After having the graylog stack working it was time to add some security, even elasticsearch was running on an isolated network, some elements were exposed to the local network such as haproxy or rsyslog, that meant some flaw in their code could compromise the whole deployment.

I’ve been playing with the swarm deployment from my previous post too much, I’m completely sure because I was temporally banned from downloading images from hub.

Righting the wrong I though my last try was a failure, but I was wrong.

Last weekend I built a docker swarm using an ansible role and deployed elasticsearch, mongodb and graylog into it, it worked but was useless because no way of ingesting data was defined.

After last week’s break, and having managed to get the RHCE certification, it’s time I get on containers.

I did it, I’ve passed the EX294 exam and got my RHCE certification.

Overwhelming doubts I’ll take the Red Hat’s EX294 on three days, and I’ve to recognize I’m a bit anxious about it, may be, “a bit” is not the correct expression, I’ve a full cargo train of anxiousness.

I was interested on how to configure IPSec connections between linux machines, mostly for having another tool in my belt, because sometimes we deploy virtual machines on customer’s infrastructure and not all services are TLS enabled, and IPSec is a way of keeping prying eyes away.

Last week I deployed a nodejs using ansible, this time I’ve put a nginx server with a self signed certificate as a reverse proxy in front of it.

I’m pretty sure there are better ways to distribute and deploy nodejs applications, but I don’t have the power to change how developers work, I can only give advice and make suggestions.