Create an initial encfs cookbook

Usage: Add the kosmos_encfs::default recipe to the run list of a node.
Creating the encrypted directory will keep it mounted. After a reboot,
start the encfs service and enter the password:

```
$ systemctl start encfs
encfs password:
```

For now postgresql@12-main is a hardcoded dependency of the encfs
Systemd unit that is automatically started once the user inputs the
correct password. This list of dependency will need to be different for
every server, based on the services it is running
This commit is contained in:
Greg Karékinian
2020-06-04 19:50:20 +02:00
parent eded62a3ec
commit 1e60722ec4
14 changed files with 293 additions and 56 deletions

View File

@@ -0,0 +1,10 @@
{
"id": "encfs",
"password": {
"encrypted_data": "+1Q3ojHS0lJgE7lFv3zEv653UHgRiuuuxBQQpfa+XrKaeQms2Kiw\n",
"iv": "sMb1a/NmjcAW62Uf\n",
"auth_tag": "n6jpD1fGoqidgMHRuL3K+A==\n",
"version": 3,
"cipher": "aes-256-gcm"
}
}