Security Considerations

[andyleejordan]

I'm going to play it very safe and test extensively on a Vagrant box with Trusty Tahr. Once that's working, we'll upgrade DigitalOcean.

[andyleejordan]

With 058b318, my manifests seamlessly support different versions of Ubuntu.

[andyleejordan]

You know, it's also tempting to switch to Fedora.

[andyleejordan]

Also should look into CentOS and FreeBSD. The latter would be the most difficult due to the change in OS, and therefore major change to Puppet manifests. I do want to move away from Canonical though.

Dr. Conte de Leon recommended setting up a whitelisted outbound firewall, ensuring latest repositories for my services are being used, using Bastille (I think Tiger had an interface for it as well), and carefully scanning with nmap and OpenVAS.

I am also considering separating suchcodemuchlove.com onto its own server; however, Gitlab really highly recommends at least 1 GB of RAM. It could work on 512 MB, but eh.