3 ms·
I spent a few months of side work time working on a "secure-deployment-seed" project, https://github.com/jteppinette/secure-deployment-seed https://github.com/j
by jteppinette 8y ago
I spent a few months of side work time working on a "secure-deployment-seed" project, https://github.com/jteppinette/secure-deployment-seed https://github.com/jteppinette/secure-deployment-seed. It is a set of Ansible playbooks/roles that have Vault/Consul at the center of a standard web deployment where privacy/security is taken to the Nth degree of perfectionist driven insanity.
I ended up never using it, because it never really felt "perfect" to me.. There are so many circular dependencies between systems (DNS/Consul-Template/Consul/Vault/Ansible) and bootstrapping is just complete hell. Dive into that repo and witness it for yourself.
I can see myself using this setup if I was ever just doing Ops work, but when you are also doing everything else, it is just too much.
Anyways, congrats to the Hashicorp team. Your stuff really is topnotch.