page_title
Fury

The Fury cookbook provisions user accounts along with their SSH key and OTP for sudo access.

The cookbook can disable users that currently exist by editing attributes/default.rb

Various misc utilities are installed like ZSH, HTOP etc...

Users

Users should be defined in the attributes/default.rb.

SFTP Users

SFTP users can be defined in the Chef Environment, usually via Terraform, these should not be hardcoded in the Attributes file as this would cause sftp users to be defined on every Bnk server.

Example:

default['users']['sftp'] = [
  { # This user will upload files to blow storage
    name: 'binktest',
    id: 3999,
    ssh_key: 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIELQcHnP/OLHDHoBciexk8gkrD/H4cUSbWVNjhDKmWNp',
    upload: {
      conn_string: 'DefaultEndpointsProtocol=https;AccountName=binkuksouthblarg;AccountKey=blarg;EndpointSuffix=core.windows.net',
      container: 'supersecret',
      slug: 'scheme/binktest',
    },
  },
  { # This user won't upload files to blob storage
    name: 'binkjeff',
    id: 3998,
    ssh_key: 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIELQcHnP/OLHDHoBciexk8gkrD/H4cUSbWVNjhDKmWNp',
  },
]

Future Improvements

• Replace Google OTP with something in AzureAD, sounds like a fun Go project?