On Nasqueron, deployments occur on a dedicated deployment server, distinct from the development servers, both for configuration-as-code and infrastructure-as-code. Terraform state files, terraform.tfstate, are stored on our deployment server, and can contain both credentials and personal information: plaintext secrets or accounts metadata injected by providers. To protect this information, we can take two complementary approaches: […]
Read moređź› Join the Nasqueron Operations team!
We maintain the backbone of Nasqueron and Wolfplex services — ensuring the creative and open-source projects run smoothly. Infrastructure isn’t glamorous, but it’s what keeps everything alive
Read moresecretsmith: a Python helper for Vault and OpenBao
After building numerous applications that needed to connect to HashiCorp Vault or OpenBao, I found myself copying the same configuration parsing and client connection code over and over again. The Python hvac library is powerful but verbose for common operations, especially when dealing with KV2 secrets engines. Today, I’m excited to announce secretsmith – a […]
Read moreSwitch NetBox custom field type from Object to Multiple objects
Nasqueron uses NetBox as source of truth for its network. It’s mainly use for IPAM to store IP configuration, both for our private network and the public addresses. NetBox allows to create custom fields to store extra information in addition to the base model.We leveraged this to add default gateway, an information useful to configure […]
Read moreTommy 1.1.0
A new release of Tommy, a dashboard to get a quick view of your Jenkins builds health.
Read moreTrending colors for 2017
Trending colors in 2017 are nostalgic, cold, bold and audacious as the same time. They colonize the dark and valorize the night. Browse the trending colors for 2017 content The following sources offer interesting hues and intent stories: Colormix 2017 Color Forecast, Sherwin-Williams (a painting manufacturer) These are the colors everyone will be talking about […]
Read moreDeploy a darkbot or a simple generic service with SaltStack (part 1)
SaltStack is one of the main configuration as code software. Written in Python, it uses Jinja templates. It can be easily used to deploy a service, like here a C application. In this post, we’ll walk through the different steps to deploy the service and allow it to be managed by relevant trusted users, without […]
Read more