- Chatham House Rule, so no attribution of ideas to people or companies
- bootstrapping environments (without object stores)
- service discovery
- removing spofs
| # ============================================================= | |
| # REQUIREMENTS | |
| # ============================================================= | |
| # - Heroku toolbelt installed in your system | |
| # - A heroku remote named `staging`. | |
| # - A heroku remote named `production`. | |
| # ============================================================= | |
| namespace :h do | |
| # ------------------------------------------------------------- |
I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.
What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.
Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.
| # Install all the Go tools and godep tool | |
| # Location of gobin is based on installation by OS X Homebrew | |
| sudo -u admin GOPATH=/tmp GOBIN=/usr/local/opt/go/bin go get -u golang.org/x/tools/cmd/... | |
| sudo -u admin GOPATH=/tmp GOBIN=/usr/local/opt/go/bin go get -u github.com/tools/godep |
An IAM user policy document to give minimal rights for deploying an Elastic Beanstalk application.
Where:
REGION: AWS region.ACCOUNT_ID: AWS account ID.APPLICATION_NAME: Desired target Elastic Beanstalk application name(space).IAM_INSTANCE_PROFILE_ROLE: The instance profile (IAM role) Elastic Beanstalk EC2 instaces will run under.| # Rake task to help migrating a rails 3 app to rails 4 strong_parameters. | |
| # The task generates source code for helper methods for each model class | |
| # to 'permit' the attributes. | |
| # the generated methods are intended as starting point to copy&paste in the controller | |
| # and than edit the permitted attributs. | |
| # Some common names of non-editable attributes are already filtered, | |
| # like 'id', 'password' or 'created_at'. | |
| # The output is written to stdout so you can pipe it into a file | |
| # | |
| # Dependencies: |
Picking the right architecture = Picking the right battles + Managing trade-offs
| #!/bin/bash | |
| # | |
| # Faster toolchain build: skips as much as possible. | |
| # | |
| # To use this toolchain from the command line:" | |
| # export TOOLCHAINS=$(whoami) | |
| # | |
| # we build to the same prefix every time (instead of building | |
| # to a versioned prefix) because every time the prefix changes | |
| # *everything* rebuilds. |
| #!/bin/bash | |
| # Copyright 2017 Théo Chamley | |
| # Permission is hereby granted, free of charge, to any person obtaining a copy of | |
| # this software and associated documentation files (the "Software"), to deal in the Software | |
| # without restriction, including without limitation the rights to use, copy, modify, merge, | |
| # publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons | |
| # to whom the Software is furnished to do so, subject to the following conditions: | |
| # | |
| # The above copyright notice and this permission notice shall be included in all copies or |