benders

! --------------------------------------------------------------------------------
! This example configuration shows what WE did to get Amazon VPC working with our
! ASAs.  We use version 8.3(1). This config has not been reviewed or otherwise
! blessed in any way by anyone at Amazon.  YMMV.
! 
! It differs from Amazon's supplied config by using two different sets of
! crypto maps and ACLs, so it brings both tunnels up simultaneously.
!
! For the purposes of the example, the physical datacenter network is 172.16.1.0/24
! and the VPC is 10.0.0.0/16.

MattSurabian

{
    "Statement": [
        {
            "Sid": "PackerSecurityGroupAccess",
            "Action": [
                "ec2:CreateSecurityGroup",
                "ec2:DeleteSecurityGroup",
                "ec2:DescribeSecurityGroups",
                "ec2:AuthorizeSecurityGroupIngress",
                "ec2:RevokeSecurityGroupIngress"

lttlrck

git branch -m old_branch new_branch         # Rename branch locally    
git push origin :old_branch                 # Delete the old branch    
git push --set-upstream origin new_branch   # Push the new branch, set local branch to track the new remote

obolton

AWS ELB with Node.js and WebSockets

This assumes that:

• You are using Nginx.
• You want to accept incoming connections on port 80.
• Your Node.js app is listening on port 3000.
• You want to be able to connect to your Node.js instance directly as well as via the load balancer.

####1. Create load balancer

mattgray

driver:
  name: vagrant
  customize:
    natdnshostresolver1: 'on'

DavidWittman

Reloading stunnel configurations when in a chroot

Example stunnel config

# /etc/stunnel/stunnel.conf
cert = /etc/stunnel/cert.pem
sslVersion = TLSv1 TLSv1.1 TLSv1.2

chroot = /var/run/stunnel/

lusis

This uses terraform's template_file resource to generate a yaml properties file for serverspec to use.

• create the Rakefile in your terraform project root
• create a spec directory and put spec_helper.rb in it
• create the templates/properties.tmpl.yml file
• create the serverspec.tf
• terraform apply

tests

Tests will be matched based on roles defined for a given node.

Nihisil

...

action_with_slack_notification = %(banaction)s[name=%(__name__)s, port="%(port)$
                                 slack[name=%(__name__)s]
                                 
action = %(action_with_slack_notification)s

...

MattSurabian

Setting Tags in Terraform

Determine some sensible tags to pass non-critical information to Ansible or other CM solutions:

resource "aws_instance" "main" {
...
  tags {
  ...
    "some_tag" = "waka"

noelrappin

AllCops:
  Exclude:
    - "db/schema.rb" # You can't touch this
    - ".bundle/**/*" # Auto-generated
    - "bin/**/*"     # Auto-generated
    - "vendor/**/*"  # We cannot solve the world's problems
  TargetRubyVersion: 2.3

Rails:
  Enabled: true