🔐 devops-scripts-softwareconfigs

---

📖 Overview

This repository contains PowerShell and Bash scripts used to:

• 🔧 Install and configure applications
• 🔐 Apply security hardening
• ⚙️ Standardise infrastructure setup
• 🚀 Automate deployment prerequisites

🧩 Supported Platforms

• 🟦 TeamCity
• 🐙 Octopus Deploy
• 🔍 Splunk
• 📊 Elastic Stack
• ☁️ General infrastructure (Linux & Windows)

---

🏗️ Repository Structure

.
├── .buildkite/           # CI pipelines
├── scripts/
│   ├── powershell/       # Windows automation & hardening
│   ├── bash/             # Linux automation & hardening
│   └── shared/           # Reusable helpers
├── AGENTS.md             # CodeRabbit review guidance
├── .coderabbit.yaml      # CodeRabbit configuration
├── .mergify.yml          # Merge automation rules
└── README.md

---

🚀 CI / CD & Automation

Tool	Purpose
🟢 Buildkite	Pipeline execution & orchestration
🔐 GitGuardian	Secret scanning & detection
🤖 CodeRabbit	AI-assisted code reviews
🔀 Mergify	Automated PR merging & rules

---

🔐 Security Principles

This repo follows strict security-first practices:

• ❌ No hardcoded secrets
• 🔑 Secrets managed externally (Vault / CI variables)
• 🔒 TLS enforced wherever possible
• 📦 Downloads verified (checksum/signature where applicable)
• 🧱 Least privilege execution

---

🧪 Script Standards

PowerShell

• Set-StrictMode -Version Latest
• $ErrorActionPreference = "Stop"
• Idempotent design
• Safe registry + service changes

Bash

• set -euo pipefail
• Quoted variables
• Minimal assumptions on distro
• Safe package installs

---

⚠️ Important Notes

• These scripts may modify system-level configuration

• Always test in non-production environments first

• Some scripts may require:

  • 🛡️ Administrator (Windows)
  • 🔐 Root / sudo (Linux)

---

🧠 Code Review & Governance

All PRs are automatically reviewed for:

• 🔐 Security issues
• ⚙️ Operational risks
• 🔁 Idempotency
• 📉 Reliability concerns

See AGENTS.md for full review policy.

---

🔀 Pull Request Workflow

1. Create feature branch
2. Open PR
3. ✅ Buildkite runs
4. 🔐 GitGuardian scans
5. 🤖 CodeRabbit reviews
6. 👀 Manual approval
7. 🚀 Mergify auto-merges

---

🛠️ Usage

Example:

PowerShell

.\scripts\powershell\harden-teamcity.ps1

Bash

chmod +x ./scripts/bash/harden-elastic.sh
./scripts/bash/harden-elastic.sh

---

📌 Roadmap

• Add checksum validation to all downloads
• Add SBOM generation
• Add OPA policy checks
• Expand platform coverage

---

🤝 Contributing

• Follow security-first approach
• Keep scripts idempotent
• Document breaking changes
• Avoid introducing interactive steps

---

📜 License

MIT License (or update as appropriate)

---

Built for 🔐 secure, ⚙️ repeatable, and 🚀 production-ready infrastructure