Eliminating database password risk might sound like a dream but we are making it a reality with network isolation and SSH keys. ☁️ 🔒

By ditching default passwords and opting for private networking, you can stop worrying about credential leaks and hardcoded secrets. 🛡️

Our latest guide breaks down how we use multi-layered isolation and explicit service authorization to keep your administrative access secure. 👉 https://devcenter.upsun.com/posts/eliminating-database-pwd-risk-with-network-isolation/

#CloudSecurity #DatabaseSafety #InfraAsCode #WebDev

I posted on this a few weeks ago on my blog but not everyone reads that, but I'm delighted by the naming scheme I use for my IaC repos:

- Moria is my "cloud compute" repo, it uses pulumi to manage all my AWS resources
- Isengard is my "configuration management" repo, it uses ansible to install stuff on my AWS resources

And I just created my third repo, namely,

- Mirkwood, which is my k8s manifest repo for installing shit on kubernetes.

Be careful in mirkwood! The YAML forest is dark and there are spiders.

#kubernetes #infrastructure #infraascode #gitops #devops

Terraform is awfull enough as it is. Badly written, kludged togheter Terraform should be a valid excuse for murder.

#devops #terraform #infraascode

un outil #DevOps de gestion d'#infrastructure numérique en #Python pour faire de l'#infraAsCode : https://pyinfra.com/

À la différence d'#Ansible qui est également codé en Python, #PyInfra ne s'appuie pas sur un DSL yaml, mais convertit les commandes Python en commandes shell sur le terminal de la machine hôte.

🚀 codex-orchestrator is now public!

I got tired of manually installing & managing Codex across multiple machines…

…so I accidentally built a small control plane instead 😅

✨ What it does:

• One command codex install
• Central auth & config sync
• Per-host API keys + kill switch
• Secure / insecure host modes
• Self-updating cdx wrapper
• Usage & token accounting
• MCP endpoints (tools & resources)
• Admin UI with actual guardrails

All self-hosted. All boring-secure.
Zero cloud magic. Maximum control 🛠️🧠

👉 Source: https://github.com/christianreiss/codex-orchestrator

#Automation #InfraAsCode #MCP #PHP #Linux #SysAdmin #codex #ai #openai #selfhosted

¿Conoces tfenv?

Se trata de una herramienta que permite cambiar dinámicamente entre versiones de Terraform. Resulta muy útil cuando estás trabajando en diferentes proyectos de Infra as Code en los que cada uno usa su propia versión de Terraform.

Puedes hacer switch entre versiones usando tfenv use <version> o directamente dejar un fichero con nombre .terraform-version en la raíz de tu configuración Terraform cuyo contenido sea la versión en cuestión a utilizar. De esta forma tfenv se encarga de hacer el cambio de versión sin que tengas que acordarte hacer nada.

https://github.com/tfutils/tfenv/tree/master

Enjoy!

#terraform #devops #infraascode #iac

AWS & HashiCorp's natural language cloud tools promise productivity but risk security vulnerabilities (MITM) and engineering deskilling. Transparency & security are critical. #CloudSecurity #InfraAsCode #AIEngineering

https://saysomething.hashnode.dev/natural-language-cloud-infrastructure-security-risks-mitm-threats-and-the-devops-shift

💅 Deploying AI infra like a queen?

Meet Docker MCP - agents up in seconds, safety built-in, scaling? Just add vibes.

This is DevOps, but make it 🔥smart + pretty.

🎥 Watch the magic → https://youtube.com/shorts/ettAJBLH59Y

#DevOpsGirl #Docker #AIInfra #CloudNative #InfraAsCode

Code your infra, config, tools — everything — like magic! 🧙‍♂️✨

Join Vivekanandan KS (Indie DevOps Engineer) as he breaks down "Anything as Code (AaC) with Nix" – the game-changing way to build with reliability + control.

FOSS United Chennai & JSLovers

📍 ZoomInfo, Perungudi

🗓️ 21 June 2025 | 🕑 2 PM – 6 PM

#FOSSUnited #JSLovers #NixOS #DevOps #InfraAsCode #ChennaiTech