Skip to content

Instantly share code, notes, and snippets.

View lucymhdavies's full-sized avatar
🍓
Strawb System

Lucy Davinhart || Strawb System lucymhdavies

🍓
Strawb System
View GitHub Profile
@lucymhdavies
lucymhdavies / bootstrap.sh
Created May 29, 2021 15:57
Vault Agent PKI on a Synology NAS
#!/bin/bash
set -e
# Proof of Concept Bash Script to connect to NAS and configure everything
REMOTE_PORT=1337
REMOTE_HOST=codex.davnet.lmhd.me
REMOTE_USER=shenanigans
@lucymhdavies
lucymhdavies / policy attributes
Created August 7, 2022 13:35
HashiCorp Vault Sentinel policy to limit Userpass auth to my home network
$ vault read sys/policies/egp/restrict-userpass-cidr
Key Value
--- -----
enforcement_level hard-mandatory
name restrict-userpass-cidr
paths [auth/userpass/*]
policy ...