See my blog for more information.
- Adjust settings in vars.auto.tfvars.
- Run with terraform init && terraform apply
Content:
| #!/bin/sh | |
| # | |
| # Perform certificate updates in Vault. | |
| set -eo pipefail | |
| if ! vault token lookup > /dev/null; then | |
| echo "Login to Vault first." | |
| exit 1 | |
| fi |
See my blog for more information.
Content:
| version: '2.4' | |
| services: | |
| target: | |
| privileged: true | |
| network_mode: "host" | |
| ipc: "host" | |
| restart: always | |
| volumes: | |
| - '/etc/localtime:/etc/localtime:ro' | |
| - '/edgefs/var/run:/opt/nedge/var/run:z' |
| #!/bin/bash | |
| # A bash script to update a Cloudflare DNS A record with the external IP of the source machine | |
| # Used to provide DDNS service for my home | |
| # Needs the DNS record pre-creating on Cloudflare | |
| ## Based on https://gist.github.com/Tras2/cba88201b17d765ec065ccbedfb16d9a with updates to use | |
| ## per-zone configurable access tokens available in the API sections of your Cloudflare profile | |
| ## - info@foo-games.com |
| #!/bin/bash | |
| # A bash script to update a Cloudflare DNS A record with the external IP of the source machine | |
| # Used to provide DDNS service for my home | |
| # Needs the DNS record pre-creating on Cloudflare | |
| # Proxy - uncomment and provide details if using a proxy | |
| #export https_proxy=http://<proxyuser>:<proxypassword>@<proxyip>:<proxyport> | |
| # Cloudflare zone is the zone which holds the record |
My Elasticsearch cheatsheet with example usage via rest api (still a work-in-progress)
| #cloud-config | |
| hostname: host-0815 | |
| ssh_authorized_keys: | |
| - ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA61LSHA7iU+82Z2qypYLx2gB9uHydUOoDON30ceAKl5dSgzShtF5XS5sqABYBMowDcvdkNyUDdt1Druv82iu/scATLFmxTQ8R2XIL33dMO6IpBg0d3WQcU5Xqeor9s5LTpln7F0V+9vaYG/nXqQtnz4PEnZGA+f9ddHuvcDajqKLNTDyriL87E6HAfjNU+1ShI2Qv8Zqhq8rYW0zkn2C+4vVKpgzq8B91R7hSXZwUTU9+bIq3uqTfe/t9/5hFNZEUo/ezV25DFvWDmvKcXt1QRoLxL/NI7h00fEJY7QVh2eevtiA9BdthI2LHx2tm2LoMYHQVZUVljm033xh2UISx | |
| runcmd: | |
| - echo "true" > /home/rancher/provisioned | |
| write_files: | |
| - path: /etc/docker/certs.d/private-registry.internal/ca.crt |
| #version=RHEL7 | |
| # Action | |
| install | |
| cdrom | |
| lang en_US.UTF-8 | |
| keyboard us | |
| text | |
| firewall --service=ssh |