The goal of this document is to help operational teams with the configuration of TLS. All Mozilla websites and deployments should follow the recommendations below.
Mozilla maintains this document as a reference guide for navigating the TLS landscape, as well as a configuration generator to assist system administrators. Changes are reviewed and merged by the Mozilla Operations Security and Enterprise Information Security teams.
Salt is a powerful remote execution manager that can be used to administer servers in a fast and efficient way.
Salt allows commands to be executed across large groups of servers. This means systems can be easily managed, but data can also be easily gathered. Quick introspection into running systems becomes a reality.
Remote execution is usually used to set up a certain state on a remote system. Salt addresses this problem as well, the salt state system uses salt state files to define the state a server needs to be in.
Between the remote execution system, and state management Salt addresses the backbone of cloud and data center management.
Chef-like functionality for Fabric
This program is an "inotify cron" system. It consists of a daemon and a table manipulator. You can use it a similar way as the regular cron. The difference is that the inotify cron handles filesystem events rather than time periods.
Kraftwerk WSGI is a command line utility that enables easier deployment and commissioning of cloud servers. Kraftwerk has hooks to customize setup of server nodes and WSGI projects. Kraftwerk places loose constraints on project structure and paves the way for local full stack testing and staging.
Deployment in WSGI land is too time consuming when dealing with multiple sites. Kraftwerk is Python website sysadmin made easy.
“A disk usage analyzer with an ncurses interface, aimed to be run on a remote server where you don't have an entire gaphical setup, but have to do with a simple SSH connection. ncdu aims to be fast, simple and easy to use, and should be able to run in any minimal POSIX-like environment with ncurses installed.”