Secure By Design (sbd) is a template repo designed to Securely and Reliably deploy any and all of your services with no additional effort from you. By offloading provisioning and initial deployments here, it is possible to build an environment where a Homogenous Infrastructure requires no additional work. This approach promotes management, maintainability, and security to be first class citizens in a codebase without distracting from important application features.
sbd applies DevOps best practices that ensure you go to production with confidence. It leverages microsoft/Requirements in order to declaratively create and configure secure cloud infrastructure with no necessary user action.
We currently are focused on Azure based infrastructure, but want to support as many environments as possible.
sbd applies defense in depth to existing codebases to establish a secure baseline and improve your security posture with every deployment.
- Generate a new repo using this repo as a template
git submodule updatewhatever docker application you need.- Run deploy.ps1
See Onboarding for full details.
We ship sbd in a VSCode dev container. This means you only need to install the following:
-
Docker
-
VSCode
You can then just do code . in the top level of this repo and follow VSCode's prompts to get a clean environment. The first time you do this will take a couple
minutes while it builds your environment.
If you would prefer a purely native environment, you can install the following dependencies: