Simon Oakes soakes

Pixelbook Setup

Change your channel

Some of the features mentioned in this document only work on the beta or Dev channel. To change your channel:

chrome://help in a browser window
Click Detailed Build Information
Change Channel
Select Beta (Or Dev, if you're feeling adventurous)

Project Title

One Paragraph of project description goes here

Getting Started

These instructions will get you a copy of the project up and running on your local machine for development and testing purposes. See deployment for notes on how to deploy the project on a live system.

Prerequisites

Order and provision a Hetzner Cloud based Gitlab-Runner Docker-machine autoscaling infrastructure

See my blog for more information.

Adjust settings in vars.auto.tfvars.
Run with terraform init && terraform apply

Content:

Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!

openssl genrsa -des3 -out rootCA.key 4096

	#!/bin/bash

	# A bash script to update a Cloudflare DNS A record with the external IP of the source machine
	# Used to provide DDNS service for my home
	# Needs the DNS record pre-creating on Cloudflare

	## Based on https://gist.github.com/Tras2/cba88201b17d765ec065ccbedfb16d9a with updates to use
	## per-zone configurable access tokens available in the API sections of your Cloudflare profile
	## - info@foo-games.com

	version: '2.4'
	services:
	target:
	privileged: true
	network_mode: "host"
	ipc: "host"
	restart: always
	volumes:
	- '/etc/localtime:/etc/localtime:ro'
	- '/edgefs/var/run:/opt/nedge/var/run:z'

	#!/bin/sh
	#
	# Perform certificate updates in Vault.

	set -eo pipefail

	if ! vault token lookup > /dev/null; then
	echo "Login to Vault first."
	exit 1
	fi

	#!/usr/bin/env bash

	hostname=`hostname`
	emaildomain=''
	alertemail=''
	mailgunapikey=''

	# max capacity % before getting capacity alert
	maxCapacity=80

	#! /usr/local/bin/bash
	#
	# Calomel.org
	# https://calomel.org/zfs_health_check_script.html
	# FreeBSD 9.1 ZFS Health Check script
	# zfs_health.sh @ Version 0.15

	# Check health of ZFS volumes and drives. On any faults send email. In FreeBSD
	# 10 there is supposed to be a ZFSd daemon to monitor the health of the ZFS
	# pools. For now, in FreeBSD 9, we will make our own checks and run this script

	- name: Create temporary directory
	tempfile:
	prefix: ansible-tmp-
	state: directory
	register: vault_unseal__mktemp

	- name: Check vault unseal package checksum file
	stat:
	path: "{{vault_unseal__mktemp.path }}/{{ vault_unseal_shasums }}"
	register: vault_unseal__checksum