Skip to content

Home

Jump to bottom
Charles Nepote edited this page Nov 26, 2020 · 2 revisions

Welcome to the openfoodfacts-infrastructure wiki!

Here we list good practices or policies that should be used on our infrastructure.

Transmitting accounts and passwords

1. Split channels

When communicating an account/password, please do use two different channels to do so. Example: the account name by email, and the password via Slack.

2. Changing password

Every user of any kind of service should change his password if given by someone else.

Unix/Linux accounts

1. SSH access with public keys

The use of SSH keys to connect a server lower security risks, and is also more convenient both for users and sysadmins:

  • no password exchanged
  • sysadmin can give access based on published public keys; Github, for example, show its users public keys: https://github.com/CharlesNepote.keys
    • giving access to a server is simple and secure: curl https://github.com/CharlesNepote.keys | tee -a /home/charles/.ssh/authorized_keys

2. SUDO usage

The SUDO usage require to have a password for each user, even if the user uses SSH keys.

SUDO

Source: https://xkcd.com/149/

Clone this wiki locally