Mastodawn

Tom's IT Cafe Sep 17, 2025

Ghost Ops don't leave secrets in the wild. Ansible Vault is their blade. #AnsibleVault #Ansible #Encrypt #Vault #DevOps #Automation

http://tomsitcafe.com/2025/09/17/08-objective-encrypt-the-silence-ansible-vault/

08 Objective: Encrypt the Silence – Ansible Vault

Ghosts know that secrets are critical.You can’t let them sit or travel in plain text.Ansible Vault is the blade of the Operator.

Tom's IT Cafe

Tom's IT Cafe Apr 16, 2025

Automating UFW Configuration with Ansible: Locking Down the Digital Fortress #Ansible #UFW #Firewall #Automation #Cybersecurity #ServerSecurity #DeadSwitch #OperationalSecurity #AnsiblePlaybook #NetworkSecurity #AutomationTools #AnsibleRoles #SystemAdministration #SecureServer #Encryption #AnsibleVault #PrivacyTools #SecurityAutomation

http://tomsitcafe.com/2025/04/16/automating-ufw-configuration-with-ansible-locking-down-the-digital-fortress/

Automating UFW Configuration with Ansible: Locking Down the Digital Fortress

In the world of chaos, where every exposed port is a door for the enemy, DeadSwitch doesn’t just lock the doors—we automate. We create shields that rise without a command. Ansible is our tool of ch…

Tom's IT Cafe

Colan Schwartz Nov 18, 2024

@x_cli Have I been doing it backwards? I typically flow things in the opposite direction. I keep secrets in #AnsibleVault (committed to #git) , which gets dumped into my environment with a setup script after I provide my Vault #passphrase . Then #Terraform picks it up, and gives to to whatever needs it (e.g. #kubernetes secrets).