Skip to content
GitLab
Projects
Groups
Snippets
/
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Sign in
Toggle navigation
Menu
Open sidebar
Sébastien Luttringer
infrastructure
Commits
d55d5757
Commit
d55d5757
authored
Jun 07, 2018
by
Florian Pritz
Browse files
Document vault key change workflow
Signed-off-by:
Florian Pritz
<
bluewind@xinu.at
>
parent
592765f5
Changes
1
Hide whitespace changes
Inline
Side-by-side
README.md
View file @
d55d5757
...
...
@@ -77,3 +77,14 @@ The following steps should be used to update our managed servers:
-
/~user/ webhost
-
irc bot (phrik)
-
quassel core
## Ansible repo workflows
### Replace vault password and change vaulted passwords
-
Generate a new key and save it as ./new-vault-pw:
`pwgen -s 64 1 > new-vault-pw`
-
`for i in $(ag ANSIBLE_VAULT -l); do ansible-vault rekey --new-vault-password-file new-vault-pw $i; done`
-
Change the key in misc/vault-password.gpg
-
`rm new-vault-pw`
Write
Preview
Supports
Markdown
0%
Try again
or
attach a new file
.
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment