u/Lucky-Pollution-2506

Hello everyone, hope you're having a nice day !

As the title says I'm making this post to asks some help about the deployment of a kind of PKI.

I am currently learning Ansible and going through some basics steps. I've got 3 VMs with my provider openstack. 2 have a role 'monitored' and the other has the role 'tracker'. The inventory is managed dynamically and I have already written down tasks for each of them (tracker installs prometheus and monitored installs node_exporter).

In my playbook, these roles runs before the role pki that will generate, deploy and update configurations files based on the certificates it will have generated.

I'm stuck at securing the communication between prometheus and each node_exporter.

I made another role called 'pki' that is doing the following tasks :
- Generates a rootCA private key
- Generates a rootCA CSR
- Generates a rootCA certificate
- Generates for each host private keys and CSRs
- Sign hosts CSRs with rootCA
- Deploy the rootCA certificate and all VMs and transfer their private key and certificate
- Update node_exporter VMs configuration to use the certificates and private key
- Update prometheus configuration to scrape over HTTPS

In my opinion I think I'm doing too much for nothing, there must be a simpler way but I can't figure it out. I've tried to use the help of LLMs but as I'm still new to ansible world I'm not copy pasting something I don't fully understand.

Thanks a lot for any advice you can give me !

Wishing you a great day :)

Hey everyone!

For those who have insured their Framework 13 or pro, which provider did you go with?

Did you get the DIY Edition or Pre-built, and did that affect your coverage or claims?

Thanks for sharing your experience!

Hi everyone,

I'm looking to upgrade my current setup. I want to gather ideas on what could be a good upgrade priority path and what components make the most sense without replacing the whole system.

Here is my current build:

CPU: AMD Ryzen 5 2600 (Wraith Stealth Cooler)

CPU Cooler: Cooler Master Hyper 212 RGB Black Edition

Motherboard: MSI B450M Mortar Max Micro ATX

Memory: G.Skill Trident Z RGB 16 GB (2 x 8 GB) DDR4-3000 CL16

Storage: 1TB Samsung 990 Pro NVMe / 500GB Crucial P1 NVMe / 2TB Seagate HDD

GPU: Sapphire PULSE Radeon RX 580 8 GB

Case: Cooler Master MasterBox Q300L

Power supply: Seasonic FOCUS 650 W 80+ Gold Certified

I use it mainly for my studies (computer science) but also for gaming (not playing cyberpunk or , currently playing resident evil, hogwarts legacy, octopath traveler, minecraft, subnautica, forza horizon).

I have a 1440p 240hz monitor and a 1080p 60hz one. I don't mind playing at 120fps or less.

I don't have any fixed budget yet but I think it would be under 400/500€.

If you have any suggestions, ideas or advice to give I'll happily take them.

Thanks a lot for your help,

Wishing you a great day !