Archive for June, 2015|Monthly archive page

Complete AWS site using Ansible

I started using Ansible a couple of years ago and a lot has changed since then. In order to refresh my knowledge, I decided to create a demonstration site (called “acme”) using Ansible, especially taking advantage of modules and new features. In order to make this worthwhile, I set a few goals for myself:

  • Create a complete site, including network topology, firewall rules, certificates, instance creation and configuration, plus the coordination between dependent resources, like web server and database. The rule was simple: no human intervention.
  • Multiple Environments. Any real site is going to need at least a dev and prod environment and you often find many more. My goal was to manage this from within a single repository, all under source control.
  • Security. Keep the secrets separate from the main configuration, but keep them under source control, not in a parallel system just to manage secrets.

So, enough talk, where is the code?

Check it out and let me know what you think!