Skip to content

Instantly share code, notes, and snippets.

View voanhduy1512's full-sized avatar

Võ Anh Duy voanhduy1512

36 followers · 12 following
View GitHub Profile
@voanhduy1512
voanhduy1512 / darwin-configuration.nix
Last active February 25, 2024 10:54
let
fontOverlay = import ./font-overlays.nix;
pkgsOverlay = import ./pkgs-overlay.nix;
user = "anhduy";
in
{ config, pkgs, ... }:
{
imports = [ <home-manager/nix-darwin> ];
@voanhduy1512
voanhduy1512 / warnings.md
Last active April 4, 2018 17:01
type name default problem
Opt_WarnDuplicateExports duplicate-exports on
Opt_WarnOverflowedLiterals overflowed-literals on
Opt_WarnEmptyEnumerations empty-enumerations on
Opt_WarnMissingFields missing-fields on
Opt_WarnMissingMethods missing-methods on
Opt_WarnOverlappingPatterns overlapping-patterns on
@voanhduy1512
voanhduy1512 / keybase.md
Created September 19, 2017 07:17

Keybase proof

I hereby claim:

  • I am voanhduy1512 on github.
  • I am voanhduy1512 (https://keybase.io/voanhduy1512) on keybase.
  • I have a public key whose fingerprint is 0B4A 3FA2 0D79 A476 5395 44E1 876B 178E FF8D 2C28

To claim this, I am signing this object:

@voanhduy1512
voanhduy1512 / [DRAFT] Secret Management with Vault (Part 2).md
Last active August 31, 2016 00:00

Lesson from part 1

Vault can protect us against:

  • Eavesdropping on any Vault communication
  • Tampering with data at rest or in transit
  • Access to data or controls without authentication or authorization
  • Access to data or controls without accountability
  • Confidentiality of stored secrets
@voanhduy1512
voanhduy1512 / secret_management_with_vault.md
Last active August 31, 2016 15:36

Secret Management with Vault

Problems

  • Cloud deployment problem: Where do we store our secrets (read: database username and password) and how to give them to the server when we deploy?
  • Secret sharing and auditing problem: If everybody in our team know and share one token, how can we audit when something is wrong happend? Who is the last person login using the share key?
  • Revocation problem: our ex-sysadmin have quitted, do we remember to remove his