| display dialog "When do you want to sleep your computer? (in minutes)" default answer "60" | |
| delay (text returned of the result) * 60 | |
| tell application "Google Chrome" | |
| quit | |
| end tell | |
| tell application "Finder" | |
| sleep |
This Gist shows how you can encrypt/decrypt variables with KMS during your Ansible playbook execution. While google searching I couldn't find anything useful on the subject.
Let's say your project has a folder of playbooks called plays.
In that folder, create a folder called filter_plugins and insert kms_filters.py (included in this gist)
| ASG name = frigga.group = app-stack-detail(-options)-push | |
| frigga.cluster = app-stack-detail | |
| frigga.push = v<sequence) | |
| options: | |
| - c0<value> = countries | |
| - d0<value = devPhase | |
| - h0<value> = hardware |
| worker_processes 1; | |
| error_log logs/error.log; | |
| events { | |
| worker_connections 1024; | |
| } | |
| http { | |
| init_worker_by_lua_block { | |
| redis = require("resty.redis") | |
| } | |
| server { |
| import boto3 | |
| import base64 | |
| if __name__ == '__main__': | |
| session = boto3.session.Session() | |
| kms = session.client('kms') | |
| encrypted_password = 'AQECAHjgTiiE7TYRGp5Irf8jQ3HzlaQaHGYgsUJDaavnHcFm0gAAAGswaQYJKoZIhvcNAQcGoFwwWgIBADBVBgkqhkiG9w0BBwEwHgYJYIZIAWUDBAEuMBEEDDwxVQuG0oVwpkU7nQIBEIAoVGk1/wpserb+GVUOzE7PiL/Nr9fTDFKZfpKpF0ip2ct4B2q0Wn6ZZw==' | |
| binary_data = base64.b64decode(encrypted_password) |
| -- Tit Petric, Monotek d.o.o., Tue 03 Jan 2017 06:54:56 PM CET | |
| -- | |
| -- Delete nginx cached assets with a PURGE request against an endpoint | |
| -- supports extended regular expression PURGE requests (/upload/.*) | |
| -- | |
| function file_exists(name) | |
| local f = io.open(name, "r") | |
| if f~=nil then io.close(f) return true else return false end | |
| end |
| #!/usr/bin/sudo ruby | |
| # | |
| # revealer.rb -- Deobfuscate GHE .rb files. | |
| # | |
| # This is simple: | |
| # Every obfuscated file in the GHE VM contains the following code: | |
| # | |
| # > require "ruby_concealer.so" | |
| # > __ruby_concealer__ "..." |
| worker_processes 1; | |
| daemon off; | |
| error_log /dev/stdout; | |
| events { | |
| worker_connections 1024; | |
| } | |
| http { |
| #!/bin/sh | |
| # Make sure to: | |
| # 1) Name this file `backup.sh` and place it in /home/ubuntu | |
| # 2) Run sudo apt-get install awscli to install the AWSCLI | |
| # 3) Run aws configure (enter s3-authorized IAM user and specify region) | |
| # 4) Fill in DB host + name | |
| # 5) Create S3 bucket for the backups and fill it in below (set a lifecycle rule to expire files older than X days in the bucket) | |
| # 6) Run chmod +x backup.sh | |
| # 7) Test it out via ./backup.sh |
