Published inAWS Tip·PinnedHow to use Cloudfront only for statics and improve SEO by 301 the rest of requests to your siteThe problem We make use of cloudfront in a different way that a lot of people does, we don’t host a static site on S3 and then use cloudfront to serve it. We have a full CMS under cloudfront to serve only static files. However we came across the issue that google…4 min read4 min read
Published inAWS Tip·PinnedEnforce MFA on AWS for IAM users with user groups & policiesGoal We came across the need to enforce MFA usage on all IAM accounts for security reasons, but we don’t require to limit more AWS permissions so we thought of just telling the users is required and manually deactivate the user if they didn’t activate it after 7 days… But this…AWS3 min readAWS3 min read
PinnedRegister Gitlab Runners with AnsibleMotivation We’ve been working with gitlab runners for some time now, we have a deploy server that we use to register projects and to make life easier for us, DevOps, on the security point of view (firewall configuration is easier when you use your own server instead of the whole public…Ansible3 min readAnsible3 min read
Sep 26Download private Terraform modules authenticating as a GitHub App on CI/CDDisclaimer This is a quite technical read, that pretends to show a real world problem and solution. Requires knowledge on Terraform, git and GitHub Actions. …Terraform3 min readTerraform3 min read
May 11Develop GitHub actions faster with ‘act’, an easy exampleThe problem with actions Sometime ago I started tinkering around GitHub actions at work, for those who don’t know about them, they are reusable pieces of code that can be integrated into your pipelines. Is a pretty useful feature that allows you to create and maintain reusable actions (like set-up python, execute Ansible etc)…Github Actions4 min readGithub Actions4 min read
Sep 23, 2022Simplify secret sending procedure with a simple python scriptWe recently added some services that requires me, to generate and send accesses to users. I’m a lonely DevOps doing this, so I lose quite some time every week with these access requests. I cannot automate generating some of the secrets, because it requires human interaction or 2FA, but I…1 min read1 min read
Jul 13, 2022How to do “Split tunneling” with OpenVPN community editionSo I’ve been wondering how I could add split tunneling on our VPN, since I’m tired of accepting cookies in German every time I do a google search… I found out that is pretty simple. You only need to add lines to the ovpn profile. Straight to the point You should add the next…Openvpn2 min readOpenvpn2 min read
Jun 7, 2022Allow Iframes on Grafana with Traefik (Docker)Overview This document aims to show how to allow embedding iframes of panels from Grafana. However there’s a couple warnings. For the embed to work, Grafana must be open to the world and configured with SSL SameSite must be set to ‘none’ therefore, some CSRF attacks are feasible Even after embedding…Grafana3 min readGrafana3 min read
Published inAWS Tip·Apr 5, 2022AWS S3 geo-replication with TerraformYou will find cases where you would like to save data easily, securely and make sure you won’t lose it unless the world is ending, for real… We came across this situation, where we needed to save sensitive information, and make sure we won’t lose it whatever it happens. …Terraform2 min readTerraform2 min read
Apr 27, 2021Better local development with Docker and MakeWhy? These days everybody has abandoned the idea of running full blown virtual machines and find docker a better tool for local development, or staging/production environments, there’s a lot of reasons for switching to docker but TL;DR is much more faster and lightweight. Our projects where usually made using ansible+vagrant+VB to…Docker4 min readDocker4 min read
