dev-sec / chef-jenkins-hardening Goto Github PK

The paths in jenkins-site.erb should be read from nginx cookbook:

  # ssl certificate
  ssl_certificate /usr/local/nginx/conf.d/jenkins.cert;
  ssl_certificate_key /usr/local/nginx/conf.d/jenkins.key;

This cookbook is still in its early stages, what still needs to be done?

It looks like the nginx setup does not actually set up a SSL config file, and the berks file lists os and ssh hardening cookbooks as dependencies while the readme says they are optional.

Could we get a list of things you would like to see this cookbook do or checklist of things needed for an initial release?

My company has set time aside for getting our own servers under control (using Chef) and I would love to help get this off the ground instead of trying to scratch build my own.