Slashdot Mirror

Let's Encrypt is a really good setup for people who want to learn how to automate their system. While free and easy to set up (it took me about an hour to get https on my websites with it), the certificates only last 90 days, with the justification being that people should learn how to automate things.

Since I have multiple redundant nodes which I rsync to, I had to use the --manual-auth-hook option to certbot-auto to push the challenge-response tokens Let's Encrypt uses to authenticate website. I also use Ansible to log in to all of my nodes to update the certificates once they are generated.

Note that Let's Encrypt does log the IP of the machine used to generate the certificates; while these IPs have not been made public, the EFF keeps threatening to do so, which causes some lively discussion on the Let's Encrypt forum.

I still run Linux on my workstations because it's easier to get all the workstation/laptop things working there. However, I'll give FreeBSD a try on the desktop as well next time I reinstall.

On the server, there are really no benefits to Linux currently.

I totally second that: http://docs.ansible.com/ansibl... Moderate parent to top level. rm is a tool, ansible too, badly using them is asking for trouble.

The script was deployed via Ansible. He ran it on everything at once.

And everyone knows that blind deletes via automated scripts are a fantastic idea.

and...what do you use to push out all the Docker images to all the machines?

https://docs.ansible.com/ansib...