| # Move to root directory... | |
| cd / | |
| mkdir keys | |
| cd keys | |
| # Generate a self signed certificate for the CA along with a key. | |
| mkdir -p ca/private | |
| chmod 700 ca/private | |
| # NOTE: I'm using -nodes, this means that once anybody gets | |
| # their hands on this particular key, they can become this CA. |
I've been using a lot of Ansible lately and while almost everything has been great, finding a clean way to implement ansible-vault wasn't immediately apparent.
What I decided on was the following: put your secret information into a vars file, reference that vars file from your task, and encrypt the whole vars file using ansible-vault encrypt.
Let's use an example: You're writing an Ansible role and want to encrypt the spoiler for the movie Aliens.
What The Fuck Should I Use For Password? wouldn't be much of a Web 2.0 app if it didn't provide an API. Using this API you can get a pseudo-random string in JSON or plaintext form.
http://whatthefuckshouldiuseforpassword.com/*format*?*query_string*