Stephano Zanzin Ferreira microwaves

Let's Encrypt on Ubuntu 14.04, nginx with webroot auth

This document details how I setup LE on my server. Firstly, install the client as described on http://letsencrypt.readthedocs.org/en/latest/using.html and make sure you can execute it. I put it in /root/letsencrypt.

As it is not possible to change the ports used for the standalone authenticator and I already have a nginx running on port 80/443, I opted to use the webroot method for each of my domains (note that LE does not issue wildcard certificates by design, so you probably want to get a cert for www.example.com and example.com).

Configuration

For this, I placed config files into etc/letsencrypt/configs, named after <domain>.conf. The files are simple:

A quick note on how I'm currently handling Blue/Green or A/B deployments with Terraform and AWS EC2 Auto Scaling.

In my particular use case, I want to be able to inspect an AMI deployment manually before disabling the previous deployment.

Hopefully someone finds this useful, and if you have and feedback please leave a comment or email me.

Overview

I build my AMI's using Packer and Ansible.

Creating a redis Module in 15 lines of code!

A quick guide to write a very very simple "ECHO" style module to redis and load it. It's not really useful of course, but the idea is to illustrate how little boilerplate it takes.

Step 1: open your favorite editor and write/paste the following code in a file called module.c

#include "redismodule.h"
/* ECHO <string> - Echo back a string sent from the client */
int EchoCommand(RedisModuleCtx *ctx, RedisModuleString **argv, int argc) {

	$VERBOSE = nil
	require File.expand_path('../rooby', __FILE__)


	Person = Rooby::Class.new 'Person' do
	define :initialize do \|name\|
	@name = name
	end

	define :name do

	#!/bin/bash
	#

	# Copies certain kinds of known files and directories from a given Jenkins master directory
	# into a git repo, removing any old ones, adds 'em, commits 'em, pushes 'em.
	#
	set -ex

	if [ $# -ne 2 ]; then
	echo usage: $0 root_dir jenkins_master

	import cyclone.web
	import cyclone.auth
	from cyclone import escape, httpclient
	from cyclone.options import parse_command_line, define, options
	from twisted.python import log
	from twisted.internet import task, defer, reactor
	import sys

	try:
	import urllib.parse as urllib_parse # py3

	server {
	listen 80;
	server_name ~^(www\.)?(?<siteid>.+)\.domain\.com$;
	log_format timed_combined '$remote_addr - $remote_user [$time_local] '
	'"$request" $status $body_bytes_sent '
	'"$http_referer" "$http_user_agent" '
	'$request_time $pipe';

	access_log /var/log/nginx/static_sites.domain.log timed_combined;
	root /var/www/$siteid;

	{
	"title": "collectd-post",
	"services": {
	"query": {
	"list": {
	"0": {
	"query": "plugin: \"cpu\" AND plugin_instance: \"0\"",
	"alias": "cpu1",
	"color": "#7EB26D",
	"id": 0,

	source :rubygems

	gem 'goliath', '1.0.0'
	gem 'rack', '1.4.1'