron
# You can obtain the cron_key:
`drush vget cron_key --exact`
# or
`kubectl exec <pod-id> -c <container> -- bash -c 'drush vget cron_key --exact'
# Then use that in the cron deployment
@jjtroberts
jjtroberts / build_artifact.yaml
Created October 12, 2022 20:26
Bitbucket Pipeline - Create Build Artifact
image: node:6.15.0
pipelines:
default:
- step:
caches:
- node
script:
- apt-get update
- apt-get install -y zip curl
@jjtroberts
jjtroberts / r53-s3-redirect.sh
Created October 12, 2022 22:00
Bash script to generate an S3 redirect and R53 alias
#!/usr/bin/env bash
function makeBucket() {
echo "Making S3 bucket for ${DOMAIN}..."
aws s3 mb s3://${DOMAIN}
}
# Trim any erroneous whitespace from variable
DOMAIN="${DOMAIN//[[:space:]]/}"
@jjtroberts
jjtroberts / drush_s3fs.sh
Created October 12, 2022 22:01
Configure Drupal via drush to use s3fs
# drush vset variable_name value
drush -l [domain.org] en s3fs --y
drush -l [domain.org] vset s3fs_bucket [bucket_name]
drush -l [domain.org] vset s3fs_region [region]
drush -l [domain.org] vset s3fs_use_cname FALSE
drush -l [domain.org] vset s3fs_use_customhost FALSE
drush -l [domain.org] vset s3fs_use_versioning TRUE
drush -l [domain.org] vset s3fs_cache_control_header public, max-age=300
drush -l [domain.org] vset s3fs_encryption aws:kms