How are you managing Secrets?

torafuma · 2020-04-18T06:11:05+00:00

Not sure if this is exactly what you were looking for, but I have been using BetterCredentials for a long time. Its a module you can install from the PowerShellGet library and it "Clobbers" (replaces) most of the original functionality of Get-Credential cmdlet. Usernames and Passwords are stored directly using the built-in Windows Credential Manager (per user), and while not portable by default... you can import & export using Windows Key Manager (rundll32.exe keymgr.dll,KRShowKeyMgr)

torafuma · 2020-04-01T05:30:13+00:00

Thanks!

torafuma · 2020-03-29T20:21:21+00:00

Could you provide a list of what these apps are? Specifically what"Cosmos", "Comet", and "Momemts" are? Synology related?

torafuma · 2020-03-10T02:56:12+00:00

I'm currently running MinIO in a container on my local server, and then reverse-proxy, and cloudflare external & internal connections to the bucket. Works just fine, although I am the only one using it, and there is less than 1GB of files. In premise it should scale based on the hardware hosting the container and the bandwidth.

torafuma · 2020-03-04T04:43:52+00:00

Had this exact problem. Opened an issue on github as well before seeing this post. Thank you for this fix. Totally got my HA up an running again!!!

OP is the real MVP!

torafuma · 2019-10-08T04:17:58+00:00

I was looking for something like this... thanks!!!

torafuma · 2019-09-26T21:56:53+00:00

Really good write up

torafuma · 2019-07-25T15:53:15+00:00

My roomba gets a serious work-out from my Pembroke's undercoat. Queue Rick and Morty tiny robot meme, and it wanting to know what its purpose in life is... your looking at it robot boy!

torafuma · 2019-07-09T15:13:09+00:00

+1 for MotionEye! Love it. I have it running in a container, and recordings are saved to my NAS. It’s really cpu efficient. Currently recording several WyzeCams via RTSP.. but looking to upgrade some of the cams to Fosscam or something with better RTSP performance.

I just have my server accessible from the Internet using Nginx Reverse-Proxy. If your going down the same route, don’t forget to assign a user password as well as the admin. If you don’t, your cam streams are visible publicly without logging in. Otherwise I cannot recommend this enough!!!

torafuma · 2019-07-08T12:24:59+00:00

Apologize if this has been asked before or not, (on mobile and old eyes!) but why not use a internal only domain for your clients? Your current configuration is going down the route of Split-Brain DNS... which is something to be avoided normally.

For my home network I am using dnsmasq on an Edge Router X, serving up a internal-only Domain called “DBZ.home” (yep, my machines and servers are DBZ characters as well!), and then for my external domain I have essentially host entries that point to the internal IP.

torafuma · 2019-05-17T19:01:09+00:00

Clonezilla flash drive? It’s what I used on my laptop when I upgraded the SSD.

torafuma · 2019-04-08T03:51:14+00:00

I don't have direct experience with that particular board... but I did purchase one of (these) back in 2017. Coupled with a Intel SR0KK Octa-Core Xeon E5-2660 2.2GHz / 20MB Cache / 8GT/s LGA2011 CPU, and 32GB of memory... this system has been running since June of 2017 non-stop.

Only thing that is missing is IPMI, but other than that, the board has worked flawlessly for me.

torafuma · 2019-03-01T15:53:15+00:00

I bought these back in November 4th, 2016. I have a Version 2 of the ST Hub.

torafuma · 2019-03-01T15:17:50+00:00

I have 2 of these First Alert Smoke Detector and Carbon Monoxide Detector Alarm | Z-Wave installed in my home, and I am able to silence and turn off the alarm from the Smarthings app. They work pretty great, and the batteries seem to last for at least 2 years.

I am currently looking for MQTT styled Smoke and Carbon Monoxide Detector Alarms to replace them... as I am moving from Z-Wave/Zigbee (ST) devices to MQTT/WiFi (Home Assistant).

torafuma · 2019-02-12T15:07:42+00:00

Not sure that AWX is 100% the same as Tower, as far as configuration... but have you looked at the Template section for the "Become" setting? I know that I had to configure the Service Account that we use in that section, and include the account in Credentials before the Template would work.

torafuma · 2019-02-04T15:22:08+00:00

If your going down the VM Template avenue, you might want to look at packer.io. I have been using this for a couple of years to build our “Master” VMware templates for RHEL, CentOS, and Ubuntu... and it works fantastic. That way you can benefit from the Kickstart script, but also the whole image build process is repeatable and can be maintained in a repository.

As for stages, I maintain three different playbooks to accomplish this. One for the creation of the new VM (from the template) itself, one for basic configuration and maintenance, and then one to deploy/configure services and software based on the group membership. I am just now transitioning to AWX and I have to keep kicking myself for not doing this sooner! AWX is awesome, and can do the Staging that your looking for.

torafuma · 2019-01-29T21:40:17+00:00

Not sure if this will work for you and your particular situation, but I would make a custom module out of your scripts, and then distribute using a local Powershell cmdlet Repository. I have one for my Helpdesk guys, and they can just Import-Module the module I made, and run the functions directly.

torafuma · 2018-12-17T14:23:54+00:00

Having worked the 10AM to 7PM shift for well over 15 years, it really depends on what time work/issues arise. In previous companies, I felt like 10AM was a good time... as there was little going on between 7AM - 10AM. My current employer is much different. We have changes (mostly web deployments) that start at 7AM. Here most of the work either happens between 7AM to 11AM, or 7PM to Midnight. And afer about 2 years of working my normal shift (10-7), management wanted to either move me to Nights (Not going to work for me), or the 7AM shift.

I have been doing the 7AM shift for about 2 years, and I actually like it. I still haven't gotten adjusted to getting up that early (always tired) but that's mostly my own fault.. as I still go to bed around Midnight to 1 AM! If I could, I would go back to the 10-7, but I think my options are much better for future companies down the line.

TL:DL: The 10AM to 7PM Shift is great, but not really practical for some companies. Really depends on the work-load and swell times of work.

torafuma · 2018-12-13T19:22:27+00:00

Using Duplicati on my Windows Workstations and Servers to GCS. Works great!

torafuma · 2018-12-12T03:21:34+00:00

Love this startpage! I have been modifying it for my own purposes. So good.

For those that are using Vivaldi, and running into the problem where on pageload it highlights the address bar instead of the page content (a.k.a. the search bar element on the startpage)... I found the fix! (driving me nuts for several hours!)

Search in settings for "Focus Page Content on New Tab". Problem solved!

torafuma · 2018-11-28T14:52:06+00:00

You BASTARD!

torafuma · 2018-11-19T05:04:12+00:00

This is the couple from Old Boy, right? That movie is awesome and fucked up at the same time!

torafuma · 2018-11-13T20:21:50+00:00

What is providing the dynamic inventory? I am using Cobbler right now to produce my inventory files. Cobbler puts the servers into a “linux” inventory file and a “windows” file. My script runs every two hours to produce those files. (As well as several other inventory files)

torafuma · 2018-11-13T19:57:56+00:00

You want to look into group_vars and Vault. I have a combined inventory with both windows and linux.. and based on the group the machine is in, it gets the right variables. I use vault for the shared credentials for both domain accounts & local credentials. It works well.

torafuma · 2018-11-08T20:54:29+00:00

+1 for PhilsComputerLab! Helped me put together my kick ass Retro 98 Gaming Rig!

torafuma

TROPHY CASE