Antonio Huete Jimenez tuxillo

Server Price Breakdown: DigitalOcean, Amazon AWS LightSail, Vultr, Linode, OVH, Hetzner, Scaleway/Online.net:

$5/mo

Provider	Type	RAM	Cores	Storage	Transfer	Network	Price

ash & dash

login	interactive	files
N	N
N	Y	`$ENV`
Y	N	`/etc/profile`, `~/.profile`
Y	Y	`/etc/profile`, `~/.profile`, `$ENV`

bash

I've spent the day trying to get this setup working with GitHub and given the number of gotcha's I encountered, it seemed like a good idea to document how I finally got this working with as few hacks as possible. There's a lot of documentation out there (some of it old and misleading) and committing here for posterity will help me remember this when I inevitably need to do this again.

Rationale

Passwords are simply not enough these days. Regardless of the company, breaches (and the associated Personally Identifiable Information harvested) are a matter of not if, but when. There are a number of things you can do to protect yourself, but being on the tin-foil-hat side of paranoia, means there are a few Commandents that I adhere to (and recommend for other folks)[Insert link to Fight Club Rules for the Secure Internet].

That being said, if you use 2-factor authentication and have committed to using a hardware token such as the Yubikey, then you're already ahead of the curve. The problem is that wh

	# Idempotent way to build a /etc/hosts file with Ansible using your Ansible hosts inventory for a source.
	# Will include all hosts the playbook is run on.
	# Inspired from http://xmeblog.blogspot.com/2013/06/ansible-dynamicaly-update-etchosts.html

	- name: "Build hosts file"
	lineinfile: dest=/etc/hosts regexp='.*{{ item }}$' line="{{ hostvars[item].ansible_default_ipv4.address }} {{item}}" state=present
	when: hostvars[item].ansible_default_ipv4.address is defined
	with_items: groups['all']

	TTL=300
	HOSTED_ZONE_ID=
	REVERSE_HOSTED_ZONE_ID=
	INSTANCE_ID=
	REGION=

	# .github/workflows/app.yaml
	name: My Python Project
	on: push

	jobs:
	test:
	runs-on: ubuntu-latest
	timeout-minutes: 10

	services: