It is recommended to password protect private SSH keys, so if they do ever end up in the wrong hands then a password is still needed to access them. If you wanted to go really secure Ansible Vault could be used to encrypt the private key alongside the password. This would require the key to … Continue reading Ansible – SSH and Password Protected Private Keys (Linux)
When you connect to a system via SSH a banner of text is displayed. Today I am going to look at changing the default SSH banner text on my Raspberry Pi 4 (Raspbian Buster). The default Raspbian Buster SSH banner looks like this: This banner contains: Information about the system via Pluggable Authentication Modules (PAM) … Continue reading SSH Banner Text (Raspbian)
I regularly use SSH (Secure Shell) to control the various Raspberry Pis that I have set up as none of them are connected to a monitor / keyboard / mouse and it provides easy access from my laptop. Note: The first piece of advice when using SSH with Raspbian is to make sure the default account … Continue reading Changing SSH Port (Raspberry Pi)
In the previous post I walked through installing Ansible on a Raspberry Pi and finished at the point of the Ansible inventory being set up but needing some SSH. For this part of the project I am using: A Raspberry Pi 3 with Ansible installed, running Raspbian OS (Buster). This is my controller. 2x Raspberry Pi … Continue reading Ansible Setting Up SSH (Raspberry Pi)
When working remotely (i.e. away from home) I often think about how it would be great if I could open up some of my internal projects when I have spare time and carry on working on them. There are multiple options on how I could do this, some are costly (moving environment to cloud) and … Continue reading SOCKS Proxy (Linux)
The Open Web Application Security Project (OWASP) provides a top ten security risks in web applications at https://owasp.org/www-project-top-ten/ . The ranking of risks can help developers (and organisations) make their applications more secure. The 2021 OWASP Top Ten Broken Access Control Cryptographic Failures Injection Insecure Design Security Misconfiguration Vulnerable and Outdated Components Identification and Authentication … Continue reading Security: OWASP Top Ten (Notes)
I have used previous blog posts to discuss using Ansible to create / manage AWS EC2 instances, and using Terraform with Ansible to create / manage AWS EC2 instances. However, there are people that prefer to use the AWS web console over Infrastructure as Code (IaC). If you find yourself in the situation of creating … Continue reading AWS – EC2 User Data: Preparing Ubuntu Instance For Ansible Management (AWS / Ansible)
Part 1 of this series looked at setting up Terraform for use with Azure and then deploying some infrastructure. Part 2 looked at changing Azure subscriptions, inserting an SSH key in virtual machines and making the virtual machine run commands at creation. Backend Storage When I discussed using Terrform with AWS I made a blog … Continue reading Terraform and Azure (Infrastructure as Code) – Part 3
Changing Azure Subscriptions In part 1 I discussed logging into Azure using Azure CLI and noting the default subscription, as that is where Terraform will deploy resources to. However, you may have multiple Azure subscriptions and want to deploy to one that is not the default. This can be accomplished using the Azure CLI: This … Continue reading Terraform and Azure (Infrastructure as Code) – Part 2
During Summer 2020 I wrote a few blog posts about Terraform and gave a few examples in my geektechstuff AWS environment. Over the Autumn and Winter of 2020, and the Spring of 2021 I expanded my Terraform knowledge and experience a lot, and one of the points I think I need to blog about is … Continue reading Terraform and Azure (Infrastructure as Code) – Part 1
GeekTechStuff 